CIAM Governance and Compliance 4

Question 1

Which governance metric measures the percentage of user accounts that have completed a scheduled access review within the required timeframe?

Accepted Answer

Certification completion rate

Answer

Orphan account rate

Answer

Provisioning cycle time

Answer

Role coverage ratio

Question 2

An IAM policy exception process should require which of the following before granting a temporary deviation from policy?

Accepted Answer

Documented business justification, risk acceptance, and a defined expiration date

Answer

Executive sponsorship only

Answer

Proof of compliance with all other policies

Answer

Sign-off from the internal audit team

Question 3

Which ISO standard specifically addresses information security management systems and is commonly used as an IAM governance framework reference?

Accepted Answer

ISO 27001

Answer

ISO 9001

Answer

ISO 31000

Answer

ISO 22301

Question 4

A 'ghost account' in IAM governance terminology refers to:

Accepted Answer

An active account belonging to a user who no longer exists in the HR system

Answer

A service account with no assigned owner

Answer

A shared account used by multiple administrators

Answer

An account created for testing that was never deleted

Question 5

Which regulatory framework requires financial institutions to implement a written information security program covering administrative, technical, and physical safeguards?

Accepted Answer

GLBA Safeguards Rule

Answer

SOX

Answer

FERPA

Answer

COPPA

Question 6

During an IAM maturity assessment, 'ad hoc and reactive' access management describes which maturity level?

Accepted Answer

Level 1 – Initial

Answer

Level 3 – Defined

Answer

Level 4 – Managed

Answer

Level 2 – Repeatable

Question 7

Which control provides assurance that access granted to a user matches what was formally approved in the provisioning request?

Accepted Answer

Provisioning reconciliation

Answer

Recertification campaign

Answer

Role mining

Answer

Entitlement creep detection