CIMP Access Management & Authentication Flashcards
6 cards from real CIMP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 CIMP Access Management & Authentication flashcards as text
What is a Privileged Access Management (PAM) solution designed to protect?
Answer: High-risk administrative and service accounts with elevated permissions
PAM solutions vault, monitor, and control access to privileged accounts that have elevated permissions to critical systems, reducing the risk of insider threats and external attacks.
Which protocol is most commonly used to enable federated identity across different organizations or cloud services?
Answer: SAML (Security Assertion Markup Language)
SAML is an XML-based open standard for exchanging authentication and authorization data between an identity provider and service providers across organizational boundaries.
What is the purpose of an Identity Provider (IdP) in a federated identity model?
Answer: To authenticate users and issue identity assertions that are trusted by service providers
An IdP authenticates users and provides trusted assertions (tokens or assertions) about their identity and attributes to relying service providers.
What does OAuth 2.0 primarily provide in modern access management?
Answer: A delegated authorization framework allowing applications to access resources on behalf of a user without sharing credentials
OAuth 2.0 enables third-party applications to obtain limited access to a user's resources without exposing the user's credentials, using access tokens.
What is a 'session token' and why is proper management of it critical?
Answer: A temporary credential issued after authentication that authorizes access during an active session, which must be protected from theft
Session tokens represent an authenticated session; if stolen, they can allow attackers to impersonate the user without needing their credentials.
In PAM, what is 'just-in-time (JIT) access'?
Answer: Granting elevated privileges only for the duration needed to complete a specific task, then immediately revoking them
JIT access eliminates standing privileges by provisioning elevated access only when needed and for a limited time, drastically reducing the window of exposure.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- identitymanagementinstitute.org — Test delivery, fees, exam format, retake policy, renewal, eligibility, registration · verified Oct 2026