Test your Identity and Access Management knowledge with a free interactive quiz — 26 questions with answers and explanations. No signup needed to play.
Question 1/12Score 0
What is the key difference between SAML and OIDC as federation protocols?
In this round
What is the key difference between SAML and OIDC as federation protocols?
What two questions does an IAM system answer for every access request?
In AWS IAM, if one attached policy grants `s3:*` broadly and a second attached policy includes an explicit `Deny` on that same action for other resources, which one wins?
Why should a cloud account's root/owner credentials be reserved for account recovery rather than day-to-day work?
What is the recommended way to grant a group of users the same set of cloud permissions, rather than attaching policies to each user individually?
What is a common trade-off of adopting ABAC over RBAC?
A company relies entirely on a manual offboarding checklist that an IT admin fills out for each departing employee. What risk does this create compared to an automated deprovisioning process?
What is the difference between authentication and authorization?
How does Role-Based Access Control (RBAC) grant permissions?
Why is IAM described as more than "just a login system"?
How does Attribute-Based Access Control (ABAC) differ fundamentally from RBAC?
A company wants coarse "what kind of user is this" access control (admin/editor/viewer) plus finer rules like "editors can edit documents they own or that are shared with their team." What is the most practical approach?
Gaps to close?
Read the curated Identity and Access Management notes — core concepts, patterns, interview prep.