Study ISC2 CISSP Identity and Access Management: key concepts, common traps, and exam decision cues.
This domain asks whether you can separate identity proofing, authentication, authorization, and accountability cleanly. CISSP usually rewards the access model that scales, limits standing privilege, and preserves traceability.
| Lesson | Focus |
|---|---|
| 5.1 Authentication & MFA | Learn how the exam classifies who someone is and how they prove it. |
| 5.2 Authorization & PAM | Learn how CISSP tests access assignment, privilege control, and lifecycle discipline. |
| If the question is really about… | Go first to… |
|---|---|
| MFA, federation, SSO, identity proofing, or authentication strength | 5.1 Authentication & MFA |
| role assignment, joiner-mover-leaver flow, privileged access, or accountability | 5.2 Authorization & PAM |