CISSP Practice Question: Which of the following is NOT a typical component of Identity and…

Correct Answer: B. Firewall

Explanation (CISSP Manager Logic):

IAM focuses on managing digital identities and governing their access to specific resources based on business needs. A firewall is a network security control that filters traffic based on protocols and IP addresses rather than managing individual user identities or entitlements.

By implementing this solution, you:

• Focus resources on identity-centric security controls.
• Distinguish between perimeter defense and access governance.
• Ensure the right individuals have the right access for the right reasons.

While the other options are relevant, they fall short because:

• A: SSO is a core IAM function that centralizes authentication to improve user experience and oversight.
• C: RBAC is the primary IAM method for managing permissions based on organizational roles and least privilege.
• D: MFA is a critical IAM mechanism used to increase assurance levels during the authentication process.

Think like a manager:

Managers must distinguish between infrastructure security (networks) and logical access security (identities). Effective IAM ensures accountability and compliance by managing the lifecycle of user access.