CCISO Identity & Access Management 2

Question 1

Multi-Factor Authentication (MFA) requires users to present verification from at least how many distinct authentication factor categories?

Accepted Answer

Two or more factors from different categories

Answer

MFA requires at least two distinct factor categories (e.g., something you know plus something you have), making authentication significantly more resistant to credential theft.

Question 2

Which access control model makes access decisions based on data classification labels and user security clearances assigned by a central authority?

Accepted Answer

Mandatory Access Control (MAC)

Answer

MAC uses centrally controlled sensitivity labels on objects and clearance levels on subjects, with access determined by policy rather than owner discretion—commonly used in government environments.

Question 3

Identity federation in the context of IAM refers to:

Accepted Answer

Linking a user's identity across multiple distinct identity management systems to enable cross-domain access

Answer

Identity federation allows users authenticated in one domain to access resources in a separate trusting domain without needing separate credentials, enabling seamless cross-organizational access.

Question 4

Which open standard protocol is most commonly used to enable federated identity and authorization across different organizations and web applications?

Accepted Answer

SAML (Security Assertion Markup Language)

Answer

SAML is an XML-based open standard widely used for exchanging authentication and authorization data between an identity provider and a service provider in federated SSO scenarios.

Question 5

What is the role of an Identity Provider (IdP) in a federated identity architecture?

Accepted Answer

It authenticates users and provides identity assertions to service providers

Answer

An IdP authenticates users and issues identity assertions or tokens (such as SAML assertions or OAuth tokens) that service providers trust to grant access without requiring separate authentication.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Identity & Access Management 2