CSC Identity and Access Management (IAM) Compliance 2

Question 1

What does identity lifecycle management encompass in an IAM compliance program?

Accepted Answer

The end-to-end management of user identities from creation through modification to deprovisioning

Answer

The process of managing only physical ID badges for employees

Answer

A system for tracking employee anniversary dates

Answer

A method for managing software license assignments only

Question 2

What is the primary compliance benefit of implementing Single Sign-On (SSO)?

Accepted Answer

It centralizes authentication and creates a unified audit trail across multiple systems

Answer

It requires users to log in separately to each application, creating more audit events

Answer

It eliminates all passwords, removing authentication entirely from the environment

Answer

It is a backup authentication method used only when primary methods fail

Question 3

What is the core IAM principle of the Zero Trust security model?

Accepted Answer

Never trust, always verify — every access request must be authenticated and authorized regardless of location

Answer

Trust all users and devices located within the corporate network perimeter

Answer

Grant maximum access upfront to accelerate business operations

Answer

Only verify users during their initial onboarding to the organization

Question 4

What is Just-in-Time (JIT) access provisioning and why does it support compliance?

Accepted Answer

Providing elevated access only for the duration of a specific task and automatically revoking it afterward

Answer

Granting permanent access to all systems immediately upon a user's first login

Answer

Scheduling system access based on predetermined employee work shifts

Answer

Providing admin access just before scheduled system maintenance windows

Question 5

Which access control model grants permissions based on security labels assigned to resources and user clearance levels?

Accepted Answer

Mandatory Access Control (MAC)

Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Attribute-Based Access Control (ABAC)

Question 6

What is federated identity management and how does it support compliance?

Accepted Answer

A framework that enables identity information to be shared securely across organizational boundaries using trust relationships

Answer

A system where each application maintains its own completely separate user database

Answer

A method restricting access exclusively to federal government personnel

Answer

An approach requiring unique, separate credentials for every third-party vendor system

Question 7

Why is comprehensive access event logging considered a critical IAM compliance control?

Accepted Answer

It creates an audit trail documenting who accessed what resources and when, supporting forensic investigations and compliance audits

Answer

Access logging is not specifically required by any major compliance framework

Answer

It serves exclusively to monitor employee productivity metrics

Answer

It is only required for privileged administrator accounts, not standard users