MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

Which cloud computing component is primarily responsible for controlling user access to resources?
a. Identity and Access Management (IAM)
b. Database Management System (DBMS)
c. Content Delivery Network (CDN)
d. Container Orchestration Engine
Answer: a. Identity and Access Management (IAM)placementpreparation+1
What does the Principle of Least Privilege mean in cloud user permissions management?
a. Granting users all available permissions by default
b. Providing only necessary permissions required for tasks
c. Restricting access to network devices only
d. Allowing users to assign their own permissions
Answer: b. Providing only necessary permissions required for tasksexamradar+1
In AWS, which service is specifically used to manage users, groups, roles, and permissions?
a. EC2
b. IAM
c. S3
d. VPC
Answer: b. IAMdev+1
Which access control model assigns permissions to jobs or functions in an organization?
a. Discretionary Access Control
b. Mandatory Access Control
c. Role-Based Access Control
d. Rule-Based Access Control
Answer: c. Role-Based Access Controlcloudeagle+1
What security feature ensures that users must provide two or more credentials before gaining access to cloud services?
a. Single Sign-On (SSO)
b. Multi-Factor Authentication (MFA)
c. Biometric Authentication
d. Password-only Authentication
Answer: b. Multi-Factor Authentication (MFA)cloudeagle
Which command in AWS CLI is used to create a new IAM user?
a. aws iam create-user
b. aws iam add-user
c. aws iam new-user
d. aws iam make-user
Answer: a. aws iam create-userplacementpreparation
What type of policy is used to explicitly define user permissions in cloud environments?
a. Service Policy
b. Access Policy
c. IAM Policy
d. Network Policy
Answer: c. IAM Policydev+1
Which of the following is NOT a typical feature of Identity and Access Management (IAM)?
a. User authentication
b. Permission policies
c. Bandwidth allocation
d. Resource access control
Answer: c. Bandwidth allocationplacementpreparation
What is the recommended first step when detecting suspicious activity in a user’s cloud account?
a. Grant admin rights
b. Reset the user’s password
c. Enable multi-factor authentication
d. Remove all permissions
Answer: c. Enable multi-factor authenticationcloudeagle+1
Which best describes the function of Access Control Lists (ACL) in user permissions?
a. Encrypting data
b. Defining permissions for resources
c. Assigning network addresses
d. Monitoring real-time activity
Answer: b. Defining permissions for resourcesexamradar+1
When a cloud user needs programmatic access without a permanent user account, what is recommended?
a. Assigning a role
b. Creating a group
c. Granting full admin access
d. Using root credentials
Answer: a. Assigning a roledev+1
Which of these is an example of temporary permissions in cloud environments?
a. Permanent admin user
b. Service account with static keys
c. Role-based session tokens
d. Root user login
Answer: c. Role-based session tokensplacementpreparation+1
Which principle should be followed when creating user accounts for cloud administration?
a. Use shared credentials for all staff
b. Assign one account to many users
c. Assign individual accounts per user
d. Provide access to everyone
Answer: c. Assign individual accounts per userstudy+1
What is a core risk of not removing inactive cloud user accounts?
a. Increased cost only
b. Potential unauthorized access
c. Service performance degradation
d. Compliance improvement
Answer: b. Potential unauthorized accesscloudeagle
Which method is recommended to automatically review and adjust user permissions regularly?
a. Manual checking by admins
b. Permission audits and automation tools
c. Ignoring until incidents occur
d. Granting permanent access
Answer: b. Permission audits and automation toolscloudeagle
Which group in Windows environments typically manages user rights and permissions for domains?
a. Power Users
b. Local Users
c. Domain Users
d. Root
Answer: c. Domain Usersexamradar
In cloud security, what does the term “privilege creep” refer to?
a. Permission assigned to new users
b. Gradual accumulation of unnecessary privileges
c. Monitoring privileged users
d. Reducing admin rights
Answer: b. Gradual accumulation of unnecessary privilegestechtarget+1
Which access control model uses security labels to assign permissions?
a. Discretionary Access Control (DAC)
b. Mandatory Access Control (MAC)
c. Rule-Based Access Control (RuBAC)
d. Identity-Based Access Control
Answer: b. Mandatory Access Control (MAC)examradar
Which AWS IAM entity is best for delegating management tasks to multiple administrators?
a. IAM User
b. IAM Group
c. IAM Role
d. Root Account
Answer: b. IAM Groupdev+1
What is a recommended response to suspected account compromise in cloud systems?
a. Disable monitoring
b. Reset user credentials and review access
c. Ignore the alert
d. Increase network latency
Answer: b. Reset user credentials and review accessplacementpreparation+1
Why should organizations centralize user permissions management?
a. Increase redundancy
b. Simplifies audits and policy enforcement
c. Expose sensitive data
d. Reduce logging
Answer: b. Simplifies audits and policy enforcementcloudeagle
Which is a benefit of assigning permissions based on roles rather than individuals?
a. Easier mass updates
b. More complex management
c. Increased privilege creep
d. Decreased compliance
Answer: a. Easier mass updatescloudeagle
Which practice helps minimize the risk of insider threats in cloud environments?
a. Assigning admin access to all users
b. Enforcing the least privilege principle
c. Ignoring user activity logs
d. Disabling multi-factor authentication
Answer: b. Enforcing the least privilege principleexamradar+1
Which cloud command is used to grant a new policy to an existing IAM user in AWS?
a. aws iam attach-user-policy
b. aws iam make-policy
c. aws iam assign-policy
d. aws iam new-user-policy
Answer: a. aws iam attach-user-policyplacementpreparation
What is true about service accounts in cloud platforms?
