FREEASSESSMENTIntermediate · 5 questions

Cloud security essentials — scenario check

Answer every question, then review your score and the explanation behind each answer.

Practice, not certification. Results stay in this page and reset on reload. Nothing is sent to an account or payment service.

Question 1An app asks for all-mailbox access for a narrow reporting task. What should be reviewed?

AOnly the logoBOnly the app nameCWhether the button is greenDBusiness need and least-privileged permission scope

Question 2Does resetting a user password necessarily revoke an OAuth grant?

AOnly if the password is longerBOnly on weekendsCNo; review and revoke the grant separately as neededDYes in every case

Question 3What remains an organisation’s concern in a cloud service?

AOnly the office network cableBTenant users, permissions and sharing configurationCNothing; the provider owns all riskDOnly the colour scheme

Question 4An external sharing link is no longer needed. What should happen?

AReview and remove that accessBPublish it more widelyCKeep it forever without an ownerDIgnore its scope

Question 5What evidence helps investigate a suspicious consent event?

AA marketing screenshot onlyBAn unrelated password listCA social-media popularity countDRelevant audit records and permission details

Keep building the skill.