7.1 Identify and Describe Identity and Access Management (IAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 2)

Questions 6–10

1. 6expert · medium

   A company uses federation with a partner. The partner's application is not responding to authentication requests. The company's identity provider is working correctly, and users can authenticate to internal applications. What is the most likely cause of the issue?

   • AThe user's password is incorrect
   • BThe user is not a member of the correct role
   • CThe federation trust between the two organizations is misconfigured or has expired
   • DThe user's account is locked
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company is considering moving from single-factor authentication (password only) to multifactor authentication. Which of the following is a primary limitation of single-factor authentication that MFA directly addresses?

   • AUsers may forget their passwords
   • BPasswords are difficult to manage
   • CUsers cannot access multiple applications with one password
   • DA single compromised password is sufficient to gain access
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company has a policy that only members of the 'Payroll' role can access the payroll system. A user in the 'Finance' role needs temporary access to the payroll system to run a report. What is the most appropriate way to grant this access in a way that aligns with the RBAC model?

   • AAsk the user to use a colleague's account
   • BCreate a new 'Temporary Payroll' role for this user
   • CAdd the user to the 'Payroll' role temporarily, then remove them when the task is complete
   • DGrant the user direct permission to the payroll system
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   Which stage of identity lifecycle management involves creating a new user account and assigning initial permissions?

   • AProvisioning
   • BMaintenance
   • CDeprovisioning
   • DAuthentication
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company hires a new accountant. The IT team creates a user account in the directory service, assigns the account to the 'Finance' role, and the role's permissions automatically grant access to the accounting system. A month later, the accountant transfers to the marketing department. The IT team updates the user's role assignment to 'Marketing'. What is this process called?

   • ASingle sign-on configuration
   • BProvisioning, then deprovisioning
   • CMaintenance of the identity lifecycle
   • DFederation between departments
   Reveal Solution Discussion Select an answer first