What is the purpose of Multi-Factor Authentication (MFA)?

• • A. To use multiple passwords for a single account

• • B. To require multiple forms of verification to increase security

• • C. To allow access from multiple devices

• • D. To manage multiple user accounts

What is the principle of least privilege?

• • A. Users have the maximum level of access

• • B. Users have no access rights

• • C. Users have the minimal level of access necessary to perform their job functions

• • D. Users have temporary access rights

Which of the following best describes Role-Based Access Control (RBAC)?

• • A. Access is based on the user's role within an organization

• • B. Access is determined by the user's location

• • C. Access is based on the user's hardware

• • D. Access is randomly assigned

What is a common use of a directory service in IAM?

• • A. To store and manage user identities and access privileges

• • B. To encrypt user data

• • C. To monitor network traffic

• • D. To backup data

What does the term 'authentication' refer to in IAM?

• • A. The process of monitoring user activities

• • B. The process of verifying the identity of a user

• • C. The process of encrypting data

• • D. The process of backing up data

Which of the following best describes 'authorization'?

• • A. The process of verifying user identity

• • B. The process of granting or denying access to resources

• • C. The process of encrypting user data

• • D. The process of monitoring network traffic

What is an Identity Provider (IdP) in federated identity management?

• • A. A service that authenticates and verifies user identities

• • B. A service that stores encrypted data

• • C. A service that monitors network traffic

• • D. A service that performs backups

What is a common risk associated with poor IAM practices?

• • A. Increased system performance

• • B. Unauthorized access to sensitive information

• • C. Reduced need for backups

• • D. Improved user experience

What is the purpose of provisioning in IAM?

• • A. To encrypt data

• • B. To create and manage user accounts and access rights

• • C. To monitor network traffic

• • D. To perform backups

What is the primary benefit of using Role-Based Access Control (RBAC)?

• • A. Simplifies the management of user permissions by assigning permissions to roles instead of individual users

• • B. Increases the number of required passwords

• • C. Reduces the need for encryption

• • D. Enhances data backup processes