CSS CSS Identity & Access Management 2

Question 1

Which IAM concept involves automatically removing access rights when they are no longer needed?

Accepted Answer

Access certification and deprovisioning

Answer

Regular access reviews (certifications) and automated deprovisioning ensure that users who change roles or leave the organization do not retain unnecessary access.

Question 2

What is the difference between authentication and authorization in IAM?

Accepted Answer

Authentication verifies identity; authorization determines what an authenticated identity is permitted to do

Answer

Authentication confirms who you are, while authorization determines what resources and actions you are permitted to access once your identity is confirmed.

Question 3

What is a federated identity in the context of IAM?

Accepted Answer

An identity that is trusted and shared across multiple organizations or systems using a common standard

Answer

Federated identity allows users to authenticate with one organization's identity provider and access resources at a partner organization without creating separate accounts.

Question 4

Which attack targets authentication systems by using previously captured valid authentication tokens?

Accepted Answer

Pass-the-ticket / pass-the-hash attack

Answer

Pass-the-hash and pass-the-ticket attacks use stolen authentication tokens to authenticate as a victim without knowing the actual password.

Question 5

What is the security purpose of just-in-time (JIT) privileged access?

Accepted Answer

Grants elevated privileges only for the duration needed, then automatically revokes them

Answer

JIT access reduces the standing privilege attack surface by provisioning elevated rights only when requested and revoking them immediately after the task is complete.

(CSS) Certified Security Sentinel Practice Test

(CSS) Certified Security Sentinel Practice Test

CSS CSS Identity & Access Management 2