CCD Identity & Access Management 1 — Questions and Answers
Question 1: What does the principle of least privilege state?
- Users should have maximum permissions for productivity
- Users should only have the minimum permissions necessary to perform their job functions (Correct answer)
- Administrators should share credentials with trusted staff
- All users should have equal access to all system resources
Correct answer: Users should only have the minimum permissions necessary to perform their job functions
The principle of least privilege limits user permissions to only what is required for their role, reducing the attack surface.
Question 2: Which of the following best describes Multi-Factor Authentication (MFA)?
- Using a single strong password for all systems
- Requiring authentication from two or more independent credential categories (Correct answer)
- Allowing biometric-only authentication for privileged users
- Using the same password across multiple systems with encryption
Correct answer: Requiring authentication from two or more independent credential categories
MFA requires users to verify identity using two or more factors from different categories such as something you know, have, or are.
Question 3: What is Role-Based Access Control (RBAC)?
- Granting access based on a user's physical location
- Assigning permissions based on individual behavioral attributes
- Granting users permissions based on their assigned organizational roles (Correct answer)
- Allowing users to define their own access rights dynamically
Correct answer: Granting users permissions based on their assigned organizational roles
RBAC assigns access rights based on predefined roles within an organization, simplifying access management and enforcement.
Question 4: What is Single Sign-On (SSO)?
- A method requiring users to log in separately to each application
- An authentication scheme allowing users to log in once and access multiple applications (Correct answer)
- A system that disables authentication after the first login attempt
- A protocol that shares plaintext passwords between different services
Correct answer: An authentication scheme allowing users to log in once and access multiple applications
SSO allows users to authenticate once and gain access to multiple systems without re-authenticating for each individual application.
Question 5: Which type of account typically has elevated privileges and is used to run automated processes or services?
- Guest account
- Standard user account
- Service account (Correct answer)
- Temporary contractor account
Correct answer: Service account
Service accounts are specialized accounts with elevated privileges used to run applications, background services, or automated processes.
Question 6: What is an Access Control List (ACL)?
- A list of all users registered in an organization's directory
- A list of permissions attached to an object specifying which subjects can access it and how (Correct answer)
- A log of all failed authentication attempts on a system
- A list of blocked IP addresses enforced by a firewall
Correct answer: A list of permissions attached to an object specifying which subjects can access it and how
An ACL is a set of rules that defines which subjects have which access rights to specific objects such as files or network resources.
Question 7: What is the primary purpose of Privileged Access Management (PAM)?
- To provide all employees with administrative rights by default
- To control and monitor access to critical systems by privileged users and accounts (Correct answer)
- To eliminate all administrator accounts from an organization
- To automate password resets for standard user accounts
Correct answer: To control and monitor access to critical systems by privileged users and accounts
PAM focuses on securing, controlling, and monitoring privileged accounts that have elevated access to critical infrastructure and systems.
CCD Identity & Access Management 1
What does the principle of least privilege state?