CSC Identity and Access Management (IAM) Compliance 2

Question 1

What does identity lifecycle management encompass in an IAM compliance program?

Accepted Answer

The end-to-end management of user identities from creation through modification to deprovisioning

Answer

Identity lifecycle management covers the complete process of provisioning, modifying, and deprovisioning user accounts and access rights throughout an employee's tenure to maintain compliance.

Question 2

What is the primary compliance benefit of implementing Single Sign-On (SSO)?

Accepted Answer

It centralizes authentication and creates a unified audit trail across multiple systems

Answer

SSO centralizes authentication events into a single log source, making it easier to audit access across multiple systems and satisfying compliance requirements for access monitoring.

Question 3

What is the core IAM principle of the Zero Trust security model?

Accepted Answer

Never trust, always verify — every access request must be authenticated and authorized regardless of location

Answer

Zero Trust eliminates implicit trust based on network location, requiring continuous verification of every user and device for every access request, aligning with modern compliance mandates.

Question 4

What is Just-in-Time (JIT) access provisioning and why does it support compliance?

Accepted Answer

Providing elevated access only for the duration of a specific task and automatically revoking it afterward

Answer

JIT provisioning grants elevated permissions only when needed and revokes them immediately after, minimizing the window of standing privileged access and reducing compliance risk.

Question 5

Which access control model grants permissions based on security labels assigned to resources and user clearance levels?

Accepted Answer

Mandatory Access Control (MAC)

Answer

MAC enforces access based on predefined security classifications (labels) and user clearance levels, with no user discretion allowed, commonly used in government and defense environments.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC Identity and Access Management (IAM) Compliance 2