An employee is transferred from the finance department to the IT department. The IAM team updates the employee's group memberships to reflect the new role. However, the employee still has access to the financial reporting system. What is the most likely cause?

The employee's account was not disabled during the transfer.

The employee's transfer was not logged in the IAM system.

The employee's password was not reset after the transfer.

The employee was granted direct entitlements to the financial system.

An employee is terminated. The security team wants to ensure that the employee's access is removed promptly. Which action is the MOST critical to perform immediately?

Remove the user from all groups

Notify the user of the termination

A financial services company is onboarding a new remote employee. The employee must access sensitive customer data. The company requires a high level of assurance that the employee is who they claim to be. Which identity proofing method provides the highest assurance?

Email verification with a one-time code

SMS one-time passcode to a registered phone

Knowledge-based authentication (KBA) questions

In-person verification with a government-issued ID

An organization wants to automate access certifications to reduce the burden on managers. They have a mature IAM system. Which feature is MOST useful for this?

Real-time alerting for suspicious access attempts

Automated certification campaigns that send periodic review requests to managers

Single sign-on (SSO) integration

A new employee is hired and needs access to the HR system, payroll system, and email. The IAM team uses an automated provisioning process. What is the FIRST step in the provisioning lifecycle?

Assign the user to the appropriate groups

Create the user account in the IAM system

Verify the employee's identity through identity proofing

Configure the user's email mailbox

Systems Security Certified Practitioner

Domain 2Objective 3

2.3 - Support And/or Implement the Identity Management Lifecycle SSCP Practice Questions (Page 1)

Part of the Access Controls domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

15%of the exam

Questions 1–5

1application · medium
An employee is transferred from the finance department to the IT department. The IAM team updates the employee's group memberships to reflect the new role. However, the employee still has access to the financial reporting system. What is the most likely cause?
Select an answer first
2application · medium
An employee is terminated. The security team wants to ensure that the employee's access is removed promptly. Which action is the MOST critical to perform immediately?
Select an answer first
3application · medium
A financial services company is onboarding a new remote employee. The employee must access sensitive customer data. The company requires a high level of assurance that the employee is who they claim to be. Which identity proofing method provides the highest assurance?
Select an answer first
4expert · hard
An organization wants to automate access certifications to reduce the burden on managers. They have a mature IAM system. Which feature is MOST useful for this?
Select an answer first
5application · medium
A new employee is hired and needs access to the HR system, payroll system, and email. The IAM team uses an automated provisioning process. What is the FIRST step in the provisioning lifecycle?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.