Cloud Roles Least Privilege Quiz

1. True or False: Multi-factor authentication (MFA) is a component of least privilege implementation.

True

False

2. What is the primary risk of not implementing least privilege in cloud roles?

Increased cloud infrastructure costs

Expanded attack surface and potential for unauthorized access

Slower application performance

Inability to scale cloud resources

3. True or False: Temporary credentials with expiration times support the principle of least privilege.

True

False

4. Which tool helps enforce least privilege by limiting when and where cloud access occurs?

Conditional access policies

Cloud storage buckets

Load balancers

Content delivery networks

5. In AWS, what does the principle of 'deny by default' mean?

All actions are allowed unless explicitly denied

All actions are denied unless explicitly allowed

Users cannot deny access requests

Default policies grant full permissions

6. What is the primary purpose of conducting access reviews in cloud environments?

Increase user productivity

Identify and remove unnecessary or excessive permissions

Reduce cloud costs only

Simplify password management

7. True or False: Service principals in Azure can be assigned custom roles for specific permissions.

True

False

8. What is privilege escalation in the context of cloud security?

Granting users higher privileges than necessary

An unauthorized user gaining elevated permissions

Increasing server CPU capacity

Adding more storage to cloud resources

9. Which of the following is a best practice for managing cloud access?

Use shared credentials across team members

Regularly audit and review user permissions

Grant permanent access to avoid re-provisioning

Store credentials in plain text for convenience

10. What does the AWS IAM policy simulator allow you to do?

Create new AWS accounts

Test and validate IAM policies before applying them

Monitor real-time cloud resource usage

Encrypt sensitive data automatically

11. What is the primary goal of the principle of least privilege in cloud environments?

Grant users maximum permissions for flexibility

Grant users only the minimum permissions required to perform their job

Eliminate all user access to sensitive resources

Assign identical permissions to all cloud users

12. What is session-based access in cloud environments?

Permanent access granted to users

Temporary access granted for a specific time period

Access that never expires

Access based on IP address only

13. In GCP, which role provides the highest level of access to resources?

Viewer

Editor

Owner

Contributor

14. What is the primary benefit of using service accounts with minimal permissions?

Reduces the blast radius if the account is compromised

Eliminates the need for monitoring

Increases application performance

Removes the need for encryption

15. True or False: Granting administrator access to all employees follows the principle of least privilege.

True

False

16. What is the purpose of IAM policies in AWS?

Define which AWS services are available in a region

Specify permissions for users, groups, and roles

Monitor all cloud resource usage

Encrypt data in transit only

17. Which statement best describes role-based access control (RBAC)?

Access is granted based on individual user identity only

Access is determined by the user's assigned role within the organization

All users have identical permissions regardless of role

Access is randomly assigned by the cloud provider

18. What is a managed identity in cloud environments?

A user account created by the cloud provider

An identity automatically managed by the cloud provider for services

A temporary password for cloud access

A physical hardware token for authentication

19. In Azure, what is the recommended approach for assigning permissions to users?

Use Azure Resource Manager (ARM) templates only

Assign Contributor role to all users

Use Role-Based Access Control (RBAC) with specific roles

Grant Owner permissions to minimize configuration

20. Which AWS service is primarily used to manage user access and permissions?

AWS CloudTrail

AWS Identity and Access Management (IAM)

AWS CloudWatch

AWS Systems Manager

Cloud Professional Applying Least Privilege to Cloud Roles Quiz

1. True or False: Multi-factor authentication (MFA) is a component of least privilege implementation.

2.

What first name or nickname would you like us to use?

2. What is the primary risk of not implementing least privilege in cloud roles?

3. True or False: Temporary credentials with expiration times support the principle of least privilege.

4. Which tool helps enforce least privilege by limiting when and where cloud access occurs?

5. In AWS, what does the principle of 'deny by default' mean?

6. What is the primary purpose of conducting access reviews in cloud environments?

7. True or False: Service principals in Azure can be assigned custom roles for specific permissions.

8. What is privilege escalation in the context of cloud security?

9. Which of the following is a best practice for managing cloud access?

10. What does the AWS IAM policy simulator allow you to do?

11. What is the primary goal of the principle of least privilege in cloud environments?

12. What is session-based access in cloud environments?

13. In GCP, which role provides the highest level of access to resources?

14. What is the primary benefit of using service accounts with minimal permissions?

15. True or False: Granting administrator access to all employees follows the principle of least privilege.

16. What is the purpose of IAM policies in AWS?

17. Which statement best describes role-based access control (RBAC)?

18. What is a managed identity in cloud environments?

19. In Azure, what is the recommended approach for assigning permissions to users?

20. Which AWS service is primarily used to manage user access and permissions?