6 - Managing Identity and Access

What is the purpose of account management in an organization?

• To monitor employee attendance

• To restrict access to information systems

• To manage user passwords only

• To create, update, modify, and delete accounts tied to identities

Answer explanation

To create, update, modify, and delete accounts tied to identities

What type of accounts are usually limited in privileges and restricted from modifying sensitive data or systems?

• Computer and service accounts

• Guest accounts

• Privileged accounts

• User accounts

Answer explanation

User accounts are usually limited in privileges and restricted from modifying sensitive data or systems.

Which of the following is considered a best practice for grouping users by department?

• User-assigned permissions

• Group-based permissions

• Shared accounts

• Multiple accounts

Answer explanation

Group-based permissions are considered a best practice for grouping users by department as it allows for efficient management and control over access rights within the organization.

What is the purpose of a Password Policy in an organization?

• To prevent users from changing passwords

• To enforce the use of weak passwords

• To limit the number of accounts per user

• To specify requirements for password creation and management

Answer explanation

To specify requirements for password creation and management

Why is it important to have multiple accounts on the same system?

• To simplify account management

• To confuse users

• To reduce the number of users

• To increase security risks

Answer explanation

Having multiple accounts on the same system simplifies account management by allowing different levels of access and permissions for different users.

What is a common use case for shared accounts?

• Admin accounts for a group

• Temporary contractor accounts

• Standard user accounts

• Batch process accounts

Answer explanation

Admin accounts for a group are a common use case for shared accounts.

Which security control helps reduce confusion by naming accounts consistently?

• Standard naming conventions

• Onboarding/offboarding

• Access recertification

• Account maintenance

Answer explanation

Standard naming conventions help reduce confusion by naming accounts consistently, ensuring clarity and organization in security controls.

What is the purpose of credential managers in account management?

• To delete all account credentials

• To prevent users from accessing their accounts

• To automatically fill in forms with user names/passwords

• To store credentials in plain text

Answer explanation

To automatically fill in forms with user names/passwords

What does password complexity refer to?

• The frequency of password changes

• The types of characters used and the formatting of those characters

• The number of accounts per user

• The length of the password

Answer explanation

Password complexity refers to the types of characters used and the formatting of those characters, emphasizing the need for a variety of character types to enhance security.

Why is it important to perform regular permissions audits in account management?

• To increase the number of accounts

• To uphold least privilege

• To share account credentials

• To simplify account switching

Answer explanation

To uphold least privilege