CCD Identity & Access Management 2

Question 1

What is federated identity management?

Accepted Answer

A framework allowing users to use the same identity across multiple organizations or domains

Answer

A system where each application manages its own user database independently

Answer

A method of assigning unique identities to network devices only

Answer

A process for revoking user access across all systems simultaneously

Question 2

What is the key difference between authentication and authorization?

Accepted Answer

Authentication verifies who a user is; authorization determines what the user is permitted to do

Answer

Authentication verifies what a user can do; authorization verifies who a user is

Answer

Both authentication and authorization refer to the same security process

Answer

Authorization always occurs before authentication in the access control process

Question 3

What is Just-In-Time (JIT) access provisioning?

Accepted Answer

Providing temporary, time-limited elevated privileges only when needed for a specific task

Answer

Granting permanent administrative access to all senior staff

Answer

Automatically removing all access rights outside of business hours

Answer

Assigning access rights based on a user's real-time geographic location

Question 4

Which protocol is commonly used for federated enterprise authentication using XML-based assertions?

Accepted Answer

SAML (Security Assertion Markup Language)

Answer

OAuth 2.0

Answer

OpenID Connect

Answer

RADIUS

Question 5

What is credential stuffing?

Accepted Answer

Using lists of breached username and password pairs to attempt unauthorized access to other services

Answer

Hiding credentials within encrypted configuration files

Answer

Brute-forcing passwords by trying every possible character combination

Answer

Physically stealing authentication tokens or smart cards from users

Question 6

In an IAM context, what is an Identity Provider (IdP)?

Accepted Answer

A service that creates, manages, and validates user credentials and issues identity assertions

Answer

A hardware device that generates one-time passwords for MFA

Answer

A network appliance that monitors and logs user authentication activity

Answer

A database storing organizational assets and their respective owners

Question 7

What is account enumeration and why is it a security concern?

Accepted Answer

A technique attackers use to discover valid usernames by analyzing application error messages

Answer

The auditing of privileged accounts for compliance; it is a beneficial process

Answer

A method to count all active user sessions on a network system

Answer

The sequential creation of account IDs during user provisioning