Quiz: Corporate IT Fluency¶
6 questions
L1 (3 questions)¶
1. Your company uses Active Directory for centralized auth. A new developer cannot access the internal wiki. Where do you check first?
Show answer
Check the user's AD group membership — the wiki likely restricts access by AD security group. Verify the user is in the correct group and that the group has the required permissions. *Common mistake:* Restart the wiki server to refresh user sessions2. A ticket says 'Outlook keeps asking for my password.' What are two common causes in a Microsoft 365 environment?
Show answer
1. Expired or changed password not synced to cached credentials.2. Conditional Access policy blocking the client (e.g., non-compliant device). Fix: clear cached credentials, re-authenticate, check Conditional Access logs. *Common mistake:* Reinstall Outlook from scratch
3. Why should you avoid using personal email accounts for corporate SaaS tool registration?
Show answer
Personal accounts bypass corporate identity governance — the company loses control of the account when the employee leaves, cannot enforce MFA/SSO policies, and may lose access to data stored in that account. *Common mistake:* Personal email is slower than corporate emailL2 (3 questions)¶
1. Your org uses SAML SSO for all SaaS apps. After rotating the IdP signing certificate, users cannot log into Salesforce. What happened?
Show answer
The new IdP certificate was not uploaded to Salesforce's SSO configuration. Salesforce is rejecting SAML assertions signed with the new certificate because it still trusts only the old certificate. *Common mistake:* Salesforce's SSL certificate expired2. A department requests a new shared network drive. What infrastructure and permission considerations should you address?
Show answer
Provision storage on a file server or NAS, create an AD security group for the department, assign NTFS/share permissions via the group (not individual users), map the drive via Group Policy, and document the share path and retention policy. *Common mistake:* Install a separate file server in the department office3. Your MDM console shows 30% of company laptops have not applied the latest OS security patch. What remediation steps do you take?
Show answer
1. Check MDM compliance policies — ensure patch deployment is mandatory.2. Identify non-compliant devices and their status (offline, deferred, failed).
3. Escalate persistently offline devices.
4. Set a compliance deadline after which non-compliant devices lose VPN/SSO access. *Common mistake:* Manually visit each user and patch their laptop