CIAM CIAM Audit and Monitoring 1

Question 1

What is the primary purpose of IAM audit logs?

Accepted Answer

Providing a record of who accessed what resources and when for security and compliance

Answer

IAM audit logs capture authentication events, access decisions, and administrative changes to support incident investigations, compliance audits, and accountability.

Question 2

What does 'non-repudiation' mean in the context of IAM auditing?

Accepted Answer

Ensuring a user cannot deny having performed an authenticated action

Answer

Non-repudiation ensures that users cannot deny performing actions by providing cryptographically linked evidence tying actions to their authenticated identity.

Question 3

What is a SIEM system in the context of IAM monitoring?

Accepted Answer

A Security Information and Event Management system that aggregates and correlates security logs

Answer

A SIEM aggregates security logs from multiple sources, correlates events using rules and analytics, and provides real-time alerting for potential security incidents including IAM anomalies.

Question 4

What is User Behavior Analytics (UBA) in IAM?

Accepted Answer

A security capability that detects anomalous user activity patterns indicating potential compromise

Answer

UBA applies machine learning to establish baseline behavior patterns for each user and alerts when deviations occur, helping detect compromised accounts and insider threats.

Question 5

What is the purpose of access certification campaigns?

Accepted Answer

Periodically verifying that users retain only appropriate access rights by having managers review and approve

Answer

Access certification campaigns periodically require managers or system owners to review and confirm that each user's access rights remain appropriate for their current role.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM CIAM Audit and Monitoring 1