4.1 Architect Identity Lifecycle ISSAP Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   An employee is transferring from the finance department to the marketing department. The security architect must ensure that the employee's access rights are updated appropriately. Which of the following actions is the MOST critical during this mover scenario?

   • ARemove the employee's access to finance resources and grant access to marketing resources.
   • BImmediately disable the employee's account and create a new one for the new role.
   • CChange the employee's primary email address to reflect the new department.
   • DKeep the finance access active until the employee requests removal.
   Reveal Solution Discussion Select an answer first
2. 12expert · hard

   An organization is considering using a virtual directory to consolidate identity data from multiple sources. The security architect must understand the limitations of this approach. Which of the following is a KEY limitation of a virtual directory?

   • AIt cannot provide a unified view of identity data from multiple sources.
   • BIt cannot be used for authentication.
   • CIt requires all source systems to use the same schema.
   • DIt does not synchronize changes back to the source systems.
   Reveal Solution Discussion Select an answer first
4. 13expert · hard

   A company has a policy that all leaver accounts must be disabled within 24 hours of termination. However, the HR system only updates employee status nightly. The security architect is asked to improve the de-provisioning process. Which of the following is the MOST effective improvement?

   • ATrain managers to manually disable accounts when an employee leaves.
   • BDisable all accounts that have not logged in for 30 days.
   • CImplement a nightly job that checks the HR system and disables accounts.
   • DIncrease the frequency of HR system updates to real-time via an API.
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   Which of the following is an example of a physical method used to verify an individual's identity during the identity establishment process?

   • AAnalyzing the user's typing rhythm on a keyboard
   • BReviewing a government-issued photo ID
   • CSending a one-time passcode to a registered mobile device
   • DAnswering security questions based on personal history
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A company is designing an identifier scheme for its employees, contractors, and automated services. The security architect needs to ensure that identifiers are unique, non-reassignable, and support auditing. Which of the following identifier assignment strategies BEST meets these requirements?

   • AUse the employee's email address as the identifier for all accounts.
   • BUse the Social Security number (SSN) as the identifier for all users.
   • CReuse the identifier of a former employee for a new hire to save directory space.
   • DAssign a globally unique identifier (GUID) that is generated once and never reused.
   Reveal Solution Discussion Select an answer first