CASE Identity & Access Management Flashcards

What is the main benefit of Single Sign-On (SSO)?

Answer: Allowing users to authenticate once and access multiple authorized applications without re-authenticating

SSO enables users to log in once and gain access to all authorized applications without repeated credential prompts.

How does Attribute-Based Access Control (ABAC) differ from RBAC?

Answer: ABAC evaluates access based on combinations of user, resource, and environmental attributes via policies

ABAC uses dynamic policy evaluation combining multiple attributes — user, resource, action, and environment — enabling more fine-grained access control than RBAC alone.

What is a service account in the context of identity and access management?

Answer: A non-human account used by applications or automated processes to authenticate and access resources

Service accounts are non-human identities used by applications, scripts, and automated processes to authenticate with systems and perform required operations.

What security risk do orphaned accounts pose?

Answer: Former employees or decommissioned systems may retain unauthorized access through unclosed accounts

Orphaned accounts — accounts not linked to active users or systems — remain usable and represent unauthorized access vectors if not promptly disabled.

How does Zero Trust architecture approach identity verification?

Answer: Never trust, always verify — authenticate and authorize every request regardless of network location

Zero Trust mandates continuous verification of every access request through strong identity validation and authorization, regardless of network origin.

What is a directory service in enterprise identity management?

Answer: A centralized database that stores, organizes, and provides access to user, group, and resource identity information

Directory services such as Active Directory or LDAP store and manage organizational identity data including user accounts, group memberships, and resource access policies.