SSCP Certification SSCP Identity and Access Management

Question 1

Which identity management concept ensures that a user's access rights are limited to only what is necessary for their job function?

Accepted Answer

Least privilege

Answer

Least privilege restricts user access rights to the minimum permissions required to perform their specific job duties.

Question 2

What type of access control model grants permissions based on organizational roles rather than individual user identities?

Accepted Answer

RBAC

Answer

Role-Based Access Control (RBAC) assigns permissions to roles, and users are then assigned to those roles based on their job function.

Question 3

In the context of SSCP, what is the primary purpose of a directory service such as LDAP?

Accepted Answer

Centralize identity and resource management

Answer

LDAP-based directory services provide a centralized repository for storing and managing user identities, credentials, and resource access information.

Question 4

Which authentication factor category does a hardware token that generates a one-time password belong to?

Accepted Answer

Something you have

Answer

A hardware token is a physical device the user possesses, making it a 'something you have' authentication factor.

Question 5

What is 'provisioning' in the context of identity and access management?

Accepted Answer

Creating and granting access rights to new user accounts

Answer

Provisioning is the process of creating user accounts and assigning the appropriate access rights and resources when a user joins an organization.

SSCP Certification Practice Test

SSCP Certification Practice Test

SSCP Certification SSCP Identity and Access Management