What is the primary purpose of Federated Identity Management (FIM)?

To enforce stronger password policies across all systems

To allow identity information to be shared across trusted domains

To replace all authentication with biometrics

To centrally store all user passwords in one database

Which feature is typically provided by a credential management system like a password vault?

Real-time threat intelligence feeds

Automatic password reset for all users

Encrypted storage of credentials

Which standard is commonly used for exchanging authentication and authorization data between identity providers and service providers?

LDAP (Lightweight Directory Access Protocol)

SAML (Security Assertion Markup Language)

RADIUS (Remote Authentication Dial-In User Service)

A technology company wants to eliminate password usage for employee laptops. They are considering Windows Hello for Business, which uses a PIN tied to the device's TPM and supports biometric authentication. The security team is concerned about the risk of a stolen laptop. Which additional control would best mitigate the risk of an attacker using the stolen laptop?

Require the user to authenticate with a fingerprint or face recognition in addition to the PIN.

Allow the PIN to be reset via a security question if the user forgets it.

Store the PIN in the cloud so it can be recovered remotely.

Disable the TPM so that the PIN is not tied to the hardware.

What is the primary purpose of Just-In-Time (JIT) provisioning?

To grant temporary access to resources only when needed

To automatically create user accounts for all employees on their first day

To synchronize passwords across multiple systems

To remove user accounts immediately upon termination

Certified Information Systems Security Professional

Domain 5Objective 2

5.2 - Design Identification and Authentication Strategy (e.g., People, Devices, and Services) CISSP Practice Questions (Page 6)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

13%of the exam

10 Concepts in This Objective

Groups and Roles
Authentication, Authorization, and Accounting (AAA)
Multi-Factor Authentication (MFA)
Password-less Authentication
Session Management
Identity Registration and Proofing
Federated Identity Management (FIM)
Credential Management Systems
Single Sign-On (SSO)
Just-In-Time (JIT) Provisioning

Questions 26–30

26foundation · easy
What is the primary purpose of Federated Identity Management (FIM)?
Select an answer first
27foundation · easy
Which feature is typically provided by a credential management system like a password vault?
Select an answer first
28foundation · easy
Which standard is commonly used for exchanging authentication and authorization data between identity providers and service providers?
Select an answer first
29application · medium
A technology company wants to eliminate password usage for employee laptops. They are considering Windows Hello for Business, which uses a PIN tied to the device's TPM and supports biometric authentication. The security team is concerned about the risk of a stolen laptop. Which additional control would best mitigate the risk of an attacker using the stolen laptop?
Select an answer first
30foundation · easy
What is the primary purpose of Just-In-Time (JIT) provisioning?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.