An organization is designing its identity accounting strategy. Which activity is part of determining accounting requirements?

Documenting which user actions must be traceable for security and compliance

Designing the user interface for the IAM portal

Selecting the brand of log management software

Which of the following is an example of an audit log alerting mechanism?

Sending an email to the security team when multiple failed logins occur

Compressing log files to save space

Storing logs in a centralized SIEM

Which technique is commonly used to maintain the integrity of audit logs?

Write-once, read-many (WORM) storage

An organization is implementing a new IAM system and needs to determine which audit events to log. The organization is concerned about insider threats and wants to detect unauthorized changes to user permissions. Which audit events should be prioritized to address this concern?

Log all authorization changes, including changes to user roles, group memberships, and permission grants.

Log all successful and failed authentication attempts for all users.

Log all data access events, such as file reads and writes.

Log all administrative actions, such as password resets and account unlocks.

Information Systems Security Architecture Professional

Domain 4Objective 4

4.4 Architect Identity Accounting ISSAP Practice Questions (Page 4)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 25 practice questions to prepare you well beyond it. (estimate)

25questions here

5free pages

6concepts

25%of the exam

Questions 16–20

16foundation · easy
An organization is designing its identity accounting strategy. Which activity is part of determining accounting requirements?
Select an answer first
17foundation · easy
Which of the following is an example of an audit log alerting mechanism?
Select an answer first
18foundation · easy
Which event is most important to log for detecting unauthorized access attempts?
Select an answer first
19foundation · easy
Which technique is commonly used to maintain the integrity of audit logs?
Select an answer first
20application · medium
An organization is implementing a new IAM system and needs to determine which audit events to log. The organization is concerned about insider threats and wants to detect unauthorized changes to user permissions. Which audit events should be prioritized to address this concern?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.