Sample Questions
User Management
Which is NOT a benefit of a role-based access control (RBAC)?
- a) Reduces administrative costs
- b) Easy to comply with privacy regulations.
- c) Easy to modify user permissions by modifying the related role.
- d) Need to assign permissions for each individual user.
How do application roles differ from organization roles?
- a) Application roles have a wider scope and can cross organizational boundaries.
- b) There is no difference; both types of roles serve the same purpose.
- c) Application roles are specific to an application and manage access within it, unlike organization roles which are confined to organizational scope.
- d) Application roles are only used for display settings in applications.
Access Delegation with OAuth
What is a problem in traditional access management?
- a) Security threats
- b) The inconvenience of remembering multiple passwords.
- c) Creating accounts in every application takes time.
- d) All of the above.
Agentic AI
Which of the following are the "Four A’s" pillars used to address AI agent challenges?
- a) Assess, Analyze, Automate, Audit
- b) Administer, Authenticate, Authorize, Audit
- c) Access, Authenticate, Authorize, Archive
- d) Administer, Automate, Authenticate, Apply
Single Sign-On
What is NOT a standard authorization flow in OIDC?
- a) Authorization Code
- b) Implicit
- c) Decoupled
- d) Hybrid
Strong Authentication
How does passwordless authentication improve user experience?
- a) By eliminating the need to remember and type passwords.
- b) By requiring additional security questions.
- c) By increasing the time it takes to log in.
- d) By restricting access to fewer devices.
The most common form of authentication is
- a) Username-password .
- b) Mobile phone
- c) PIN
- d) Fingerprint scanner
Authorization
Select the correct statement from the following
- a) Access control is granting permission to access a resource.
- b) Authorization is the selective restriction imposed on accessing a resource.
- c) Access control is the selective restriction imposed on accessing a resource.
- d) Access control is no different from authorization.
Multitenancy
Which is an example of multi-tenancy?
- a) Asgardeo.
- b) AWS.
- c) Salesforce.
- d) All of the above