CISSP Crash Course - Identity Lifecycle

The video tutorial covers the identity lifecycle, focusing on creation, management, and deletion phases. It explains onboarding, managing permissions, and the importance of access reviews. The tutorial also discusses privilege escalation, highlighting the need for least privilege and security measures to prevent attacks.

What is the primary purpose of the identity creation phase in the lifecycle?

• To delete unnecessary accounts

• To onboard users and assign necessary privileges

• To review and update permissions

• To conduct periodic access reviews

Why is it recommended to disable accounts rather than delete them?

• To save storage space

• To allow for future reactivation

• To prevent unauthorized access

• To enable reviews and audits

What model should new roles follow to ensure security?

• Full access model

• Least privileged model

• Open access model

• Role-based access model

What is the main goal of periodic access reviews?

• To automate account management

• To create new user roles

• To ensure accounts comply with security policies

• To increase user privileges

What is vertical privilege escalation?

• Sharing permissions with another user

• Gaining higher permissions than currently held

• Reducing user privileges

• Gaining the same permissions with a different account