7.1 Identify and Describe Identity and Access Management (IAM) Components CYBERSECURITY-APPRENTICE Practice Questions (Page 5)

Questions 21–25

1. 21application · easy

   A company uses a cloud-based identity provider. Employees authenticate once in the morning and can then access the HR portal, the expense system, and the project management tool without being prompted for credentials again. What is this an example of?

   • AMultifactor authentication (MFA)
   • BRole-based access control (RBAC)
   • CSingle sign-on (SSO)
   • DFederation
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   What is the primary role of a directory service in an organization?

   • ATo manage physical access to buildings
   • BTo encrypt all network traffic
   • CTo provide a firewall between networks
   • DTo store and manage identity and access information, such as user accounts and permissions
   Reveal Solution Discussion Select an answer first
4. 23application · easy

   A hospital has a policy that only nurses can access patient medication records. The IT department creates a 'Nurse' role and assigns the permission to view medication records to that role. When a new nurse is hired, they are added to the 'Nurse' role and automatically gain the permission. What is this an example of?

   • AMultifactor authentication
   • BRole-based access control (RBAC)
   • CFederation
   • DSingle sign-on
   Reveal Solution Discussion Select an answer first
5. 24application · medium

   A company uses its own Active Directory to manage employee credentials. They want to allow employees to access a third-party SaaS application using their existing corporate credentials, without creating a separate account in the SaaS app. Which technology enables this?

   • AFederation
   • BRole-based access control (RBAC)
   • CIdentity lifecycle management
   • DMultifactor authentication (MFA)
   Reveal Solution Discussion Select an answer first
6. 25expert · medium

   A company has a complex RBAC implementation with hundreds of roles. An auditor finds that some users have access to systems they no longer need. The root cause is that users have accumulated role assignments over time. What is the most effective way to address this issue?

   • APerform a one-time review and remove unnecessary role assignments
   • BGrant users direct permissions instead of roles
   • CReduce the number of roles
   • DImplement a periodic access review process where managers certify their team's access
   Reveal Solution Discussion Select an answer first