Identity Management Provisioning & Deprovisioning Quiz

1. Which provisioning workflow ensures that access requests are reviewed and approved before implementation?

Self-service portal

Segregation of duties

Approval-based provisioning

Automated account generation

2. What is the term for the automated revocation of all access rights when an employee leaves the organization?

Account suspension

Access deprovisioning

Permission denial

Identity archiving

3. Which of the following best describes account lifecycle management in Identity Management (Security+)?

Only the process of creating new accounts

Managing user accounts from creation through termination

Storing passwords in a secure vault

Monitoring network traffic between users

4. True or False: Deprovisioning should only remove access to email but leave database permissions intact.

True

False

5. During provisioning, which mechanism ensures that a user's identity is verified before granting access?

Encryption

Authentication

Auditing

Archiving

6. What is a potential security vulnerability if deprovisioning is not automated?

Accounts may remain active longer than intended

Network latency increases

User passwords are automatically reset

Email servers crash

7. True or False: A directory service like Active Directory is used to manage user identities and access in provisioning workflows.

True

False

8. Which of these is a common compliance requirement for deprovisioning?

Documenting when access was revoked and by whom

Sending the former employee a thank-you gift

Deleting all backup records immediately

Allowing a grace period of six months before removal

9. In identity management, what does the principle of least privilege mean during provisioning?

Users receive only the minimum access needed for their role

All users receive the same level of permissions

Administrators have unlimited access to all systems

Passwords must be at least 12 characters long

10. True or False: Provisioning and deprovisioning processes are typically one-time events with no ongoing management.

True

False

11. What is the primary purpose of the provisioning process in identity management?

Creating user accounts and granting initial access rights

Monitoring user activity and logging access attempts

Removing user accounts from all systems

Resetting forgotten passwords and credentials

12. What is the primary risk of failing to deprovision a former employee's account promptly?

The employee receives duplicate paychecks

Unauthorized access to sensitive company data

The company's email system slows down

Network bandwidth is wasted

13. True or False: An employee transferred to a new department should have their old role's access removed during the transfer process.

True

False

14. During provisioning, multifactor authentication (MFA) serves what purpose?

Reduces the cost of account creation

Adds an extra layer of security beyond passwords

Automatically logs users out after inactivity

Encrypts stored user data

15. Which identity management system component stores user credentials and authentication data?

Directory service

Firewall

Intrusion detection system

Web server

16. True or False: Deprovisioning should include removing a user's access to cloud-based applications.

True

False

17. What is the term for the automated process of granting access rights based on a user's role?

Single sign-on (SSO)

Privileged access management (PAM)

Role-based provisioning

Multifactor authentication (MFA)

18. A contractor's project ends. Which deprovisioning action should occur immediately?

Archive all of their email messages

Disable system access and revoke credentials

Reduce their salary in the payroll system

Update their emergency contact information

19. In provisioning, what does role-based access control (RBAC) accomplish?

Automatically deletes inactive user accounts

Assigns permissions based on job function rather than individual identity

Encrypts all user credentials in transit

Logs every single keystroke for compliance

20. Which of the following is a critical step during user deprovisioning?

Issuing new hardware and software licenses

Revoking access credentials and removing account permissions

Creating backup copies of user data files

Updating the user's job title in the directory

Identity Quiz: Provisioning or Deprovisioning?

1. Which provisioning workflow ensures that access requests are reviewed and approved before implementation?

2.

What first name or nickname would you like us to use?

2. What is the term for the automated revocation of all access rights when an employee leaves the organization?

3. Which of the following best describes account lifecycle management in Identity Management (Security+)?

4. True or False: Deprovisioning should only remove access to email but leave database permissions intact.

5. During provisioning, which mechanism ensures that a user's identity is verified before granting access?

6. What is a potential security vulnerability if deprovisioning is not automated?

7. True or False: A directory service like Active Directory is used to manage user identities and access in provisioning workflows.

8. Which of these is a common compliance requirement for deprovisioning?

9. In identity management, what does the principle of least privilege mean during provisioning?

10. True or False: Provisioning and deprovisioning processes are typically one-time events with no ongoing management.

11. What is the primary purpose of the provisioning process in identity management?

12. What is the primary risk of failing to deprovision a former employee's account promptly?

13. True or False: An employee transferred to a new department should have their old role's access removed during the transfer process.

14. During provisioning, multifactor authentication (MFA) serves what purpose?

15. Which identity management system component stores user credentials and authentication data?

16. True or False: Deprovisioning should include removing a user's access to cloud-based applications.

17. What is the term for the automated process of granting access rights based on a user's role?

18. A contractor's project ends. Which deprovisioning action should occur immediately?

19. In provisioning, what does role-based access control (RBAC) accomplish?

20. Which of the following is a critical step during user deprovisioning?