CIAM Compliance Standards 3

Question 1

Which NIST SP 800-53 control family directly governs identification and authentication requirements?

Accepted Answer

IA – Identification and Authentication

Answer

The IA control family in NIST SP 800-53 covers organizational identification and authentication policies, including multi-factor authentication.

Question 2

Under CCPA, which right allows California consumers to request that a business delete their personal information?

Accepted Answer

Right to Delete

Answer

CCPA's Right to Delete allows consumers to request deletion of their personal information collected by a business, subject to certain exceptions.

Question 3

ISO 27001 Annex A control A.9.2 specifically addresses which IAM process?

Accepted Answer

User access management (provisioning and deprovisioning)

Answer

ISO 27001 Annex A.9.2 covers user access management, including registration, deregistration, and review of access rights.

Question 4

A quarterly access review where managers certify their team's entitlements is best described as which compliance control?

Accepted Answer

User access recertification (UAR)

Answer

User Access Recertification (UAR) is a periodic review process where data owners or managers certify that access rights remain appropriate.

Question 5

Which regulation requires financial institutions to implement a comprehensive information security program and is enforced by the FTC?

Accepted Answer

GLBA Safeguards Rule

Answer

The Gramm-Leach-Bliley Act (GLBA) Safeguards Rule requires financial institutions to protect customer financial information through a written security program.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Compliance Standards 3