CySA+ Identity and Access Monitoring Techniques

1. Which monitoring metric helps identify account compromise by tracking failed login attempts?

Mean time to detect (MTTD)

Account lockout threshold

Session duration

Login success rate

2. True or False: Monitoring user login times and geographic locations helps identify potential account compromise.

True

False

Submit

6. Which access control model provides the finest granularity for permission management?

Discretionary Access Control (DAC)

Mandatory Access Control (MAC)

Attribute-Based Access Control (ABAC)

Role-Based Access Control (RBAC)

7. What is the primary risk associated with service accounts that are not monitored?

Increased system performance overhead

Unauthorized access and lateral movement

Reduced application functionality

Higher licensing costs

8. True or False: User access reviews should be conducted annually to comply with security standards.

True

False

9. Which identity provider (IdP) protocol is most commonly used for enterprise SSO implementations?

SAML 2.0

RADIUS

Kerberos v4

TACACS

10. What is the primary goal of implementing conditional access policies?

Block all remote access attempts

Grant access based on risk assessment and context

Eliminate password requirements

Reduce the number of users in the directory

11. Which authentication factor is most vulnerable to phishing attacks?

Biometric fingerprint

Password

Hardware security key

FIDO2 token

12. True or False: OAuth 2.0 tokens should be stored in browser local storage for optimal security.

True

False

13. What does privilege escalation monitoring primarily detect?

Users gaining higher-level permissions than authorized

Users accessing public network resources

Legitimate password changes by administrators

Successful multi-factor authentication attempts

14. Which technique is used to detect abnormal user behavior within a network?

User and Entity Behavior Analytics (UEBA)

Port scanning

Packet sniffing

DNS enumeration

15. What is the primary benefit of role-based access control (RBAC) in monitoring user activities?

Simplifies auditing by grouping permissions by role

Prevents all unauthorized access attempts

Eliminates the need for access reviews

Automatically logs all user actions

16. True or False: Single sign-on (SSO) eliminates the need for monitoring individual application logins.

True

False

17. Which identity threat involves an attacker using stolen credentials to access resources?

Credential stuffing

Session hijacking

Account takeover

Token replay attack

18. What is the primary purpose of implementing multi-factor authentication (MFA)?

Reduce password complexity requirements

Increase the difficulty of unauthorized account access

Eliminate the need for password policies

Speed up user authentication processes

19. Which log type is most critical for detecting lateral movement within a network?

Application logs

Windows Event logs (Security channel)

Firewall logs

DNS query logs

20. What does SIEM stand for in the context of security monitoring?

Security Information and Event Management

System Integration and Error Monitoring

Secure Infrastructure Event Module

Session Integrity Encryption Module

CySA+ Identity and Access Monitoring Techniques Quiz

1. Which monitoring metric helps identify account compromise by tracking failed login attempts?

2.

What first name or nickname would you like us to use?

2. True or False: Monitoring user login times and geographic locations helps identify potential account compromise.

3. The ____ protocol is used for secure Kerberos authentication in Windows domain environments.

4. Implementing ____ ensures that no single user can perform critical administrative actions without oversight.

5. A successful security operations team monitors identity threats using ____ to detect real-time anomalies.

6. Which access control model provides the finest granularity for permission management?

7. What is the primary risk associated with service accounts that are not monitored?

8. True or False: User access reviews should be conducted annually to comply with security standards.

9. Which identity provider (IdP) protocol is most commonly used for enterprise SSO implementations?

10. What is the primary goal of implementing conditional access policies?

11. Which authentication factor is most vulnerable to phishing attacks?

12. True or False: OAuth 2.0 tokens should be stored in browser local storage for optimal security.

13. What does privilege escalation monitoring primarily detect?

14. Which technique is used to detect abnormal user behavior within a network?

15. What is the primary benefit of role-based access control (RBAC) in monitoring user activities?

16. True or False: Single sign-on (SSO) eliminates the need for monitoring individual application logins.

17. Which identity threat involves an attacker using stolen credentials to access resources?

18. What is the primary purpose of implementing multi-factor authentication (MFA)?

19. Which log type is most critical for detecting lateral movement within a network?

20. What does SIEM stand for in the context of security monitoring?