An organization is implementing a new identity management system. The security architect must ensure that each user has a unique identifier that is not based on personal information. Which of the following identifier types is MOST appropriate?

The user's full name and birth date.

A sequential employee number assigned by HR.

A randomly generated identifier stored in the directory.

In the context of identity establishment, which of the following is a logical method for verifying an individual's identity?

Examining a notarized birth certificate

Calling the applicant's previous employer to confirm employment history

Comparing a fingerprint to a stored biometric template

Validating a smart card certificate against a trusted CA

An employee is leaving the company. The security architect must ensure that the employee's access is revoked in a timely manner. Which of the following is the MOST critical action to take immediately upon the employee's departure?

Notify the employee's manager and ask them to disable the account.

Disable the employee's account and revoke all access tokens.

Delete the employee's account and all associated data immediately.

Change the employee's password and keep the account active for a week.

An organization is designing an identity architecture that must support both human users and automated services. The security architect must ensure that service accounts are not tied to a specific individual and that their credentials are managed securely. Which of the following is the MOST appropriate approach for service account identifiers and credentials?

Create a service account with a unique identifier and store the password in a shared spreadsheet for administrators.

Assign a human user's credentials to the service for simplicity.

Create a service account with a long, static password that never expires.

Use a managed identity that is automatically rotated and has a unique identifier.

Which of the following is an example of an identity management technology used to synchronize identity data between different systems?

Identity and access management (IAM) platform

Public key infrastructure (PKI)

Identity governance and administration (IGA) tool

Information Systems Security Architecture Professional

Domain 4Objective 1

4.1 Architect Identity Lifecycle ISSAP Practice Questions (Page 1)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

25%of the exam

Questions 1–5

1application · medium
An organization is implementing a new identity management system. The security architect must ensure that each user has a unique identifier that is not based on personal information. Which of the following identifier types is MOST appropriate?
Select an answer first
2foundation · easy
In the context of identity establishment, which of the following is a logical method for verifying an individual's identity?
Select an answer first
3application · medium
An employee is leaving the company. The security architect must ensure that the employee's access is revoked in a timely manner. Which of the following is the MOST critical action to take immediately upon the employee's departure?
Select an answer first
4expert · hard
An organization is designing an identity architecture that must support both human users and automated services. The security architect must ensure that service accounts are not tied to a specific individual and that their credentials are managed securely. Which of the following is the MOST appropriate approach for service account identifiers and credentials?
Select an answer first
5foundation · easy
Which of the following is an example of an identity management technology used to synchronize identity data between different systems?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.