CIMP Identity Lifecycle Management 2

Question 1

What is the purpose of a 'reconciliation' process in identity lifecycle management?

Accepted Answer

Comparing authoritative identity data with accounts in target systems to detect discrepancies

Answer

Reconciliation compares the identity management system's authoritative data with actual accounts in connected systems to find and remediate inconsistencies.

Question 2

Which identity lifecycle event typically triggers immediate deprovisioning of all user access?

Accepted Answer

An employee is terminated

Answer

Termination requires immediate deprovisioning to eliminate security risk, as former employees should lose all system access on their last day.

Question 3

What does a 'role catalog' provide in an identity lifecycle management program?

Accepted Answer

A standardized set of predefined roles with associated entitlements mapped to job functions

Answer

A role catalog defines standardized roles aligned to job functions, each with a predefined set of entitlements, enabling consistent and auditable provisioning.

Question 4

An employee is on a leave of absence for 6 months. What is the recommended identity management approach?

Accepted Answer

Disable the account and preserve it for reactivation upon return

Answer

Disabling the account prevents unauthorized access during absence while preserving the identity record for seamless reactivation when the employee returns.

Question 5

Which metric is most useful for measuring the effectiveness of an organization's offboarding (leaver) process?

Accepted Answer

Average time from termination to full account deprovisioning

Answer

The time from termination to full deprovisioning measures how quickly security risk is eliminated when an employee leaves, making it the key offboarding metric.

CIMP - Certified Identity Management Professional Practice Test

CIMP - Certified Identity Management Professional Practice Test

CIMP Identity Lifecycle Management 2