CIAM Identity Lifecycle 3

Question 1

Which standard protocol is commonly used for automated provisioning and deprovisioning of identities across cloud services?

Accepted Answer

SCIM 2.0

Answer

SCIM (System for Cross-domain Identity Management) is the industry-standard protocol designed specifically for automating user provisioning across cloud applications.

Question 2

What is 'access creep' and why is it a concern in identity lifecycle management?

Accepted Answer

Accumulation of unnecessary privileges over time as roles change

Answer

Access creep occurs when users accumulate permissions from previous roles that are never revoked, violating least privilege and increasing breach risk.

Question 3

An access certification campaign is best described as:

Accepted Answer

A periodic review where managers confirm or revoke user entitlements

Answer

Access certification (or access review) is a recurring process where account owners or managers attest that users' current access is still appropriate.

Question 4

Which lifecycle event most commonly triggers a re-certification review of all existing user access?

Accepted Answer

A significant organizational restructuring or merger

Answer

Organizational restructuring or mergers can invalidate existing role structures, making a full access review necessary to ensure entitlements remain appropriate.

Question 5

In a federated identity model, who manages the authoritative lifecycle data for an external partner's employees?

Accepted Answer

The partner organization's own identity provider

Answer

In federation, the partner's own identity provider is authoritative for their employees' lifecycle data, reducing administrative burden on the relying party.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Lifecycle 3