AWS MALEK

Multiple Choice

What is a proper definition of an IAM Role?

• An IAM entity that defines a set of permissions for making requests to AWS services, and will be used by an AWS service

• IAM Users in multiple User Groups

• An IAM entity that defines a password policy for IAM Users

• Permissions assigned to IAM Users to perform actions

Multiple Choice

Which of the following is an IAM Security Tool?

• IAM Credentials Report

• IAM Root Account Manager

• IAM Services Report

• IAM Security Advisor

Multiple Choice

Which answer is INCORRECT regarding IAM Users?

• IAM Users access AWS services using root account credentials

• IAM Policies can be attached directly to IAM Users

• IAM Users don't have to belong to a User Groups

• IAM Users can belong to multiple User Groups

Multiple Choice

Which of the following is an IAM best practice?

• Don't use the root user account

• Create several IAM Users for one physical person

• Share your AWS account credentials with your colleague, so (s)he can perform a task for you

• Do not enable MFA for easier access

Multiple Choice

What are IAM Policies?

• JSON documents that define a set of permissions for making requests to AWS services, and can be used by IAM Users, User Groups, and IAM Roles

• A set of policies that defines how AWS accounts interact with each other

• A set of policies that define a password for IAM Users

• A set of policies defined by AWS that show how customers interact with AWS

Multiple Choice

Which principle should you apply regarding IAM Permissions?

• Grant least privilege

• Restrict root account permissions

• Grant more permissions if your employee asks you to

• Grant most privilege

Multiple Choice

What should you do to increase your root account security?

• Enable Multi-Factor Authentication (MFA)

• Don't create IAM Users, only access your AWS account using the root account

• Only access AWS services through AWS Command Line Interface (CLI)

• Remove permissions from the root account

Multiple Choice

IAM User Groups can contain IAM Users and other User Groups.

• True

• False

Multiple Choice

An IAM policy consists of one or more statements. A statement in an IAM Policy consists of the following, EXCEPT:

• Version

• Resource

• Action

• Principal