Identity and Access Management Quiz

What is the primary purpose of Identity and Access Management (IAM)?

• To back up organizational data

• To design IT infrastructure

• To control who can access what within a digital system

• To monitor employee work hours

In IAM, what does the term "identity" refer to?

• A user's job performance score

• The digital information that uniquely identifies a user

• The list of passwords a user owns

• The name of the IT department

Why is it important for identity and access to work together in IAM?

• So that users can access every system freely

• To avoid having to create user profiles

• Because identity confirms who a person is, and access determines what they can do

• To automatically generate usernames for all employees

What is one key reason organizations use IAM systems instead of managing access manually?

• It increases employee salaries

• It replaces all human decision-making

• It allows users to bypass passwords

• It automates access control and reduces security risks

What does the first "A" in the AAA framework stand for, and what does it involve?

• Authorization; allowing access to apps

• Authentication; verifying a user's identity

• Accounting; tracking financial activities

• Access; granting all system rights

Which best describes the Principle of Least Privilege?

• Allowing users access to everything at all times

• Giving users access only to the data they request

• Granting users only the access necessary for their job and nothing more

• Letting users decide their own access levels

What is the main goal of the "Accounting" part of AAA in IAM?

• To calculate user salaries

• To determine user satisfaction

• To log and monitor user activities for auditing and security purposes

• To manage financial reports

What does the Zero Trust model emphasize in an IAM strategy?

• Granting full trust to insiders only

• Always verifying users and devices, even those inside the network

• Trusting users who pass the authentication check

• Never allowing access to sensitive systems

What are the three main phases of the identity lifecycle in IAM?

• Creation, Promotion, Demotion

• Birth, Growth, Death

• Joiner, Mover, Leaver

• Sign-up, Login, Logout

Which of the following is considered a "Something You Have" authentication factor?

• Password

• Fingerprint

• Smartphone or security token

• Typing speed