AWS-IAM

Which of the following is the most secure way of giving access to AWS services to applications running on Ec2 instances?

• Creating Service users

• Creating service groups

• Roles

• Attaching policies to applications

True or False : An explicit Deny in IAM precedes over an explicit allow

• TRUE

• FALSE

Which of the following sections in a policy specifies the entities to whom access to a resource is granted or denied?

• Statement ID

• Resources

• Principal

• Conditions

TRUE or FALSE : By default a new user in IAM has permisiions to log in to the AWS Console.

• TRUE

• FLASE

Which of the following is not an IAM best practice?

• Delete user accounts not in use

• Attach policies to individual users

• Manage permissions by adding users to groups

• Enable MFA on user accounts

Wch of the following set of credentials are used to log in to AWS programmatically? (Choose two)

• Username

• Access Key

• Password

• Secret Key