Access Control in Cloud Computing Questions and Answers for Viva

Answer-1: Access control in cloud computing refers to policies and mechanisms that regulate who can access cloud resources and under what conditions.

Answer-2: The main types are Discretionary Access Control (DAC),Mandatory Access Control (MAC),and Role-Based Access Control (RBAC).

Answer-3: RBAC (Role-Based Access Control) assigns permissions based on roles within an organization rather than to individual users.

Answer-4: ABAC (Attribute-Based Access Control) grants access based on user attributes,resource attributes,and environment conditions.

Answer-5: Cloud access control is managed remotely via cloud provider tools and APIs,while on-premise systems require manual infrastructure setup.

Answer-6: IAM (Identity and Access Management) is a framework that manages identities and governs access to resources in the cloud.

Answer-7: It is a security concept where users are given only the minimum access necessary to perform their duties.

Answer-8: A policy is a set of rules that define what actions are allowed or denied on specific cloud resources.

Answer-9: It reduces the risk of unauthorized access,data breaches,and insider threats by enforcing strict access rules.

Answer-10: MFA requires users to provide two or more verification factors to gain access,adding an extra security layer.

Answer-11: DAC allows resource owners to control access to their data based on their discretion.

Answer-12: MAC enforces strict access rules set by a central authority based on classification levels.

Answer-13: AWS uses IAM policies,roles,and permissions boundaries to control access to its services and resources.

Answer-14: Azure uses Azure Active Directory (AAD),role assignments,and security groups for access control.

Answer-15: GCP uses IAM roles and policies to grant permissions to users and service accounts.

Answer-16: A service account is a special kind of account used by applications or virtual machines to access cloud services securely.

Answer-17: Resource-based access control involves attaching policies directly to resources to define who can access them.

Answer-18: This refers to assigning permissions and roles to specific user identities.

Answer-19: IAM roles are sets of permissions that define what actions are allowed and can be assigned to users or resources.

Answer-20: IAM policies are JSON documents that define permissions and are attached to roles,users,or groups.

Answer-21: It is a security practice of dividing tasks among multiple users to reduce the risk of fraud or error.

Answer-22: Audit logs track who accessed what and when,helping monitor and enforce access control policies.

Answer-23: These policies control access based on conditions like device status,user location,or risk level.

Answer-24: ACLs are lists that define who can access an object and what operations they can perform.

Answer-25: Role hierarchy enables inheritance of permissions,simplifying management in large organizations.

Answer-26: It involves managing access rights and permissions across systems,applications,and users.

Answer-27: Authentication verifies identity; access control determines what resources that identity can access.

Answer-28: Common tools include AWS IAM,Azure AD,GCP IAM,Okta,and Ping Identity.

Answer-29: Zero trust assumes no user or device is trusted by default,enforcing strict access controls at all levels.

Answer-30: It ensures only authorized access to data,helping meet compliance standards like GDPR,HIPAA,and ISO 27001.

Answer-31: Fine-grained access control allows setting detailed permissions for individual users or objects.

Answer-32: Coarse-grained access control offers broader,less specific access permissions,often at the role level.

Answer-33: Identity federation allows access control using identities from external systems or domains.

Answer-34: SSO centralizes identity verification and can streamline access control across multiple cloud apps.

Answer-35: Granting excessive permissions increases the risk of data exposure or system compromise.

Answer-36: These occur when users gain access to privileges they weren?t originally granted.

Answer-37: Regular audits involve reviewing roles,policies,logs,and access rights to ensure compliance and security.

Answer-38: An access review is a periodic check to validate whether users still require their current access permissions.

Answer-39: Security groups are virtual firewalls used to control inbound and outbound traffic to cloud resources.

Answer-40: Identity providers authenticate users and pass identity attributes to cloud platforms for authorization.

Answer-41: APIs are protected using tokens,keys,and IAM roles to restrict unauthorized access.

Answer-42: Orphaned accounts are unused but still active,posing a security risk if not managed or removed.

Answer-43: JIT access grants users temporary access to systems or resources only when needed and for a limited time.

Answer-44: Delegated access allows users to act on behalf of others within the limits of assigned permissions.

Answer-45: Tags can be used in policies to allow or deny access based on resource metadata.

Answer-46: Centralized control manages access from a single point of control,improving visibility and policy enforcement.

Answer-47: In decentralized control,each system manages its own access,increasing flexibility but reducing visibility.

Answer-48: A policy violation occurs when a user accesses a resource in a way not allowed by the defined access policies.

Answer-49: Removing access promptly after user departure prevents unauthorized resource access.

Answer-50: Encryption protects data from unauthorized access,complementing access control policies.