SC-100 Identity & Access Management Architecture

Question 1

What is the primary goal of identity and access management (IAM)?

Accepted Answer

To provide secure and controlled access to enterprise resources

Answer

The primary goal of Identity and Access Management (IAM) is to ensure that the right individuals have the right access to the right resources at the right time and for the right reasons. It provides secure and controlled access to enterprise resources by managing digital identities and enforcing access policies. This prevents unauthorized access while enabling legitimate users to perform their duties efficiently.

Question 2

What is role-based access control (RBAC)?

Accepted Answer

Access control based on user roles and responsibilities

Answer

Role-Based Access Control (RBAC) is an access control mechanism that grants or restricts system access to users based on their defined roles and responsibilities within an organization. Instead of assigning permissions directly to individual users, permissions are assigned to roles, and users are then assigned to appropriate roles. This simplifies management, improves security, and ensures users only have access necessary for their job functions.

Question 3

Why is multi-factor authentication (MFA) important?

Accepted Answer

It strengthens security by combining multiple authentication methods

Answer

Multi-Factor Authentication (MFA) significantly strengthens security by requiring users to provide two or more distinct verification factors to gain access to a resource. By combining something the user knows (like a password), something the user has (like a phone or token), and/or something the user is (like a fingerprint), MFA makes it much harder for unauthorized individuals to compromise accounts, even if one factor is stolen.

Question 4

Which component stores user identities and credentials?

Accepted Answer

Directory service

Answer

A directory service, such as Active Directory or Azure Active Directory, is a centralized repository that stores information about network resources, including user identities, credentials, and group memberships. It provides authentication and authorization services, allowing users to log in and access resources across the network. This centralizes identity management and ensures consistent access policies.

Question 5

What does 'least privilege' mean in IAM?

Accepted Answer

Granting minimal access to users to reduce risk

Answer

The principle of 'least privilege' dictates that users, programs, or processes should be granted only the minimum necessary permissions to perform their legitimate functions. This minimizes the potential damage if an account is compromised or misused, limiting an attacker's lateral movement and impact. It is a fundamental security best practice in Identity and Access Management (IAM).

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

(SC-100) Microsoft Cybersecurity Architect Expert Practice Test

SC-100 Identity & Access Management Architecture