What is typically issued to a user after successful identity registration and proofing?

A credential (e.g., a password or smart card)

An encryption key for data at rest

What is the primary purpose of session expiration in a web application?

To limit the duration of an authenticated session, reducing the window for unauthorized use

To store user preferences for the next login

To encrypt the session data at rest

To increase the number of concurrent sessions a user can have

Certified Information Systems Security Professional

Domain 5Objective 2

5.2 - Design Identification and Authentication Strategy (e.g., People, Devices, and Services) CISSP Practice Questions (Page 8)

Part of the Identity and Access Management (IAM) domain, which accounts for 13% of the CISSP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~9–16 in this domain), expect 2–3 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

10concepts

13%of the exam

10 Concepts in This Objective

Groups and Roles
Authentication, Authorization, and Accounting (AAA)
Multi-Factor Authentication (MFA)
Password-less Authentication
Session Management
Identity Registration and Proofing
Federated Identity Management (FIM)
Credential Management Systems
Single Sign-On (SSO)
Just-In-Time (JIT) Provisioning

Questions 36–37

36foundation · easy
What is typically issued to a user after successful identity registration and proofing?
Select an answer first
37foundation · easy
What is the primary purpose of session expiration in a web application?
Select an answer first

Finished these 2 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to CISSP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “CISSP” is a trademark of its owner, used for identification only.

5.2 - Design Identification and Authentication Strategy (e.g., People, Devices, and Services) CISSP Practice Questions (Page 8)

Questions 36–37

What is typically issued to a user after successful identity registration and proofing?

What is the primary purpose of session expiration in a web application?

Keep studying — Identity and Access Management (IAM)