CloudNetX Network Identity and Access Management Quiz

1. In attribute-based access control (ABAC), what determines access decisions?

Only user roles

Attributes of users, resources, environments, and actions

Only resource names

Only user department

2. What is the primary purpose of passwordless authentication in modern IAM?

Eliminating all security controls

Reducing reliance on passwords while maintaining or improving security

Simplifying user account creation

Decreasing authentication speed

3. Which of the following is a best practice for managing API keys in CloudNetX?

Storing them in plaintext configuration files

Sharing them across team members

Rotating them regularly and storing them in secure vaults

Embedding them directly in application code

4. What is privilege escalation in the context of IAM security?

Promoting users to management positions

Gaining higher-level access rights than originally authorized

Increasing network bandwidth allocation

Upgrading system hardware

5. In CloudNetX, what is the benefit of implementing conditional access policies?

Allowing unrestricted access to all users

Granting access based on context such as device, location, and risk level

Eliminating the need for authentication

Simplifying password management

6. Which IAM control monitors and logs user access to sensitive resources?

Access provisioning

Encryption protocols

Access monitoring and auditing

Firewall rules

7. What does SAML primarily enable in federated identity scenarios?

Secure file transfer between systems

Exchange of authentication and authorization data between identity providers and service providers

Encryption of stored credentials

Real-time network traffic analysis

8. In CloudNetX, what is a token used for in authentication workflows?

Replacing the need for passwords

Representing proof of identity for API or session access

Encrypting network traffic

Monitoring user activity

9. Which technology allows organizations to manage user identities across hybrid cloud and on-premises environments?

Firewalls

Identity management platforms

Load balancers

VPN tunnels

10. What is the primary security concern with hardcoded credentials in applications?

They improve system performance

They can be exposed if source code is compromised

They reduce the need for user authentication

They simplify password management

11. What is the primary difference between authentication and authorization in IAM?

Authentication verifies identity; authorization determines access rights

Authorization verifies identity; authentication determines access rights

Both terms are synonymous in network security

Authentication applies only to external users

12. Which IAM practice involves removing access rights from users who no longer need them?

Access provisioning

Access deprovisioning

Access monitoring

Access encryption

13. What does SSO (Single Sign-On) enable users to do?

Access multiple applications with one set of credentials

Create multiple user accounts simultaneously

Bypass authentication for security purposes

Encrypt all data transmissions

14. Which of the following is a common use case for service accounts in IAM?

Authenticating human users to applications

Allowing applications to authenticate with other services or APIs

Replacing user passwords entirely

Auditing user login attempts

15. In CloudNetX, what is the primary purpose of identity federation?

Encrypting all network traffic

Allowing users to access resources using a single identity across multiple systems

Blocking unauthorized IP addresses

Monitoring network bandwidth usage

16. What is the principle of least privilege in IAM?

Granting all users full system access

Granting users only the minimum permissions needed for their role

Restricting access to administrators only

Eliminating password requirements

17. Which protocol is commonly used for secure API authentication in cloud environments?

OAuth 2.0

HTTP Basic Auth

Telnet

FTP authentication

18. What does LDAP stand for in the context of directory services?

Local Directory Access Protocol

Lightweight Directory Access Protocol

Long-Distance Directory Authentication Protocol

Legacy Data Access Protocol

19. In role-based access control (RBAC), what determines a user's permissions?

The user's department name

The assigned role or job function

The user's seniority level

The user's login frequency

20. Which authentication method uses a combination of username, password, and a time-based code?

Single-factor authentication

Multi-factor authentication (MFA)

Biometric authentication

Certificate-based authentication