CompTIA Security+ - Identity and Access Management

By Jordan Blake · Updated Jul 10, 2026

Questions23
Passing Score75%
Format48% Multiple Choice
Sessions Logged2,713
Your progressLog in / Register to track times taken, best score, questions mastered, and coverage on this quiz.
Rating
4.6 (41)

Topics covered

This quiz

Uncategorized23 (100%)

Uncategorized23 questions

Browse more · Report this quiz

Question catalog for this preview

Catalog listing of the 5 preview questions for this quiz.

Question 1

?? Multiple Choice (Hard)

Which attack exploits the implicit trust in Single Sign-On by stealing a valid authentication token?

Answer choices

  • A. Credential stuffing

  • B. Pass-the-ticket / Golden Ticket attack

  • C. Privilege escalation

  • D. SQL injection for credential harvesting

Question 2

?? Multiple Choice (Medium)

What is federation in the context of identity management?

Answer choices

  • A. Combining multiple user directories into one unified database

  • B. Establishing trust relationships between identity providers across different organizations

  • C. Federating all authentication to a single cloud provider

  • D. Merging user accounts after corporate acquisitions

Question 3

?? True/False (Medium)

Time-based One-Time Passwords (TOTP) rely on a shared secret and the current time to generate authentication codes valid for about 30 seconds.

Answer choices

  • A. True

  • B. False

Question 4

?? Fill in the Blank (Easy)

The principle of [[blank1]] access ensures that users are only granted the minimum permissions necessary to perform their job functions.

Question 5

?? True/False (Hard)

Separation of duties requires that no single individual has complete control over any critical process or transaction.

Answer choices

  • A. True

  • B. False