CIAM Identity Lifecycle 5

Question 1

Which metric is most useful for measuring the effectiveness of an organization's offboarding process?

Accepted Answer

Mean time to deprovision access after a termination event

Answer

Mean time to deprovision (MTTD) directly measures how quickly access is revoked after departure, indicating offboarding process efficiency and risk exposure.

Question 2

An employee moves from Finance to Engineering. Under least privilege, which action is most appropriate for their Finance system access?

Accepted Answer

Revoke Finance access immediately upon role change

Answer

Least privilege requires revoking access to systems no longer needed for the new role immediately upon the mover event, not retaining it as a convenience.

Question 3

What is the primary purpose of maintaining an identity audit trail throughout the lifecycle?

Accepted Answer

To provide accountability and evidence for compliance investigations

Answer

An identity audit trail records all lifecycle events—creation, modification, access grants, and deletion—to support compliance, forensic investigations, and accountability.

Question 4

Which approach best handles identity lifecycle management for a large organization with multiple HR systems across subsidiaries?

Accepted Answer

Use a meta-directory or identity broker to aggregate authoritative data from all HR sources

Answer

A meta-directory or identity broker aggregates identity data from multiple authoritative sources, providing a unified view for lifecycle management without requiring HR system consolidation.

Question 5

What is 'role mining' used for in identity lifecycle management?

Accepted Answer

Analyzing existing access patterns to discover and define roles

Answer

Role mining analyzes users' actual access entitlements to identify patterns and derive role definitions, supporting the transition to role-based access control.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Identity Lifecycle 5