Cloud Identity GCAD Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   A small startup uses a cloud identity provider (IdP) to manage access to its cloud applications. The startup has no on-premises infrastructure and all employees work remotely. Which identity model best fits this scenario?

   • ASynchronized identities from an on-premises directory.
   • BCloud-only identities managed by the IdP.
   • CFederated identities from an on-premises Active Directory.
   • DSocial identities from external providers.
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which statement best describes the relationship between cloud identity and IAM in a cloud architecture?

   • AIAM is a subset of cloud identity that manages user passwords.
   • BCloud identity is a component of IAM that provides the identity information used to enforce access control decisions.
   • CCloud identity is only used for human users, while IAM manages service accounts.
   • DCloud identity and IAM are interchangeable terms that both refer to user accounts.
   Reveal Solution Discussion Select an answer first
4. 8expert · hard

   A multinational company uses a cloud identity provider (IdP) with federated identity from multiple on-premises Active Directory forests. When an employee is terminated in one forest, the account is disabled, but the user's access to cloud applications persists for up to 24 hours. The security team requires immediate revocation. Which solution best addresses this issue?

   • AImplement a conditional access policy that checks the account's enabled status in the on-premises directory at each access attempt.
   • BUse the IdP's API to immediately revoke all sessions for the user upon termination.
   • CConfigure the IdP to enforce a short token lifetime and require re-authentication for sensitive applications.
   • DDisable the user's account in the IdP as well as in the on-premises directory.
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A startup is building a new cloud-native application and wants to manage user identities entirely in the cloud. They need to support social logins (Google, Facebook) and also allow enterprise users via SAML. They want a single place to manage users and policies. What should they use?

   • AA cloud identity provider (IdP) that supports both social identity providers and enterprise SAML federation.
   • BA custom user database in the application with OAuth2 for social logins and SAML for enterprises.
   • CUse the enterprise SAML IdP for all users, including social logins.
   • DUse separate identity systems for social and enterprise users.
   Reveal Solution Discussion Select an answer first
6. 10expert · hard

   A company is designing a cloud identity architecture for a multi-cloud environment (AWS, Azure, GCP). They want a single identity source for all users and want to enforce consistent security policies across all clouds. What is the best approach?

   • AUse a single cloud provider for all workloads to simplify identity.
   • BCreate separate identity stores in each cloud and sync them manually.
   • CUse a cloud identity provider (IdP) that federates with all three clouds via SAML or OIDC.
   • DUse each cloud's native identity service (e.g., AWS IAM, Azure AD, GCP IAM) and manage them independently.
   Reveal Solution Discussion Select an answer first