How should I use these Identity and Access Management practice questions?

Read each scenario carefully and choose your answer before revealing the explanation. Then check why your choice was right or wrong. Repeat until the reasoning feels automatic.

Can I practise just Identity and Access Management questions in a focused session?

Yes — use the session launcher on this page to start a 10-, 20-, 30- or 50-question session drawn entirely from the Identity and Access Management domain.

CISSP · topic practice

Identity and Access Management practice questions

Practise Certified Information Systems Security Professional CISSP Identity and Access Management practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

Courseiva uses original exam-style practice questions designed for learning and revision. The goal is to understand the concepts, recognise exam patterns, and improve through explanations — not memorise copied exam dumps.

Reviewed byJohnson Ajibi· MSc IT Security

20 questionsDomain: Identity and Access Management

Practice 10 questions Browse domain →

What the exam tests

What to know about Identity and Access Management

Identity and Access Management questions test whether you can apply the concept in context, not just recognise a definition.

How the topic appears in realistic exam-style scenarios.

Which detail in the question changes the correct answer.

How to eliminate plausible but wrong options.

How to connect the question back to the wider exam objective.

Watch out for

Common Identity and Access Management exam traps

▸Answering from memory before reading the full scenario.
▸Missing a constraint such as cost, availability, security, scope or command context.
▸Choosing a broad answer when the question asks for the most specific fix.
▸Ignoring why the wrong options are tempting.

Practice set

Identity and Access Management questions

20 questions · select your answer, then reveal the explanation

Question 1easymultiple choice

Read the full Identity and Access Management explanation →

Which authentication factor type is a smart card?

Trap 1: Somewhere you are

Somewhere you are is a location-based factor, not a smart card.

Trap 2: Type 3 (something you are)

Type 3 factors are biometric, such as fingerprints or iris scans.

Trap 3: Type 1 (something you know)

Type 1 factors are knowledge-based, such as passwords or PINs.

Study all Identity and Access Management common traps →

A
Somewhere you are
Why wrong: Somewhere you are is a location-based factor, not a smart card.
B
Type 2 (something you have)
A smart card is a physical token, so it is something you have.
C
Type 3 (something you are)
Why wrong: Type 3 factors are biometric, such as fingerprints or iris scans.
D
Type 1 (something you know)
Why wrong: Type 1 factors are knowledge-based, such as passwords or PINs.

Identity and Access Management practice questions

What to know about Identity and Access Management

Common Identity and Access Management exam traps

Identity and Access Management questions

Which authentication factor type is a smart card?

An organization requires users to authenticate with a password and a one-time code sent to their mobile phone. This is an example of which authentication method?

In Kerberos authentication, which component issues a Ticket Granting Ticket (TGT) after verifying the user's credentials?

An attacker who has compromised the Kerberos Key Distribution Center (KDC) could forge a Ticket Granting Ticket (TGT) to impersonate any user. This type of attack is known as:

Which statement about SAML 2.0 is correct?

Which OAuth 2.0 grant type is recommended for a public client (e.g., single-page application) that cannot securely store a client secret?

OpenID Connect (OIDC) extends OAuth 2.0 primarily by adding which capability?

An organization is implementing identity management and wants to ensure that when an employee leaves, all access is promptly revoked. Which process is most directly responsible for removing accounts and access rights for a leaver?

A security analyst is reviewing access rights and discovers an active account belonging to a former employee who left six months ago. This is an example of:

In a Privileged Access Management (PAM) solution, which feature provides temporary elevation of privileges for specific tasks, reducing the risk of standing privileges?

In LDAP, what does the Distinguished Name (DN) uniquely identify?

Which access control model allows the owner of a resource to determine who can access it and what permissions they have?

A security policy requires that a user cannot have both the ability to create purchase orders and approve invoices. This is an example of:

A security architect is designing a Single Sign-On (SSO) solution for a web application that needs to support authentication and authorization. Which TWO of the following protocols are best suited for this purpose? (Select TWO)

An organization is implementing Privileged Access Management (PAM). Which THREE of the following are common features of a PAM solution? (Select THREE)

Which of the following is an example of a Type 2 authentication factor?

A security administrator is configuring a system that requires users to provide a password and a one-time code from a hardware token. Which authentication method is being implemented?

In Kerberos, which component issues ticket-granting tickets (TGTs) after verifying the user's credentials?

An attacker has obtained a Kerberos TGT and uses it to request service tickets for any resource in the domain. Which type of attack is this?

Which protocol is specifically designed for authorization and not authentication, often using grant types like authorization code and client credentials?

Track your progress over time

Start a Identity and Access Management only practice session

Related CISSP topic practice pages

Security and Risk Management practice questions

Asset Security practice questions

Security Operations practice questions

Security Architecture and Engineering practice questions

Communication and Network Security practice questions

Security Assessment and Testing practice questions

Software Development Security practice questions

Identity and Access Management practice questions

CISSP fundamentals practice questions

CISSP scenario practice questions

CISSP troubleshooting practice questions

Frequently asked questions

Track your progress

Study resources

Exam traps to avoid