Courseiva

CloudSec-Pro · domain

IAM And Access Governance IN Cloud

Practise Certified Cloud Security Professional (CloudSec-Pro) IAM And Access Governance IN Cloud practice questions — original exam-style scenarios with answer choices, explanations, and analysis of common mistakes.

33 questions10 easy12 medium11 hard

Focused practice

Practice IAM And Access Governance IN Cloud questions

Scored sessions drawing only from this domain — pick a length below.

Start 20-question practice test →

What this domain covers

What to know about IAM And Access Governance IN Cloud

Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.

IaaS, PaaS and SaaS responsibilities and examples.

Public, private, hybrid and community cloud deployment models.

On-premises vs cloud trade-offs: cost, control, scalability.

How cloud connectivity options (VPN, Direct Connect, ExpressRoute) work.

Watch out for

Common IAM And Access Governance IN Cloud exam traps

  • IaaS gives you infrastructure control; SaaS gives you only the application.
  • Hybrid cloud combines on-premises and public cloud — not two public clouds.
  • Cloud does not automatically mean cheaper or more secure.
  • Management responsibility shifts with each service model (IaaSPaaSSaaS).

Question index

All IAM And Access Governance IN Cloud questions (33)

Click any question to see the full explanation, or start a practice session above.

1

Where in the Prisma Cloud console can you view the overall IAM security posture of your cloud accounts?

Easy
2

You have integrated Prisma Cloud with Azure AD. If a user is deleted from Azure AD, what happens to their Prisma Cloud console access?

Hard
3

When conducting an IAM audit, which THREE data sources does Prisma Cloud leverage?

Hard
4

A security administrator needs to ensure that Prisma Cloud only uses specific Identity Providers for SSO. Where should they configure this integration?

Easy
5

Which THREE actions can be taken when an IAM alert is generated in Prisma Cloud?

Medium
6

Which THREE features are part of the Prisma Cloud 'Access Governance' capabilities?

Hard
7

What is the purpose of 'Access Groups' in Prisma Cloud?

Easy
8

Which Prisma Cloud feature allows you to map cloud identities to real-world entities for compliance auditing?

Easy
9

If a user needs to see all alerts related to IAM, what is the most efficient way to view them?

Medium
10

You need to detect over-privileged IAM users in GCP. Which Prisma Cloud policy type should be utilized?

Hard
11

Which TWO statements describe the benefits of using Prisma Cloud for IAM governance?

Easy
12

If you want to view all IAM users who have performed sensitive actions, which filter should you use in Prisma Cloud?

Medium
13

Which THREE types of IAM risks can Prisma Cloud automatically detect?

Hard
14

An administrator needs to automatically remediate an IAM policy that allows '*' access to S3 buckets. How is this achieved in Prisma Cloud?

Medium
15

Which TWO actions are necessary to ensure that Prisma Cloud can effectively govern IAM in a new AWS account?

Medium
16

You are troubleshooting why an IAM policy isn't triggering an alert. What is the first thing you should check?

Medium
17

When managing access governance, which TWO methods can be used to restrict console access in Prisma Cloud?

Medium
18

Which of the following is the standard method to onboard an AWS account into Prisma Cloud for IAM monitoring?

Easy
19

What does the 'IAM' dashboard in Prisma Cloud typically show?

Easy
20

When assessing the impact of a compromised IAM user, which THREE Prisma Cloud metrics are most valuable?

Hard
21

What is the impact of assigning a 'Limited' role in Prisma Cloud compared to an 'Admin' role?

Medium
22

In Prisma Cloud, what is the significance of the 'Compute' role in the context of IAM?

Hard
23

What is the primary role of the 'System Admin' in Prisma Cloud?

Easy
24

When auditing IAM, you notice a user with 'AdministratorAccess' in AWS who only uses S3. Which Prisma Cloud feature identifies this discrepancy?

Medium
25

When setting up cross-account roles for Prisma Cloud to monitor an AWS account, what is the 'External ID' used for?

Medium
26

Which TWO items are required to create a new user in the Prisma Cloud console?

Easy
27

How can you verify if an IAM policy is currently being enforced in Prisma Cloud?

Hard
28

You need to ensure that no IAM user has permanent access keys older than 90 days. How do you construct this policy in Prisma Cloud?

Hard
29

How do you ensure that IAM policy changes in your cloud provider are tracked by Prisma Cloud?

Hard
30

Which of the following is a recommended best practice for IAM in cloud environments?

Easy
31

You are configuring Prisma Cloud to perform least-privilege analysis. Which feature should be enabled to identify unused IAM permissions in AWS accounts?

Medium
32

An administrator needs to restrict a user to read-only access for a specific resource group in Azure while using Prisma Cloud. What is the best approach?

Hard
33

Which TWO settings can be managed within the Prisma Cloud 'Access Control' menu?

Medium

Frequently asked questions

What does the IAM And Access Governance IN Cloud domain cover on the CloudSec-Pro exam?
Cloud concepts questions usually test the service model (IaaS/PaaS/SaaS) and deployment model (public/private/hybrid/community) appropriate for a given scenario.
How many questions are in this domain?
This page lists all 33 IAM And Access Governance IN Cloud questions in the CloudSec-Pro question bank. The actual exam draws from this domain proportionally to its weighting in the official exam blueprint.
What is the best way to practise this domain?
Start with a short focused session (10 questions) to identify gaps, then work through explanations. Repeat with a longer session once the weak areas feel solid.
Can I practise only IAM And Access Governance IN Cloud questions?
Yes — the session launcher on this page filters questions to this domain only. Choose any session length for inline explanations and scoring.
panw-cloudsec-pro PANW-CLOUDSEC-PRO iam and access governance in cloud Practice Questions