CySA+ Test Identity and Access Management

Question 1

Which IAM principle ensures that users are granted only the minimum permissions necessary to perform their job functions?

Accepted Answer

Least privilege

Answer

The principle of least privilege limits user access rights to only what is strictly required for their role, reducing the attack surface if credentials are compromised.

Question 2

A security analyst notices that a terminated employee's account is still active in Active Directory two weeks after their departure. Which IAM process failed?

Accepted Answer

De-provisioning (off-boarding)

Answer

De-provisioning is the process of removing access rights when an employee leaves; failure to perform this step leaves orphaned accounts that can be exploited.

Question 3

Which access control model assigns permissions based on an employee's job function or title within an organization?

Accepted Answer

Role-Based Access Control (RBAC)

Answer

RBAC grants permissions based on predefined roles tied to job functions, making it easier to manage access at scale by assigning users to roles rather than individual permissions.

Question 4

An organization wants to allow employees to log in to multiple internal applications using a single set of credentials. Which technology best supports this requirement?

Accepted Answer

Single Sign-On (SSO)

Answer

SSO allows users to authenticate once and gain access to multiple applications without re-entering credentials, improving usability while centralizing authentication control.

Question 5

Which protocol is most commonly used to enable federated identity management between organizations and cloud service providers?

Accepted Answer

SAML 2.0

Answer

SAML 2.0 (Security Assertion Markup Language) is the industry-standard XML-based protocol for exchanging authentication and authorization data between identity providers and service providers.

CySA+ Practice Test Practice Test

CySA+ Practice Test Practice Test

CySA+ Test Identity and Access Management