5.5 - Manage the Identity and Access Provisioning Lifecycle CISSP Practice Questions (Page 4)

Questions 16–18

1. 16foundation · easy

   What is the primary basis for defining a role in an identity and access management system?

   • AThe individual's seniority and years of service
   • BThe user's personal preference for which systems they want to access
   • CThe department's budget and resource allocation
   • DThe specific job function and the tasks the individual must perform
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   During an internal transfer, what is the correct approach to managing an employee's access rights?

   • AAdjust access to match the new role's requirements, removing permissions no longer needed
   • BKeep all existing access and add the new role's permissions
   • CLeave access unchanged until the employee requests changes
   • DRemove all access and then grant the new role's permissions from scratch
   Reveal Solution Discussion Select an answer first
3. 18application · medium

   An employee is promoted from a developer to a team lead. The team lead role requires access to the code repository with write permissions, but the developer role only had read access. What should the IAM team do to ensure the employee has the correct access?

   • AKeep the developer role and manually grant write access to the repository.
   • BRemove the developer role and assign the team lead role with write access to the repository.
   • CCreate a new account for the employee with the team lead role and disable the old account.
   • DAdd the team lead role to the employee's account and keep the developer role.
   Reveal Solution Discussion Select an answer first