MCQs

Disclaimer:

Educational Use Only:

The website links provided are to be used strictly for educational and knowledge-gaining purposes only.

No Misuse:

Do not misuse the links or the information contained therein for any commercial, illegal, or unethical activities.

Respect for Websites and Businesses:

Respect the intellectual property and business interests of the websites and their owners. Do not attempt to alter, copy, or redistribute content without proper authorization.

Acknowledge Value of Knowledge:

Recognize and value the knowledge and resources shared by these websites. Use the information responsibly and ethically.

No Endorsement:

The provision of these links does not imply endorsement of the linked sites, their content, or their products and services. Users are responsible for evaluating the suitability and accuracy of the information.

User Responsibility:

By accessing these links, you agree to use the information at your own risk and to comply with all applicable laws and website terms of use.

What is the primary purpose of logical access management in cloud computing?
a. Monitoring network traffic
b. Restricting access to authorized users
c. Hardware maintenance
d. Allocating storage resources
Answer: b. Restricting access to authorized usersminiorange+1
Which protocol is commonly used for authentication in logical access management?
a. SMTP
b. LDAP
c. FTP
d. SNMP
Answer: b. LDAPpathlock+1
What are Access Control Lists (ACLs) used for in cloud security?
a. Encrypting data
b. Controlling access to resources
c. Increasing network speed
d. Managing billing
Answer: b. Controlling access to resourcescloud.google+1
In cloud IAM, what does RBAC stand for?
a. Resource-Based Access Control
b. Role-Based Access Control
c. Random-Based Access Control
d. Real-Time Based Access Control
Answer: b. Role-Based Access Controlexamradar+1
Which of the following methods enhances authentication in cloud environments?
a. Single-factor authentication
b. Password reuse
c. Multi-factor authentication
d. Disabling all passwords
Answer: c. Multi-factor authenticationstrongdm+1
What is the principle of least privilege?
a. Grant maximum access to all users
b. Grant the minimum required access
c. Deny access to all users
d. Ignore access rights
Answer: b. Grant the minimum required accesspathlock+1
Which type of access control restricts digital resource usage based on user identity?
a. Physical access control
b. Logical access control
c. Environmental access control
d. Network access control
Answer: b. Logical access controlcybersecurity-automation+1
What function does identity management provide in cloud computing?
a. Data encryption
b. User authentication and authorization
c. Physical security
d. Hardware provisioning
Answer: b. User authentication and authorizationcybersecurity-automation+1
What does IAM stand for in cloud security?
a. Internet Access Management
b. Identity and Access Management
c. Interface Access Management
d. Internal Authentication Module
Answer: b. Identity and Access Managementplacementpreparation+1
What is a recommended practice for managing cloud IAM permissions?
a. Assign all permissions by default
b. Perform regular permission audits
c. Allow password sharing
d. Ignore user roles
Answer: b. Perform regular permission auditscloud.google+1
Which AWS CLI command is used to create a new IAM user?
a. aws iam new-user
b. aws iam create-user
c. aws iam make-user
d. aws iam add-user
Answer: b. aws iam create-userplacementpreparation
What could cause a cloud user to lose access to resources they previously had?
a. Network outage
b. Incorrect IAM policy
c. Hardware malfunction
d. Increased billing
Answer: b. Incorrect IAM policyplacementpreparation
What is the first step in mitigating a cloud data breach?
a. Shut down all systems
b. Notify customers
c. Isolate the affected system
d. Increase CPU allocation
Answer: c. Isolate the affected systemplacementpreparation
Which service provides direct, private connectivity between a customer’s data center and a cloud provider?
a. Virtual Private Cloud (VPC)
b. Identity Management Service
c. Storage Gateway
d. Security Groups
Answer: a. Virtual Private Cloud (VPC)placementpreparation
How does multi-factor authentication (MFA) improve cloud security?
a. It slows login times
b. It requires two or more credentials for access
c. It removes the need for passwords
d. It only works on-premises
Answer: b. It requires two or more credentials for accessstrongdm+1
What does Zero Trust mean in cloud security?
a. Complete trust in all users
b. Assume every user or device is untrusted
c. Trust only external networks
d. Trust only internal servers
Answer: b. Assume every user or device is untrustedcheckpoint
What is a Security Kernel in logical access management?
a. The central part enforcing access control
b. Network device
c. User database
d. Application server
Answer: a. The central part enforcing access controlscribd
Which is NOT typically managed by IAM?
a. User identities
b. Resource access
c. Bandwidth allocation
d. Permission policies
Answer: c. Bandwidth allocationplacementpreparation
Why segment units based on identities?
a. Enhance resource sharing
b. Reduce insider threats
c. Increase storage space
d. Lower network speed
Answer: b. Reduce insider threatspathlock
In Google Cloud, what role should be assigned for viewing storage objects using least privilege?
a. storage.admin
b. storage.editor
c. storage.objectViewer
d. storage.owner
Answer: c. storage.objectViewercloud.google
What is an IAM role used for in cloud computing?
a. Representing individuals
b. Assigning permissions to entities
c. Deleting resources
d. Creating subnets
Answer: b. Assigning permissions to entitiesplacementpreparation
What is logical access auditing?
a. Verifying software licenses
b. Recording user actions for accountability
c. Running batch jobs
d. Encrypting all data at rest
Answer: b. Recording user actions for accountabilitycybersecurity-automation
