Management of user identities and access controls is known as?

• A. Audit Process
• B. Administration
• C. Subgroups
• D. Access Revocation

Answer: (B)

The concept being tested is who handles the ongoing control of who can access what by managing user accounts and permissions. Administration covers all of that: provisioning and deprovisioning user identities, assigning roles and permissions, enforcing access policies, and handling password and account lifecycle. This is exactly what IAM/CIAM administration does to ensure users have appropriate access and that access is revoked when needed.

An audit process focuses on monitoring and recording activities rather than actively managing identities and access. Subgroups are simply a way to organize users and don’t address access control management. Access revocation is a specific action within the broader administration tasks, not the whole function. So the best fit for “Management of user identities and access controls” is Administration.