CIAM Technology and Tools 4

Question 1

Which IAM tool feature automatically removes access rights when an employee changes roles or departments?

Accepted Answer

Automated deprovisioning / role reconciliation

Answer

Automated deprovisioning or role reconciliation ensures access rights are adjusted when HR systems report a role change.

Question 2

In an IAM context, what is a 'connector' or 'agent' in provisioning tools?

Accepted Answer

A software component that translates IAM commands to a target system's native API

Answer

A connector or provisioning agent adapts the IAM platform's generic provisioning requests to the specific APIs or protocols of the target application.

Question 3

Which standard is specifically designed to enable SSO for web browser-based applications using XML-based assertions?

Accepted Answer

SAML 2.0

Answer

SAML 2.0 uses XML-based assertions passed via browser redirects to enable SSO between an identity provider and service providers.

Question 4

What is the role of a 'Policy Enforcement Point' (PEP) in an IAM architecture?

Accepted Answer

It intercepts requests and enforces authorization decisions received from a Policy Decision Point

Answer

The PEP sits in the request path, intercepts access requests, and enforces the allow/deny decision made by the Policy Decision Point (PDP).

Question 5

An IAM team wants to correlate identity events with security alerts in real time. Which tool integration is most relevant?

Accepted Answer

Integrating the IAM system with a SIEM platform

Answer

Integrating IAM with a SIEM allows security teams to correlate identity events (logins, permission changes) with broader security telemetry.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Technology and Tools 4