Identity & Access Management
32 practice questions with explanations — 15 free to try
PassNova has 32 CISSP practice questions on Identity & Access Management, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Identity & Access Management: example questions & answers
2 worked examples with answers and explanations below. Try 15 CISSP questions free in the browser; the full 32-question Identity & Access Management bank is part of PassNova Premium.
Which access control model grants access based on attributes of the subject, object, action, and environment, enabling fine-grained policies such as allowing access only during business hours from a corporate device?
- ADiscretionary Access Control (DAC)
- BMandatory Access Control (MAC)
- CRole-Based Access Control (RBAC)
- DAttribute-Based Access Control (ABAC)✓
Answer: Attribute-Based Access Control (ABAC) evaluates attributes of the subject, object, action, and environment, enabling context-aware policies like time and device restrictions.
In Kerberos authentication, which component issues the Ticket Granting Ticket (TGT) after a user successfully authenticates?
- AThe local credential cache held on the client workstation itself
- BThe Ticket Granting Service (TGS) within the Key Distribution Center
- CAuthentication Service (AS) of the Key Distribution Center✓
- DThe target application server that the user is attempting to connect to
Answer: The Authentication Service (AS) within the Key Distribution Center authenticates the user and issues the Ticket Granting Ticket (TGT).