Timedora
Free Practice Quiz Question List

2 Identity and Access Management Online Quiz Questions

Use this free practice quiz with 20 questions to review 2 Identity and Access Management, test your knowledge, and prepare for your next test or exam.

20 questions
01
True or false
1 point

True or false: Account lifecycle practices apply to nonhuman identities such as service accounts and automation accounts.

  1. A

    True

  2. B

    False

02
Choose one
1 point

A company gives employees access to payroll records according to their job duties by assigning them to a “payroll specialist” role. Which access-control model does this illustrate?

  1. A

    Access-control lists (ACLs)

  2. B

    Role-based access control (RBAC)

  3. C

    Attribute-based access control (ABAC)

03
Fill in the blank
1 point

After access is requested and approved, the account-management stage in which an identity is created and approved permissions are granted is called .

04
Written response
1 point

What IAM step determines what an authenticated entity is allowed to do with a particular resource?

05
True or false
1 point

True or false: Using two different passwords for an account counts as multifactor authentication.

  1. A

    True

  2. B

    False

06
Choose one
1 point

A file’s permissions are managed by a list that names specific users or groups and the actions each may perform. Which access-control approach is being used?

  1. A

    Role-based access control (RBAC)

  2. B

    Attribute-based access control (ABAC)

  3. C

    Access-control lists (ACLs)

07
Fill in the blank
1 point

When a person changes jobs or responsibilities, IAM staff should that person’s access before or when granting new permissions.

08
Choose all
1 point

Select all pairs that use two different authentication-factor categories.

  1. A

    A password and a PIN

  2. B

    A password and a hardware security key

  3. C

    A fingerprint and a device holding a cryptographic key

  4. D

    Two hardware security keys

09
Written response
1 point

A system permits a clinician to view a patient’s record only if the clinician is assigned to the care team and uses an approved device. Which access-control model does this illustrate?

10
Choose all
1 point

Select all practices that support responsible management of a service account or other nonhuman identity.

  1. A

    Assign the identity an accountable owner.

  2. B

    Give the identity broad administrator access by default.

  3. C

    Define the identity’s purpose.

  4. D

    Restrict its permissions to what it needs.

  5. E

    Protect its credentials and establish a process for rotation and retirement.

11
Choose one
1 point

A team wants to reduce the risk that employees will be tricked by fake sign-in pages. Which authentication method best fits that goal?

  1. A

    A code that the user manually enters from a message

  2. B

    A security key that binds authentication to the legitimate service

  3. C

    A password used on its own

12
Choose one
1 point

An organization is designing a sensitive process and wants to reduce the risk that one person can control it from beginning to end. Which safeguard best addresses this concern?

  1. A

    Give one person permanent administrator access to every system.

  2. B

    Allow each employee to approve their own access requests.

  3. C

    Divide the sensitive process so that one person does not control every step.

13
Open ended
1 point

A staff member only needs to read reports, while an application needs to retrieve data for a specific task. Explain how the principle of least privilege should guide the permissions granted to both, and why broad administrator access for the application would be inappropriate.

14
Choose one
1 point

A user signs in successfully to a company portal. The system then checks whether the user may view a particular payroll record. Which step makes that permission decision?

  1. A

    Authentication

  2. B

    Authorization

  3. C

    Provisioning

  4. D

    Deprovisioning

15
Choose one
1 point

A document specifies which named users and groups may read or edit it. Which access-control approach does this illustrate?

  1. A

    Role-based access control (RBAC)

  2. B

    Attribute-based access control (ABAC)

  3. C

    Access-control list (ACL)

  4. D

    Multifactor authentication (MFA)

16
Choose one
1 point

A company gives payroll permissions to the “payroll specialist” role and assigns employees to that role according to their duties. Which access-control model is being used?

  1. A

    Role-based access control (RBAC)

  2. B

    Attribute-based access control (ABAC)

  3. C

    Access-control list (ACL)

  4. D

    Multifactor authentication (MFA)

17
Choose one
1 point

A policy allows a clinician to view a patient record only if the clinician is assigned to the patient's care team and is using an approved device. Which access-control model best fits this policy?

  1. A

    Role-based access control (RBAC)

  2. B

    Attribute-based access control (ABAC)

  3. C

    Access-control list (ACL)

  4. D

    Multifactor authentication (MFA)

18
True or false
1 point

True or false: A service account should have an accountable owner, a defined purpose, restricted permissions, protected credentials, and processes for credential rotation and retirement.

  1. A

    True

  2. B

    False

19
Written response
1 point

When a person changes responsibilities, what should IAM staff do with permissions that are no longer necessary?

20
Written response
1 point

In the reporting-system example, which role approves the analyst's requested read-only access?