ISC2 CC Access Controls 3

Question 1

What is identity proofing?

Accepted Answer

Verifying that a person is who they claim to be before issuing credentials

Answer

Identity proofing is the process of verifying a person's real-world identity before establishing their digital identity and credentials.

Question 2

What is the purpose of account deprovisioning?

Accepted Answer

Removing access rights when a user no longer requires them

Answer

Deprovisioning is the process of revoking a user's access rights and disabling or deleting accounts when they are no longer needed.

Question 3

Why is a passphrase generally considered stronger than a typical short password?

Accepted Answer

A passphrase is a longer sequence of words that is harder to crack due to its length

Answer

A passphrase is a longer string of words that is generally easier to remember but much harder to crack due to its greater length.

Question 4

Which authentication factor category does a hardware token belong to?

Accepted Answer

Something you have

Answer

Hardware tokens are possession-based 'something you have' authentication factors that generate one-time codes.

Question 5

What is federated identity management?

Accepted Answer

Allowing identity credentials from one organization to be accepted by another trusted organization

Answer

Federated identity management allows users to use their identity credentials from one organization to access resources in another trusted organization or system.

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC - ISC2 Certified in Cybersecurity Practice Test

ISC2 CC Access Controls 3