CIAM Audit and Monitoring Flashcards
6 cards from real CIAM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CIAM Audit and Monitoring flashcards as text
What is 'role explosion' in IAM governance?
Answer: The uncontrolled proliferation of roles that makes access management complex and unmanageable
Role explosion occurs when an organization creates an excessive number of overly granular roles, making role management, auditing, and governance impractical.
What does a formal access rights review typically assess?
Answer: Whether current user permissions align with job responsibilities and the least privilege principle
Access rights reviews compare users' current permissions against their actual job role requirements, identifying excessive, unused, or otherwise inappropriate access rights.
What is 'continuous monitoring' in IAM?
Answer: Ongoing real-time analysis of security controls and user activity to detect threats and anomalies
Continuous monitoring provides persistent, real-time visibility into access activity and security control effectiveness, enabling rapid detection of anomalies and policy violations.
What is 'Privileged Session Management' (PSM)?
Answer: A capability that records, monitors, and controls sessions conducted by privileged users in real time
Privileged Session Management records all keystrokes and actions during privileged user sessions, enabling real-time monitoring, intervention, and forensic replay after incidents.
What is the purpose of an IAM security dashboard?
Answer: Providing real-time visibility into identity and access health, risk indicators, and compliance status
IAM dashboards consolidate key metrics such as failed logins, policy violations, orphan accounts, and certification status into a unified view for administrators.
What is the significance of 'time-stamping' in IAM audit logs?
Answer: It establishes the sequence and timing of events, which is critical for forensic investigation and compliance
Accurate timestamps in audit logs establish the precise sequence of events, which is essential for reconstructing incidents, proving compliance, and correlating events across systems.