Cloud IAM and Zero Trust Quiz Answer Key

Table of Contents
Return to the Cloud IAM and Zero Trust Quiz
Open this key after saving all ten answers and reasons. Preserve the first attempt. Record each correction separately.
Answer Key
- B. Trust defines who or which workload receives the identity session.
- C. Exact federation claims and short sessions remove the stored cloud key.
- C. An applicable explicit deny overrides the allow.
- C. Effective access depends on the full request and all applicable layers.
- C. Emergency access exists for recovery and stays separate from routine work.
- B. Zero trust evaluates the request around the resource and current context.
- B. Impersonation creates an escalation path when the target identity has more privilege.
- C. The lab avoids long-lived keys and client secrets.
- B. Tracking windows and missing log sources limit the inference.
- C. Verified absence closes the lab.
Score and Review
| Score | Next action |
|---|---|
| 9 to 10 | Start the capstone |
| 7 to 8 | Revisit each missed lesson and correct the reason before the capstone |
| 0 to 6 | Repeat Lessons 1 through 6, rebuild the decision records, and retake the quiz |
For a score of 7 or 8, retake a clean copy after recording every correction. Start the capstone only after the retest reaches 9 out of 10.
Troubleshooting
- Two answers looked close: select the choice which includes full policy context and verification.
- Provider terms blurred together: return to the identity-model comparison table.
- Your lab result differed: record provider version, permissions, hierarchy controls, and error text.
Verify Your Review
- The score uses the saved first attempt
- Every missed item links to a lesson
- Provider terms stay distinct
- Revised answers explain the deciding fact
Next Steps
Complete the Cloud IAM and Zero Trust Capstone . Keep the quiz score and corrections with the submission.


