IAM Quiz: SSO, Federation & Provisioning Mastery

1. What is a primary advantage of role-based access control (RBAC)?

Simplifies permission management by grouping users with similar job functions

Eliminates the need for authentication

Allows all users the same level of access

Removes the requirement for audit logs

2. Which IAM concept ensures that users can only access resources necessary for their job?

Principle of least privilege

Maximum privilege access

Universal access policy

Unrestricted resource sharing

3. In Kerberos authentication, what does the 'ticket-granting ticket' (TGT) allow?

A user to request service tickets without re-entering credentials

Unlimited access to all network resources

Bypassing password requirements

Direct access to the internet

4. What is the purpose of identity governance in IAM?

Ensuring users have appropriate access and compliance with policies

Deleting all user accounts weekly

Preventing any user from logging in

Eliminating the need for password management

5. Which of the following best describes a trust relationship in federation?

An agreement allowing one organization to rely on another's identity verification

A physical connection between two servers

A requirement to use the same password everywhere

A guarantee that no security breaches will occur

6. In identity management, what does 'account lockout' prevent?

Brute force attacks by disabling accounts after failed login attempts

Users from accessing public websites

The use of any authentication method

Email communication between users

7. What is the primary function of a security token in authentication?

To prove the user's identity and grant access to resources

To encrypt all email messages

To block unauthorized websites

To monitor network bandwidth

8. Which protocol is often used for directory services and authentication?

LDAP

DNS

HTTP

SSL

9. What does attribute-based access control (ABAC) use to make access decisions?

User attributes, resource attributes, and environmental conditions

Only the user's job title

The current time of day only

Random selection algorithms

10. In OAuth 2.0, what is the 'authorization server' responsible for?

Issuing access tokens after verifying user credentials

Storing all user passwords in plain text

Blocking all incoming network traffic

Managing physical access to data centers

11. What is the primary benefit of Single Sign-On (SSO) in enterprise environments?

Users log in once and access multiple applications without re-entering credentials

It eliminates the need for password policies

It increases the number of authentication factors required

It removes the need for firewalls

12. Which authentication method combines something you know and something you have?

Multi-factor authentication

Single-factor authentication

Biometric authentication only

Passwordless authentication

13. In the context of IAM, what does 'access control' determine?

Who can access what resources and under what conditions

How fast data travels through the network

The physical location of servers

The brand of hardware used

14. What is OpenID Connect primarily used for?

Authentication and identity information sharing

Network packet filtering

Disk encryption

Application firewall configuration

15. Which standard allows secure assertion exchange in federated environments?

OAuth 2.0

SAML

Kerberos

RADIUS

16. What is the purpose of deprovisioning in identity management?

Removing user access when they leave the organization

Increasing password complexity requirements

Adding users to multiple groups simultaneously

Creating backup authentication methods

17. In a federated identity system, who is responsible for verifying a user's identity?

The identity provider (IdP)

The service provider only

The network administrator exclusively

The user's personal device

18. Which of the following is a key characteristic of identity provisioning?

Automated creation and management of user accounts

Continuous password changes every hour

Disabling all user accounts after login

Requiring biometric scanning for every action

19. What does federation enable in identity management?

Trust relationships between separate identity domains

Encryption of all network traffic

Elimination of all passwords

Automatic vulnerability scanning

20. Which protocol is commonly used to implement SSO in web applications?

SMTP

SAML 2.0

FTP

SNMP

IAM Quiz: Can You Master SSO, Federation & Provisioning?