CASE CASE Identity & Access Management

Question 1

What does the principle of least privilege require?

Accepted Answer

Granting users only the minimum permissions necessary to perform their job duties

Answer

Granting users maximum permissions to maximize productivity

Answer

Revoking all user access after 30 days automatically

Answer

Assigning administrator rights to all internal users

Question 2

What is Multi-Factor Authentication (MFA)?

Accepted Answer

Requiring two or more verification factors from different categories to authenticate

Answer

Using multiple passwords for a single account login

Answer

Simultaneously logging in from multiple trusted devices

Answer

Relying exclusively on biometric verification

Question 3

How does Role-Based Access Control (RBAC) manage permissions?

Accepted Answer

By assigning permissions to defined roles rather than to individual users

Answer

By granting access based on a user's physical location

Answer

By restricting access based on time of day

Answer

By authenticating users with biometrics exclusively

Question 4

What is federated identity in application security?

Accepted Answer

An identity management approach allowing authentication to span multiple trust domains

Answer

An identity shared between departments in one organization

Answer

A backup authentication mechanism for disaster recovery

Answer

A centralized password manager for enterprise users

Question 5

What is the role of an Identity Provider (IdP)?

Accepted Answer

To authenticate users and assert their identity to relying service providers

Answer

To store and encrypt all user application data

Answer

To encrypt all communications between services

Answer

To manage and enforce firewall access rules

Question 6

What does SAML stand for?

Accepted Answer

Security Assertion Markup Language

Answer

Secure Authentication Markup Language

Answer

Standard Access Management Layer

Answer

Secure API Management Login