SC-400 Identity & Access Management

Question 1

What is the primary objective of Identity & Access Management (IAM)?

Accepted Answer

To ensure secure access to critical systems and data.

Answer

To monitor employee performance.

Answer

To improve employee productivity.

Answer

To manage financial transactions.

Question 2

What is Multi-Factor Authentication (MFA) in IAM?

Accepted Answer

A method that requires multiple forms of identification, like a password and a code.

Answer

A single password-based authentication method.

Answer

A method based solely on facial recognition.

Answer

A password-based system with no additional verification.

Question 3

What is Role-Based Access Control (RBAC) in IAM?

Accepted Answer

Assigning access based on job roles within the organization.

Answer

Assigning access based on individual user preferences.

Answer

Assigning access to all users equally.

Answer

Giving access based on employee tenure.

Question 4

What is the purpose of Identity Federation in IAM?

Accepted Answer

To allow users to access multiple systems with a single login.

Answer

To store user passwords for all systems.

Answer

To create new user identities for each system.

Answer

To track employee activities across systems.

Question 5

How does Single Sign-On (SSO) enhance IAM?

Accepted Answer

By enabling one login for accessing several systems and services.

Answer

By requiring multiple passwords for each system.

Answer

By restricting access to only one application.

Answer

By limiting access based on geographical location.

Question 6

Why is access auditing important in IAM?

Accepted Answer

It provides detailed logs for compliance and security audits.

Answer

It tracks performance metrics.

Answer

It improves system performance.

Answer

It monitors network traffic.

Question 7

What is the purpose of the least privilege principle in IAM?

Accepted Answer

To grant users access only to resources necessary for their tasks.

Answer

To provide unlimited access to all data.

Answer

To allow employees to manage their own access permissions.

Answer

To grant access based on tenure.

Question 8

Why is IAM integration with Active Directory crucial for security?

Accepted Answer

It centralizes user identity and access management.

Answer

It limits user access to specific IP addresses.

Answer

It manages only user passwords.

Answer

It limits access to physical systems.

Question 9

How can IAM improve compliance with regulations?

Accepted Answer

By enforcing access controls and maintaining logs for audits.

Answer

By allowing unrestricted access to sensitive data.

Answer

By limiting the need for compliance audits.

Answer

By restricting user access to non-sensitive data only.