Multifactor Authentication and Least Privilege CSE Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A cloud administrator is configuring MFA for a hybrid workforce. Some users are in the office, some are remote. The administrator wants to reduce MFA prompts for trusted locations while maintaining security for remote access. What is the best approach?

   • AUse SMS MFA for remote users and no MFA for office users
   • BRequire MFA for all users at every login, regardless of location
   • CUse conditional access policies to require MFA for remote access and skip MFA for trusted office IPs
   • DDisable MFA for users in the office and require it only for remote users
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   How does time-based one-time password (TOTP) authentication work in a cloud environment?

   • AIt requires the user to insert a physical smart card into a reader
   • BIt uses the user's biometric data to authenticate without any additional input
   • CIt sends a unique code to the user's email address each time they log in
   • DIt generates a temporary code based on a shared secret and the current time, which the user enters during login
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the primary purpose of multifactor authentication (MFA) in securing cloud access?

   • ATo replace passwords with biometric verification
   • BTo encrypt all data transmitted between the user and the cloud
   • CTo provide a single sign-on experience across all cloud services
   • DTo require two or more independent credentials to verify a user's identity
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company is rolling out MFA for all cloud users. The security team wants to minimize user friction while still providing strong authentication. They are considering TOTP, SMS, and push notifications. Which approach best balances security and user experience?

   • AAllow users to choose between SMS and push notifications without a backup method
   • BRequire SMS one-time passcodes for all users
   • CUse push notifications to a trusted mobile app as the primary method, with TOTP as a backup
   • DDeploy hardware security keys for every user, eliminating all other methods
   Reveal Solution Discussion Select an answer first
6. 15expert · medium

   A cloud security team is implementing least privilege for a microservices architecture. Each service needs to access specific resources. They are considering using service accounts with IAM roles. What is a key challenge they must address?

   • AEnsuring all services use the same role for simplicity
   • BGranting each service full access to all resources
   • CManaging the lifecycle of service account credentials
   • DAvoiding the use of service accounts altogether
   Reveal Solution Discussion Select an answer first