CCISO Identity & Access Management

Question 1

What is the primary objective of an Identity and Access Management (IAM) program within an enterprise?

Accepted Answer

Ensuring the right individuals access the right resources at the right times for the right reasons

Answer

IAM programs are designed to ensure appropriate access by verified identities to authorized resources, balancing security with operational efficiency.

Question 2

Which access control model assigns permissions based on an individual's job function or title within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC grants access rights based on defined roles, making it easier to manage permissions at scale by mapping users to roles rather than assigning individual rights.

Question 3

The principle of least privilege in IAM requires that users be granted:

Accepted Answer

Access only to the resources and data necessary to perform their assigned job functions

Answer

Least privilege minimizes the attack surface by limiting user permissions to only what is required for their specific role, reducing risk from insider threats and compromised accounts.

Question 4

Which authentication factor category includes biometric methods such as fingerprints and retinal scans?

Accepted Answer

Something you are

Answer

Biometric factors fall under 'something you are' because they are inherent physical or behavioral characteristics unique to the individual.

Question 5

What is the primary security benefit of implementing Single Sign-On (SSO) in an enterprise environment?

Accepted Answer

It reduces password fatigue and the risk of weak or reused passwords across multiple applications

Answer

SSO allows users to authenticate once and access multiple applications, reducing the number of passwords users must manage and lowering the risk of weak or reused credentials.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Identity & Access Management