CIMP Identity Governance & Administration Flashcards

What is the primary goal of Identity Governance and Administration (IGA) in an enterprise?

Answer: Ensure the right individuals have appropriate access to the right resources

IGA ensures that access rights are properly assigned, reviewed, and enforced across all enterprise systems.

Which IGA process involves periodically reviewing user access rights to confirm they remain appropriate?

Answer: Access certification

Access certification (also called access reviews or attestation) is the process of formally validating that current user entitlements are still justified.

In IGA, what does 'role mining' refer to?

Answer: Analyzing existing access assignments to discover natural role groupings

Role mining analyzes existing entitlement data to identify patterns and define roles that reflect actual business functions.

What is a Separation of Duties (SoD) conflict in identity governance?

Answer: A situation where one user has access rights that together could enable fraud or error

SoD conflicts occur when a single user has permissions to perform two or more steps of a sensitive process that should require multiple people.

Which of the following best describes a 'Joiner-Mover-Leaver' (JML) process in IGA?

Answer: The lifecycle management of user identities from onboarding through role changes to offboarding

The JML process manages identity lifecycle events: provisioning access for new hires, adjusting access during role changes, and revoking access upon departure.

What is the 'least privilege' principle as applied in IGA?

Answer: Users should be granted only the minimum access rights necessary to perform their job functions

Least privilege limits each user's access rights to only what is required for their role, reducing the attack surface and risk of misuse.