Resource Policies Quiz

Quiz covering Secure Access

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   Which principle dictates that a user should be granted only the minimum levels of access necessary to perform their job functions?

2. 2

   When implementing Attribute-Based Access Control (ABAC), which of the following is considered a primary advantage over Role-Based Access Control (RBAC)?

3. 3

   In a cloud environment, you need to restrict access to an S3 bucket so that only requests originating from your organization's specific VPC are allowed. Which policy type should you apply?

4. 4

   You are auditing access policies and discover an 'Allow' statement that overlaps with a 'Deny' statement for the same resource. How do most cloud authorization engines resolve this conflict?

5. 5

   An application requires access to a database. Instead of embedding static credentials in the code, you assign a managed identity to the application and grant that identity access to the database. What security risk does this specifically mitigate?