CIMP CIMP Identity Governance & Administration 2

Question 1

Which US federal regulation most directly drives the need for access certifications and SoD controls in publicly traded companies?

Accepted Answer

SOX (Sarbanes-Oxley Act)

Answer

SOX Section 404 requires management to assess internal controls over financial reporting, making IGA and SoD controls essential for compliance.

Question 2

What is an 'orphan account' in the context of identity governance?

Accepted Answer

An account that no longer has an associated active user

Answer

Orphan accounts are credentials that remain active after the associated user has left or changed roles, posing a significant security risk.

Question 3

In IGA, what is 'birthright access'?

Accepted Answer

The standard set of access rights automatically provisioned to all users in a given role upon hire

Answer

Birthright access defines the baseline entitlements every user in a particular role receives automatically as part of the standard onboarding process.

Question 4

What distinguishes a Role-Based Access Control (RBAC) model from an Attribute-Based Access Control (ABAC) model?

Accepted Answer

RBAC grants access based on job roles, while ABAC uses dynamic attributes like location, time, or device

Answer

RBAC assigns permissions to predefined roles, whereas ABAC makes dynamic access decisions based on multiple user, resource, and environmental attributes.

Question 5

Why is automated provisioning preferred over manual provisioning in large enterprises?

Accepted Answer

It reduces errors, speeds up access delivery, and ensures consistent policy enforcement

Answer

Automated provisioning enforces consistent policies, reduces human error, and dramatically shortens the time required to grant or revoke access at scale.

CIMP - Certified Identity Management Professional Practice Test

CIMP - Certified Identity Management Professional Practice Test

CIMP CIMP Identity Governance & Administration 2