CCD Identity & Access Management

Question 1

What does the principle of least privilege state?

Accepted Answer

Users should only have the minimum permissions necessary to perform their job functions

Answer

Users should have maximum permissions for productivity

Answer

Administrators should share credentials with trusted staff

Answer

All users should have equal access to all system resources

Question 2

Which of the following best describes Multi-Factor Authentication (MFA)?

Accepted Answer

Requiring authentication from two or more independent credential categories

Answer

Using a single strong password for all systems

Answer

Allowing biometric-only authentication for privileged users

Answer

Using the same password across multiple systems with encryption

Question 3

What is Role-Based Access Control (RBAC)?

Accepted Answer

Granting users permissions based on their assigned organizational roles

Answer

Granting access based on a user's physical location

Answer

Assigning permissions based on individual behavioral attributes

Answer

Allowing users to define their own access rights dynamically

Question 4

What is Single Sign-On (SSO)?

Accepted Answer

An authentication scheme allowing users to log in once and access multiple applications

Answer

A method requiring users to log in separately to each application

Answer

A system that disables authentication after the first login attempt

Answer

A protocol that shares plaintext passwords between different services

Question 5

Which type of account typically has elevated privileges and is used to run automated processes or services?

Accepted Answer

Service account

Answer

Guest account

Answer

Standard user account

Answer

Temporary contractor account

Question 6

What is an Access Control List (ACL)?

Accepted Answer

A list of permissions attached to an object specifying which subjects can access it and how

Answer

A list of all users registered in an organization's directory

Answer

A log of all failed authentication attempts on a system

Answer

A list of blocked IP addresses enforced by a firewall

Question 7

What is the primary purpose of Privileged Access Management (PAM)?

Accepted Answer

To control and monitor access to critical systems by privileged users and accounts

Answer

To provide all employees with administrative rights by default

Answer

To eliminate all administrator accounts from an organization

Answer

To automate password resets for standard user accounts