SE Identity and Access Management 3

Question 1

Which OAuth 2.0 grant type is recommended for server-to-server API authentication without user interaction?

Accepted Answer

Client Credentials

Answer

The Client Credentials grant allows a service to authenticate directly with the authorization server using its own credentials, without a user context.

Question 2

What does JIT (Just-In-Time) provisioning accomplish in identity management?

Accepted Answer

Automatically creates user accounts at the moment of first login via federation

Answer

JIT provisioning automatically creates accounts when a user first authenticates through a federated identity provider, reducing manual overhead.

Question 3

A user's account shows login activity from two geographically distant locations within minutes. What type of detection is this?

Accepted Answer

Impossible travel anomaly detection

Answer

Impossible travel detection flags authentication events from locations that could not be reached in the time elapsed between logins.

Question 4

Which concept describes separating administrative duties so no single person can complete a sensitive transaction alone?

Accepted Answer

Separation of duties (SoD)

Answer

Separation of duties requires multiple individuals to complete sensitive tasks, preventing fraud or error by any single actor.

Question 5

What is directory harvesting and how is it mitigated?

Accepted Answer

Exploiting LDAP to enumerate valid usernames; mitigated by returning identical responses for valid and invalid accounts

Answer

Directory harvesting enumerates valid email addresses or usernames by observing different server responses; using uniform responses prevents disclosure.

SE - Security Engineer Practice Test

SE - Security Engineer Practice Test

SE Identity and Access Management 3