A user is a member of the 'Managers' group, which has read access to the employee database. The user is also a member of the 'HR' group, which has write access to the employee database. However, the user's direct entitlements include a deny rule that explicitly denies write access to the employee database. What is the user's effective access?

Read access only, because the deny rule overrides the group-based write access.

Read and write access, because permissions are combined.

No access, because the deny rule cancels all permissions.

Write access only, because the HR group provides write access.

An organization's security team wants to identify dormant user accounts that have not been used for 90 days. They also want to review whether any users have excessive permissions compared to their job function. Which combination of reports would best support this effort?

Access log report and system configuration report

Authentication failure report and password change report

Group membership report and password expiration report

Account activity report and entitlement review report

Systems Security Certified Practitioner

Domain 2Objective 3

2.3 - Support And/or Implement the Identity Management Lifecycle SSCP Practice Questions (Page 2)

Part of the Access Controls domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

15%of the exam

Questions 6–10

6foundation · easy
Which of the following is a component of an IAM system?
Select an answer first
7expert · hard
A user is a member of the 'Managers' group, which has read access to the employee database. The user is also a member of the 'HR' group, which has write access to the employee database. However, the user's direct entitlements include a deny rule that explicitly denies write access to the employee database. What is the user's effective access?
Select an answer first
8foundation · easy
When an employee is hired, the IT department creates a user account and assigns the appropriate access rights. This process is called:
Select an answer first
9foundation · easy
Before granting a new employee access to corporate systems, the organization requires the employee to present a government-issued ID and a utility bill. This process is known as:
Select an answer first
10application · medium
An organization's security team wants to identify dormant user accounts that have not been used for 90 days. They also want to review whether any users have excessive permissions compared to their job function. Which combination of reports would best support this effort?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.

2.3 - Support And/or Implement the Identity Management Lifecycle SSCP Practice Questions (Page 2)

Questions 6–10

Which of the following is a component of an IAM system?

When an employee is hired, the IT department creates a user account and assigns the appropriate access rights. This process is called:

Before granting a new employee access to corporate systems, the organization requires the employee to present a government-issued ID and a utility bill. This process is known as:

An organization's security team wants to identify dormant user accounts that have not been used for 90 days. They also want to review whether any users have excessive permissions compared to their job function. Which combination of reports would best support this effort?

Keep studying — Access Controls