CCSK Identity and Access Management in Cloud 2

Question 1

What is 'identity sprawl' in cloud environments and why is it a security concern?

Accepted Answer

The proliferation of unmanaged identities across multiple cloud services, creating governance blind spots

Answer

Identity sprawl occurs when identities multiply across cloud services without central governance, making it difficult to track, manage, and revoke access.

Question 2

According to CCSK, what is the significance of the 'principle of least privilege' in cloud IAM?

Accepted Answer

Users should only receive the minimum access necessary to perform their job functions

Answer

Least privilege limits the potential damage of compromised credentials by ensuring each identity has only the permissions needed for its specific tasks.

Question 3

What is 'OAuth 2.0' and how is it relevant to CCSK cloud security?

Accepted Answer

An authorization framework that allows third-party applications to access resources on behalf of users without exposing credentials

Answer

OAuth 2.0 enables delegated authorization — applications obtain scoped access tokens without the user's credentials being shared with the third party.

Question 4

What is 'SAML' and what role does it play in cloud federated identity?

Accepted Answer

Security Assertion Markup Language; it enables SSO by passing authentication assertions between identity and service providers

Answer

SAML is an XML-based standard for exchanging authentication and authorization data, enabling single sign-on between an identity provider and cloud service providers.

Question 5

In CCSK, what is the recommended practice for managing dormant or unused cloud accounts?

Accepted Answer

Regularly audit and disable or delete accounts that have been inactive beyond a defined threshold

Answer

Dormant accounts represent unnecessary risk; regular access reviews and removal of unused accounts reduces the attack surface.

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK - Certificate of Cloud Security Knowledge Practice Test

CCSK Identity and Access Management in Cloud 2