CIMP Technology & Tools 5

Question 1

Which RADIUS capability makes it widely used for network access authentication?

Accepted Answer

Centralized AAA for VPN, Wi-Fi, and network devices

Answer

RADIUS provides centralized authentication, authorization, and accounting for network access.

Question 2

What is the key difference between TACACS+ and RADIUS?

Accepted Answer

TACACS+ separates authentication, authorization, and accounting and encrypts the full packet body

Answer

TACACS+ runs over TCP, decouples the AAA functions, and encrypts the whole body, favored for device administration.

Question 3

Which concept allows a user to maintain a single set of credentials across multiple systems, with each system still authenticating separately?

Accepted Answer

Same sign-on

Answer

Same sign-on uses identical credentials but requires re-authentication per system, unlike true SSO.

Question 4

A service account used by an application should ideally be managed how?

Accepted Answer

Vaulted with automated rotation and least privilege

Answer

Service accounts should be inventoried, vaulted, rotated, and limited to required permissions.

Question 5

Which technology uses attributes of the user, resource, and environment to make access decisions at runtime?

Accepted Answer

Attribute-based access control

Answer

ABAC evaluates policies over subject, resource, action, and environment attributes dynamically.

CIMP - Certified Identity Management Professional Practice Test