CIAM Identity Lifecycle 2

Question 1

During the joiner process, which attribute is typically used as the authoritative source for creating a new digital identity in an IAM system?

Accepted Answer

HR system employee record

Answer

The HR system serves as the system of record and authoritative source for new hire data used to create digital identities.

Question 2

What is the primary risk of failing to deprovision access promptly when an employee resigns?

Accepted Answer

Orphaned accounts that may be exploited

Answer

Orphaned accounts from departed employees remain active attack surfaces that threat actors can exploit using stolen or guessed credentials.

Question 3

In identity lifecycle management, what distinguishes a 'mover' event from a 'joiner' event?

Accepted Answer

Mover events involve role or department changes for existing employees

Answer

A mover event occurs when an existing employee changes roles, departments, or locations, requiring access adjustments rather than new account creation.

Question 4

Which provisioning model automatically grants access based on a user's role assignment without requiring individual approval?

Accepted Answer

Role-based automated provisioning

Answer

Role-based automated provisioning assigns entitlements automatically when a role is assigned, reducing manual effort and provisioning delays.

Question 5

What is 'birthright access' in the context of identity lifecycle management?

Accepted Answer

A baseline set of permissions every new joiner receives automatically

Answer

Birthright access refers to the minimum set of entitlements provisioned automatically to all new employees regardless of their specific role.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Lifecycle 2