1. What is Least privilege ? Junior A. list specifying which subjects may access a resource and what operations they may perform B. Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment C. controls and tools for securing, monitoring, and auditing privileged accounts D. granting only the minimum permissions needed to perform a task
2. Which term means: "granting only the minimum permissions needed to perform a task"? Junior A. Privileged Access Management (PAM) B. Identity C. Least privilege D. Policy as code
3. Which statement is correct? Junior A. Least privilege — periodic review where managers re-attest that users still need their granted access B. Least privilege — controls and tools for securing, monitoring, and auditing privileged accounts C. Least privilege — granting only the minimum permissions needed to perform a task D. Least privilege — RBAC assigns access via static roles; ABAC evaluates dynamic attributes and policies at request time
4. What is RBAC ? Junior A. splitting critical tasks across multiple people so no single individual can commit fraud alone B. Role-Based Access Control granting permissions to roles that users are assigned to C. periodic review where managers re-attest that users still need their granted access D. expressing authorization rules in versioned, testable code (e.g. OPA/Rego)
5. Which term means: "Role-Based Access Control granting permissions to roles that users are assigned to"? Junior A. RBAC B. Identity C. Mandatory Access Control (MAC) D. Access certification
6. Which statement is correct? Junior A. RBAC — granting elevated permissions only temporarily for a specific task, then revoking them B. RBAC — controls and tools for securing, monitoring, and auditing privileged accounts C. RBAC — periodic review where managers re-attest that users still need their granted access D. RBAC — Role-Based Access Control granting permissions to roles that users are assigned to
7. What is Access Control List (ACL) ? Junior A. periodic review where managers re-attest that users still need their granted access B. creating and granting accounts and access rights to identities C. elevated rights (e.g. admin/root) that require stronger controls and monitoring D. list specifying which subjects may access a resource and what operations they may perform
8. Which term means: "list specifying which subjects may access a resource and what operations they may perform"? Junior A. RBAC vs ABAC B. Access certification C. Policy as code D. Access Control List (ACL)
9. Which statement is correct? Junior A. Access Control List (ACL) — list specifying which subjects may access a resource and what operations they may perform B. Access Control List (ACL) — granting only the minimum permissions needed to perform a task C. Access Control List (ACL) — periodic review where managers re-attest that users still need their granted access D. Access Control List (ACL) — elevated rights (e.g. admin/root) that require stronger controls and monitoring
10. What is Identity ? Junior A. representation of a user, service, or device that can be authenticated and authorized B. Role-Based Access Control granting permissions to roles that users are assigned to C. list specifying which subjects may access a resource and what operations they may perform D. Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment
11. Which term means: "representation of a user, service, or device that can be authenticated and authorized"? Junior A. Identity B. Just-in-time access C. Policy as code D. Access Control List (ACL)
12. Which statement is correct? Junior A. Identity — Role-Based Access Control granting permissions to roles that users are assigned to B. Identity — list specifying which subjects may access a resource and what operations they may perform C. Identity — controls and tools for securing, monitoring, and auditing privileged accounts D. Identity — representation of a user, service, or device that can be authenticated and authorized
13. What is Provisioning ? Junior A. Role-Based Access Control granting permissions to roles that users are assigned to B. granting only the minimum permissions needed to perform a task C. expressing authorization rules in versioned, testable code (e.g. OPA/Rego) D. creating and granting accounts and access rights to identities
14. Which term means: "creating and granting accounts and access rights to identities"? Junior A. ABAC B. Provisioning C. Privileged access D. Deprovisioning
15. Which statement is correct? Junior A. Provisioning — creating and granting accounts and access rights to identities B. Provisioning — Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment C. Provisioning — representation of a user, service, or device that can be authenticated and authorized D. Provisioning — expressing authorization rules in versioned, testable code (e.g. OPA/Rego)
