CIAM Identity Lifecycle 4

Question 1

Which lifecycle phase is responsible for ensuring that a user's identity attributes remain accurate and current throughout their tenure?

Accepted Answer

Identity maintenance

Answer

Identity maintenance covers ongoing updates to attributes such as name, title, department, and contact information to keep identity data accurate over time.

Question 2

A contractor's account should ideally have which feature to enforce a natural offboarding without manual intervention?

Accepted Answer

Automatic expiration date aligned with contract end date

Answer

Setting an account expiration date tied to the contract end date ensures automatic disablement without relying on a manual process that could be missed.

Question 3

What is the function of a 'leaver' workflow in the JML (Joiner-Mover-Leaver) framework?

Accepted Answer

Revoking all entitlements and disabling accounts for departing users

Answer

The leaver workflow orchestrates the revocation of all access, disablement of accounts, and archival or deletion of identity data when a user departs.

Question 4

Which control helps prevent 'ghost accounts'—active accounts belonging to users who have left the organization?

Accepted Answer

Periodic access reconciliation against the HR system

Answer

Reconciling the IAM directory against the authoritative HR system on a scheduled basis detects accounts that should have been deprovisioned but weren't.

Question 5

In identity lifecycle management, what is a 'role explosion' risk?

Accepted Answer

An unmanageable proliferation of fine-grained roles that increases complexity

Answer

Role explosion occurs when organizations create too many granular roles, making role management, assignment, and certification unmanageable.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Lifecycle 4