CCM: What security requirements does the Identity and Access Management domain in the CCM address?

File backup requirements fall under the Business Continuity Management domain, not Identity and Access Management.

This choice uses the word 'inappropriate' access, which is the exact opposite of what the IAM domain aims to achieve - it ensures appropriate, not inappropriate, access.

Identity and Access Management is a formally documented domain within the CSA Cloud Controls Matrix, making this statement factually incorrect.

The IAM domain in the CSA Cloud Controls Matrix is designed to ensure appropriate access to resources and to enable the right individuals to access information they are authorized to use. The word 'appropriate' is the critical distinction from choice B. The domain covers identity lifecycle management, access control policies, and least-privilege principles.