Which statement about IAM core functions is correct?

Which statement about IAM core functions is correct?

• A. IAM replaces all physical access controls.
• B. Encryption of PHI is the sole responsibility of an IAM system.
• C. Authentication, authorization, user management, and a central directory are provided by an IAM system.
• D. IAM only affects password management.

Answer: (C)

Identity and access management focuses on controlling who can access digital resources, how they prove their identity, and how their access is managed over time. An IAM system provides authentication to verify who someone is, authorization to enforce what they can access, user management including provisioning and deprovisioning accounts, and a central directory that stores identities and their permissions (often via directory services like LDAP or Active Directory). This combination captures the core of IAM functions and explains why the statement is correct. IAM does not replace physical access controls, encryption of PHI is a broader data-protection responsibility beyond IAM, and IAM involves more than just password management.

Identity and access management focuses on controlling who can access digital resources, how they prove their identity, and how their access is managed over time. An IAM system provides authentication to verify who someone is, authorization to enforce what they can access, user management including provisioning and deprovisioning accounts, and a central directory that stores identities and their permissions (often via directory services like LDAP or Active Directory). This combination captures the core of IAM functions and explains why the statement is correct.

IAM does not replace physical access controls, encryption of PHI is a broader data-protection responsibility beyond IAM, and IAM involves more than just password management.