nerdexam
PeopleCert

ITIL · Question #21

Which of the following are basic concepts used in access management?

The correct answer is B. Rights, access, identity, directory services, service/service components. Access management in ITIL is built around five foundational concepts that together govern how users are identified and granted or restricted access to services.

Processes

Question

Which of the following are basic concepts used in access management?

Options

  • APersonnel, electronic, network, emergency, identity
  • BRights, access, identity, directory services, service/service components
  • CPhysical, personnel, network, emergency, service
  • DNormal, temporary, emergency, personal, group

How the community answered

(18 responses)
  • A
    6% (1)
  • B
    89% (16)
  • D
    6% (1)

Why each option

Access management in ITIL is built around five foundational concepts that together govern how users are identified and granted or restricted access to services.

APersonnel, electronic, network, emergency, identity

Personnel, electronic, network, emergency, and identity mix physical security control categories with unrelated concepts and do not correspond to the defined ITIL access management terminology.

BRights, access, identity, directory services, service/service componentsCorrect

ITIL defines access management using five core concepts: identity (who a user is), rights (what a user is allowed to do), access (the actual level and extent of service permitted), directory services (the tools and data used to manage identities and access), and service/service components (what is being protected or accessed). These five elements form the complete operational vocabulary of the ITIL access management process.

CPhysical, personnel, network, emergency, service

Physical, personnel, network, emergency, and service describe categories of security threats or controls from a different security framework, not the core concepts of ITIL access management.

DNormal, temporary, emergency, personal, group

Normal, temporary, emergency, personal, and group describe account or access types found in some identity management contexts, but they are not the foundational concepts defined by ITIL for access management.

Concept tested: ITIL access management core concepts

Source: https://www.axelos.com/certifications/itil-service-management/itil-4-foundation

Topics

#access management#identity#rights#directory services

Community Discussion

No community discussion yet for this question.

Full ITIL Practice