Which activity is part of monitoring, reporting, and maintenance in the identity lifecycle?

Defining which resources a user can access

Verifying a user's identity with a passport

Reviewing access logs to detect unusual activity

Creating a user account for a new hire

An organization is implementing a new IAM system. They want to automate the identity lifecycle as much as possible. However, they have a legacy HR system that does not support real-time integration. What is the BEST approach to ensure timely provisioning and de-provisioning?

Manually provision and de-provision accounts in the IAM system.

Use real-time integration via an API gateway.

Disable the legacy HR system and use a new one.

Use a scheduled batch synchronization between the HR system and the IAM system.

A remote employee is being onboarded. The employee cannot visit an office for in-person identity proofing. The organization needs a high level of assurance. Which identity proofing method is MOST appropriate?

SMS one-time passcode to a registered phone

Knowledge-based authentication (KBA) questions

Video call with a notary or HR representative to verify the employee's ID

Email verification with a one-time code

An organization wants to implement a centralized IAM system to manage user identities and access across multiple applications. Which capability is ESSENTIAL for the IAM system to support the identity lifecycle?

Antivirus and malware protection

Network intrusion detection and prevention

Automated provisioning and de-provisioning of user accounts

Data loss prevention (DLP) for sensitive files

Which activity is an example of identity proofing?

An administrator reviews a passport and verifies it with the issuing authority

A user enters a username and password to log in

A system logs the time and date of each user login

A manager grants a user read-only access to a shared folder

Systems Security Certified Practitioner

Domain 2Objective 3

2.3 - Support And/or Implement the Identity Management Lifecycle SSCP Practice Questions (Page 3)

Part of the Access Controls domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

15%of the exam

Questions 11–15

11foundation · easy
Which activity is part of monitoring, reporting, and maintenance in the identity lifecycle?
Select an answer first
12expert · hard
An organization is implementing a new IAM system. They want to automate the identity lifecycle as much as possible. However, they have a legacy HR system that does not support real-time integration. What is the BEST approach to ensure timely provisioning and de-provisioning?
Select an answer first
13expert · hard
A remote employee is being onboarded. The employee cannot visit an office for in-person identity proofing. The organization needs a high level of assurance. Which identity proofing method is MOST appropriate?
Select an answer first
14application · easy
An organization wants to implement a centralized IAM system to manage user identities and access across multiple applications. Which capability is ESSENTIAL for the IAM system to support the identity lifecycle?
Select an answer first
15foundation · easy
Which activity is an example of identity proofing?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.