20+ practice questions focused on Identity And Access Security — one of the most tested topics on the Certified Cloud Security Engineer (Cloud-Security-Engineer) exam. Each question includes a detailed explanation so you learn why the right answer is correct.
Start Identity And Access Security PracticeWhich Azure feature corresponds to AWS IAM roles and is used by Prisma Cloud to perform agentless scanning and posture management?
Explanation: Azure App Registrations / Service Principals are the Azure equivalent of AWS IAM roles for non-human identities: an app registration defines the identity, and its service principal is the security principal that Prisma Cloud uses to authenticate via OAuth 2.0 and call Azure Resource Manager APIs for agentless scanning and posture management. Managed Identities are similar but are tied to Azure-hosted resources, not external SaaS platforms like Prisma Cloud.
An enterprise wishes to enforce that all GCP service accounts created within their organization do not possess primitive roles (Owner, Editor, Viewer). Where can an engineer set this up in GCP to prevent these roles from being assigned?
Explanation: GCP Organization Policies are the mechanism for centrally enforcing constraints across an organization, folder, or project hierarchy. The specific predefined constraint 'constraints/iam.disableServiceAccountKeyCreation' and related IAM constraints — including 'constraints/iam.allowedPolicyMemberDomains' and the ability to restrict which roles can be granted — allow an org admin to prevent primitive roles (Owner, Editor, Viewer) from being assigned to service accounts. Because Organization Policies are inherited down the resource hierarchy, they enforce the rule at scale without relying on individual project owners.
While investigating an IAM misconfiguration via Prisma Cloud RQL, an engineer wants to find all AWS IAM users who have both console access and active access keys older than 90 days. Which RQL query structure correctly accomplishes this?
Explanation: Using the config resource type with filters for cloud type, resource type, and specific JSON path attributes targets user attributes precisely.
Which Prisma Cloud feature allows security teams to create custom alerts based on specific cloud configuration criteria, such as an IAM role missing a description or having untrusted trust relationships?
Explanation: Custom compliance policies and alert rules enable security teams to define tailored rules for specific cloud posture requirements.
An enterprise is hardening its AWS IAM environment. Which THREE policy conditions or elements can help restrict role assumption security risks when configured correctly? (Choose three.)
Explanation: External IDs, source VPC endpoints, and secure MFA conditions strengthen IAM role trust relationships.
+15 more Identity And Access Security questions available
Practice all Identity And Access Security questions1. Baseline your knowledge
Start with 10 questions to gauge your current understanding of Identity And Access Security. This tells you whether you need a concept refresher or just practice.
2. Review every explanation
For each question — right or wrong — read the full explanation. Understanding why an answer is correct is more valuable than knowing the answer itself.
3. Focus on exam traps
Identity And Access Security questions on the Cloud-Security-Engineer frequently use trap wording. Look for subtle differences in answers that test your precision, not just general knowledge.
4. Reach 80% consistently
Do repeated sessions until you score 80%+ three times in a row. Then move to mixed-mode practice to test cross-topic recall under realistic conditions.
The exact number varies per candidate. Identity And Access Security is tested as part of the Certified Cloud Security Engineer (Cloud-Security-Engineer) blueprint. Practicing with targeted Identity And Access Security questions ensures you can handle any format or difficulty that appears.
Yes. Courseiva provides free Cloud-Security-Engineer practice questions across all exam topics and domains. The platform includes topic-based practice, mock exams, missed-question review, bookmarked questions, and readiness tracking — no account required.
Difficulty is subjective, but Identity And Access Security is a high-priority exam concept tested in multiple ways — direct recall, scenario analysis, and command-output interpretation. Consistent practice is the best way to build confidence.
Launch a full Identity And Access Security practice session with instant scoring and detailed explanations.
Start Identity And Access Security Practice →