7.1 Identify and Describe Identity and Access Management (IAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 1)

Questions 1–5

1. 1expert · medium

   A company has a high turnover rate for contractors. The IT team is manually creating and deleting accounts for each contractor, which is time-consuming and has led to several contractors retaining access after their contracts ended. What is the most effective solution to address this problem?

   • ARequire all contractors to use multifactor authentication
   • BImplement an automated identity lifecycle management solution that provisions and deprovisions accounts based on HR records
   • CUse a shared account for all contractors
   • DReview contractor access manually on a quarterly basis
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company wants to increase security for remote access to its VPN. Currently, users only need a password. The security team wants to require a second factor that is something the user has. Which of the following would satisfy this requirement?

   • AA fingerprint scan
   • BA second password
   • CA security question like 'What is your mother's maiden name?'
   • DA one-time code generated by an authenticator app on their phone
   Reveal Solution Discussion Select an answer first
4. 3expert · medium

   A company is migrating from an on-premises directory service to a cloud-based directory service. They have thousands of users and groups. What is the most important consideration for this migration?

   • AEnsuring the cloud directory supports the same authentication protocols
   • BChoosing a cloud provider with the lowest cost
   • CMigrating users before groups
   • DEnsuring all user attributes and group memberships are migrated accurately
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company uses a cloud-based identity provider (IdP) and wants to allow its employees to access a partner company's application without creating separate accounts. The partner's application supports SAML. What must be established between the two companies to enable this?

   • AA single sign-on portal
   • BA federation trust
   • CA shared directory service
   • DA role-based access control policy
   Reveal Solution Discussion Select an answer first
6. 5expert · medium

   A company is implementing MFA for all users. The security team wants to ensure that the second factor is resistant to phishing. Which of the following second factors would be most resistant to a phishing attack that tricks the user into entering their credentials on a fake website?

   • AA one-time code sent via SMS
   • BA hardware security key that requires a physical tap
   • CA secondary password
   • DA one-time code from an authenticator app
   Reveal Solution Discussion Select an answer first