Security Posture, Incidents and Enterprise Sign-in — Assessment

1. Which component carries the most weight in the security posture score?

MFA Devices Segregation-of-duties conflicts Failed sign-ins

2. How do you switch off one anomaly rule?

Close every incident it raised Set its threshold to 0 Turn off MFA Delete the rule

3. What must you give when closing a security incident?

A closure reason such as remediated or false positive Approval from AWRA support Nothing A screenshot

4. Your identity provider sends a SCIM delete for a user. What does AWRA do?

Ignores it Deactivates the user and keeps their records Moves the user to the trash for 30 days Erases the user and their history

5. A person holds two roles with different device rules. Which rules apply?

The strictest combination Neither The most permissive combination The first role’s

6. How is a locked audit retention period shortened?

Any Admin edits it The requester confirms after 24 hours It can never be shortened by anyone A request, a seven-day wait, then a different Admin confirms

Your details for the certificate

This is the name that will appear on your certificate.

Full name

Email

We email your result to this address with a link to confirm it is yours. If you are signed in, or once you confirm, the administrators of an organisation this email belongs to on AWRA OpsHub can see your attempts and certificate. Your name is as you type it here; only the email is confirmed.

Send me AWRA’s monthly email: new guides, product updates and courses. Unsubscribe anytime.

Graded server-side. No peeking at answers in the page source.