Which statement best describes the primary objective of identity management?

• A. To centralize all user data in one repository.
• B. To manage identities by context and access based on attributes.
• C. To eliminate all passwords.
• D. To remove all security measures.

Answer: (B)

Identity management focuses on controlling access by using context and attributes to decide who can do what and under which conditions. This means policies consider who the user is and the surrounding factors—such as their role, department, location, time, device, and other attributes—to grant or deny access. This context-aware, attribute-based approach enables fine-grained, scalable control and enforces least-privilege access across systems. While centralizing identity data can support IAM, it’s not the objective by itself; the aim is to make access decisions based on contextual attributes. Options that suggest eliminating passwords or removing security measures miss the point, since the goal is to enhance secure, policy-driven access, not remove protections.