6.6 Identify and Describe Access and Permissions Troubleshooting Issues CLOUD-SECURITY-ENGINEER Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   When troubleshooting an authorization failure, which of the following should be reviewed?

   • ARole-based access control (RBAC) policies
   • BThe user's password reset settings
   • CThe user's network IP address
   • DThe user's browser cookies
   Reveal Solution Discussion Select an answer first
2. 27application · medium

   A user reports they can sign in to the Azure portal but immediately get redirected to a page saying 'You cannot access this right now' and are blocked from all resources. Other users in the same department can access everything normally. The user's account is enabled and the password works. What should you check first?

   • AReset the user's password and require re-authentication
   • BReview the user's sign-in logs for a conditional access policy failure
   • CVerify the user is assigned the correct Azure AD role
   • DCheck if the user's device is compliant with Intune policies
   Reveal Solution Discussion Select an answer first
4. 28expert · hard

   A company has a conditional access policy that requires MFA for all users accessing the Azure portal. A user reports they can access the Azure portal without being prompted for MFA. The user is a member of a group that is excluded from the policy. What is the most likely cause?

   • AThe user's MFA registration is incomplete
   • BThe user's session token is cached and has not expired
   • CThe conditional access policy is not enabled
   • DThe user is a member of the excluded group, so the policy does not apply
   Reveal Solution Discussion Select an answer first
5. 29expert · hard

   A company uses Azure AD with MFA enforced via conditional access. A group of users reports they are prompted for MFA every time they access Microsoft 365, even though the conditional access policy has a session control set to 'Sign-in frequency: Every 30 days'. The users are accessing from the same trusted location. What is the most likely cause?

   • AThe conditional access policy is applied to all cloud apps instead of only Microsoft 365
   • BThe MFA registration status for these users is set to 'Require re-registration'
   • CThe users' devices are not compliant with Intune policies
   • DThe sign-in frequency setting is not supported for federated users
   Reveal Solution Discussion Select an answer first
6. 30foundation · easy

   A cloud security engineer is troubleshooting a user's inability to access a cloud resource. Which initial step is most appropriate in a systematic troubleshooting approach?

   • ACheck the user's network connectivity before anything else
   • BImmediately modify the user's permissions to grant broader access
   • CReboot the user's workstation to clear any cached credentials
   • DReproduce the issue and gather relevant logs and error messages
   Reveal Solution Discussion Select an answer first