CCD Identity & Access Management

Question 1

What does the principle of least privilege state?

Accepted Answer

Users should only have the minimum permissions necessary to perform their job functions

Answer

The principle of least privilege limits user permissions to only what is required for their role, reducing the attack surface.

Question 2

Which of the following best describes Multi-Factor Authentication (MFA)?

Accepted Answer

Requiring authentication from two or more independent credential categories

Answer

MFA requires users to verify identity using two or more factors from different categories such as something you know, have, or are.

Question 3

What is Role-Based Access Control (RBAC)?

Accepted Answer

Granting users permissions based on their assigned organizational roles

Answer

RBAC assigns access rights based on predefined roles within an organization, simplifying access management and enforcement.

Question 4

What is Single Sign-On (SSO)?

Accepted Answer

An authentication scheme allowing users to log in once and access multiple applications

Answer

SSO allows users to authenticate once and gain access to multiple systems without re-authenticating for each individual application.

Question 5

Which type of account typically has elevated privileges and is used to run automated processes or services?

Accepted Answer

Service account

Answer

Service accounts are specialized accounts with elevated privileges used to run applications, background services, or automated processes.

(CCD) Certified Cyber Defender Practice Test