16. What is Deprovisioning ? Junior A. Role-Based Access Control granting permissions to roles that users are assigned to B. granting elevated permissions only temporarily for a specific task, then revoking them C. promptly revoking access and disabling accounts when no longer needed (e.g. offboarding) D. controls and tools for securing, monitoring, and auditing privileged accounts
17. Which term means: "promptly revoking access and disabling accounts when no longer needed (e.g. offboarding)"? Junior A. Privileged Access Management (PAM) B. Deprovisioning C. Privileged access D. ABAC
18. Which statement is correct? Junior A. Deprovisioning — promptly revoking access and disabling accounts when no longer needed (e.g. offboarding) B. Deprovisioning — granting only the minimum permissions needed to perform a task C. Deprovisioning — periodic review where managers re-attest that users still need their granted access D. Deprovisioning — RBAC assigns access via static roles; ABAC evaluates dynamic attributes and policies at request time
19. What is ABAC ? Mid A. elevated rights (e.g. admin/root) that require stronger controls and monitoring B. Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment C. granting elevated permissions only temporarily for a specific task, then revoking them D. creating and granting accounts and access rights to identities
20. Which term means: "Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment"? Mid A. RBAC B. Access Control List (ACL) C. Privileged access D. ABAC
21. Which statement is correct? Mid A. ABAC — Role-Based Access Control granting permissions to roles that users are assigned to B. ABAC — Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment C. ABAC — controls and tools for securing, monitoring, and auditing privileged accounts D. ABAC — representation of a user, service, or device that can be authenticated and authorized
22. What is Separation of duties ? Mid A. splitting critical tasks across multiple people so no single individual can commit fraud alone B. Role-Based Access Control granting permissions to roles that users are assigned to C. controls and tools for securing, monitoring, and auditing privileged accounts D. expressing authorization rules in versioned, testable code (e.g. OPA/Rego)
23. Which term means: "splitting critical tasks across multiple people so no single individual can commit fraud alone"? Mid A. Identity B. ABAC C. Separation of duties D. RBAC vs ABAC
24. Which statement is correct? Mid A. Separation of duties — splitting critical tasks across multiple people so no single individual can commit fraud alone B. Separation of duties — expressing authorization rules in versioned, testable code (e.g. OPA/Rego) C. Separation of duties — controls and tools for securing, monitoring, and auditing privileged accounts D. Separation of duties — periodic review where managers re-attest that users still need their granted access
25. What is Privileged access ? Mid A. elevated rights (e.g. admin/root) that require stronger controls and monitoring B. expressing authorization rules in versioned, testable code (e.g. OPA/Rego) C. granting elevated permissions only temporarily for a specific task, then revoking them D. Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment
26. Which term means: "elevated rights (e.g. admin/root) that require stronger controls and monitoring"? Mid A. Deprovisioning B. Access Control List (ACL) C. Privileged access D. Mandatory Access Control (MAC)
27. Which statement is correct? Mid A. Privileged access — representation of a user, service, or device that can be authenticated and authorized B. Privileged access — list specifying which subjects may access a resource and what operations they may perform C. Privileged access — elevated rights (e.g. admin/root) that require stronger controls and monitoring D. Privileged access — system-enforced access based on labels/clearances that users cannot override
28. What is RBAC vs ABAC ? Mid A. splitting critical tasks across multiple people so no single individual can commit fraud alone B. controls and tools for securing, monitoring, and auditing privileged accounts C. RBAC assigns access via static roles; ABAC evaluates dynamic attributes and policies at request time D. list specifying which subjects may access a resource and what operations they may perform
29. Which term means: "RBAC assigns access via static roles; ABAC evaluates dynamic attributes and policies at request time"? Mid A. Policy as code B. Identity C. Just-in-time access D. RBAC vs ABAC
30. Which statement is correct? Mid A. RBAC vs ABAC — granting elevated permissions only temporarily for a specific task, then revoking them B. RBAC vs ABAC — RBAC assigns access via static roles; ABAC evaluates dynamic attributes and policies at request time C. RBAC vs ABAC — system-enforced access based on labels/clearances that users cannot override D. RBAC vs ABAC — Attribute-Based Access Control deciding access from attributes of subject, resource, action, and environment Showing 30 of 45 IAM & Access Control questions — the full set, with answers, explanations and an AI tutor on every question, is inside.