Cyber Security Identity and Access Management 2

Question 1

What does ABAC (Attribute-Based Access Control) use to make access decisions?

Accepted Answer

Attributes of the user, resource, and environment at the time of access

Answer

Fixed roles assigned at account creation

Answer

Group membership in Active Directory

Answer

Physical badges and biometrics only

Question 2

What is credential stuffing?

Accepted Answer

Using stolen username/password pairs from one breach to attempt login to other services

Answer

Storing credentials in an unencrypted text file

Answer

Brute-forcing passwords using a dictionary list

Answer

Encoding passwords in Base64 before transmission

Question 3

What is the function of a directory service like Microsoft Active Directory?

Accepted Answer

Centrally manage user accounts, groups, and authentication policies

Answer

Host web applications for enterprise users

Answer

Encrypt inter-domain network traffic

Answer

Monitor network traffic for intrusion detection

Question 4

What does JIT (Just-In-Time) provisioning provide in privileged access management?

Accepted Answer

Temporary elevated access granted only when needed and automatically revoked after use

Answer

Permanent admin access for all IT staff

Answer

Automatic user account creation upon hire

Answer

Real-time password rotation for service accounts

Question 5

What is the risk of orphaned accounts in access management?

Accepted Answer

They represent access paths that may be exploited since no active owner monitors them

Answer

They consume excessive storage in the identity store

Answer

They generate excessive authentication log noise

Answer

They prevent new users from being created

Question 6

Which protocol is commonly used for federated authentication between web applications using XML assertions?

Accepted Answer

SAML 2.0

Answer

OAuth 2.0

Answer

OpenID Connect

Answer

RADIUS