IAM Engineer

Sample question 1

Halyard Freight is being acquired by a logistics conglomerate. The acquirer's technical due-diligence team, made up of infrastructure engineers who have never seen Halyard's environment, has one afternoon to understand how Halyard's fleet-tracking systems, corporate network, and cloud workloads are segmented before the acquirer's board votes on deal terms. The IAM engineer is asked to communicate the enterprise IT architecture to this team. Which communication approach best fulfills this need?

1. A.Send the due-diligence team the full network configuration exports and firewall rulesets for every system so they can build their own understanding independently.
2. B.Provide a set of architecture diagrams that show trust boundaries and data flows across environments, organized around the risk questions the due-diligence team needs answered.
3. C.Walk the team through each system live in its production console so they can see the actual configuration firsthand.
4. D.Schedule one comprehensive presentation covering every system in the order it was originally built, based on the deployment history in the change log.

Sample question 2

During an AI system audit at a healthcare analytics firm, the IAM engineer finds that the same small team of data scientists can, all under one shared service account credential, pull identifiable patient records into the training data store, fine-tune the clinical-notes summarization model, and approve the updated model for production. Which finding should the engineer prioritize in the risk report?

1. A.The model's summarization outputs are stored without encryption at rest, which could let an attacker who gains network-level access to the storage layer read identifiable clinical notes directly.
2. B.The training data store's password policy does not enforce the firm's standard minimum length of 14 characters, though multi-factor authentication is still required for every login attempt.
3. C.The environment lacks segregation of duties: one shared credential lets the same people create training data, fine-tune the model, and approve its own deployment, with no individual accountability.
4. D.The shared service account has a session timeout of eight hours rather than the 30-minute idle timeout the firm applies to interactive human user accounts on other systems.

Sample question 3

Solvent Actuarial's IAM Engineer is designing the backup strategy for the company's privileged access management vault, which stores the encrypted credentials for roughly 600 service and administrative accounts along with the vault's audit trail and access policy configuration. The vault encrypts all of this data using a master key held inside a dedicated hardware security module appliance. The current draft plan performs nightly encrypted backups of the vault database to an isolated backup repository, with a restore test scheduled every quarter, but the plan does not include the hardware security module or its master key in the backup scope, since the module's vendor markets the appliance as a separate high-availability unit. Which change is most important for the IAM Engineer to make to this backup design before it is finalized?

1. A.Move the nightly vault database backups from the isolated backup repository to an offsite, air-gapped storage location entirely disconnected from the production network, since separating the backup copies geographically from the production environment is the standard practice recommended for protecting encrypted backups against a site-wide disaster, ransomware outbreak, or facility failure that could otherwise destroy both the vault and its local backup copies at the same time.
2. B.Add a second hardware security module configured for automatic failover alongside the primary appliance so that a hardware fault in one unit does not interrupt vault operations, since maintaining continuous availability of the module that holds the master key is widely considered the most direct way to protect that key from being lost when the primary appliance experiences an unexpected outage or failure.
3. C.Extend the backup design's scope to include a documented, secure method for backing up or reconstructing the module's master key itself, such as replicating it to a second module kept offline or following a formal key ceremony and escrow procedure, since a restored vault database cannot be decrypted without the ability to recover that same master key.
4. D.Increase the backup schedule for the vault database from nightly to hourly snapshots, since shortening the recovery point objective reduces the amount of credential, policy, and transaction history that could be lost between backup runs, and minimizing that potential data loss window is generally treated as the most important lever for improving a mature backup capability like this one.