1.02 Apply Concepts Related to Cloud Identity Access Management Technologies 402 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   In a cloud IAM policy, which element specifies the specific operation that is allowed or denied on a resource?

   • AEffect
   • BResource
   • CAction
   • DCondition
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which authentication method requires the user to provide two or more different types of evidence to prove their identity?

   • ABiometric authentication
   • BPassword-based authentication
   • CMulti-factor authentication (MFA)
   • DCertificate-based authentication
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants its employees to use their existing corporate credentials to access a third-party SaaS application. The SaaS application supports SAML 2.0. The company already runs an on-premises Active Directory and wants to avoid duplicating user accounts in the cloud. Which solution should they implement?

   • AUse OIDC to connect Active Directory directly to the SaaS application without an identity provider.
   • BCreate user accounts in the SaaS application with the same passwords as in Active Directory and sync them periodically.
   • CSet up federation between the corporate identity provider and the SaaS application using SAML 2.0, so users authenticate against Active Directory and receive a SAML assertion for the SaaS app.
   • DConfigure the SaaS application to authenticate users against Active Directory via LDAP over the internet.
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A security auditor requires a report of all successful and failed access attempts to a cloud storage service, including the user, source IP, and timestamp. What should the administrator enable to meet this requirement?

   • ACloud monitoring metrics for the storage service.
   • BCloud audit logging for the storage service, with data access logs enabled.
   • CVPC flow logs for the storage service.
   • DResource manager audit logs only.
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is a common characteristic of certificate-based authentication?

   • AIt is only used for human users, not services.
   • BIt relies on a shared secret known by both parties.
   • CIt uses a digital certificate that binds a public key to an identity.
   • DIt requires the user to answer security questions.
   Reveal Solution Discussion Select an answer first