Cloud identity and access management in Cybersecurity - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is the primary purpose of Cloud Identity and Access Management (IAM)?

Choose the best description of the main goal of Cloud IAM.

A To increase the speed of cloud data processing

B To control who can access cloud resources and what actions they can perform

C To monitor network traffic between cloud servers

D To backup cloud data automatically

💡 Hint

Think about security and permissions in the cloud.

Cloud IAM is designed to manage user identities and their permissions to access cloud resources securely.

📋 Factual

intermediate

Which of the following is NOT a common component of Cloud IAM?

Select the option that is not typically part of Cloud IAM systems.

A Data encryption at rest

B User authentication

C Role-based access control

D Permission management

💡 Hint

Consider what IAM manages directly versus what is handled by other cloud security features.

Data encryption at rest is a security feature but is not directly part of IAM, which focuses on identity and access permissions.

🚀 Application

advanced

What will happen if a user is assigned multiple roles with conflicting permissions in Cloud IAM?

Consider a user who has two roles: one allows deleting files, the other denies deleting files. What is the effective permission?

A The user cannot delete files because deny permissions override allow

B The user’s permissions will be randomly chosen between the two roles

C The user can delete files only during business hours

D The user can delete files because one role allows it

💡 Hint

Think about how deny permissions usually work in access control systems.

In most IAM systems, deny permissions take precedence over allow permissions to ensure security.

🔍 Analysis

advanced

Which scenario best illustrates the principle of least privilege in Cloud IAM?

Identify the example that correctly applies the principle of least privilege.

A Users are allowed to request any permissions they want without approval

B A user is given full admin access to all cloud resources to avoid delays

C A user is granted only the permissions needed to perform their specific job tasks

D All users share a single account with broad permissions for convenience

💡 Hint

Least privilege means giving only the minimum access needed.

The principle of least privilege limits user permissions to only what is necessary, reducing security risks.

❓ Reasoning

expert

Why is multi-factor authentication (MFA) important in Cloud IAM?

Choose the best explanation for why MFA enhances security in cloud identity management.

A It speeds up the login process by skipping password entry

B It automatically grants admin rights to trusted users

C It encrypts all data stored in the cloud

D It requires users to provide two or more proofs of identity, reducing the risk of unauthorized access

💡 Hint

Think about how MFA adds extra steps to verify identity.

MFA requires multiple proofs like a password plus a code from a phone, making it harder for attackers to gain access.