CIAM Technology and Tools 2

Question 1

Which protocol does SCIM (System for Cross-domain Identity Management) use as its transport layer?

Accepted Answer

REST over HTTPS

Answer

SCIM uses RESTful APIs over HTTPS to automate user provisioning and deprovisioning across systems.

Question 2

A company wants to enforce that users can only log in from corporate-managed devices. Which IAM feature addresses this?

Accepted Answer

Device trust / device attestation

Answer

Device trust or device attestation verifies that a device meets security standards before granting access.

Question 3

Which tool category is specifically designed to discover and manage non-human identities such as service accounts and API keys?

Accepted Answer

Machine Identity Management (MIM)

Answer

Machine Identity Management tools are designed to discover, rotate, and govern non-human identities like service accounts and certificates.

Question 4

What is the primary purpose of a PAM (Privileged Access Management) vault?

Accepted Answer

Securely storing and rotating privileged credentials

Answer

A PAM vault stores privileged credentials centrally and can automatically rotate them to reduce the risk of credential theft.

Question 5

In the context of IAM, what does 'just-in-time (JIT) provisioning' mean?

Accepted Answer

Creating user accounts dynamically at the moment of first login

Answer

JIT provisioning creates or updates a user account automatically when the user first authenticates, often driven by SAML or OIDC assertions.

(CIAM) Certified Identity and Access Manager Practice Test