CCISO Identity & Access Management

Question 1

What is the primary objective of an Identity and Access Management (IAM) program within an enterprise?

Accepted Answer

Ensuring the right individuals access the right resources at the right times for the right reasons

Answer

Encrypting all data at rest and in transit

Answer

Monitoring network traffic for intrusions

Answer

Managing software licensing and asset inventory

Question 2

Which access control model assigns permissions based on an individual's job function or title within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Mandatory Access Control (MAC)

Answer

Discretionary Access Control (DAC)

Answer

Attribute-Based Access Control (ABAC)

Question 3

The principle of least privilege in IAM requires that users be granted:

Accepted Answer

Access only to the resources and data necessary to perform their assigned job functions

Answer

Administrator rights to perform their duties efficiently

Answer

Read access to all company data for transparency

Answer

Full access during business hours and no access after hours

Question 4

Which authentication factor category includes biometric methods such as fingerprints and retinal scans?

Accepted Answer

Something you are

Answer

Something you know

Answer

Something you have

Answer

Somewhere you are

Question 5

What is the primary security benefit of implementing Single Sign-On (SSO) in an enterprise environment?

Accepted Answer

It reduces password fatigue and the risk of weak or reused passwords across multiple applications

Answer

It eliminates the need for any passwords across the enterprise

Answer

It automatically encrypts all user sessions

Answer

It prevents brute-force attacks on individual applications

Question 6

What is the purpose of conducting periodic user access reviews or access recertification campaigns?

Accepted Answer

To ensure that user access rights remain appropriate and remove access that is no longer needed

Answer

To train employees on new systems

Answer

To audit firewall configurations

Answer

To test the performance of IAM systems under load

Question 7

A Privileged Access Workstation (PAW) is primarily used to:

Accepted Answer

Perform high-risk administrative tasks in an isolated, hardened environment

Answer

Provide guest network access to visitors

Answer

Host public-facing web applications

Answer

Monitor employee productivity