Quiz — Identity Access Concepts
Module 3 Knowledge Check — apply what you learned
You covered Authentication vs Authorization, password hygiene, MFA, biometrics, and Least Privilege. These ten APPLY scenarios test decisions — not trivia memorization. Use what a defender would do. Good luck!
APPLY: You authenticate to a cloud drive. Changing /files/mine to /files/other-user-id in the URL shows someone else's docs. What failed?
APPLY: Which password strategy best resists credential stuffing after a random site breach?
APPLY: You typed your real email password into a phishing page. MFA with an authenticator app is enabled. Most likely immediate outcome?
APPLY: Why prefer authenticator-app MFA over SMS when both are offered?
APPLY: A biometric template database leaks. What is the uniquely painful property vs passwords?
APPLY: A contractor needs one repo for 10 days. PoLP-aligned grant?
APPLY: True or False: Authentication always happens before Authorization in a correct access-control design.
APPLY: Which pair are both PoLP actions on a personal phone? (Select 2)
APPLY: Nightclub analogy — VIP wristband check after ID was already accepted maps to:
APPLY: True or False: Reusing one very long passphrase across email and shopping sites is safe because length alone defeats credential stuffing.