IAM Quiz

What is the policy-based centralized orchestration of user identity management and access control that helps support enterprise IT security and regulatory compliance while also allows organizations to not only define and enforce IAM policy, but also connect IAM functions

• identity program management

• Identity governance and administration (IGA) 

• Access management

• Privilege Access Management

A layered approach to securing data and applications where a system requires a user to present a combination of two or more credentials to verify a user's identity for login.

• Identity Verification

• Credential Management

• Multifactor Authentication

• Single Sign on

What is the concept of allowing users to select and use a third-party digital identity, such as a social (Facebook, for example) or a higher-assurance identity (such as a bank or government ID) to access multiple digital services. 

• Federated Identity

• Decentralized Identity

• Identity Proofing

• BYOI (Bring your own Identity) 

What would an appropriate analyst cart be for this Inquiry:

What is Gartner recommending to end users to build an identity program infrastructure? • What concerns are you hearing from end users that do not have IGA governance tools? • What vendors are you seeing in this space?

• David Collinson, Rebecca Archembault, Brian Guthrie, Nathan Harris

• Mike Kelley, Henrique Teixeira, Abhyuday Data

• Ant Allan, James Hoover

• David Collinson, Mike Kelly, Felix Gahetgens

What would be an appropriate analyst cart for a Diagnostics results call for the IT Score for IAM?

• Ant Allan, James Hoover David Collinson

• Henrique Teixeira, Felix Gahetrgens, Mike Kelley

• Rebecca Archembault, David, Collinson, Nathan Harris, Oscar Isaka 

• A-     James Hoover, Sagar Patel, A. Data

­­­­  ________­­­___  ensures that there is a real person behind a process and proves that they are who they claim to be.  This prevents anyone from carrying out a process on other people’s behalf without authorization, creating false identities, or committing fraud.

• Machine Identity

• Password Management

• Credentialing

• Identity Verification

What would an appropriate analyst cart be for this Inquiry:

What are the most important things to plan for a long-term PAM program? What are the key components of PAM? It can be interpreted by different people in different ways - I'd like to know the common definition, and a typical approach implementing PAM over time.

• Ant Allan, James Hoover, Michael Kelley

• Michael Kelley, Felix Gaehetgens, James Hoover, Oscar Isaka

• Nathan Harris, Brian Guthrie, Rebecca Archembault

• Abhyuday Data, Ray Wagner

With regards to passwordless authentication, which would be a form or inherence factor?

• Certificates, hardware tokens

• One time Passwords

• Biometrics, fingerprint, face scans

• CAPTCHA

_________________  is a method of restricting network access based on the roles of individual users within an enterprise and ensures employees access only information they need to do their jobs and prevents them from accessing information that doesn't pertain to them

• NAC

• RBAC

• ABAC

•  CIEM

True or False:  With regards to password management and LastPass breach requests we can offer a call with Michael Kelley or Ant Allan

• True

  Michael and Ant can discuss password management in a client call, then follow up with the canned email response

• False

  We should leverage the response HUB team to send the canned written response after we confirm with the client that they are fine to receive a written response that addresses their questions.