CIMP CIMP Access Management & Authentication

Question 1

What is Multi-Factor Authentication (MFA) and why is it important in identity management?

Accepted Answer

Requiring two or more verification factors to prove identity, significantly reducing unauthorized access risk

Answer

Using multiple usernames for one account

Answer

A method of encrypting passwords using multiple algorithms

Answer

Logging in from multiple devices simultaneously

Question 2

Which authentication factor category does a fingerprint scan belong to?

Accepted Answer

Something you are

Answer

Something you know

Answer

Something you have

Answer

Something you do

Question 3

What is Single Sign-On (SSO) and what is its primary benefit?

Accepted Answer

An authentication method that allows users to log in once and access multiple applications without re-authenticating

Answer

A policy requiring users to have only one account

Answer

A system that limits users to one active session at a time

Answer

A password manager integrated with Active Directory

Question 4

In access management, what does 'adaptive authentication' mean?

Accepted Answer

A risk-based approach that adjusts authentication requirements based on context such as location, device, and behavior

Answer

Authentication that changes its algorithm monthly

Answer

Using adaptive learning to remember user passwords

Answer

Authentication that works across different operating systems

Question 5

What is a RADIUS server's role in access management?

Accepted Answer

It centralizes authentication, authorization, and accounting (AAA) for network access

Answer

It provides physical access control to server rooms

Answer

It manages SSL certificate issuance

Answer

It stores user password hashes

Question 6

What distinguishes authentication from authorization in the context of identity management?

Accepted Answer

Authentication verifies who you are; authorization determines what you are permitted to do

Answer

Authentication controls what you can do; authorization verifies who you are

Answer

They are interchangeable terms

Answer

Authorization occurs before authentication in all systems