(ISC)2 CISSP Certified Information Systems Security Professional Official Practice Tests, 3rd Edition

Chapter 5Identity and Access Management (Domain 5)

SUBDOMAINS:

• 5.1 Control physical and logical access to assets
• 5.2 Manage identification and authentication of people, devices, and services
• 5.3 Federated identity with a third-party service
• 5.4 Implement and manage authorization mechanisms
• 5.5 Manage the identity and access provisioning lifecycle
• 5.6 Implement authentication systems

1. Which of the following is best described as an access control model that focuses on subjects and identifies the objects that each subject can access?
   1. An access control list
   2. An implicit denial list
   3. A capability table
   4. A rights management matrix
2. Jim's organization-wide implementation of IDaaS offers broad support for cloud-based applications. Jim's ...