CSI Security Architecture & IAM 2

Question 1

Which IAM concept ensures that a user's access rights are automatically revoked when they change roles within an organization?

Accepted Answer

Privilege creep prevention through role recertification

Answer

Role recertification processes periodically review and revoke accumulated access rights that no longer match a user's current role, preventing privilege creep.

Question 2

In a Zero Trust Architecture, what is the primary function of a Policy Decision Point (PDP)?

Accepted Answer

Evaluating access requests against policy and issuing authorization decisions

Answer

The PDP evaluates each access request against defined policies and context attributes, then issues allow or deny decisions to the Policy Enforcement Point.

Question 3

An organization wants to federate identity between their on-premises Active Directory and a cloud SaaS provider. Which protocol is MOST appropriate?

Accepted Answer

SAML 2.0

Answer

SAML 2.0 is the standard protocol for federated identity across organizational boundaries, enabling single sign-on between enterprise identity providers and cloud SaaS applications.

Question 4

What distinguishes attribute-based access control (ABAC) from role-based access control (RBAC)?

Accepted Answer

ABAC evaluates multiple contextual attributes at runtime while RBAC grants access based on predefined roles

Answer

ABAC makes access decisions by evaluating combinations of user, resource, and environmental attributes at runtime, enabling much finer-grained control than static RBAC role assignments.

Question 5

Which security architecture pattern places authentication and authorization logic at the edge of the network, before traffic reaches backend services?

Accepted Answer

API gateway with OAuth 2.0 token validation

Answer

An API gateway acts as the perimeter enforcement point, validating OAuth 2.0 tokens and enforcing authorization policies before requests reach microservices or backend systems.

(CSI) Certified System Integrator Practice Test

(CSI) Certified System Integrator Practice Test

CSI Security Architecture & IAM 2