CIMP CIMP Access Management & Authentication 2

Question 1

What is a Privileged Access Management (PAM) solution designed to protect?

Accepted Answer

High-risk administrative and service accounts with elevated permissions

Answer

PAM solutions vault, monitor, and control access to privileged accounts that have elevated permissions to critical systems, reducing the risk of insider threats and external attacks.

Question 2

Which protocol is most commonly used to enable federated identity across different organizations or cloud services?

Accepted Answer

SAML (Security Assertion Markup Language)

Answer

SAML is an XML-based open standard for exchanging authentication and authorization data between an identity provider and service providers across organizational boundaries.

Question 3

What is the purpose of an Identity Provider (IdP) in a federated identity model?

Accepted Answer

To authenticate users and issue identity assertions that are trusted by service providers

Answer

An IdP authenticates users and provides trusted assertions (tokens or assertions) about their identity and attributes to relying service providers.

Question 4

What does OAuth 2.0 primarily provide in modern access management?

Accepted Answer

A delegated authorization framework allowing applications to access resources on behalf of a user without sharing credentials

Answer

OAuth 2.0 enables third-party applications to obtain limited access to a user's resources without exposing the user's credentials, using access tokens.

Question 5

What is a 'session token' and why is proper management of it critical?

Accepted Answer

A temporary credential issued after authentication that authorizes access during an active session, which must be protected from theft

Answer

Session tokens represent an authenticated session; if stolen, they can allow attackers to impersonate the user without needing their credentials.

CIMP - Certified Identity Management Professional Practice Test

CIMP - Certified Identity Management Professional Practice Test

CIMP CIMP Access Management & Authentication 2