CIAM Governance and Compliance 2

Question 1

Under GDPR, what is the maximum fine for a Tier 2 violation as a percentage of global annual turnover?

Accepted Answer

4%

Answer

2%

Answer

6%

Answer

10%

Question 2

Which IAM governance framework artifact maps business roles to IT entitlements?

Accepted Answer

Role catalog

Answer

Risk register

Answer

Access certification report

Answer

Policy exception log

Question 3

A SOC 2 Type II report differs from SOC 2 Type I primarily in that it:

Accepted Answer

Evaluates controls over a period of time rather than a point in time

Answer

Covers additional trust service criteria

Answer

Is intended for regulatory bodies rather than customers

Answer

Requires third-party penetration testing

Question 4

Which principle requires that access rights be reviewed and removed when no longer needed for a job function?

Accepted Answer

Least privilege

Answer

Segregation of duties

Answer

Need-to-know principle

Answer

Discretionary access control

Question 5

Under HIPAA, which entity must sign a Business Associate Agreement (BAA) with a covered entity?

Accepted Answer

Vendors who handle protected health information on behalf of the covered entity

Answer

Any vendor the covered entity pays

Answer

Vendors located outside the United States

Answer

Vendors providing cloud infrastructure only

Question 6

An organization discovers that a former employee's SSO account was not deprovisioned for 45 days after termination. Which governance control failure does this best represent?

Accepted Answer

Failed leaver workflow

Answer

Inadequate access certification

Answer

Missing joiner workflow

Answer

Insufficient role mining

Question 7

Which PCI DSS requirement specifically mandates restricting access to system components and cardholder data to only those individuals whose job requires such access?

Accepted Answer

Requirement 7

Answer

Requirement 3

Answer

Requirement 10

Answer

Requirement 12