2.3 - Support And/or Implement the Identity Management Lifecycle SSCP Practice Questions (Page 5)

Questions 21–25

1. 21application · medium

   A contractor's role changes from project manager to data analyst. The IAM team updates the contractor's group memberships to reflect the new role. However, the contractor still retains access to the project management system. What is the most likely reason for this lingering access?

   • AThe contractor was granted direct entitlements to the project management system in addition to group-based access.
   • BThe contractor's user account was not disabled after the role change.
   • CThe contractor's password was not reset after the role change.
   • DThe contractor's role change was not logged in the IAM system.
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   A user is a member of the 'Sales' group, which grants read access to the customer database. The user's effective access includes this read permission. This is an example of:

   • AIdentity proofing
   • BAuthentication
   • CInherited rights
   • DDeprovisioning
   Reveal Solution Discussion Select an answer first
4. 23expert · hard

   An organization is de-provisioning a user who had access to multiple systems. The IAM team disables the account and removes the user from all groups. However, the user still has access to a cloud application that uses its own identity store. What is the MOST likely reason?

   • AThe user's direct entitlements were not removed.
   • BThe user's password was not reset.
   • CThe cloud application is not integrated with the IAM system, so the account was not de-provisioned there.
   • DThe user was a member of a group that was not removed.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is an entitlement in the context of identity and access management?

   • AThe set of access rights assigned to a user
   • BA record of all user actions
   • CThe process of verifying a user's identity
   • DA unique identifier for each user
   Reveal Solution Discussion Select an answer first
6. 25application · easy

   A user is a member of the 'Sales' group, which has read access to the customer database. The user is also a member of the 'Marketing' group, which has write access to the customer database. What is the user's effective access to the customer database?

   • ARead and write access, because permissions from all group memberships are combined
   • BNo access, because conflicting permissions cancel each other out
   • CRead access only, because the Sales group is the primary group
   • DWrite access only, because the Marketing group has more privileges
   Reveal Solution Discussion Select an answer first