Cloud IAM Quiz: Roles, Policies & Least Privilege

1. What is an identity provider (IdP) in cloud IAM?

A service that authenticates users and manages their identity information

A physical device that stores passwords

A network switch that controls data flow

A backup storage solution

2. Privileged access management (PAM) controls high-risk administrative accounts and their usage.

True

False

3. What is the relationship between authentication and authorization in cloud IAM?

Authentication verifies identity; authorization determines what authenticated users can access

They are the same process

Authorization happens before authentication

Neither is necessary for cloud security

Submit

5. Which scenario best demonstrates the principle of least privilege?

A database administrator has only database management permissions, not server admin rights

All cloud users have full administrative access

Users can modify any policy at any time

No users have any restrictions on access

6. Temporary credentials or sessions in cloud IAM typically have expiration times to reduce security risks.

True

False

7. What is the purpose of access reviews in cloud IAM?

To periodically verify that users still need their assigned permissions

To increase the number of user permissions

To eliminate all access controls

To reduce cloud provider support costs

Submit

9. Which access control model is most suitable for complex organizations with varying permission requirements?

Attribute-based access control (ABAC)

Discretionary access control (DAC)

Mandatory access control (MAC)

No access control

10. Single sign-on (SSO) allows users to authenticate once and access multiple applications without re-entering credentials.

True

False

11. What is the principle of least privilege in cloud IAM?

Granting users the minimum permissions needed to perform their job

Giving all users full administrative access

Limiting access only to executives and managers

Allowing any authenticated user to access all resources

Submit

13. Which of the following is a best practice for managing cloud credentials?

Store credentials securely and rotate them regularly

Share credentials among team members

Hardcode credentials in application code

Use the same password for all cloud accounts

14. Attribute-based access control (ABAC) allows access decisions based on resource attributes, user attributes, and environment conditions.

True

False

15. What is the primary purpose of role-based access control (RBAC)?

To manage user permissions based on their organizational role

To eliminate the need for passwords

To reduce cloud infrastructure costs

To increase network bandwidth

Submit

17. Which statement best describes a cloud IAM policy?

A document that defines specific permissions and who can perform what actions

A physical contract between users and the cloud provider

A network routing rule for data traffic

A backup strategy for cloud data

18. Multi-factor authentication (MFA) enhances security by requiring multiple forms of verification.

True

False

19. What does an IAM role define in a cloud environment?

A set of permissions and policies assigned to users or services

The physical location of data centers

The type of hardware used in the cloud

The cost of cloud resources

20. Which of the following is a primary component of cloud identity management?

User authentication and credential management

Physical server location

Network bandwidth allocation

Cloud provider billing

Cloud IAM Quiz: Can You Master Roles, Policies & Least Privilege?

1. What is an identity provider (IdP) in cloud IAM?

2.

What first name or nickname would you like us to use?

2. Privileged access management (PAM) controls high-risk administrative accounts and their usage.

3. What is the relationship between authentication and authorization in cloud IAM?

4. Cloud IAM ____ specify the conditions under which permissions are granted or denied.

5. Which scenario best demonstrates the principle of least privilege?

6. Temporary credentials or sessions in cloud IAM typically have expiration times to reduce security risks.

7. What is the purpose of access reviews in cloud IAM?

8. A cloud IAM policy document typically specifies ____, effect, and resources being accessed.

9. Which access control model is most suitable for complex organizations with varying permission requirements?

10. Single sign-on (SSO) allows users to authenticate once and access multiple applications without re-entering credentials.

11. What is the principle of least privilege in cloud IAM?

12. Cloud ____ logging records user actions and access attempts for compliance and security auditing.

13. Which of the following is a best practice for managing cloud credentials?

14. Attribute-based access control (ABAC) allows access decisions based on resource attributes, user attributes, and environment conditions.

15. What is the primary purpose of role-based access control (RBAC)?

16. Service accounts in cloud environments are typically used for ____ rather than human users.

17. Which statement best describes a cloud IAM policy?

18. Multi-factor authentication (MFA) enhances security by requiring multiple forms of verification.

19. What does an IAM role define in a cloud environment?

20. Which of the following is a primary component of cloud identity management?