a. Used only for human users
b. Represent system processes and applications
c. Have no permissions by default
d. Only exist in on-premise systems
Answer: b. Represent system processes and applicationsdev+1
What should be done immediately when a user leaves the organization?
a. Assign more permissions
b. Migrate their account
c. Revoke user access
d. Give admin rights
Answer: c. Revoke user accessstudy+1
Which policy element defines specific actions allowed or denied in cloud IAM?
a. Statement
b. Version
c. Resource
d. Principal
Answer: a. Statementdev+1
What does Single Sign-On (SSO) achieve for cloud users?
a. Allows multiple users to use the same account
b. Enables one set of credentials for multiple services
c. Prevents access to cloud resources
d. Doubles authentication factors
Answer: b. Enables one set of credentials for multiple servicesdev+1
In cloud IAM, what is a policy document’s default effect if not specified?
a. Allow
b. Deny
c. Prompt
d. Expire
Answer: b. Denyplacementpreparation+1
Which is NOT a responsibility of a cloud IAM administrator?
a. Define user roles
b. Monitor access logs
c. Disable unused accounts
d. Manage database transactions
Answer: d. Manage database transactionscloudeagle+1
The process of confirming user identity before granting cloud access is known as:
a. Authorization
b. Authentication
c. Backup
d. Encryption
Answer: b. Authenticationexamradar+1
What ensures permissions are only active for a limited time in cloud IAM?
a. Permanent keys
b. Temporary security credentials
c. Static passwords
d. Unused policies
Answer: b. Temporary security credentialsplacementpreparation+1
What is the advantage of using policy conditions in cloud IAM policies?
a. Allow unconditional access
b. Restrict permissions based on context
c. Replace all policy statements
d. Ignore user actions
Answer: b. Restrict permissions based on contextdev+1
Which is a feature of Attribute-Based Access Control (ABAC) in cloud environments?
a. Access based solely on folders
b. Decisions based on user and resource attributes
c. Only based on usernames
d. Resource locking
Answer: b. Decisions based on user and resource attributesplacementpreparation+1
Which scenario should use resource-based policies in cloud platforms?
a. Users managing only their own accounts
b. Granting cross-account access to resources
c. For root user management only
d. Network layer access control
Answer: b. Granting cross-account access to resourcesdev+1
What is policy inheritance in cloud permissions?
a. Users inheriting permissions from network settings
b. Applying policies to groups and subgroups
c. Automatic encryption by default
d. Revoking all user permissions
Answer: b. Applying policies to groups and subgroupsplacementpreparation+1
What command displays all IAM users in an AWS account using CLI?
a. aws iam list-users
b. aws iam show-all
c. aws user lookup
d. aws group display
Answer: a. aws iam list-usersplacementpreparation
When is it appropriate to use managed policies in a cloud environment?
a. For granular one-off permissions
b. For consistent, reusable permissions across accounts
c. Only for root users
d. For network configuration
Answer: b. For consistent, reusable permissions across accountsdev+1
Which is considered a best practice when using root accounts in cloud environments?
a. Regular use for daily operations
b. Disable multi-factor authentication
c. Minimize usage and protect credentials with MFA
d. Share credentials with the whole team
Answer: c. Minimize usage and protect credentials with MFAcloudeagle+1
What auditing feature tracks user actions in cloud applications?
a. System restore
b. Activity logs
c. Network routers
d. Software lifecycle management
Answer: b. Activity logscloudeagle+1
What permission type allows users to only view but not change resources?
a. Admin
b. Read-only
c. Full access
d. Owner
Answer: b. Read-onlydev+1
Which scenario necessitates custom IAM policies?
a. Applying the same policy to all users
b. Unique permissions for specialized tasks
c. Default options only
d. Blocking all access
Answer: b. Unique permissions for specialized tasksplacementpreparation+1
What problem arises if permissions are not reviewed after cloud migrations?
a. Increased compliance
b. Unintended privilege exposure
c. Reduced costs
d. Automatic encryption
Answer: b. Unintended privilege exposurecloudeagle
Which command modifies permissions on files in Unix-based cloud environments?
a. chown
b. chmod
c. whoami
d. su
Answer: b. chmodexamradar
In IAM, what is the effect of an explicit deny statement?
a. Ignores the request
b. Overrides all allow permissions
c. Is only considered if no allow exists
d. Grants elevated access
Answer: b. Overrides all allow permissionsdev+1
Why should organizations separate duties across different IAM users and roles?
a. Simplifies passwords
b. Enhances security and reduces risk
c. Reduces monitoring needs
d. Increases cost
Answer: b. Enhances security and reduces riskcloudeagle+1
What is the purpose of allowing resource tagging in cloud IAM?
a. Enhance visual appearance
b. Organize and control permissions by tags
c. Change encryption status
d. Allocate more bandwidth
Answer: b. Organize and control permissions by tagsplacementpreparation+1
When should an admin use service-linked roles in cloud computing?
a. For user-level permissions only
b. To delegate permissions to cloud services themselves
c. To disable audit tracking
d. To assign password policies
Answer: b. To delegate permissions to cloud services themselvesdev+1
How does enabling account lockout after failed login attempts improve security?
a. Increases audit complexity
b. Reduces brute-force attack risk
c. Lowers user productivity
d. Removes monitoring requirements
Answer: b. Reduces brute-force attack riskcloudeagle
Why is continuous monitoring of user access critical in cloud computing?
a. Improves hardware compatibility
b. Quickly identifies suspicious or unauthorized activity
c. Disables all log collection
d. Replaces all policy reviews
Answer: b. Quickly identifies suspicious or unauthorized activitycloudeagle

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info