Go to home page

Sample Questions

User Management

Which is NOT a benefit of a role-based access control (RBAC)?

  • a) Reduces administrative costs
  • b) Easy to comply with privacy regulations.
  • c) Easy to modify user permissions by modifying the related role.
  • d) Need to assign permissions for each individual user.

How do application roles differ from organization roles?

  • a) Application roles have a wider scope and can cross organizational boundaries.
  • b) There is no difference; both types of roles serve the same purpose.
  • c) Application roles are specific to an application and manage access within it, unlike organization roles which are confined to organizational scope.
  • d) Application roles are only used for display settings in applications.

Access Delegation with OAuth

What is a problem in traditional access management?

  • a) Security threats
  • b) The inconvenience of remembering multiple passwords.
  • c) Creating accounts in every application takes time.
  • d) All of the above.

Agentic AI

Which of the following are the "Four A’s" pillars used to address AI agent challenges?

  • a) Assess, Analyze, Automate, Audit
  • b) Administer, Authenticate, Authorize, Audit
  • c) Access, Authenticate, Authorize, Archive
  • d) Administer, Automate, Authenticate, Apply

Single Sign-On

What is NOT a standard authorization flow in OIDC?

  • a) Authorization Code
  • b) Implicit
  • c) Decoupled
  • d) Hybrid

Strong Authentication

How does passwordless authentication improve user experience?

  • a) By eliminating the need to remember and type passwords.
  • b) By requiring additional security questions.
  • c) By increasing the time it takes to log in.
  • d) By restricting access to fewer devices.

The most common form of authentication is

  • a) Username-password .
  • b) Mobile phone
  • c) PIN
  • d) Fingerprint scanner

Authorization

Select the correct statement from the following

  • a) Access control is granting permission to access a resource.
  • b) Authorization is the selective restriction imposed on accessing a resource.
  • c) Access control is the selective restriction imposed on accessing a resource.
  • d) Access control is no different from authorization.

Multitenancy

Which is an example of multi-tenancy?

  • a) Asgardeo.
  • b) AWS.
  • c) Salesforce.
  • d) All of the above