Recall first, then reveal the answer. Browse 12 sample cards below, or use spaced review to save your personal review schedule.
Connect identity, security and compliance foundations. Selected foundations; check coverage for the full scope.
42 cards due or new · Ready when you are
Version 2026-11-03-readiness-r03 · Original foundation materials · No sign-up
Try recalling the idea before revealing it. Browsing these examples does not change your saved review schedule.
The customer retains its data/identity/access decisions; the stated PaaS provider manages the operating system. Compare responsibility rows, rather than transferring the whole security program.
A workload identity. Its human owner and host device are different identity subjects.
Source/destination IP addresses, source/destination ports and protocol: the 5-tuple used for basic stateful packet filtering.
The Service Trust Portal, within the material’s scope and access/agreement requirements. It is provider evidence, not the customer’s own implementation record.
Evidence of the identity of a user, device or software subject; it does not by itself establish every action/resource permission.
No. Both are knowledge evidence; count verified factor categories rather than secret strings or prompts.
CSPM: cloud-resource posture assessment and improvement. Distinguish it from running-workload threat protection.
Controls from a regulation, standard or policy within an applicable service scope. It is different from an incident’s related alerts or a query’s activity records.
Relevant signals and an if-then policy condition; for example, a stated request condition can require MFA. This is separate from listing a resource role’s allowed actions.
A data connector. Ingestion is distinct from correlating the resulting alerts into incidents.
Classification and configured information protection. Not every sensitivity label applies encryption; inspect the actual configuration.
An access review, potentially recurring with appropriate owners/reviewers. It evaluates continued need rather than the safety of a particular sign-in.
Selected foundations; all 58 retained official leaves remain partial. Additional evidence is not a full-outline or calibrated simulation claim..
The cards preview selected ideas; they do not measure readiness for the whole examination. Your personal review schedule is available in the review tool.
Author-reviewed learning materials. Independent educator review is pending; question difficulty has not been calibrated with learner results. Check coverage and gaps before planning your preparation.
These prompts and explanations are the site's original learning materials. The reference links below support the selected skills; they are not endorsements or official examination questions.
