IAM and PAM Features

A company needs to restrict access to confidential HR files only to HR managers. Which IAM feature should they use?

• Single Sign-On

• Role-Based Access Control (RBAC)

• Multi-Factor Authentication

• Least Privilege

A user leaves an organization, but their access to cloud resources remains active. What IAM feature could prevent this?

• Automated Deprovisioning

• Password Rotation

• Privileged Session Management

• Access Control Lists

A security team wants to monitor and record administrative activities performed on critical servers. Which PAM feature helps?

• Just-in-Time Access

• Privileged Session Monitoring

• Single Sign-On

• Role-Based Access Control

A user complains that they lost access to an application they used last week. What IAM process should be checked?

• User Provisioning

• Access Recertification

• Identity Federation

• Multi-Factor Authentication

A company is implementing least privilege access for IT admins. What should they configure?

• Grant admin rights to all employees

• Limit admin rights to necessary tasks

• Allow all users to change system settings

• Remove all admin privileges

A security audit reveals that passwords for privileged accounts haven’t changed in a year. What PAM feature should be enforced?

• Password Vaulting

• Privileged Access Rotation

• Access Logging

• Just-in-Time Access

An organization wants to allow employees to use their corporate credentials to access a third-party SaaS application. What should they implement?

• OAuth 2.0

• Single Sign-On (SSO)

• Multi-Factor Authentication

• Just-in-Time Access

A company wants to ensure that access permissions are reviewed every six months. Which control should be used?

• Identity Federation

• Access Certification

• Role-Based Access Control

• Continuous Authentication

A developer requires temporary access to a production database. Which method is best?

• Create a permanent privileged account

• Provide Just-in-Time (JIT) Access

• Share admin credentials

• Enable full access for all developers.

A company wants to protect against phishing attacks by adding an extra layer of authentication. What should they use?

• Password Complexity

• Multi-Factor Authentication (MFA)

• Single Sign-On

• Access Recertification