Identity and Access Management CCOA Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which IAM best practice helps minimize the risk of unauthorized access by ensuring users have only the permissions necessary to perform their job functions?

   • AUsing the same password for all accounts to simplify management
   • BImplementing the principle of least privilege
   • CGranting all users administrative rights by default
   • DDisabling all audit logs to reduce storage costs
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   What is the primary purpose of periodic access reviews in identity lifecycle management?

   • ATo monitor network traffic for malicious activity
   • BTo ensure that users have the minimum permissions necessary for their current job functions
   • CTo replace all existing passwords with biometric authentication
   • DTo increase user productivity by granting broader access rights
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   Which statement correctly describes the role of Identity and Access Management (IAM) in securing organizational assets?

   • AIAM is a regulatory framework that mandates specific security controls for all organizations.
   • BIAM is a technology solution that automatically blocks all external network traffic to protect assets.
   • CIAM ensures that the right individuals access the right resources at the right times for the right reasons.
   • DIAM primarily focuses on encrypting data at rest and in transit to prevent unauthorized access.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A government agency handles classified documents. Access to each document is determined by the document's classification level (e.g., Confidential, Secret, Top Secret) and the user's security clearance. Users cannot share documents with others who lack the required clearance, regardless of the document owner's wishes. Which authorization model is being enforced?

   • AAttribute-based access control (ABAC)
   • BDiscretionary access control (DAC)
   • CRole-based access control (RBAC)
   • DMandatory access control (MAC)
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   An employee is moving from a sales role to a marketing role within the same company. The identity management team wants to ensure that the employee's access rights are updated to match the new role and that any access no longer needed is removed. Which process should be followed?

   • ADeprovision the user's account and create a new account for the marketing role
   • BWait for the next quarterly access review to update the user's access
   • CKeep the sales access and add marketing access to avoid disruption
   • DModify the user's role memberships to remove sales-specific access and add marketing-specific access
   Reveal Solution Discussion Select an answer first