AWS IAM

Which of the following is the most secure way of giving access to AWS services to applications running on Ec2 instances?

• Creating Service users

• Creating service groups

• Roles

• Attaching policies to applications

True or False : An explicit Deny in IAM precedes over an explicit allow

• TRUE

• FALSE

TRUE or FALSE : By default a new user in IAM has permisiions to log in to the AWS Console.

• TRUE

• FLASE

Which of the following is not an IAM best practice?

• Delete user accounts not in use

• Attach policies to individual users

• Manage permissions by adding users to groups

• Enable MFA on user accounts

True or False : An explicit Allow in IAM precedes over an explicit Deny

• TRUE

• FALSE

In an IAM policy, following entity represents the user or service to whom access to a resource is granted or denied?

• Statement ID

• Resources

• Principal

• Conditions

TRUE or FALSE : By default a new user in IAM has permissions to launch EC2 instance

• TRUE

• FLASE

Which of the following is not an IAM best practice?

• Delete user accounts not in use

• Configure IAM users long term Access/Secret key on EC2 instance instead of using Role

• Manage permissions by adding users to groups

• Enable MFA on user accounts

Which of the following set of credentials are used to log in to AWS programmatically? (Choose two)

• Username

• Access Key

• Password

• Secret Access Key

True or False? With organization level SCP policy you can grant additional permissions to child account

• True

• False