CASE CASE Identity & Access Management 1 — Questions and Answers
Question 1: What does the principle of least privilege require?
- Granting users maximum permissions to maximize productivity
- Granting users only the minimum permissions necessary to perform their job duties (Correct answer)
- Revoking all user access after 30 days automatically
- Assigning administrator rights to all internal users
Correct answer: Granting users only the minimum permissions necessary to perform their job duties
Least privilege limits access rights to the minimum required for a user's role, reducing the attack surface from over-permissioned accounts.
Question 2: What is Multi-Factor Authentication (MFA)?
- Using multiple passwords for a single account login
- Requiring two or more verification factors from different categories to authenticate (Correct answer)
- Simultaneously logging in from multiple trusted devices
- Relying exclusively on biometric verification
Correct answer: Requiring two or more verification factors from different categories to authenticate
MFA requires credentials from two or more independent factor categories — knowledge, possession, and inherence — to verify identity.
Question 3: How does Role-Based Access Control (RBAC) manage permissions?
- By granting access based on a user's physical location
- By assigning permissions to defined roles rather than to individual users (Correct answer)
- By restricting access based on time of day
- By authenticating users with biometrics exclusively
Correct answer: By assigning permissions to defined roles rather than to individual users
RBAC assigns permissions to predefined roles, and users gain access by being assigned to roles appropriate for their job function.
Question 4: What is federated identity in application security?
- An identity shared between departments in one organization
- An identity management approach allowing authentication to span multiple trust domains (Correct answer)
- A backup authentication mechanism for disaster recovery
- A centralized password manager for enterprise users
Correct answer: An identity management approach allowing authentication to span multiple trust domains
Federated identity enables a user to authenticate once in one domain and access resources across multiple organizations or systems without re-authenticating.
Question 5: What is the role of an Identity Provider (IdP)?
- To store and encrypt all user application data
- To authenticate users and assert their identity to relying service providers (Correct answer)
- To encrypt all communications between services
- To manage and enforce firewall access rules
Correct answer: To authenticate users and assert their identity to relying service providers
An Identity Provider authenticates users and issues identity assertions such as tokens or claims that service providers trust for access decisions.
Question 6: What does SAML stand for?
- Secure Authentication Markup Language
- Security Assertion Markup Language (Correct answer)
- Standard Access Management Layer
- Secure API Management Login
Correct answer: Security Assertion Markup Language
SAML (Security Assertion Markup Language) is an XML-based open standard for exchanging authentication and authorization data between identity and service providers.
CASE CASE Identity & Access Management 1
What does the principle of least privilege require?