CIAM CIAM Audit and Monitoring 1

Question 1

What is the primary purpose of IAM audit logs?

Accepted Answer

Providing a record of who accessed what resources and when for security and compliance

Answer

Improving application response time

Answer

Storing encrypted user passwords for recovery

Answer

Managing network bandwidth allocation

Question 2

What does 'non-repudiation' mean in the context of IAM auditing?

Accepted Answer

Ensuring a user cannot deny having performed an authenticated action

Answer

The ability to refuse an access request

Answer

Preventing unauthorized users from accessing the system

Answer

Encrypting audit logs to protect their contents

Question 3

What is a SIEM system in the context of IAM monitoring?

Accepted Answer

A Security Information and Event Management system that aggregates and correlates security logs

Answer

A Single Identity Entry Module for centralizing accounts

Answer

A password management system for enterprise users

Answer

A certificate authority for issuing identity certificates

Question 4

What is User Behavior Analytics (UBA) in IAM?

Accepted Answer

A security capability that detects anomalous user activity patterns indicating potential compromise

Answer

A marketing tool for analyzing user preferences

Answer

An employee productivity tracking and reporting system

Answer

A network traffic analysis and optimization tool

Question 5

What is the purpose of access certification campaigns?

Accepted Answer

Periodically verifying that users retain only appropriate access rights by having managers review and approve

Answer

Certifying IAM administrators through formal examinations

Answer

Issuing digital identity certificates to new employees

Answer

Testing IAM system performance under peak load conditions

Question 6

What is 'privileged user monitoring'?

Accepted Answer

Enhanced logging, session recording, and alerting for actions taken by administrative and privileged accounts

Answer

Monitoring only non-administrative standard users

Answer

A password complexity monitoring tool for admin accounts

Answer

Network-level monitoring of privileged user workstations