Identity Lifecycle: Provisioning, Review, and Deprovisioning

Question 1

Which identity management process systematically verifies that an active account's current permissions continue to align with the principle of least privilege?

The automated deprovisioning routine for departing personnel. The baseline roles definition mapping to organizational structures. The periodic review phase within the identity lifecycle framework. The initial provisioning stage during standard user onboarding.

Correct Answer: The periodic review phase within the identity lifecycle framework.

The periodic review phase within the identity lifecycle framework is correct because it regularly evaluates existing accounts to ensure their accumulated permissions still conform to the principle of least privilege.

The initial provisioning stage grants access at onboarding rather than auditing existing accounts. The automated deprovisioning routine removes access entirely when personnel leave. The baseline roles definition establishes standard permissions rather than systematically verifying the ongoing compliance of active users.

The key concept tested is identity lifecycle access reviews and entitlement audits.

Question 2

Which type of framework automates the assignment and removal of user access rights based on records held in an authoritative personnel system?

Identity governance and administration platform Privileged session monitoring and recording tool Security information and event management system Network access control policy enforcement engine

Correct Answer: Identity governance and administration platform

An identity governance and administration platform automates provisioning and deprovisioning of user access rights by synchronizing with an authoritative source such as an HR personnel system, ensuring access matches employment status.

A security information and event management system only collects and analyzes log data for threat detection. A network access control engine enforces device compliance at network entry, not user lifecycle access. A privileged session monitoring tool records and audits administrative activity rather than assigning access.

Key concept: automated identity lifecycle management driven by authoritative HR records.

Question 3

What are the three sequential stages typically represented in the joiner-mover-leaver identity life cycle model?

Enrollment, authentication, and accounting of an identity Onboarding, role change, and offboarding of an identity Registration, recertification, and archiving of an identity Creation, escalation, and suspension of a privileged identity

Correct Answer: Onboarding, role change, and offboarding of an identity

The joiner-mover-leaver model maps directly to onboarding when an identity is created, role change as the identity moves within the organization, and offboarding when the identity departs.

Enrollment, authentication, and accounting describe access control processes, not the identity life cycle. Registration, recertification, and archiving mix in review and retention concepts that do not align with the three named phases. Creation, escalation, and suspension focus narrowly on privileged account handling rather than the general identity life cycle.

Key concept: the identity life cycle stages of joiner, mover, and leaver.

Identity Lifecycle: Provisioning, Review, and Deprovisioning

CC - Identity Lifecycle: Provisioning, Review, and Deprovisioning Example Questions

Question 1

Question 2

Question 3

Begin Your Cybersecurity Career

Other Domain 3: Identity and Access Management (IAM) Concepts concepts