CASP+ Identity and Access Management

Question 1

What is the primary difference between authentication and authorization in an IAM framework?

Accepted Answer

Authentication verifies identity; authorization determines permissions

Answer

Authentication grants access; authorization verifies credentials

Answer

Authentication is for humans; authorization is for systems

Answer

Authentication uses passwords; authorization uses tokens

Question 2

Which protocol is primarily used for federated identity management and single sign-on across different organizations?

Accepted Answer

SAML

Answer

LDAP

Answer

RADIUS

Answer

Kerberos

Question 3

What is the primary purpose of SCIM (System for Cross-domain Identity Management)?

Accepted Answer

To automate user provisioning and deprovisioning across systems

Answer

To encrypt identity tokens during transmission

Answer

To provide multi-factor authentication services

Answer

To manage certificate lifecycles in PKI

Question 4

In a Zero Trust architecture, which set of principles governs access decisions?

Accepted Answer

Verify explicitly, use least-privilege access, assume breach

Answer

Trust but verify, least privilege, perimeter enforcement

Answer

Implicit trust, role-based access, network segmentation

Answer

Perimeter defense, group policy enforcement, periodic re-authentication

Question 5

Which access control model uses security labels and clearance levels to enforce access, commonly found in government environments?

Accepted Answer

Mandatory Access Control (MAC)

Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Attribute-Based Access Control (ABAC)

Question 6

What is the primary security risk of using shared accounts in an enterprise environment?

Accepted Answer

Inability to perform individual accountability and non-repudiation

Answer

Increased network bandwidth consumption

Answer

Higher software licensing costs

Answer

Reduced system performance due to concurrent logins

Question 7

What is the security purpose of a Privileged Access Workstation (PAW)?

Accepted Answer

To isolate privileged tasks from general-purpose computing to reduce attack surface

Answer

To provide faster processing for privileged administrative tasks

Answer

To encrypt all administrative communications end-to-end

Answer

To automate privileged account creation and rotation