Identity and Access Management Quiz

What is Identity and Access Management (IAM)?

• A framework of policies and technology that authenticates and authorizes access to applications, data, systems, and cloud platforms.

• A method to manually assign user privileges.

• A type of software used for data storage.

• A security measure for physical access control.

What does Privileged Access Management (PAM) focus on?

• Protecting privileged accounts.

• Managing user identities.

• Automating access control.

• Tracking user activities.

What are the benefits of IAM technologies?

• Greater control of user access.

• Increased manual processes.

• Higher risk of data breaches.

• Reduced efficiency in operations.

What is Mandatory Access Control (MAC)?

• A model that compares object's security designation with subject's clearance level.

• A model that allows owners to control access through ACLs.

• A model based on predefined roles.

• A model that restricts access based on operational rules.

What is an example of a biometric device?

• Fingerprint scanner.

• Smart card.

• Card reader.

• Access Control List.

What does Certificate-Based Authentication use?

• Digital certificates to prove identity.

• Usernames and passwords.

• Biometric data.

• Physical tokens.

What is the purpose of Directory Services?

• To centralize security for controlling access to network resources.

• To manage physical access control devices.

• To automate user identity management.

• To provide a framework for IAM.

What is the Lightweight Directory Access Protocol (LDAP)?

• A protocol for accessing directory services.

• A type of biometric authentication.

• A method for managing user identities.

• A framework for access control.

What does the schema define in LDAP?

• Tasks clients can and cannot perform while accessing directory.

• The form a directory query must take.

• How directory server will respond.

• All of the above.

What is the purpose of Secure LDAP?

• Prevents eavesdropping and man-in-the-middle attacks.

• Forces client and server to establish secure connection first.

• Closes the connection if it is interrupted.

• All of the above.