CASP+ Identity and Access Management

Question 1

What is the primary difference between authentication and authorization in an IAM framework?

Accepted Answer

Authentication verifies identity; authorization determines permissions

Answer

Authentication confirms who a user is, while authorization determines what resources and actions the authenticated user is permitted to access.

Question 2

Which protocol is primarily used for federated identity management and single sign-on across different organizations?

Accepted Answer

SAML

Answer

SAML (Security Assertion Markup Language) is the primary protocol for federated identity, enabling SSO across organizational boundaries via XML-based assertions.

Question 3

What is the primary purpose of SCIM (System for Cross-domain Identity Management)?

Accepted Answer

To automate user provisioning and deprovisioning across systems

Answer

SCIM automates the exchange of user identity information between identity providers and service providers, streamlining provisioning and deprovisioning workflows.

Question 4

In a Zero Trust architecture, which set of principles governs access decisions?

Accepted Answer

Verify explicitly, use least-privilege access, assume breach

Answer

Zero Trust operates on verify explicitly (always authenticate and authorize), least-privilege access, and assume breach when designing security controls.

Question 5

Which access control model uses security labels and clearance levels to enforce access, commonly found in government environments?

Accepted Answer

Mandatory Access Control (MAC)

Answer

MAC enforces access using system-assigned sensitivity labels and user clearance levels, making it non-discretionary and common in high-security government systems.

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ - CompTIA Advanced Security Practitioner Practice Test

CASP+ Identity and Access Management