CCD Identity & Access Management 3

Question 1

What does OAuth 2.0 primarily provide?

Accepted Answer

An authorization framework that allows third-party applications limited access to user resources

Answer

OAuth 2.0 is an authorization framework that enables applications to obtain limited access to user accounts without exposing user credentials.

Question 2

What is LDAP (Lightweight Directory Access Protocol) primarily used for in IAM?

Accepted Answer

Accessing and managing directory information services for user authentication and authorization

Answer

LDAP is a protocol for accessing and maintaining distributed directory information services, commonly used to query user credentials and attributes.

Question 3

In Zero Trust Architecture, which principle applies to identity verification?

Accepted Answer

Never trust, always verify — continuously authenticate and authorize every user and device

Answer

Zero Trust requires continuous verification of every user and device regardless of network location, eliminating implicit trust for internal actors.

Question 4

What is the purpose of an audit trail in Identity and Access Management?

Accepted Answer

To provide a chronological record of user activities and access events for accountability

Answer

Audit trails record who accessed what, when, and what actions were performed, enabling forensic investigation and compliance verification.

Question 5

What is Attribute-Based Access Control (ABAC)?

Accepted Answer

A model that grants access based on attributes of users, resources, and environmental conditions

Answer

ABAC evaluates multiple attributes including user clearance, resource classification, and environmental conditions to make fine-grained access control decisions.

(CCD) Certified Cyber Defender Practice Test

(CCD) Certified Cyber Defender Practice Test

CCD Identity & Access Management 3