What is the most immediate security action if unusual cloud login activity is detected?
a. Disable all user accounts
b. Reset all passwords
c. Enable multi-factor authentication
d. Shut down all services
Answer: c. Enable multi-factor authenticationplacementpreparation
Which component is critical in logical access management for compliance?
a. Access logging and monitoring
b. Increasing memory size
c. Disabling passwords
d. Hardware upgrades
Answer: a. Access logging and monitoringcloud.google+1
Which best describes the function of logical access controls?
a. Grant network bandwidth
b. Restrict access to digital resources
c. Provide physical security
d. Allocate billing
Answer: b. Restrict access to digital resourcesminiorange+1
What is NOT a logical security measure?
a. Biometrics authentication
b. Hardware firewalls
c. Security certificates
d. Password policies
Answer: b. Hardware firewallscybersecurity-automation
What is the primary purpose of using roles in IAM?
a. Simplify permission assignments
b. Encrypt cloud backups
c. Increase data throughput
d. Monitor user browsing history
Answer: a. Simplify permission assignmentspathlock+1
Which protocol supports federated authentication for cloud access?
a. SAML
b. SMTP
c. POP3
d. DHCP
Answer: a. SAMLpathlock
Which compliance frameworks require logical access management?
a. PCI DSS and NIST CSF
b. ISO 9001 and ITIL
c. Six Sigma and TOGAF
d. PMBOK and COBIT
Answer: a. PCI DSS and NIST CSFminiorange+1
What is the recommended policy for unused cloud accounts?
a. Increase permissions
b. Limit network speed
c. Disable unused accounts
d. Ignore their activity
Answer: c. Disable unused accountspathlock+1
Which tool provides real-time alerts for IAM activity?
a. IAM Cloudwatch or equivalent audit service
b. DNS traceroute
c. ARP ping
d. FTP server
Answer: a. IAM Cloudwatch or equivalent audit servicepathlock
What is a common risk in weak logical access management?
a. Unauthorized access
b. Hardware overheating
c. High storage billing
d. CPU bottlenecks
Answer: a. Unauthorized accessminiorange+1
What does authentication verify?
a. User identity
b. Hardware firmware
c. Storage allocation
d. Network topology
Answer: a. User identitycybersecurity-automation
What is the main function of access control policies in cloud services?
a. Define who can access specific resources
b. Monitor temperature
c. Increase computation power
d. Change licensing terms
Answer: a. Define who can access specific resourcescloud.google+1
Which type of access control is used for time-based resource restriction?
a. Temporal Access Control
b. Role-Based Access Control
c. Mandatory Access Control
d. Discretionary Access Control
Answer: a. Temporal Access Controlexamradar
When should cloud IAM privileges be reviewed?
a. Once every five years
b. Regularly and after role changes
c. Only after a breach occurs
d. Never
Answer: b. Regularly and after role changescloud.google+1
What is used to enforce strong password policies in cloud IAM?
a. Password complexity requirements
b. File audits
c. Hard drive encryption
d. User self-service password resets
Answer: a. Password complexity requirementscheckpoint+1
In logical access management, what is rule-based access control?
a. Access granted based on predefined rules
b. Access granted to all users
c. Network management based
d. Mandatory access for contractors
Answer: a. Access granted based on predefined rulesexamradar
Which AWS service helps implement least privilege with temporary credentials?
a. IAM roles
b. EC2 instance types
c. S3 storage classes
d. DynamoDB tables
Answer: a. IAM rolesaws.amazon
What is the function of group policies in IAM?
a. Apply permissions to user groups
b. Increase backup speed
c. Manage storage expansion
d. Control network latency
Answer: a. Apply permissions to user groupscheckpoint+1
What is the risk if logical access control is not implemented?
a. Data breaches
b. Low memory usage
c. Slow backups
d. Limited bandwidth
Answer: a. Data breachesminiorange+1
Which type of authentication uses biometric factors?
a. Knowledge-based authentication
b. Biometric authentication
c. Token-based authentication
d. Certificate-based authentication
Answer: b. Biometric authenticationcybersecurity-automation+1
Which practice is central to logical access management in cloud storage?
a. Principle of least privilege
b. Maximizing user access
c. Ignoring permission policies
d. Delayed access reviews
Answer: a. Principle of least privilegestrongdm+1
What does SSO stand for?
a. Single Storage Option
b. Secure Software Operation
c. Single Sign-On
d. Static Session Object
Answer: c. Single Sign-Onpathlock
What is essential for accountability in logical access management?
a. Auditing and logging user activities
b. Increasing resource allocation
c. Disabling all credentials
d. Maximizing permissions
Answer: a. Auditing and logging user activitiescybersecurity-automation
Which form of access control is discretionary?
a. DAC
b. MAC
c. RBAC
d. TAC
Answer: a. DAC (Discretionary Access Control)examradar
What does isolation of cloud workloads prevent?
a. Insider threats
b. Hardware damage
c. Cloud billing spikes
d. Backup delays
Answer: a. Insider threatscheckpoint+1
What is the primary benefit of automating access management workflows?
a. Quicker response to access requests
b. Higher network throughput
c. More manual oversight
d. Increased user errors
Answer: a. Quicker response to access requestsstrongdm
Which IAM feature tracks changes to resource permissions?
a. Access logging
b. Network polling
c. Data deduplication
d. Public cloud gateway
Answer: a. Access loggingcloud.google+1
What’s a best practice for integrating IAM across cloud entities?
a. Apply IAM practices across partners, suppliers, and customers
b. Restrict access solely to IT admins
c. Ignore third-party user access
d. Allow unrestricted guest accounts
Answer: a. Apply IAM practices across partners, suppliers, and customerspathlock

Blog

Systemethic Technologies

Leave a Reply Cancel reply

Useful links

Other Terms & Policies

Contact Info