CIMP Identity Lifecycle Management 2

Question 1

What is the purpose of a 'reconciliation' process in identity lifecycle management?

Accepted Answer

Comparing authoritative identity data with accounts in target systems to detect discrepancies

Answer

Resetting user passwords after expiration

Answer

Merging duplicate user profiles

Answer

Granting temporary elevated access for projects

Question 2

Which identity lifecycle event typically triggers immediate deprovisioning of all user access?

Accepted Answer

An employee is terminated

Answer

An employee requests parental leave

Answer

An employee receives a promotion

Answer

An employee changes office location

Question 3

What does a 'role catalog' provide in an identity lifecycle management program?

Accepted Answer

A standardized set of predefined roles with associated entitlements mapped to job functions

Answer

A list of all user passwords stored in encrypted form

Answer

A log of all provisioning and deprovisioning activities

Answer

A directory of all external identity providers

Question 4

An employee is on a leave of absence for 6 months. What is the recommended identity management approach?

Accepted Answer

Disable the account and preserve it for reactivation upon return

Answer

Permanently delete the account

Answer

Transfer the account ownership to the employee's manager

Answer

Downgrade access to read-only permissions

Question 5

Which metric is most useful for measuring the effectiveness of an organization's offboarding (leaver) process?

Accepted Answer

Average time from termination to full account deprovisioning

Answer

Number of accounts provisioned per day

Answer

Password complexity score across the organization

Answer

Number of self-service requests completed monthly

Question 6

What is 'birthright access' in the context of identity provisioning?

Accepted Answer

The baseline set of entitlements automatically granted to all new users upon joining

Answer

Access granted based on seniority within the organization

Answer

Access rights inherited from a manager's account

Answer

Emergency access granted during a crisis event

Question 7

In identity lifecycle management, what is a 'Joiner' workflow typically initiated by?

Accepted Answer

An HR system event such as a new hire record being created

Answer

A help desk ticket submitted by the new employee

Answer

A manager manually requesting access through the IGA portal

Answer

A security team review of pending access requests