CCD Identity & Access Management 3

Question 1

What does OAuth 2.0 primarily provide?

Accepted Answer

An authorization framework that allows third-party applications limited access to user resources

Answer

An authentication protocol that directly verifies user identity

Answer

A method for encrypting user passwords during transmission

Answer

A protocol for synchronizing user directories across organizations

Question 2

What is LDAP (Lightweight Directory Access Protocol) primarily used for in IAM?

Accepted Answer

Accessing and managing directory information services for user authentication and authorization

Answer

Encrypting passwords stored in user credential databases

Answer

Monitoring network traffic for unauthorized access attempts

Answer

Generating one-time passwords for multi-factor authentication systems

Question 3

In Zero Trust Architecture, which principle applies to identity verification?

Accepted Answer

Never trust, always verify — continuously authenticate and authorize every user and device

Answer

Trust all internal users by default and only verify external connections

Answer

Grant permanent access to users who successfully pass initial authentication

Answer

Restrict identity verification to users accessing classified or sensitive data only

Question 4

What is the purpose of an audit trail in Identity and Access Management?

Accepted Answer

To provide a chronological record of user activities and access events for accountability

Answer

To automatically revoke expired or inactive user accounts

Answer

To block suspicious login attempts in real time before they succeed

Answer

To encrypt sensitive user credentials stored in the directory service

Question 5

What is Attribute-Based Access Control (ABAC)?

Accepted Answer

A model that grants access based on attributes of users, resources, and environmental conditions

Answer

Granting access based solely on the user's organizational department

Answer

Assigning permissions based on predefined static role assignments only

Answer

An access model that requires biometric verification for every resource access request

Question 6

What is the main security risk associated with orphaned accounts?

Accepted Answer

They represent accounts of former users that remain active, potentially allowing unauthorized access

Answer

They consume excessive storage space in directory services over time

Answer

They cause performance degradation in authentication and directory systems

Answer

They prevent new accounts from being provisioned in the directory

Question 7

Which IAM concept ensures that no single user can complete a sensitive transaction without involvement from another authorized user?

Accepted Answer

Separation of duties (SoD)

Answer

Principle of least privilege

Answer

Just-in-time access provisioning

Answer

Access transparency logging