CISSP Question #892: Real Exam Question with Answer & Explanation

Question

Which of the following is a benefit in implementing an enterprise Identity and Access Management (IAM) solution?

Options

• APassword requirements are simplified.
• BRisk associated with orphan accounts is reduced.
• CSegregation of duties is automatically enforced.
• DData confidentiality is increased.

Explanation

An enterprise Identity and Access Management (IAM) solution is designed to centralize and streamline the management of user identities and their access to systems, applications, and data. One of the key benefits of implementing IAM is that it helps reduce the risk associated with orphan accounts. Orphan accounts refer to user accounts that are still active but no longer associated with an active user (e.g., due to employee departures or role changes). These accounts can pose a significant security risk, as they often have elevated access and are typically forgotten, leaving them vulnerable to exploitation. With an IAM solution, user accounts are tightly integrated with HR systems and business processes, ensuring that when an employee leaves or changes roles, their access is automatically revoked or updated. This reduces the chance that orphan accounts will persist and remain a potential security risk.

No community discussion yet for this question.