SSCP Access Control & Identity Management 4

Question 1

Which of the following best describes a federated identity management system?

Accepted Answer

A framework that allows identity information to be shared across different security domains

Answer

Federated identity management enables trusted identity sharing across organizational boundaries using standards like SAML or OpenID.

Question 2

A user's account is automatically locked after three failed login attempts. What type of control is this?

Accepted Answer

Preventive control

Answer

Account lockout is a preventive control that stops brute-force attacks before unauthorized access occurs.

Question 3

In public key infrastructure (PKI), what role does a Certificate Authority (CA) serve in identity management?

Accepted Answer

It issues and signs digital certificates that bind a public key to an identity

Answer

A CA vouches for the identity of certificate holders by digitally signing certificates that bind public keys to identities.

Question 4

Which provisioning process should be immediately triggered when an employee is terminated?

Accepted Answer

Account deprovisioning

Answer

Deprovisioning immediately disables or removes a terminated employee's accounts to prevent unauthorized access.

Question 5

What does 'context-aware authentication' consider when making an access decision?

Accepted Answer

Factors like location, device, time, and behavior alongside credentials

Answer

Context-aware authentication evaluates environmental and behavioral signals to assess risk and determine whether to grant access.

(SSCP) Security Operations and Administration Practice Test