CIAM Foundational Frameworks 3

Question 1

Which IAM concept describes a situation where an employee accumulates access rights over time beyond what their current role requires?

Accepted Answer

Privilege creep

Answer

Privilege creep (or access creep) occurs when users retain permissions from previous roles that are no longer necessary for their current job function.

Question 2

According to the SABSA (Sherwood Applied Business Security Architecture) framework, which layer directly addresses operational security management?

Accepted Answer

Operational layer

Answer

SABSA's Operational layer addresses the people, processes, and procedures that run and manage the security solution in day-to-day operations.

Question 3

In XACML (eXtensible Access Control Markup Language), which component evaluates a policy request and returns an authorization decision?

Accepted Answer

Policy Decision Point (PDP)

Answer

The PDP evaluates access requests against applicable policies and returns permit, deny, or indeterminate decisions.

Question 4

Which concept in IAM governance defines the separation of identity lifecycle management responsibilities so no single administrator can create, enable, and assign privileges to an account alone?

Accepted Answer

Segregation of duties

Answer

Segregation of duties (SoD) splits critical IAM tasks among multiple individuals to prevent fraud and reduce insider threat risk.

Question 5

A company implements a system where access decisions are based on employee department, job title, and work location attributes. This is an example of which access control model?

Accepted Answer

Attribute-Based Access Control (ABAC)

Answer

ABAC evaluates multiple attributes of the subject, resource, and environment to make fine-grained access control decisions.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Foundational Frameworks 3