A multinational company is implementing an identity lifecycle process for its new hires. The security architect wants to ensure that the identity is established and verified before any access is granted. The company uses an HR system as the authoritative source for employee data. Which of the following is the MOST appropriate first step in the joiner process?

Provision the account from the HR system and rely on the manager's approval for access.

Verify the employee's identity using physical documents and then provision the account.

Create the user account in the directory and assign default permissions.

Assign a temporary password and force a change at first login, then create the account.

An organization is designing an identity architecture that must support multiple external partners. Each partner has its own identity provider. The security architect needs to ensure that partner users can access the organization's resources without creating duplicate accounts. Which of the following is the MOST appropriate approach?

Create a local account for each partner user and synchronize passwords.

Use a shared username and password for all partner users.

Require partner users to enroll in the organization's multi-factor authentication.

Implement federation using SAML or OIDC to trust the partner's identity provider.

An organization wants to centralize identity management for its employees across multiple applications. The security architect is evaluating technologies. Which of the following technologies is MOST appropriate for this purpose?

A directory service that supports LDAP and is integrated with applications.

A file server with a shared spreadsheet of user credentials.

A public key infrastructure (PKI) that issues certificates to users.

A relational database used as the primary identity store.

Information Systems Security Architecture Professional

Domain 4Objective 1

4.1 Architect Identity Lifecycle ISSAP Practice Questions (Page 4)

Part of the Identity and Access Management (IAM) Architecture domain, which accounts for 25% of the ISSAP exam. ISC2 does not publish an official question count, but from its 180-minute exam (~70–120 total, ~18–30 in this domain), expect 5–8 from this objective — we provide 24 practice questions to prepare you well beyond it. (estimate)

24questions here

5free pages

4concepts

25%of the exam

Questions 16–20

16foundation · easy
In the joiner-mover-leaver lifecycle, which process is responsible for granting a new employee the appropriate access rights and creating their user account?
Select an answer first
17foundation · easy
Which technology is specifically designed to store and manage identity information, such as user attributes and credentials, and is often used as the authoritative source for identity data?
Select an answer first
18application · medium
A multinational company is implementing an identity lifecycle process for its new hires. The security architect wants to ensure that the identity is established and verified before any access is granted. The company uses an HR system as the authoritative source for employee data. Which of the following is the MOST appropriate first step in the joiner process?
Select an answer first
19expert · hard
An organization is designing an identity architecture that must support multiple external partners. Each partner has its own identity provider. The security architect needs to ensure that partner users can access the organization's resources without creating duplicate accounts. Which of the following is the MOST appropriate approach?
Select an answer first
20application · medium
An organization wants to centralize identity management for its employees across multiple applications. The security architect is evaluating technologies. Which of the following technologies is MOST appropriate for this purpose?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to ISSAP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “ISSAP” is a trademark of its owner, used for identification only.

4.1 Architect Identity Lifecycle ISSAP Practice Questions (Page 4)

Questions 16–20

In the joiner-mover-leaver lifecycle, which process is responsible for granting a new employee the appropriate access rights and creating their user account?

Which technology is specifically designed to store and manage identity information, such as user attributes and credentials, and is often used as the authoritative source for identity data?

An organization wants to centralize identity management for its employees across multiple applications. The security architect is evaluating technologies. Which of the following technologies is MOST appropriate for this purpose?

Keep studying — Identity and Access Management (IAM) Architecture