CISSP Practice Question (Identity and Access Management (IAM)

CISSP Practice Question (Identity and Access Management (IAM) - Hard):

An organization utilizes a combination of centralized and decentralized identity management systems. One day, the IT security team discovers that a user, involved in various departments, has retained access to systems beyond what their current role necessitates, leading to excessive privilege accumulation. Given the hybrid nature of the identity management system, what should be the immediate course of action to rectify the situation according to IAM best practices?

Options:

A. Run a script to automatically remove excess privileges across all systems.

B. Conduct a comprehensive audit of user access rights and adjust privileges manually.

C. Enforce multifactor authentication for all user logins.

D. Transition to a fully centralized identity management system.

(answer tomorrow!) Study more at : cissp.app !

13 comments