CCP CCP Identity & Access Management

Question 1

Which IAM concept ensures that users are granted only the minimum permissions necessary to perform their job functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits user access rights to only what is strictly required for their role, reducing the attack surface.

Question 2

What protocol is most commonly used to enable Single Sign-On (SSO) across web applications using token-based assertions?

Accepted Answer

SAML 2.0

Answer

SAML 2.0 (Security Assertion Markup Language) is the predominant standard for SSO, exchanging XML-based authentication and authorization assertions between identity providers and service providers.

Question 3

An organization wants to verify a user's identity using something they know, something they have, and something they are. What is this called?

Accepted Answer

Multi-factor authentication (MFA)

Answer

Multi-factor authentication (MFA) combines two or more distinct authentication factors — knowledge, possession, and inherence — to strengthen identity verification.

Question 4

Which access control model assigns permissions based on organizational roles rather than individual user identities?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC groups users into roles and assigns permissions to those roles, simplifying administration and enforcing consistent access policies.

Question 5

What is the primary security risk associated with orphaned accounts in an enterprise directory?

Accepted Answer

They provide attackers with valid credentials to exploit

Answer

Orphaned accounts belong to former employees or unused services and represent active credentials that attackers can leverage for unauthorized access.

(CCP) Certified Cyber Professional Practice Test

(CCP) Certified Cyber Professional Practice Test

CCP CCP Identity & Access Management