CS-IDENTITY Practice Test

CS-IDENTITY practice test: what's covered

• Identity Threats
• Hybrid AD
• Risk Scoring
• Lateral Movement
• ITP
• Response

Free CS-IDENTITY sample questions

1. A security engineer needs to discover privileged accounts and service identities across hybrid AD during a controlled production rollout. Which response is the BEST fit?

   • A. inventory domain, cloud, and service accounts with privilege and exposure attributes — with change evidence recorded
   • B. track only employee display names in HR — with change evidence recorded
   • C. ignore service accounts because they are not human — with change evidence recorded
   • D. assess identity risk from email signatures alone — with change evidence recorded
   Show answer

   Correct: A. inventory domain, cloud, and service accounts with privilege and exposure attributes — with change evidence recorded is the best answer because identity inventory with privilege context is the foundation of ITDR. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes account inventory, privilege tags, and stale account list.

2. An administrator must discover privileged accounts and service identities across hybrid AD while investigating an urgent support case. Which action should be taken first?

   • A. inventory domain, cloud, and service accounts with privilege and exposure attributes — after confirming scope and ownership
   • B. track only employee display names in HR — after confirming scope and ownership
   • C. ignore service accounts because they are not human — after confirming scope and ownership
   • D. assess identity risk from email signatures alone — after confirming scope and ownership
   Show answer

   Correct: A. inventory domain, cloud, and service accounts with privilege and exposure attributes — after confirming scope and ownership is the best answer because identity inventory with privilege context is the foundation of ITDR. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes account inventory, privilege tags, and stale account list.

3. A company plans to discover privileged accounts and service identities across hybrid AD during an audit-readiness review. Which design best meets the requirement?

   • A. inventory domain, cloud, and service accounts with privilege and exposure attributes — using the vendor-supported workflow
   • B. track only employee display names in HR — using the vendor-supported workflow
   • C. ignore service accounts because they are not human — using the vendor-supported workflow
   • D. assess identity risk from email signatures alone — using the vendor-supported workflow
   Show answer

   Correct: A. inventory domain, cloud, and service accounts with privilege and exposure attributes — using the vendor-supported workflow is the best answer because identity inventory with privilege context is the foundation of ITDR. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes account inventory, privilege tags, and stale account list.

4. During troubleshooting, the team must discover privileged accounts and service identities across hybrid AD after a regional service change. Which next step is most defensible?

   • A. inventory domain, cloud, and service accounts with privilege and exposure attributes — with least privilege preserved
   • B. track only employee display names in HR — with least privilege preserved
   • C. ignore service accounts because they are not human — with least privilege preserved
   • D. assess identity risk from email signatures alone — with least privilege preserved
   Show answer

   Correct: A. inventory domain, cloud, and service accounts with privilege and exposure attributes — with least privilege preserved is the best answer because identity inventory with privilege context is the foundation of ITDR. The other choices are not the best fit because they either address the wrong layer, broaden access unnecessarily, or skip validation. Useful evidence includes account inventory, privilege tags, and stale account list.

5. An administrator needs to discover privileged accounts and service identities across hybrid AD before approving a high-risk release. Which TWO actions provide the strongest implementation and verification? (Choose TWO)

   • A. inventory domain, cloud, and service accounts with privilege and exposure attributes — with monitoring and rollback defined
   • B. verify the result using account inventory, privilege tags, and stale account list — with monitoring and rollback defined
   • C. track only employee display names in HR — with monitoring and rollback defined
   • D. ignore service accounts because they are not human — with monitoring and rollback defined
   • E. assess identity risk from email signatures alone — with monitoring and rollback defined
   Show answer

   Correct: A and B. inventory domain, cloud, and service accounts with privilege and exposure attributes — with monitoring and rollback defined and verify the result using account inventory, privilege tags, and stale account list — with monitoring and rollback defined are correct because identity inventory with privilege context is the foundation of ITDR. The other options are not appropriate: they weaken scope, skip a required control, or do not provide reliable evidence for this Falcon Identity Protection scenario.

Last updated: 2026-10-19

CS-IDENTITY practice test FAQ