SSCP Access Control & Identity Management 5

Question 1

Which of the following is the BEST description of identity proofing?

Accepted Answer

The process of confirming that a person is who they claim to be before issuing credentials

Answer

Identity proofing is the initial verification process used to confirm a person's real-world identity before enrolling them in an identity system.

Question 2

What is the primary purpose of a Privileged Identity Management (PIM) solution?

Accepted Answer

To monitor, control, and audit the use of privileged accounts

Answer

PIM solutions manage and monitor privileged accounts to reduce risk from misuse of administrative credentials.

Question 3

A user requests access to a sensitive system, and the system automatically routes the request to the user's manager for approval before granting access. This is part of which process?

Accepted Answer

Access request and approval workflow

Answer

Access request and approval workflows ensure that access grants are reviewed and authorized by appropriate personnel before being applied.

Question 4

Which attack involves using a previously captured authentication credential to gain unauthorized access at a later time?

Accepted Answer

Replay attack

Answer

In a replay attack, an adversary captures and reuses a valid authentication message or token to impersonate a user.

Question 5

When implementing RBAC, which process involves defining and organizing job functions and their corresponding access permissions?

Accepted Answer

Role engineering

Answer

Role engineering is the process of defining roles, determining what access each role requires, and mapping users to appropriate roles.

(SSCP) Security Operations and Administration Practice Test

(SSCP) Security Operations and Administration Practice Test

SSCP Access Control & Identity Management 5