CIAM Technology and Tools 3

Question 1

An enterprise deploys a tool that analyzes user behavior baselines and flags anomalous access patterns. What category does this tool fall under?

Accepted Answer

User and Entity Behavior Analytics (UEBA)

Answer

UEBA tools use machine learning to establish behavioral baselines and detect anomalies that may indicate compromised accounts.

Question 2

Which component of a CIAM platform is responsible for managing the user registration and self-service profile update experience?

Accepted Answer

Customer-facing identity portal / self-service UI

Answer

The customer-facing identity portal handles self-registration, profile management, and consent collection for end consumers.

Question 3

What is the function of an OAuth 2.0 authorization server's 'token introspection' endpoint?

Accepted Answer

To allow resource servers to validate and inspect active tokens

Answer

Token introspection (RFC 7662) lets a resource server query the authorization server to determine whether a token is active and retrieve its metadata.

Question 4

In a federated identity model, which entity makes the authentication decision and asserts the user's identity to a relying party?

Accepted Answer

The Identity Provider (IdP)

Answer

The Identity Provider authenticates the user and issues assertions (e.g., SAML or OIDC tokens) to the relying party.

Question 5

Which PKI component is used to declare that a previously issued certificate should no longer be trusted before its expiration?

Accepted Answer

Certificate Revocation List (CRL) or OCSP

Answer

A CRL or OCSP provides revocation status so relying parties know whether a certificate has been invalidated before its natural expiry.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Technology and Tools 3