Technology and Tools Flashcards

Which protocol does SCIM (System for Cross-domain Identity Management) use as its transport layer?

Answer: REST over HTTPS

SCIM uses RESTful APIs over HTTPS to automate user provisioning and deprovisioning across systems.

A company wants to enforce that users can only log in from corporate-managed devices. Which IAM feature addresses this?

Answer: Device trust / device attestation

Device trust or device attestation verifies that a device meets security standards before granting access.

Which tool category is specifically designed to discover and manage non-human identities such as service accounts and API keys?

Answer: Machine Identity Management (MIM)

Machine Identity Management tools are designed to discover, rotate, and govern non-human identities like service accounts and certificates.

What is the primary purpose of a PAM (Privileged Access Management) vault?

Answer: Securely storing and rotating privileged credentials

A PAM vault stores privileged credentials centrally and can automatically rotate them to reduce the risk of credential theft.

In the context of IAM, what does 'just-in-time (JIT) provisioning' mean?

Answer: Creating user accounts dynamically at the moment of first login

JIT provisioning creates or updates a user account automatically when the user first authenticates, often driven by SAML or OIDC assertions.

Which IAM capability allows an administrator to review and approve or revoke user entitlements on a scheduled basis?

Answer: Access certification / access review

Access certification (or access review) is a periodic process where managers confirm whether users should retain their current access rights.

Which standard defines a common schema for representing user and group objects across identity systems?

Answer: SCIM 2.0

SCIM 2.0 defines a standardized schema and REST API for user and group provisioning across cloud-based systems.