CCP CCP Identity & Access Management

Question 1

Which IAM concept ensures that users are granted only the minimum permissions necessary to perform their job functions?

Accepted Answer

Least privilege

Answer

Separation of duties

Answer

Role explosion

Answer

Federated identity

Question 2

What protocol is most commonly used to enable Single Sign-On (SSO) across web applications using token-based assertions?

Accepted Answer

SAML 2.0

Answer

LDAP

Answer

RADIUS

Answer

Kerberos

Question 3

An organization wants to verify a user's identity using something they know, something they have, and something they are. What is this called?

Accepted Answer

Multi-factor authentication (MFA)

Answer

Dual-factor authentication

Answer

Federated authentication

Answer

Adaptive authentication

Question 4

Which access control model assigns permissions based on organizational roles rather than individual user identities?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 5

What is the primary security risk associated with orphaned accounts in an enterprise directory?

Accepted Answer

They provide attackers with valid credentials to exploit

Answer

They consume excessive storage

Answer

They cause authentication latency

Answer

They conflict with group policy objects

Question 6

Which IAM framework concept involves continuously verifying identity and device posture rather than trusting users once they are inside the network perimeter?

Accepted Answer

Zero Trust

Answer

Perimeter-based security

Answer

Defense in depth

Answer

Identity federation