CySA+ Test Identity and Access Management 2

Question 1

Which IAM solution is specifically designed to manage, monitor, and control access to privileged accounts such as domain administrators and service accounts?

Accepted Answer

Privileged Access Management (PAM)

Answer

PAM solutions provide vaulting, session recording, just-in-time access, and fine-grained controls over privileged accounts, which are the highest-value targets for attackers.

Question 2

An attacker obtains valid usernames and passwords from a data breach on one site and attempts to use those same credentials on a banking website. What type of attack is this?

Accepted Answer

Credential stuffing

Answer

Credential stuffing uses stolen username/password pairs from one breach to attempt access to other services, exploiting password reuse across multiple sites.

Question 3

OAuth 2.0 is primarily used to provide which of the following capabilities?

Accepted Answer

Delegated authorization allowing third-party apps to access resources on behalf of a user

Answer

OAuth 2.0 is an authorization framework that enables third-party applications to obtain limited access to a user's resources without exposing their credentials.

Question 4

Which authentication factor category does a fingerprint scanner represent?

Accepted Answer

Something you are

Answer

Biometric factors like fingerprints, retina scans, and facial recognition fall under 'something you are' — inherence factors tied to a user's physical characteristics.

Question 5

An organization implements a policy that grants employees elevated privileges only for the specific window of time they need to perform a task, then automatically revokes access. What IAM concept does this describe?

Accepted Answer

Just-in-Time (JIT) access

Answer

Just-in-Time access provisions elevated privileges for a defined time window only when needed, then automatically revokes them, minimizing the exposure window for privileged accounts.

CySA+ Practice Test Practice Test

CySA+ Practice Test Practice Test

CySA+ Test Identity and Access Management 2