CCP CCP Identity & Access Management 2

Question 1

What is the purpose of a Privileged Access Workstation (PAW) in an enterprise IAM strategy?

Accepted Answer

To isolate administrative tasks on a hardened, dedicated device

Answer

A PAW is a dedicated, hardened workstation used exclusively for privileged administrative tasks to prevent credential theft and lateral movement.

Question 2

Which protocol allows network devices to centralize authentication, authorization, and accounting for remote access users?

Accepted Answer

RADIUS

Answer

RADIUS (Remote Authentication Dial-In User Service) centralizes AAA functions for network access, widely used for VPN and Wi-Fi authentication.

Question 3

What distinguishes OAuth 2.0 from OpenID Connect (OIDC)?

Accepted Answer

OAuth 2.0 is for authorization; OIDC adds an identity layer on top for authentication

Answer

OAuth 2.0 handles delegated authorization (granting access to resources), while OIDC extends it with an ID token to provide authentication and user identity information.

Question 4

Which concept in IAM separates duties so that no single user can complete a sensitive transaction alone, reducing fraud risk?

Accepted Answer

Separation of duties (SoD)

Answer

Separation of duties divides critical tasks among multiple individuals so that collusion is required to commit fraud or errors, serving as an internal control.

Question 5

A security team wants to ensure that privileged sessions are recorded and can be played back for audit purposes. Which tool category addresses this requirement?

Accepted Answer

Privileged Access Management (PAM) solution

Answer

PAM solutions provide session recording, keystroke logging, and playback capabilities for privileged accounts, supporting forensic investigation and compliance audits.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP CCP Identity & Access Management 2