CIAM Identity Governance 2

Question 1

Which process ensures that users only retain access rights that are still required for their current job function?

Accepted Answer

Access certification

Answer

Access certification (also called access review or recertification) periodically validates that user entitlements remain appropriate for their current role.

Question 2

In identity governance, what does 'toxic combinations' refer to?

Accepted Answer

Conflicting permissions that violate SoD policy

Answer

Toxic combinations are pairs or groups of entitlements that, when held by the same user, create a Segregation of Duties (SoD) violation and increase fraud risk.

Question 3

A governance policy requires that no single employee can create vendors AND approve payments. This is an example of:

Accepted Answer

Separation of duties

Answer

Separation of duties (SoD) prevents a single individual from controlling a complete high-risk process, reducing fraud and error risk.

Question 4

What is the primary purpose of an identity governance 'fulfillment' workflow?

Accepted Answer

Automatically provisioning approved access requests

Answer

Fulfillment workflows execute the provisioning actions (granting or revoking access) after an access request has been approved.

Question 5

Which metric best measures the effectiveness of an access review campaign?

Accepted Answer

Percentage of certifications completed on time

Answer

Certification completion rate measures how thoroughly reviewers fulfilled their obligation to validate user access, directly indicating review effectiveness.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Governance 2