MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is provisioning in the context of cloud account management?
a. Creating and assigning resources to an account
b. Removing all user access
c. Monitoring resource usage
d. Encrypting stored data
Answer: a. Creating and assigning resources to an accountinfisign
Which practice automates the account creation process when onboarding new employees in the cloud?
a. Manual scripting
b. Human Resource integration
c. Verbal approval
d. None of the above
Answer: b. Human Resource integrationinfisign
What does deprovisioning refer to in cloud environments?
a. Granting more access
b. Disabling or deleting accounts not in use
c. Increasing account privileges
d. Adding more resources
Answer: b. Disabling or deleting accounts not in useinfisign
Which is a major risk if deprovisioning is not enforced?
a. Increased compute power
b. Orphaned accounts leading to security risks
c. Lower storage costs
d. Improved usability
Answer: b. Orphaned accounts leading to security risksssh
What is the best way to minimize delays and errors in account provisioning?
a. Manual requests
b. Automating provisioning
c. Physical paperwork
d. Email requests
Answer: b. Automating provisioninginfisign
Role-Based Access Control (RBAC) is fundamental for:
a. Logging errors
b. Managing permissions based on a user’s job role
c. Hardware monitoring
d. Disabling all accounts
Answer: b. Managing permissions based on a user’s job roleinfisign
What periodic action is critical to catch “privilege creep” in cloud environments?
a. Ignoring permissions
b. Frequent audits and reviews
c. Deleting all users
d. Randomizing access rights
Answer: b. Frequent audits and reviewsssh
Account provisioning should adhere to which principle for security?
a. Least privilege
b. Maximum exposure
c. Open access
d. Single-factor authentication
Answer: a. Least privilegessh
Which technology strengthens authentication for cloud account access?
a. Multi-Factor Authentication (MFA)
b. Username only
c. Single password sharing
d. Disabling all authentication
Answer: a. Multi-Factor Authentication (MFA)ssh
What should be immediately done for an employee who leaves the company?
a. Increase access
b. Deprovision their account
c. Change their password
d. Ignore their account
Answer: b. Deprovision their accountbettercloud
What’s a common source of provisioning errors in large cloud systems?
a. Manual processes
b. Automated workflows
c. Regular reviews
d. RBAC implementation
Answer: a. Manual processesinfisign
What should provisioning systems integrate with for seamless onboarding?
a. HR software
b. Web browsers
c. Email clients
d. DNS services
Answer: a. HR softwareinfisign
What is the purpose of account reconciliation in cloud environments?
a. Ensuring account permissions match policies
b. Increasing account quotas
c. Encrypting all user files
d. Generating random user IDs
Answer: a. Ensuring account permissions match policiesinfisign
What is a potential impact of failing to deprovision cloud accounts?
a. Data breaches due to unauthorized access
b. Faster onboarding
c. Smoother workflow
d. Lower power usage
Answer: a. Data breaches due to unauthorized accessssh
Which approach provides time-based access controls during provisioning?
a. Temporary privileged accounts
b. Permanent admin rights
c. Static role assignments
d. None of the above
Answer: a. Temporary privileged accountsssh
What should be the first step when provisioning a privileged account?
a. Assigning only minimal required privileges
b. Full admin access by default
c. Disabling logging
d. Encrypting all network traffic
Answer: a. Assigning only minimal required privilegesssh
Why centralize identity management for cloud provisioning?
a. To manage users and permissions across multiple platforms efficiently
b. To increase manual effort
c. To provide direct access to storage
d. For faster password recovery
Answer: a. To manage users and permissions across multiple platforms efficientlybettercloud
Which method securely manages lifecycle of privileged credentials?
a. Password vaults with automated rotation
b. Default password usage
c. Shared unencrypted spreadsheets
d. Non-expiring passwords
Answer: a. Password vaults with automated rotationssh
In what ways can provisioning errors affect cloud security?
a. Unintended access to sensitive resources
b. Improved documentation
c. Lower hardware costs
d. Enhanced logging
Answer: a. Unintended access to sensitive resourcesssh
What tool can alert to unauthorized provisioning or deprovisioning activity?
a. Automated monitoring/audit solutions
b. Unprotected file sharing
c. Paper logs only
d. None of the above
Answer: a. Automated monitoring/audit solutionsssh
To avoid provisioning/deprovisioning mistakes, organizations should:
a. Adopt automation and workflow approvals
b. Only use paper requests
c. Allow all users to self-approve
d. Ignore provisioning events
Answer: a. Adopt automation and workflow approvalsinfisign
Which policy should apply to all privileged account provisioning in the cloud?
a. Strong authentication and session monitoring
b. Default access for all employees
c. Unlimited access rights by default
d. Infrequent password changes
Answer: a. Strong authentication and session monitoringssh
What is shadow IT in the context of account provisioning?
a. Unauthorized creation of accounts outside official channels
b. Adding another admin for each team
c. Disabling cybersecurity measures
d. Improving network latency
Answer: a. Unauthorized creation of accounts outside official channelsdelinea
The last stage of the user account lifecycle management is:
a. Deprovisioning
b. Onboarding
c. Role assignment
d. Logging
Answer: a. Deprovisioningtechprescient+1
What’s a primary goal of streamlined provisioning in cloud environments?
a. Faster access to resources without compromising security
b. Increasing manual workload
c. Allowing credential sharing
d. Delayed onboarding
Answer: a. Faster access to resources without compromising securityinfisign
Which is a best practice following employee offboarding in cloud computing?
a. Immediate revocation of all assigned access
b. Allowing temporary access for 30 days
c. Keeping all credentials unchanged
d. None of the above
Answer: a. Immediate revocation of all assigned accessinfisign
What automates the mapping of user roles to permissions in cloud provisioning?
