Identity and Access Management Fundamentals
Identity lifecycle, MFA/sessions, RBAC/ABAC and privileged access from onboarding through departure.
Curriculum
Learn at your own paceConcepts and security design
0/2 completedA five-question quiz follows this module.
Module quizzes
Use knowledge in a decision
Practice paths for this course
7 missions to explore
Night shift: the trust boundary
One account, a new privilege and unexplained data movement. Separate a legitimate change from a compromised session.
Revoked access: the index remembers
Source access was revoked, yet AI retrieval returns an old chunk. Trace authority across the source, index and cache.
Approval exists; where is the evidence?
An access review is signed, but a former contractor account remains active. Separate documents from control operation.
Finding or assumption?
A scanner reports high risk, but the first response is empty. Separate evidence from impact using two synthetic identities.
Hidden button, open resource
The UI hides a button; the API returns another account's synthetic object. Put the control at the right layer.
Queued authority: when is the decision made?
An export request is accepted, then access is revoked before execution. Inspect session, queue and download boundaries.
Deletion queue and exception record
A fictional retention rule deletes expired records; some records have approved holds. Manage copies and exceptions together.
Final exam
Meet the required proficiency standard to earn your course certificate.
Academy finals require 80%; official exam requirements are assessed separately.