Practice Test Geeks(CIAM) Certified Identity and Access Manager Practice Test
← All CIAM Flashcard Decks

Identity Governance Flashcards

7 cards from real CIAM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Identity Governance flashcards as text

  1. Which IGA capability allows organizations to model 'what-if' scenarios before granting access?

    Answer: Role simulation

    Role simulation lets administrators preview the SoD impact and effective permissions of adding or removing a role before applying the change.

  2. How does identity governance support compliance with regulations like SOX and HIPAA?

    Answer: By enforcing access controls and maintaining auditable entitlement records

    IGA provides the audit trails, certification records, and policy enforcement needed to demonstrate that access to regulated data is appropriately controlled.

  3. A user transfers from Finance to Marketing. Which IGA process should automatically adjust their access?

    Answer: Mover workflow

    The Mover workflow handles internal transfers, revoking role-based access from the old position and provisioning access appropriate for the new one.

  4. What distinguishes a 'business role' from a 'technical role' in IGA?

    Answer: Business roles map job functions to entitlement sets; technical roles map directly to system permissions

    Business roles are logical groupings aligned to job functions (e.g., 'Financial Analyst'), while technical roles represent specific system-level permission sets.

  5. Which approach to role definition starts by analyzing existing user-to-entitlement assignments to discover implicit roles?

    Answer: Bottom-up role mining

    Bottom-up role mining uses data analytics on existing entitlement assignments to identify common access patterns and suggest role definitions.

  6. In identity governance, what is the 'entitlement catalog'?

    Answer: A centralized, searchable inventory of all available permissions and resources

    The entitlement catalog provides a structured, business-friendly view of all permissions available for request, enabling self-service access management.

  7. Which governance control prevents a user from approving their own access request?

    Answer: Self-approval restriction

    Self-approval restrictions are a governance control that routes access requests to a different approver when the requester and approver would otherwise be the same person.