CSS CSS Identity & Access Management

Question 1

What is the principle of least privilege in identity and access management?

Accepted Answer

Users are granted only the minimum permissions necessary to perform their job functions

Answer

All users share a common administrator account

Answer

Access is granted by default and revoked when abused

Answer

Privileged accounts are never used for daily tasks

Question 2

What does multi-factor authentication (MFA) require beyond a username and password?

Accepted Answer

At least one additional verification factor such as a token, biometric, or push notification

Answer

A second username and password combination

Answer

An additional security question only

Answer

A hardware firewall device

Question 3

Which access control model grants permissions based on a user's job role rather than individual identity?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

Discretionary Access Control (DAC)

Answer

Mandatory Access Control (MAC)

Answer

Attribute-Based Access Control (ABAC)

Question 4

What is credential stuffing and how does it differ from brute-force attacks?

Accepted Answer

Credential stuffing uses stolen username/password pairs from breaches, while brute-force tries all possible combinations

Answer

Credential stuffing is slower than brute force

Answer

Brute force uses breached credentials; credential stuffing generates random passwords

Answer

Both attacks use the same technique

Question 5

What is the purpose of a privileged access workstation (PAW)?

Accepted Answer

A hardened, dedicated workstation used exclusively for privileged administrative tasks

Answer

A shared workstation for general office use

Answer

A virtual machine for testing malware

Answer

A remote desktop server for multiple users

Question 6

What does single sign-on (SSO) provide to enterprise users?

Accepted Answer

Access to multiple applications using one set of credentials authenticated once

Answer

A single password shared across all users

Answer

Elimination of all password requirements

Answer

Automatic privilege escalation for all users