Cyber Security Identity and Access Management

Question 1

What is multi-factor authentication (MFA)?

Accepted Answer

Requiring two or more verification factors from different categories to authenticate

Answer

Using multiple passwords for a single account

Answer

Sharing one account across multiple users

Answer

Requiring an admin to approve every login attempt

Question 2

What is the purpose of Single Sign-On (SSO)?

Accepted Answer

Allow a user to authenticate once and gain access to multiple applications

Answer

Allow a user to have only one password across all systems

Answer

Restrict users to accessing a single application per session

Answer

Automatically log users out after 30 minutes of inactivity

Question 3

What does RBAC (Role-Based Access Control) grant permissions based on?

Accepted Answer

The user's assigned role within the organization

Answer

The user's IP address

Answer

The time of day the user logs in

Answer

The user's physical location

Question 4

What is an access token in OAuth 2.0 used for?

Accepted Answer

Authorizing an application to access resources on behalf of a user

Answer

Encrypting user passwords during transmission

Answer

Verifying the identity of the user at the token issuer

Answer

Generating one-time passwords for MFA

Question 5

What is the purpose of an Identity Provider (IdP) in federated identity management?

Accepted Answer

Authenticate users and issue identity assertions consumed by service providers

Answer

Store application data for connected services

Answer

Manage firewall rules for cloud applications

Answer

Generate encryption keys for TLS certificates

Question 6

What is a privileged access workstation (PAW) used for?

Accepted Answer

Provide a hardened, isolated machine for performing administrative tasks

Answer

Allow general employees to access cloud services

Answer

Monitor network traffic from admin accounts

Answer

Rotate service account passwords automatically