SSCP Certification SSCP Identity and Access Management 1 — Questions and Answers
Question 1: Which identity management concept ensures that a user's access rights are limited to only what is necessary for their job function?
- Separation of duties
- Least privilege (Correct answer)
- Need to know
- Role explosion
Correct answer: Least privilege
Least privilege restricts user access rights to the minimum permissions required to perform their specific job duties.
Question 2: What type of access control model grants permissions based on organizational roles rather than individual user identities?
- DAC
- MAC
- RBAC (Correct answer)
- ABAC
Correct answer: RBAC
Role-Based Access Control (RBAC) assigns permissions to roles, and users are then assigned to those roles based on their job function.
Question 3: In the context of SSCP, what is the primary purpose of a directory service such as LDAP?
- Encrypt user credentials
- Centralize identity and resource management (Correct answer)
- Monitor network traffic
- Perform vulnerability scans
Correct answer: Centralize identity and resource management
LDAP-based directory services provide a centralized repository for storing and managing user identities, credentials, and resource access information.
Question 4: Which authentication factor category does a hardware token that generates a one-time password belong to?
- Something you know
- Something you have (Correct answer)
- Something you are
- Somewhere you are
Correct answer: Something you have
A hardware token is a physical device the user possesses, making it a 'something you have' authentication factor.
Question 5: What is 'provisioning' in the context of identity and access management?
- Removing user accounts when employees leave
- Creating and granting access rights to new user accounts (Correct answer)
- Auditing existing user permissions
- Resetting forgotten passwords
Correct answer: Creating and granting access rights to new user accounts
Provisioning is the process of creating user accounts and assigning the appropriate access rights and resources when a user joins an organization.
Question 6: Which SSCP domain concept involves reviewing and confirming that user access rights remain appropriate over time?
- Access recertification (Correct answer)
- Privilege escalation
- Account lockout
- Single sign-on
Correct answer: Access recertification
Access recertification (or access review) is the periodic process of validating that users still require and appropriately hold their current access rights.
SSCP Certification SSCP Identity and Access Management 1
Which identity management concept ensures that a user's access rights are limited to only what is necessary for their job function?