Security Architecture IAM Quiz
Test your knowledge of Security Architecture and Identity & Access Management. Answer all questions to the best of your ability.
Which of the following best describes the principle of Least Privilege?
*
Users have only the access necessary to perform their job functions.
All users have administrator rights.
Users can access any resource at any time.
Access is granted based on seniority.
What does the acronym IAM stand for in cybersecurity?
*
Identity and Access Management
Internet Account Management
Internal Authentication Mechanism
Information Access Model
Which of the following is NOT a common authentication factor?
*
Something you know
Something you have
Something you are
Something you like
Which protocol is most commonly used for Single Sign-On (SSO) in enterprise environments?
*
SAML
SMTP
FTP
HTTP
In IAM, what is the primary purpose of Role-Based Access Control (RBAC)?
*
To assign permissions based on user roles
To allow access to everyone
To restrict access to network devices only
To enforce password policies
Which of the following is a benefit of implementing Multi-Factor Authentication (MFA)?
*
Reduces the risk of unauthorized access
Eliminates the need for passwords
Allows anonymous logins
Increases network bandwidth
Select all examples of IAM tools.
*
Okta
Azure Active Directory
AWS IAM
Adobe Photoshop
What is the main risk of not revoking access for former employees?
*
Potential unauthorized access to systems
Increased network speed
Lower storage costs
Better customer service
Which of the following best describes 'Federated Identity'?
*
A user's digital identity is shared across multiple systems or organizations.
A user has separate credentials for each application.
A user never logs in.
A user has no access to any system.
Briefly explain what an Access Control List (ACL) is in the context of IAM.
*
Which statement is true about Just-In-Time (JIT) access in IAM?
*
Access is granted only when needed and for a limited time.
Access is granted permanently to all users.
JIT access removes all restrictions on data.
JIT access is only used for physical security.
Submit Quiz
Should be Empty: