An organization is assigning identifiers to its network devices. The security architect wants to ensure that each device can be uniquely identified for monitoring and compliance. Which of the following is the MOST appropriate identifier for a network device?

The user's username who last logged in.

The IP address assigned by DHCP.

A company uses multiple identity stores, including an on-premises Active Directory and a cloud-based identity provider. The security architect wants to ensure that user attributes are consistent across both stores. Which of the following technologies is MOST appropriate for this task?

A certificate authority that issues certificates to users.

Identity synchronization tool that replicates changes between the stores.

A federation service that allows single sign-on.

A virtual directory that aggregates data from multiple sources.

A large enterprise is implementing an automated identity lifecycle management solution. The HR system is the authoritative source for employee data. The security architect must ensure that when an employee is terminated, their access is revoked within 15 minutes. However, the HR system updates are batched and may take up to 24 hours to reflect a termination. Which of the following approaches BEST addresses this timing gap?

Set the identity management system to run a full synchronization every hour.

Integrate the identity management system with the HR system via an event-driven API that triggers immediate de-provisioning.

Rely on the employee's manager to manually disable the account upon termination.

Configure the identity management system to poll the HR system every 15 minutes for changes.

Information Systems Security Architecture Professional

Domain 4Objective 1

4.1 Architect Identity Lifecycle ISSAP Practice Questions (Page 2)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

25%of the exam

Questions 6–10

6foundation · easy
In the joiner-mover-leaver lifecycle, which process is responsible for promptly removing a departing employee's access rights and disabling their account?
Select an answer first
7foundation · easy
Which of the following is an example of an identifier assigned to a device in an identity management system?
Select an answer first
8application · medium
An organization is assigning identifiers to its network devices. The security architect wants to ensure that each device can be uniquely identified for monitoring and compliance. Which of the following is the MOST appropriate identifier for a network device?
Select an answer first
9application · medium
A company uses multiple identity stores, including an on-premises Active Directory and a cloud-based identity provider. The security architect wants to ensure that user attributes are consistent across both stores. Which of the following technologies is MOST appropriate for this task?
Select an answer first
10expert · hard
A large enterprise is implementing an automated identity lifecycle management solution. The HR system is the authoritative source for employee data. The security architect must ensure that when an employee is terminated, their access is revoked within 15 minutes. However, the HR system updates are batched and may take up to 24 hours to reflect a termination. Which of the following approaches BEST addresses this timing gap?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

4.1 Architect Identity Lifecycle ISSAP Practice Questions (Page 2)

Questions 6–10

In the joiner-mover-leaver lifecycle, which process is responsible for promptly removing a departing employee's access rights and disabling their account?

Which of the following is an example of an identifier assigned to a device in an identity management system?

An organization is assigning identifiers to its network devices. The security architect wants to ensure that each device can be uniquely identified for monitoring and compliance. Which of the following is the MOST appropriate identifier for a network device?

A company uses multiple identity stores, including an on-premises Active Directory and a cloud-based identity provider. The security architect wants to ensure that user attributes are consistent across both stores. Which of the following technologies is MOST appropriate for this task?

Keep studying — Identity and Access Management (IAM) Architecture