Certificate of Cloud Security Knowledge (CCSK) — Question 66

Which concept is a mapping of an identity, including roles, personas, and attributes, to an authorization?

Answer options

• A. Access control
• B. Federated Identity Management
• C. Authoritative source
• D. Entitlement
• E. Authentication

Correct answer: D

Explanation

The correct answer is D, Entitlement, which defines the permissions and authorizations assigned to an identity based on its roles and attributes. Access control (A) refers to the overall mechanism for restricting access, while Federated Identity Management (B) deals with identity sharing across domains. Authoritative source (C) indicates a source of truth for data, and Authentication (E) is about verifying identity, not mapping roles to authorization.