QUESTION 1
A good user management process includes the following tasks:
- receive new user identity requests
- receive requests for changes to user identities
- use access policies to evaluate requests
- gather approvals
- place users in groups
- update accounts
- synchronize passwords
Which additional step is essential in a good user management process?
A. Back up directory information
B. Check that existing accounts are valid
C. Verify user management process ownership
D. Grant or block access to programs, based on access policy
Answer: B
QUESTION 2
What is considered the lowest maturity level in Identity Management maturity?
A. Password management
B. Access rights accountability
C. Provisioning approval and process automation
D. Connectors to access controlled systems (one tool managing multiple systems)
Answer: D
QUESTION 3
After a number of interviews with various customer personnel, the term "user productivity logon
and transaction experience" comes up as a business process. Other than the word "logon", the
description does not provide much insight into how this process relates to security. Which list of
security (and related) elements relate most strongly to this customer business process?
A. Firewall, filtering router, intrusion detection
B. SSL acceleration, content filtering, pop-up blockers
C. Single sign-on, personalization, scalability, availability
D. Identification, public-key infrastructure, multi-factor authentication
Answer: C
QUESTION 4
What information should a customer baseline document include?
A. Proof that there are no existing orphan accounts
B. The naming convention in place for all current users
C. The customer key business processes related to security
D. A list of all authentication mechanisms used by the customer
Answer: C
QUESTION 5
A customer has resources being managed in different facilities. When configuring a security
solution, what is the most important element to consider in the design of the system?
A. Use of a fiber optic backbone
B. The encryption protocol to be used
C. Location of firewalls in the internal network
D. The time zone in which each facility is located
Answer: C
