Cert Master

KT-IAS Authentication

IdP logs show successful logins for a disabled contractor account. What is the BEST remediation?

Multiple choice — select one answer

Answer choices

  1. a. Re-enable the account so the contractor can finish work without delay, without security or identity team coordination per policy.
  2. b. Reset only the contractor password while leaving all active sessions valid, without security or identity team coordination per policy.
  3. c. Disable federation to the account, revoke refresh tokens, and audit provisioning sync jobs
  4. d. Publish the contractor credentials in the ticket for faster troubleshooting, without security or identity team coordination per policy.

Architectural breakdown & explanation

Disabled accounts should not authenticate; broken deprovisioning or stale federation mappings need fixing.

Correct answer(s): c. Disable federation to the account, revoke refresh tokens, and audit provisioning sync jobs

Exam domain: Authentication (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Identity & Access Security bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications