Identity u0026 Access Management (IAM) in the Cloud Quiz Quiz

Challenge your understanding of cloud-based Identity and Access Management (IAM) principles, security practices, and real-world scenarios. This quiz helps you sharpen your knowledge of IAM concepts, policy types, authentication factors, and user management roles in the cloud.

1. Principle of Least Privilege

   Which principle should you follow to ensure that users in a cloud environment only have the necessary permissions to perform their job functions, and nothing more?

   1. Least Privilege
   2. Need-to-Know Basis
   3. Complete Access
   4. All-Access Policy

   Explanation: The principle of least privilege ensures users only get the minimum permissions they require. This reduces risk and limits the potential impact of compromised accounts. 'Need-to-Know Basis' is related but more focused on information sharing, not all permissions. 'Complete Access' and 'All-Access Policy' grant unnecessary rights, increasing vulnerability and violating security best practices.

2. Multi-Factor Authentication

   What is a key benefit of implementing multi-factor authentication (MFA) for cloud users who log in from multiple devices?

   1. Simplifies password requirements
   2. Allows guest user access
   3. Eliminates the need for passwords
   4. Reduces account compromise risk

   Explanation: MFA adds an extra layer of security, helping prevent unauthorized access even if a password is stolen. It does not eliminate the need for passwords, though in some advanced cases it can reduce their reliance. MFA does not give guest user access nor does it always simplify password requirements. Its main value lies in decreasing the chance of account compromise.

3. IAM Policy Types

   In a cloud environment, what type of policy defines permissions for a specific group rather than for an individual user?

   1. User policy
   2. Role-based policy
   3. Resource policy
   4. Group policy

   Explanation: A group policy sets permissions for all users who are part of a defined group, streamlining access management for teams with similar roles. Role-based policies are related but focus on abstract roles rather than group memberships. Resource policies apply to specific resources, and user policies grant permissions to individual accounts. Group policies specifically target user collections.

4. Temporary Credentials for Contractors

   A company wants to give a contractor access to its cloud storage for two weeks without creating a permanent account. Which IAM feature is most appropriate for this scenario?

   1. Root user access
   2. Password rotation
   3. Account mirroring
   4. Temporary credentials

   Explanation: Temporary credentials allow time-limited access, perfect for contractors or third parties who don't need ongoing access. Password rotation is for regularly changing passwords to existing accounts, not creating new temporary ones. Granting root user access is risky and not advised for short-term access. Account mirroring is not a standard IAM term and does not serve this purpose.

5. Access Review and Attestation

   Why is it important to regularly conduct access reviews and user attestations in a cloud IAM environment?

   1. To generate more audit reports
   2. To ensure only appropriate access remains granted
   3. To assign random permissions
   4. To increase network traffic

   Explanation: Regular access reviews and user attestations help verify that permissions are up to date and aligned with users’ actual job roles, reducing unnecessary access. This does not increase network traffic, nor is the primary goal to produce audit reports. Assigning random permissions would create security risks and is never a recommended practice.