nerdexam
(ISC)2

CCSP · Question #195

Identity and access management (IAM) is a security discipline that ensures which of the following?

The correct answer is B. That the right individual gets access to the right resources at the right time for the right reasons. Identity and access management (IAM) is a comprehensive security discipline that ensures the right individual gains access to the correct resources at the appropriate time for valid reasons.

Submitted by priya_blr· Apr 18, 2026Cloud Concepts, Architecture and Design

Question

Identity and access management (IAM) is a security discipline that ensures which of the following?

Options

  • AThat all users are properly authorized
  • BThat the right individual gets access to the right resources at the right time for the right reasons
  • CThat all users are properly authenticated
  • DThat unauthorized users will get access to the right resources at the right time for the right

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    93% (25)
  • C
    4% (1)

Why each option

Identity and access management (IAM) is a comprehensive security discipline that ensures the right individual gains access to the correct resources at the appropriate time for valid reasons.

AThat all users are properly authorized

This choice only covers authorization, which is a component of IAM, but not its full scope, as IAM also involves authentication and identity lifecycle management.

BThat the right individual gets access to the right resources at the right time for the right reasonsCorrect

Identity and access management (IAM) is a comprehensive security discipline designed to manage digital identities and control access to resources, ensuring that only authenticated and authorized users can access specific resources when and why they need them. This holistic definition covers the full scope of IAM's purpose, including provisioning, authentication, authorization, and deprovisioning.

CThat all users are properly authenticated

This choice only covers authentication, which is a component of IAM, but not its full scope, as IAM also involves authorization and identity lifecycle management.

DThat unauthorized users will get access to the right resources at the right time for the right

This choice is nonsensical, stating that unauthorized users get access, which directly contradicts the purpose of IAM.

Concept tested: Purpose of Identity and Access Management (IAM)

Source: https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/whatis-azure-ad

Topics

#Identity and Access Management#IAM#Authentication#Authorization

Community Discussion

No community discussion yet for this question.

Full CCSP Practice