WorksheetsIAS 2 Identity and Access Management Q5
Total questions: 25
Worksheet time: 13mins
What is the purpose of Multi-Factor Authentication (MFA)?
A. To use multiple passwords for a single account
B. To require multiple forms of verification to increase security
C. To allow access from multiple devices
D. To manage multiple user accounts
What is the principle of least privilege?
A. Users have the maximum level of access
B. Users have no access rights
C. Users have the minimal level of access necessary to perform their job functions
D. Users have temporary access rights
Which of the following best describes Role-Based Access Control (RBAC)?
A. Access is based on the user's role within an organization
B. Access is determined by the user's location
C. Access is based on the user's hardware
D. Access is randomly assigned
What is a common use of a directory service in IAM?
A. To store and manage user identities and access privileges
B. To encrypt user data
C. To monitor network traffic
D. To backup data
What does the term 'authentication' refer to in IAM?
A. The process of monitoring user activities
B. The process of verifying the identity of a user
C. The process of encrypting data
D. The process of backing up data
Which of the following best describes 'authorization'?
A. The process of verifying user identity
B. The process of granting or denying access to resources
C. The process of encrypting user data
D. The process of monitoring network traffic
What is an Identity Provider (IdP) in federated identity management?
A. A service that authenticates and verifies user identities
B. A service that stores encrypted data
C. A service that monitors network traffic
D. A service that performs backups
What is a common risk associated with poor IAM practices?
A. Increased system performance
B. Unauthorized access to sensitive information
C. Reduced need for backups
D. Improved user experience
What is the purpose of provisioning in IAM?
A. To encrypt data
B. To create and manage user accounts and access rights
C. To monitor network traffic
D. To perform backups
What is the primary benefit of using Role-Based Access Control (RBAC)?
A. Simplifies the management of user permissions by assigning permissions to roles instead of individual users
B. Increases the number of required passwords
C. Reduces the need for encryption
D. Enhances data backup processes
What is the main function of an Identity Governance and Administration (IGA) system?
A. To encrypt data
B. To ensure compliance with policies and regulations regarding identity and access management
C. To manage network traffic
D. To perform system backups
Which protocol is commonly used for federated identity management?
FTP
SAML
SMTP
HTTP
Which of the following is NOT a component of IAM?
Authentication
Authorization
Accounting
Encryption
Which of the following is NOT a common authentication method?
Password
Biometric scan
CAPTCHA
Data compression
What does Single Sign-On (SSO) enable users to do?
Access multiple applications with one set of login credentials
Encrypt data with a single key
Backup data to a single location
Access one application with multiple sets of login credentials
Which of the following is an example of a directory service protocol?
LDAP
HTTP
FTP
SMTP
What is the purpose of an Access Control List (ACL)?
To list all users in a system
To specify which users or system processes are granted access to objects
To encrypt data
To monitor network traffic
Which type of access control is based on predefined rules and policies set by an organization?
Discretionary Access Control (DAC)
Mandatory Access Control (MAC)
Role-Based Access Control (RBAC)
Attribute-Based Access Control (ABAC)
Which of the following best describes 'Identity as a Service' (IDaaS)?
A cloud-based service for managing digital identities
A service for backing up data
A service for encrypting data
A network monitoring service
Which of the following is an example of a 'something you have' factor in MFA?
Password
Security token
Fingerprint
PIN
Which IAM framework includes standards such as OAuth, OpenID Connect, and SAML?
COBIT
ITIL
NIST
Federated Identity Management
Which of the following is an example of a 'something you know' factor in MFA?
Fingerprint
Password
Security token
Mobile phone
What is the primary goal of Identity and Access Management (IAM)?
To enhance user experience
To ensure that the right individuals have access to the right resources at the right times for the right reasons
To manage network traffic
To back up data
What is the main advantage of using Single Sign-On (SSO)?
Reduced administrative costs and improved user experience by requiring users to remember only one set of credentials
Increased complexity of user management
Enhanced data encryption
Increased network traffic
What does the term 'biometric authentication' refer to?
Using biological traits, such as fingerprints or facial recognition, to verify identity
Using passwords to verify identity
Using security questions to verify identity
Using hardware tokens to verify identity
