CCISO Identity & Access Management 3

Question 1

Privileged Access Management (PAM) solutions are primarily deployed to:

Accepted Answer

Manage and monitor the use of accounts with elevated administrative rights across enterprise systems

Answer

PAM controls, monitors, and audits privileged account usage to reduce the risk of insider misuse or external attackers leveraging compromised administrator credentials.

Question 2

Access creep, a common IAM risk, occurs when:

Accepted Answer

Users accumulate more access rights over time than their current role requires, often due to role changes without access revocation

Answer

Access creep results from users retaining permissions from previous roles as they move through an organization, violating least privilege and increasing the organization's attack surface.

Question 3

Just-In-Time (JIT) access provisioning is an IAM strategy that:

Accepted Answer

Grants elevated or sensitive access only when needed for a specific task and revokes it immediately afterward

Answer

JIT access eliminates standing privileges by granting temporary, task-specific elevated access on demand, significantly reducing the window of exposure if an account is compromised.

Question 4

What is the key difference between authentication and authorization in the context of IAM?

Accepted Answer

Authentication verifies the identity of a user, while authorization determines what that verified identity is permitted to do

Answer

Authentication answers 'who are you?' by verifying identity credentials, while authorization answers 'what are you allowed to do?' by enforcing access control policies for the authenticated identity.

Question 5

Under the CCISO exam framework, which domain most directly encompasses Identity and Access Management as a core competency area?

Accepted Answer

Domain 3: Security Program Management & Operations

Answer

Domain 3 covers security program management and operations, which includes implementing and overseeing controls such as IAM as part of day-to-day security operations.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Identity & Access Management 3