025.1 Identity and Authentication (weight: 3) SECURITY-ESSENTIALS Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   A new employee joins the company. What is the first step in the identity lifecycle management process?

   • ACreate a shared account for the new employee.
   • BDisable the user's account until they complete training.
   • CWait for the employee to request access.
   • DProvision the user's identity and assign initial access rights.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to allow its employees to use their corporate credentials to access a partner's SaaS application. Which technology is most appropriate?

   • ARADIUS authentication
   • BKerberos authentication
   • CLDAP directory services
   • DFederated identity management
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company wants to implement SSO for its employees. Which requirement is essential for SSO to work effectively?

   • AA public key infrastructure (PKI) for all applications.
   • BA central authentication service that all applications trust.
   • CA biometric scanner at each workstation.
   • DA separate password for each application.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   An employee is leaving the company. What is the most important step in the identity lifecycle management process?

   • ANotify other employees of the departure.
   • BArchive the user's data and leave the account enabled.
   • CChange the user's password and keep the account active.
   • DDisable or delete the user's accounts and revoke access rights.
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company requires employees to authenticate with a password and a one-time code generated by a hardware token. Which statement best describes this authentication approach?

   • AIt is single-factor authentication because the token is just a password generator.
   • BIt uses two different factors: something you know and something you have.
   • CIt uses three factors: password, token, and the user's identity.
   • DIt uses two factors from the same category, which is stronger than a single factor.
   Reveal Solution Discussion Select an answer first