Identity and Access Management (IAM) GISP Practice Questions (Page 9)

Questions 41–45

1. 41foundation · easy

   Which standard is commonly used for exchanging authentication and authorization data between identity providers and service providers in federated identity management?

   • ALDAP
   • BSAML
   • CKerberos
   • DRADIUS
   Reveal Solution Discussion Select an answer first
2. 42expert · hard

   A company is designing a new identity management system. The system must support both employee and customer identities, and it must allow customers to use social logins (e.g., Google, Facebook) while employees use corporate credentials. The system also needs to maintain a single identity record for each user across both contexts. Which architecture best meets these requirements?

   • AUse a social login provider as the primary IdP for all users, including employees.
   • BUse a single corporate Active Directory for both employees and customers, and create customer accounts in the same directory.
   • CUse separate identity stores for employees and customers, with no linkage between them.
   • DUse a customer identity and access management (CIAM) platform that supports social logins and can link multiple identities to a single user record, while integrating with the corporate IdP for employees.
   Reveal Solution Discussion Select an answer first
4. 43foundation · easy

   What is the purpose of monitoring privileged account activity?

   • ATo detect and investigate potentially malicious or unauthorized actions
   • BTo reduce the number of passwords users need to remember
   • CTo automatically approve all access requests
   • DTo eliminate the need for privileged accounts
   Reveal Solution Discussion Select an answer first
5. 44foundation · easy

   Which principle requires that users be granted only the minimum permissions necessary to perform their job functions?

   • ALeast privilege
   • BNeed to know
   • CSeparation of duties
   • DDefense in depth
   Reveal Solution Discussion Select an answer first
6. 45expert · hard

   An employee is on long-term medical leave. Their manager requests that the employee's access be temporarily suspended but not deleted. The company uses automated provisioning. What is the best approach?

   • ADisable the account in the identity management system, which propagates to all connected systems
   • BChange the password and keep the account active
   • CRemove all group memberships but leave the account enabled
   • DDelete the account and recreate it when the employee returns
   Reveal Solution Discussion Select an answer first