CISSP Domain 5 practice questions
Identity and Access Management
IAM covers how identities are established, authenticated, authorised and governed over time. The exam favours life-cycle thinking: provisioning, periodic review and timely deprovisioning matter as much as the authentication method. Know your access control models and federation protocols well enough to pick one for a scenario.
Sample Domain 5 questions
An employee who moved departments three times still holds access from every previous role. Which control would have BEST prevented this?
A web app needs to let users sign in with a third-party identity provider and receive an identity token about the user. Which protocol is designed for this?
Which combination represents true multi-factor authentication?
Common Domain 5 traps
- Counting two 'something you know' factors as multi-factor authentication.
- Confusing authentication (who you are) with authorisation (what you can do).
- Ignoring privilege creep — access reviews are the control.
Key concepts to master
- Authentication factors, MFA, passwordless
- Access control models: DAC, MAC, RBAC, ABAC
- Federation: SAML, OAuth 2.0, OpenID Connect
- Identity life cycle: provisioning, review, deprovisioning
- Kerberos, SSO, privileged access management
Need the theory first? Read the CISSP Domain 5 study guide.
Find out where you stand
Start with the free 10-question CISSP practice test — no signup. Then create a free account for Practice Mode, or go Pro for Domain Quick-Fire, CAT-style adaptive exams and readiness analytics.