CISSP Identity and Access Management 2

Question 1

Which federation standard allows identity assertions to be passed between domains using XML-based tokens?

Accepted Answer

SAML 2.0

Answer

SAML 2.0 (Security Assertion Markup Language) uses XML-based assertions to communicate identity information between identity providers and service providers across domains.

Question 2

A user's access rights should be immediately revoked when they leave the organization. Which IAM process ensures this happens consistently?

Accepted Answer

De-provisioning workflows

Answer

De-provisioning workflows automate the removal of access rights, accounts, and credentials when a user's employment or role ends.

Question 3

Which access control model assigns permissions based on rules evaluated against environmental conditions such as time of day or location?

Accepted Answer

ABAC

Answer

Attribute-Based Access Control (ABAC) evaluates policies using attributes of the subject, resource, and environment — including contextual conditions like time or location.

Question 4

An organization wants to prevent a single administrator from having both the ability to create accounts and approve their own access requests. Which principle addresses this?

Accepted Answer

Segregation of duties

Answer

Segregation of duties (SoD) divides critical tasks between multiple people to prevent fraud and error by ensuring no single person controls an entire process.

Question 5

Which Kerberos component issues Ticket Granting Tickets (TGTs) after authenticating a user's credentials?

Accepted Answer

Key Distribution Center

Answer

The Key Distribution Center (KDC) contains the Authentication Server (AS) that validates credentials and issues TGTs used to request service tickets.

CISSP - Certified Information Systems Security Professional Practice Test

CISSP - Certified Information Systems Security Professional Practice Test

CISSP Identity and Access Management 2