CIAM CIAM Audit and Monitoring 2

Question 1

What is 'segregation of duties' (SoD) in IAM?

Accepted Answer

Ensuring no single person holds enough access rights to commit and conceal a fraudulent action alone

Answer

Segregation of Duties ensures that sensitive processes require involvement from multiple individuals by distributing the necessary access rights across different people.

Question 2

What is a 'toxic combination' in access management?

Accepted Answer

A set of access rights that together create an unacceptable security or fraud risk when held by one person

Answer

A toxic combination is a set of permissions that, when granted to the same individual, violates segregation of duties — for example, having both payment creation and payment approval rights.

Question 3

What does 'log integrity' mean in IAM auditing?

Accepted Answer

Protecting audit records from modification or deletion to preserve their evidentiary trustworthiness

Answer

Log integrity ensures audit records cannot be altered after creation, typically enforced through cryptographic controls, write-once storage, or tamper-evident log chains.

Question 4

What is the purpose of a recertification campaign in IAM?

Accepted Answer

Periodically requiring managers to review and reconfirm that team members' access rights remain appropriate

Answer

Recertification campaigns mandate that access rights be actively reconfirmed on a scheduled basis, rather than remaining in place indefinitely once granted.

Question 5

What is 'orphan account' detection in IAM?

Accepted Answer

Identifying active accounts that remain after the associated employee has left or changed roles

Answer

Orphan account detection identifies accounts that remain enabled after the associated user has been terminated or transferred, reducing the attack surface from stale credentials.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM CIAM Audit and Monitoring 2