CIAM Identity Governance 3

Question 1

Which IGA capability allows organizations to model 'what-if' scenarios before granting access?

Accepted Answer

Role simulation

Answer

Role simulation lets administrators preview the SoD impact and effective permissions of adding or removing a role before applying the change.

Question 2

How does identity governance support compliance with regulations like SOX and HIPAA?

Accepted Answer

By enforcing access controls and maintaining auditable entitlement records

Answer

IGA provides the audit trails, certification records, and policy enforcement needed to demonstrate that access to regulated data is appropriately controlled.

Question 3

A user transfers from Finance to Marketing. Which IGA process should automatically adjust their access?

Accepted Answer

Mover workflow

Answer

The Mover workflow handles internal transfers, revoking role-based access from the old position and provisioning access appropriate for the new one.

Question 4

What distinguishes a 'business role' from a 'technical role' in IGA?

Accepted Answer

Business roles map job functions to entitlement sets; technical roles map directly to system permissions

Answer

Business roles are logical groupings aligned to job functions (e.g., 'Financial Analyst'), while technical roles represent specific system-level permission sets.

Question 5

Which approach to role definition starts by analyzing existing user-to-entitlement assignments to discover implicit roles?

Accepted Answer

Bottom-up role mining

Answer

Bottom-up role mining uses data analytics on existing entitlement assignments to identify common access patterns and suggest role definitions.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Governance 3