A cloud security team is reviewing IAM roles in a project. They find that a service account has the Owner role, but it only needs to read from a specific bucket. What should they do to align with least privilege?

Keep the Owner role because the service account might need more permissions in the future

Remove the service account and use a user account instead

Assign the Viewer role on the project to the service account

Change the service account to a custom role with only read access to the specific bucket

An organization wants to implement a defense-in-depth strategy for cloud identity. They plan to use MFA and least privilege. Which statement best describes how these two controls work together?

Both controls are only needed for administrative accounts

MFA verifies the user's identity, while least privilege limits what that identity can do

Least privilege makes MFA unnecessary

MFA replaces the need for least privilege

What is the purpose of a Privileged Access Management (PAM) tool?

To provide users with unlimited access to all cloud resources

To automatically grant administrative rights to all users

To replace all passwords with biometric authentication

To manage and monitor access to privileged accounts and credentials

What is the principle of least privilege?

Granting access based on the user's seniority in the organization

Granting users the minimum levels of access necessary to perform their job functions

Granting users maximum access and then removing permissions as needed

Granting all users the same level of access for simplicity

An organization is designing an access control strategy for a hybrid cloud environment. They want to enforce MFA and least privilege across both on-premises and cloud resources. Which approach should they take?

Apply least privilege only in the cloud

Implement separate identity systems for on-premises and cloud

Use a single identity provider (IdP) with conditional access policies that enforce MFA and apply to both environments

Use MFA only for cloud resources

EC-CouncilCloud Security Essentials

Domain 2Objective 4

Multifactor Authentication and Least Privilege CSE Practice Questions (Page 9)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

50questions here

10free pages

8concepts

Questions 41–45

41application · medium
A cloud security team is reviewing IAM roles in a project. They find that a service account has the Owner role, but it only needs to read from a specific bucket. What should they do to align with least privilege?
Select an answer first
42application · medium
An organization wants to implement a defense-in-depth strategy for cloud identity. They plan to use MFA and least privilege. Which statement best describes how these two controls work together?
Select an answer first
43foundation · easy
What is the purpose of a Privileged Access Management (PAM) tool?
Select an answer first
44foundation · easy
What is the principle of least privilege?
Select an answer first
45expert · medium
An organization is designing an access control strategy for a hybrid cloud environment. They want to enforce MFA and least privilege across both on-premises and cloud resources. Which approach should they take?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.