a. Role-Based Access Control (RBAC)
b. Single Sign-On (SSO)
c. Universal Data Model (UDM)
d. Session tracking
Answer: a. Role-Based Access Control (RBAC)infisign
Which is NOT a benefit of automating provisioning/deprovisioning?
a. Manual errors
b. Reduced administrative overhead
c. Faster user access
d. Improved security
Answer: a. Manual errorsbettercloud+1
How often should privilege reviews and audits be conducted for cloud user accounts?
a. Regularly, aligned with organizational policy changes
b. Every 10 years
c. Every new cloud provider update
d. Once during account creation
Answer: a. Regularly, aligned with organizational policy changesssh
Provisioning often starts with which of the following?
a. Identity verification and HR integration
b. Random account creation
c. User complaint
d. Email verification only
Answer: a. Identity verification and HR integrationinfisign
Which cloud service model is most associated with automated provisioning?
a. IaaS
b. SaaS
c. PaaS
d. All of the above
Answer: d. All of the aboveplacementpreparation+1
In deprovisioning, what helps ensure revoked access is complete and trackable?
a. Centralized audit logs
b. Paper records only
c. Disabling firewalls
d. Ignoring account closure
Answer: a. Centralized audit logsbettercloud
A common challenge during deprovisioning in a multi-cloud environment is:
a. Synchronizing access removal across clouds
b. Increased hardware failure
c. More virtual machine usage
d. Network latency improvement
Answer: a. Synchronizing access removal across cloudsbettercloud
What key risk does delayed deprovisioning increase?
a. Unchecked access by former employees
b. Quicker onboarding
c. Reduced compliance
d. Higher redundancy
Answer: a. Unchecked access by former employeesbettercloud
What can help reduce over-privileged accounts?
a. Role reviews and re-validation at regular intervals
b. Assigning admin rights to all new users
c. Ignoring role changes
d. Expired passwords only
Answer: a. Role reviews and re-validation at regular intervalsinfisign
Which of the following is best practice post-account deprovisioning?
a. Generating detailed deprovisioning reports
b. Destroying audit logs
c. Assigning new privileges automatically
d. Ignoring former user’s data
Answer: a. Generating detailed deprovisioning reportsbettercloud
Centralized identity platforms simplify account provisioning by:
a. Providing a single location to manage users and permissions
b. Increasing workflow bottlenecks
c. Disabling security
d. Fragmenting user management
Answer: a. Providing a single location to manage users and permissionsbettercloud
Self-service provisioning enables end users to:
a. Request resources with workflow approval
b. Assign admin roles to others
c. Delete all data independently
d. Disable monitoring
Answer: a. Request resources with workflow approvalbettercloud
What is often required to comply with regulatory standards during account deprovisioning?
a. Complete removal of related data and audit trails
b. Forgetting deprovisioned accounts
c. Reducing account limits
d. Upgrading hardware
Answer: a. Complete removal of related data and audit trailsbettercloud
Why is time-stamped logging important for account deprovisioning?
a. Provides evidence for audits and compliance
b. Disables log access
c. Reduces cost
d. Improves hardware usage
Answer: a. Provides evidence for audits and compliancebettercloud
Provisioning should be linked with what process for employee lifecycle events?
a. Human Resources onboarding/offboarding
b. Backup routines
c. Network latency checks
d. Patch management
Answer: a. Human Resources onboarding/offboardingtechprescient+1
In dynamic cloud environments, what feature is crucial for efficient provisioning?
a. Automation and self-service functionality
b. Physical installation
c. Weekly meetings only
d. Paper-based forms
Answer: a. Automation and self-service functionalitybettercloud
Which of the following can cause deprovisioning delays in cloud systems?
a. Manual intervention and fragmented tools
b. Automated systems
c. Integrated platforms
d. RBAC policies
Answer: a. Manual intervention and fragmented toolsbettercloud
To reduce compliance risks, what should be implemented for privileged accounts?
a. Routine access reviews and immediate deprovisioning upon role change
b. Assigning privileges without auditing
c. Static access for all employees
d. Weekly account reactivation
Answer: a. Routine access reviews and immediate deprovisioning upon role changessh+1
Orphaned cloud resources can be minimized by:
a. Automated deprovisioning
b. Ignoring account usage
c. Disabling logging
d. Allowing multiple admins
Answer: a. Automated deprovisioningbettercloud
How can service dependencies be managed during deprovisioning?
a. Mapping dependencies and reviewing them before access removal
b. Random deprovisioning action
c. Increasing account privileges
d. Using default settings for all services
Answer: a. Mapping dependencies and reviewing them before access removaldelinea
What feature is critical in controlling mass provisioning or deprovisioning operations?
a. Approval workflows and robust automation
b. Manual requests only
c. Ignoring user groups
d. Static policies
Answer: a. Approval workflows and robust automationbettercloud
What is the recommended approach to retiring cloud accounts that involve critical systems access?
a. Rigorously record all access removal and back up critical data
b. Ignore documentation
c. Assign to a shadow admin
d. Only log the date of deprovisioning
Answer: a. Rigorously record all access removal and back up critical datassh
Why should organizations group service accounts according to risk level when provisioning/deprovisioning?
a. To apply appropriate security controls per risk category
b. To increase paperwork
c. For hardware assignment
d. To decrease security efficiency
Answer: a. To apply appropriate security controls per risk categorydelinea
The main benefit of lifecycle management in cloud account provisioning and deprovisioning is:
a. Secure, streamlined, and auditable access management
b. Increased manual checks
c. Reduced automation
d. More complexity
Answer: a. Secure, streamlined, and auditable access managementtechprescient+1

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info