CIMP Identity Lifecycle Management

Question 1

Which term describes the process of automatically creating user accounts and assigning entitlements when an employee joins an organization?

Accepted Answer

Provisioning

Answer

Provisioning is the automated or manual process of creating accounts and granting appropriate access rights when a user onboards.

Question 2

The 'joiner-mover-leaver' model in identity lifecycle management refers to which three phases?

Accepted Answer

Hire, Transfer, Terminate

Answer

The joiner-mover-leaver model maps to hiring (joiner), role/department changes (mover), and termination (leaver) in an employee's lifecycle.

Question 3

What is the primary risk associated with orphaned accounts in an identity management system?

Accepted Answer

Unauthorized access by former employees or attackers

Answer

Orphaned accounts belong to users who no longer require access, creating a security gap that former employees or attackers could exploit.

Question 4

Which process ensures that user access rights remain accurate and aligned with current job roles over time?

Accepted Answer

Access certification/attestation

Answer

Access certification (attestation) is a periodic review process where managers confirm or revoke user entitlements to maintain least-privilege alignment.

Question 5

When an employee transfers from the finance department to the IT department, which identity lifecycle best practice should be applied?

Accepted Answer

Remove finance entitlements and grant IT entitlements

Answer

When a mover changes roles, old entitlements must be revoked and new ones granted to prevent accumulation of excessive privileges (privilege creep).

CIMP - Certified Identity Management Professional Practice Test

CIMP - Certified Identity Management Professional Practice Test

CIMP Identity Lifecycle Management