#1
What does IAM stand for in the context of network security?
Identity and Access Management
ExplanationManaging user identities and controlling their access to resources.
#2
Which IAM component is responsible for authenticating users and granting access?
Authentication service
ExplanationVerifying user identities and allowing access to resources based on permissions.
#3
Which IAM component is responsible for managing user identities and their attributes?
Identity management
ExplanationOverseeing user data, authentication, and authorization throughout their lifecycle.
#4
Which of the following is a primary goal of Identity and Access Management (IAM) solutions?
Controlling user access to resources
ExplanationLimiting and managing user access to sensitive data and applications.
#5
What is the principle of least privilege in the context of IAM?
Restricting user access to the bare minimum necessary
ExplanationGranting users the minimum permissions they need to perform their tasks.
#6
Which protocol is commonly used for communication between IAM systems and applications?
SAML
ExplanationSecure Assertion Markup Language facilitates single sign-on and identity federation.
#7
What is the role of a provisioning system in Identity and Access Management?
Assigning access rights to users
ExplanationAutomating the process of granting and revoking access to resources.
#8
What security measure is commonly used for multi-factor authentication in IAM?
One-time passcodes
ExplanationTemporary codes sent to a user's device for additional authentication.
#9
Which authentication factor involves something a user knows?
Knowledge-based authentication
ExplanationAuthentication based on information only the user should know, such as passwords.
#10
What is the purpose of Single Sign-On (SSO) in IAM?
Allowing users to log in once and access multiple applications
ExplanationEnabling users to access multiple systems with a single set of credentials.
#11
What is the purpose of role-based access control (RBAC) in IAM?
Granting access based on job functions
ExplanationAssigning permissions based on predefined roles within an organization.
#12
In the context of IAM, what does the term 'entitlements' refer to?
User roles and permissions
ExplanationThe rights and privileges associated with a user's role or status.
#13
What is the concept of 'separation of duties' in IAM?
Ensuring that no single user has complete control over a process
ExplanationDividing responsibilities to prevent any individual from having unchecked power.