Which three are attack vectors protected by Identity & Access Control? (Choose three.)

Question

Options

• AVoicemail
• BData Center
• CCampus and Branch
• DEndpoints
• ERemote and Mobile
• FCloud apps

• A
  3% (1)
• B
  3% (1)
• C
  94% (29)

Explanation

Identity & Access Management (IAM) focuses on controlling who can access systems and from where, making Campus and Branch (C), Endpoints (D), and Remote and Mobile (E) the correct attack vectors - these all represent user access points where stolen credentials, compromised devices, or unauthorized logins pose direct identity-related threats. Voicemail (A) is typically a social engineering / telephony threat, not an IAM control domain. Data Center (B) is primarily protected by physical security and network segmentation controls, not identity frameworks. Cloud apps (F) may seem plausible, but in this context it falls under cloud security posture management (CASB/SaaS security) rather than the core IAM attack surface trio.

Memory tip: Think of the three places users physically or virtually show up to work - the office (Campus/Branch), their computer (Endpoint), and from home/travel (Remote/Mobile). IAM guards the door wherever people log in.

No community discussion yet for this question.