Cyber Security Identity and Access Management 2

Question 1

What does ABAC (Attribute-Based Access Control) use to make access decisions?

Accepted Answer

Attributes of the user, resource, and environment at the time of access

Answer

ABAC evaluates attributes such as user department, resource classification, and time of day to make dynamic access decisions.

Question 2

What is credential stuffing?

Accepted Answer

Using stolen username/password pairs from one breach to attempt login to other services

Answer

Credential stuffing automates login attempts using credentials leaked from one breach to compromise accounts on other services.

Question 3

What is the function of a directory service like Microsoft Active Directory?

Accepted Answer

Centrally manage user accounts, groups, and authentication policies

Answer

Active Directory centrally manages user identities, group memberships, and security policies across a Windows domain.

Question 4

What does JIT (Just-In-Time) provisioning provide in privileged access management?

Accepted Answer

Temporary elevated access granted only when needed and automatically revoked after use

Answer

JIT provisioning grants elevated privileges only for the duration needed for a task, minimizing persistent privileged access.

Question 5

What is the risk of orphaned accounts in access management?

Accepted Answer

They represent access paths that may be exploited since no active owner monitors them

Answer

Orphaned accounts (accounts of former employees or decommissioned services) remain active and can be exploited by attackers.

Cyber Security Practice Test