Mixed Deck — All CIMP Topics Flashcards

When facing an ethical dilemma, what is the recommended first step?

Answer: Identify all stakeholders affected and review applicable codes of conduct

The first step in resolving an ethical dilemma is to identify all affected stakeholders and review relevant codes of professional conduct for guidance.

What is the first step in the risk management process?

Answer: Risk identification — recognizing potential threats and vulnerabilities

Risk identification is the critical first step in risk management, involving systematic recognition and documentation of potential threats and vulnerabilities.

What does SWOT analysis evaluate?

Answer: Strengths, Weaknesses, Opportunities, and Threats

SWOT analysis is a strategic planning framework that evaluates internal Strengths and Weaknesses and external Opportunities and Threats.

What is the Zero Trust security model's core principle as it applies to access management?

Answer: Never trust, always verify — authenticate and authorize every request regardless of network location

Zero Trust assumes no implicit trust based on network location and requires continuous verification of identity, device health, and context for every access request.

How often should compliance procedures be reviewed and updated?

Answer: Regularly, and whenever regulations change or new risks are identified

Compliance procedures should be reviewed regularly and updated whenever regulations change, new risks emerge, or organizational changes occur.

Which process ensures that user access rights remain accurate and aligned with current job roles over time?

Answer: Access certification/attestation

Access certification (attestation) is a periodic review process where managers confirm or revoke user entitlements to maintain least-privilege alignment.

What is a 'session token' and why is proper management of it critical?

Answer: A temporary credential issued after authentication that authorizes access during an active session, which must be protected from theft

Session tokens represent an authenticated session; if stolen, they can allow attackers to impersonate the user without needing their credentials.

What should be done when strategic implementation encounters unexpected obstacles?

Answer: Assess the situation, adjust the plan as needed, and communicate changes to stakeholders

When obstacles arise during implementation, the appropriate response is to assess the situation, make necessary adjustments to the plan, and communicate changes to all affected stakeholders.

What is passwordless authentication, and which technology is commonly used to implement it?

Answer: Authentication that replaces passwords with alternatives like biometrics or hardware keys, commonly using the FIDO2/WebAuthn standard

Passwordless authentication eliminates password-related risks by using FIDO2/WebAuthn-based methods such as biometrics, passkeys, or hardware security keys.

What is 'continuous authentication' in modern access management?

Answer: Ongoing verification of user identity throughout a session by monitoring behavioral signals like typing patterns and mouse movements

Continuous authentication monitors user behavior throughout a session to detect anomalies that may indicate the session has been taken over by an unauthorized party.

Why is regular risk reassessment important?

Answer: Because the risk landscape changes as conditions, activities, and environments evolve

Regular risk reassessment is essential because risks are dynamic — new threats emerge, existing risks change in severity, and the effectiveness of controls may vary over time.

What distinguishes authentication from authorization in the context of identity management?

Answer: Authentication verifies who you are; authorization determines what you are permitted to do

Authentication confirms identity (who are you?), while authorization determines access rights (what are you allowed to do?) after identity is established.

Which authentication factor category does a fingerprint scan belong to?

Answer: Something you are

Biometrics such as fingerprints, iris scans, and facial recognition fall into the 'something you are' authentication factor category.

Which approach to compliance is considered most effective?

Answer: A proactive approach that integrates compliance into daily operations

A proactive compliance approach that integrates regulatory requirements into daily operations is most effective at preventing violations and maintaining standards.

What is an audit trail in the context of documentation?

Answer: A chronological record that allows tracing of changes and decisions back to their source

An audit trail is a chronological sequence of records that provides documentary evidence of activities, enabling any change or decision to be traced back to its source.

What distinguishes quality assurance from quality control?

Answer: QA is proactive and process-focused; QC is reactive and product-focused

Quality assurance is a proactive approach focused on preventing defects through process improvement, while quality control is reactive, focused on identifying defects in products.

What is 'privilege creep' in the context of identity lifecycle management?

Answer: The gradual accumulation of access rights beyond what a user's current role requires

Privilege creep occurs when users accumulate access permissions over time as roles change but old entitlements are never removed.

Which IGA process involves periodically reviewing user access rights to confirm they remain appropriate?

Answer: Access certification

Access certification (also called access reviews or attestation) is the process of formally validating that current user entitlements are still justified.

What role does an Access Management audit log play in a CIMP professional's responsibilities?

Answer: It provides a tamper-evident record of authentication events and access decisions used for forensic investigation and compliance reporting

Audit logs capture who accessed what, when, and from where, enabling security investigations, compliance audits, and detection of anomalous behavior.

What role does continuing education play in maintaining certification?

Answer: It ensures professionals stay current with evolving standards and practices

Continuing education is essential to maintaining certification as it ensures professionals remain current with industry developments and evolving standards.