CIMP Identity Lifecycle Management 3

Question 1

What is the primary purpose of an identity lifecycle management policy?

Accepted Answer

To establish rules governing how identities are created, maintained, and removed throughout their existence

Answer

To document the technical architecture of the identity platform

Answer

To define password complexity and rotation requirements

Answer

To specify network segmentation for identity infrastructure

Question 2

Which concept ensures that a user's access rights are automatically adjusted when their job role changes in the HR system?

Accepted Answer

Dynamic role assignment driven by HR attribute changes

Answer

Static role assignment

Answer

Manual entitlement review cycles

Answer

Federated identity propagation

Question 3

When designing an identity lifecycle program, what is the significance of establishing an 'authoritative source' for identity data?

Accepted Answer

It designates the trusted system (e.g., HR) whose data drives all provisioning and deprovisioning decisions

Answer

It determines which system stores passwords

Answer

It identifies the system with the longest data retention period

Answer

It specifies which directory service holds group memberships

Question 4

What is the risk of delaying deprovisioning for a terminated employee by even 24 hours?

Accepted Answer

The former employee or a malicious actor may exploit the active account to access sensitive data

Answer

Increased directory synchronization errors

Answer

Audit logs may become corrupted

Answer

Provisioning workflows for new users may be delayed

Question 5

What does 'identity data synchronization' refer to in a lifecycle management context?

Accepted Answer

Keeping user attributes consistent and current across multiple connected systems and directories

Answer

Backing up identity records to a disaster recovery site

Answer

Encrypting identity data in transit between systems

Answer

Merging multiple identity providers into a single federation hub

Question 6

Which lifecycle management practice helps organizations demonstrate compliance during audits by showing who had access to what, and when?

Accepted Answer

Comprehensive provisioning and deprovisioning audit trails

Answer

Just-in-time provisioning

Answer

Role explosion reduction initiatives

Answer

Biometric authentication enrollment records

Question 7

What is 'role explosion' and why is it a concern in identity lifecycle management?

Accepted Answer

The proliferation of too many granular roles, making management complex and increasing the risk of improper access

Answer

A security incident where role permissions are maliciously escalated

Answer

The rapid growth of the user population requiring new roles

Answer

A failure mode where role-based provisioning grants excessive rights