CIAM Technology and Tools 5

Question 1

Which IAM technology is primarily used to manage access to network resources such as VPNs and Wi-Fi using a centralized authentication protocol?

Accepted Answer

RADIUS

Answer

RADIUS (Remote Authentication Dial-In User Service) is widely used to authenticate network access requests for VPNs, Wi-Fi, and network equipment.

Question 2

What is 'identity proofing' in a CIAM context, and which tool category supports it?

Accepted Answer

Verifying a user's claimed identity using authoritative sources, supported by ID verification / KYC platforms

Answer

Identity proofing verifies that a person is who they claim to be, typically using document scanning and biometrics via KYC (Know Your Customer) platforms.

Question 3

Which protocol extension allows an OAuth 2.0 server to provide user identity information to a client application in a signed JWT format?

Accepted Answer

ID Token via OpenID Connect

Answer

OpenID Connect extends OAuth 2.0 by adding an ID Token — a signed JWT containing user identity claims — returned alongside the access token.

Question 4

A CIAM platform must handle millions of concurrent user sessions for a consumer app. Which characteristic is most critical to evaluate?

Accepted Answer

Horizontal scalability and multi-region availability

Answer

Consumer-scale CIAM platforms must scale horizontally and operate across multiple regions to handle high concurrency and ensure availability.

Question 5

Which IAM capability detects when a user is granted access rights that, in combination, create a Segregation of Duties (SoD) conflict?

Accepted Answer

SoD conflict detection in IGA platforms

Answer

IGA platforms include SoD conflict detection engines that flag or prevent granting access combinations that violate separation-of-duties policies.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Technology and Tools 5