An organization periodically reviews user access rights to ensure they still match each employee's current job role. This practice is part of:

Monitoring, reporting, and maintenance

An organization wants to ensure that user access rights are reviewed regularly to prevent privilege creep. Which process is BEST suited for this?

Real-time monitoring of user activity

Periodic access reviews by managers

Automated password expiration policies

An organization is evaluating IAM solutions. They need to support automated provisioning, self-service password reset, and access certifications. Which type of IAM system is BEST suited for these requirements?

Multi-Factor Authentication (MFA) solution

Privileged Access Management (PAM) solution

Identity Governance and Administration (IGA) platform

In an access control context, what is the primary purpose of authorization?

To verify the user's identity using credentials

To record all user activities for audit purposes

To create a unique identifier for each user

To determine what resources and actions the user is allowed to access

Systems Security Certified Practitioner

Domain 2Objective 3

2.3 - Support And/or Implement the Identity Management Lifecycle SSCP Practice Questions (Page 4)

Part of the Access Controls domain, which accounts for 15% of the SSCP exam. ISC2 does not publish an official question count, but from its 120-minute exam (~50–80 total, ~8–12 in this domain), expect 2–3 from this objective — we provide 27 practice questions to prepare you well beyond it. (estimate)

27questions here

6free pages

6concepts

15%of the exam

Questions 16–20

16foundation · easy
An organization periodically reviews user access rights to ensure they still match each employee's current job role. This practice is part of:
Select an answer first
17application · medium
An organization wants to ensure that user access rights are reviewed regularly to prevent privilege creep. Which process is BEST suited for this?
Select an answer first
18foundation · easy
An employee is leaving the company. Which process should be performed to ensure their user account and access rights are removed?
Select an answer first
19expert · hard
An organization is evaluating IAM solutions. They need to support automated provisioning, self-service password reset, and access certifications. Which type of IAM system is BEST suited for these requirements?
Select an answer first
20foundation · easy
In an access control context, what is the primary purpose of authorization?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SSCP

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by ISC2. “SSCP” is a trademark of its owner, used for identification only.