ISC2 CC Access Controls 3

Question 1

What is identity proofing?

Accepted Answer

Verifying that a person is who they claim to be before issuing credentials

Answer

Creating a new user account in a system

Answer

Testing the strength of a user's password

Answer

Monitoring user behavior patterns over time

Question 2

What is the purpose of account deprovisioning?

Accepted Answer

Removing access rights when a user no longer requires them

Answer

Creating backup accounts for users

Answer

Resetting user passwords periodically for compliance

Answer

Granting temporary elevated access to users

Question 3

Why is a passphrase generally considered stronger than a typical short password?

Accepted Answer

A passphrase is a longer sequence of words that is harder to crack due to its length

Answer

A passphrase is shorter but uses more special characters

Answer

A passphrase requires biometric confirmation to use

Answer

A passphrase changes automatically every 30 seconds

Question 4

Which authentication factor category does a hardware token belong to?

Accepted Answer

Something you have

Answer

Something you know

Answer

Something you are

Answer

Something you do

Question 5

What is federated identity management?

Accepted Answer

Allowing identity credentials from one organization to be accepted by another trusted organization

Answer

A government-issued digital identity system

Answer

Managing multiple passwords with a single vault

Answer

Creating identical user accounts across all systems

Question 6

What is the purpose of periodic access reviews?

Accepted Answer

To verify that user access rights remain appropriate and remove unnecessary permissions

Answer

To train users on new security tools

Answer

To test authentication systems for vulnerabilities

Answer

To create audit logs of login attempts