IAM Quiz 5

What is the purpose of access reviews?

• To create new user accounts

• To ensure users have appropriate access to resources

• To delete inactive accounts

• To change user passwords

Which of the following is an example of a breach of IAM policy?

• Using a strong password

• Sharing login credentials with a colleague

• Enabling MFA

• Regularly updating access permissions

Which of the following is a common framework for managing IAM?

• ITIL

• NIST Cybersecurity Framework

• Agile

• SCRUM

What is 'contextual access management'?

• Access control based solely on user identity

• Access control that considers user context, such as location and device

• A process for creating user accounts

• A method for deleting inactive accounts

Which of the following is an example of a social engineering attack?

• Phishing

• SQL Injection

• Cross-Site Scripting (XSS)

• Distributed Denial of Service (DDoS)

What is the primary purpose of an identity management policy?

• To limit internet access

• To define how identities and access are managed within an organization

• To create new software

• To monitor network performance

Which IAM model allows users to access multiple applications with one set of credentials?

• Basic authentication

• Single Sign-On (SSO)

• Multi-Factor Authentication (MFA)

• Password-less authentication

What is 'self-service password reset'?

• A process that requires IT intervention for password changes

• A feature that allows users to reset their own passwords

• A method of storing passwords securely

• A way to encrypt passwords

What does SAML stand for?

• Security Assertion Markup Language

• Simple Authentication and Management Layer

• Secure Access Management Language

• Structured Authentication and Markup Language

What type of attack does IAM primarily help to prevent?

• SQL Injection

• Phishing

• Unauthorized access

• Denial of Service