CIAM Privileged Access 3

Question 1

A service account has been granted local administrator rights on 500 servers with the same password. Which PAM risk does this represent?

Accepted Answer

Lateral movement risk

Answer

Shared static credentials across many systems allow an attacker who compromises one system to move laterally across the entire environment.

Question 2

Which IAM concept ensures that privileged access rights are removed when an employee changes roles or leaves the organization?

Accepted Answer

Access recertification

Answer

Access recertification (also called access review) is the periodic process of validating and revoking unnecessary or outdated access rights.

Question 3

What is 'privilege creep' in identity and access management?

Accepted Answer

The gradual accumulation of access rights beyond what a user's current role requires

Answer

Privilege creep occurs when users accumulate permissions over time through role changes without prior access being removed.

Question 4

Which component of a PAM architecture acts as a proxy to enforce session control and policy without exposing target system credentials to end users?

Accepted Answer

Privileged access gateway

Answer

A privileged access gateway sits between the admin and the target system, injecting credentials and enforcing policy transparently.

Question 5

Under the NIST SP 800-53 framework, which control family primarily addresses privileged account management?

Accepted Answer

Access Control (AC)

Answer

The Access Control family, particularly AC-2 and AC-6, governs privileged account management and least-privilege enforcement.

(CIAM) Certified Identity and Access Manager Practice Test