CIMP CIMP Access Management & Authentication 1 — Questions and Answers
Question 1: What is Multi-Factor Authentication (MFA) and why is it important in identity management?
- Using multiple usernames for one account
- Requiring two or more verification factors to prove identity, significantly reducing unauthorized access risk (Correct answer)
- A method of encrypting passwords using multiple algorithms
- Logging in from multiple devices simultaneously
Correct answer: Requiring two or more verification factors to prove identity, significantly reducing unauthorized access risk
MFA combines something you know, have, or are to verify identity, making it much harder for attackers to gain access even if one factor is compromised.
Question 2: Which authentication factor category does a fingerprint scan belong to?
- Something you know
- Something you have
- Something you are (Correct answer)
- Something you do
Correct answer: Something you are
Biometrics such as fingerprints, iris scans, and facial recognition fall into the 'something you are' authentication factor category.
Question 3: What is Single Sign-On (SSO) and what is its primary benefit?
- A policy requiring users to have only one account
- An authentication method that allows users to log in once and access multiple applications without re-authenticating (Correct answer)
- A system that limits users to one active session at a time
- A password manager integrated with Active Directory
Correct answer: An authentication method that allows users to log in once and access multiple applications without re-authenticating
SSO reduces password fatigue and improves user experience by allowing one authenticated session to grant access to multiple connected applications.
Question 4: In access management, what does 'adaptive authentication' mean?
- Authentication that changes its algorithm monthly
- A risk-based approach that adjusts authentication requirements based on context such as location, device, and behavior (Correct answer)
- Using adaptive learning to remember user passwords
- Authentication that works across different operating systems
Correct answer: A risk-based approach that adjusts authentication requirements based on context such as location, device, and behavior
Adaptive authentication evaluates contextual signals to determine the risk level of a login attempt and increases authentication requirements when risk is elevated.
Question 5: What is a RADIUS server's role in access management?
- It provides physical access control to server rooms
- It centralizes authentication, authorization, and accounting (AAA) for network access (Correct answer)
- It manages SSL certificate issuance
- It stores user password hashes
Correct answer: It centralizes authentication, authorization, and accounting (AAA) for network access
RADIUS (Remote Authentication Dial-In User Service) centralizes AAA services for network devices, VPNs, and wireless access points.
Question 6: What distinguishes authentication from authorization in the context of identity management?
- Authentication controls what you can do; authorization verifies who you are
- Authentication verifies who you are; authorization determines what you are permitted to do (Correct answer)
- They are interchangeable terms
- Authorization occurs before authentication in all systems
Correct answer: Authentication verifies who you are; authorization determines what you are permitted to do
Authentication confirms identity (who are you?), while authorization determines access rights (what are you allowed to do?) after identity is established.
CIMP CIMP Access Management & Authentication 1
What is Multi-Factor Authentication (MFA) and why is it important in identity management?