A development team needs to deploy a cloud function that reads from a private storage bucket. The function runs on a schedule and does not require any user interaction. The security team mandates that no long-lived access keys be used. What is the recommended way to grant the function access?

Create a service account with read-only permissions on the bucket and attach it to the cloud function.

Grant the function's execution role broad permissions to all storage buckets in the project.

Create an IAM user with read-only permissions and store the credentials in the function's code repository.

Embed the storage bucket's access key in the function's environment variables.

What is the primary role of an identity provider (IdP) in a federated cloud IAM environment?

To authenticate users and assert their identity to relying parties

To enforce network security rules within the cloud VPC

To store and manage cloud resource configurations

To provide virtual machines for running cloud applications

Which activity is part of the identity provisioning process?

Deleting a user's account after they leave

Reviewing audit logs for suspicious activity

Resetting a user's password after a security incident

Creating a user account and assigning initial permissions

A company is implementing SSO for its employees. They want to ensure that when a user's employment ends, their access to all connected applications is revoked immediately. What is the most effective way to achieve this?

Remove the user from the SSO group in the identity provider.

Disable the user's account in the identity provider, which will prevent authentication to all federated applications.

Change the user's password in the identity provider.

Delete the user's account from each individual application.

F5Certified Solution Expert, Cloud

Domain 1Objective 2

1.02 Apply Concepts Related to Cloud Identity Access Management Technologies 402 Practice Questions (Page 2)

Part of the Section 1 : FOUNDATIONAL CLOUD CONCEPTS domain, which makes up ~17% of our current practice bank. F5 does not publish an official question count, but from its 105-minute exam (~40–70 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 33 practice questions to prepare you well beyond it. (estimate)

33questions here

7free pages

10concepts

10 Concepts in This Objective

Cloud IAM Fundamentals
Identity Providers and Federation
Authentication Methods
Authorization and Access Control Models
IAM Policies and Permissions
Roles and Service Accounts
Multi-Factor Authentication (MFA)
Single Sign-On (SSO)
IAM Lifecycle Management
Compliance and Auditing in IAM

Questions 6–10

6foundation · easy
Which component of cloud Identity and Access Management (IAM) is responsible for verifying that a user or service is who they claim to be?
Select an answer first
7application · medium
A development team needs to deploy a cloud function that reads from a private storage bucket. The function runs on a schedule and does not require any user interaction. The security team mandates that no long-lived access keys be used. What is the recommended way to grant the function access?
Select an answer first
8foundation · easy
What is the primary role of an identity provider (IdP) in a federated cloud IAM environment?
Select an answer first
9foundation · easy
Which activity is part of the identity provisioning process?
Select an answer first
10application · medium
A company is implementing SSO for its employees. They want to ensure that when a user's employment ends, their access to all connected applications is revoked immediately. What is the most effective way to achieve this?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to 402

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by F5. “402” is a trademark of its owner, used for identification only.