aws-chapter-10-11

Which of the following services can be used to securely store confidential information like credentials and license codes so that they can be accessed by EC2 instances?

• DynamoDB

• KMS

• Systems Manager Parameter Store

• IAM

Which allows users to use their social media account to gain temporary access to the AWS platform?

• Active Directory Authentication Services

• Facebook Sign-In Service

• Web Identity Federation

• Web Confederation Services

Amazon Cognito is recommended for which use case?

• Secure storage of database connection strings

• Support anonymous guest users

• Web Identity Federation for mobile applications

• Access AWS Services with a User Pool and an Identity Pool

Which of the following are provided by AWS to allow you to easily assign IAM permissions to your users based on pre-defined common use cases?

• Custom Policy

• Inline Policy

• Common Policy

• Managed Policy

You are developing a new mobile application to share photos, which AWS technology can you use to ensure your users have a seamless experience across all their devices?

• IAM

• Web Identity Federation

• Multi-Factor Authentication

• Cognito

Amazon Cognito provides Web Identity Federation with which of the following features?

• Single sign-on for Active Directory users

• Multi-Factor Authentication

• Synchronization of user data across multiple device types

• Sign-up and sign-in to your applications

Which of the following API calls can be used to enable a user authenticated by Facebook to access your web application hosted in AWS?

• STS assume-role

• STS get-federation-token

• STS assume-role-with-saml

• STS assume-role-with-web-identity

Which of the following features of IAM allows you to have your users Authenticate using Facebook, Google or Amazon?

• Multi-Factor Authentication

• Web Identity Federation

• AWS Single Sign-On (SSO)

• The IAM HTTPS API

Which of the following applies to an AWS Managed Policy?

• It can only be assigned to a single user, group or role in your account

• You can change the default permissions defined in the policy

• AWS occasionally updates the permissions defined in an AWS managed policy

• It can be assigned to multiple users, groups or roles

• It is available for use by any AWS account

You are working on a mobile phone app for an online retailer that stores customer data in DynamoDB. You would like to allow new users to sign-up using their Facebook credentials. What is the recommended approach?

• Write your own custom code which allows the user to log in via Facebook and receive an authentication token, then calls the AssumeRoleWithWebIdentity API and exchanges the authentication tokens for temporary access to DynamoDB

• After the user has authenticated with Facebook, allow them to download encrypted AWS credentials to their device so that the mobile app can access DynamoDB

• Embed encrypted AWS credentials into the application code, so that the application can access DynamoDB on the user's behalf.

• After the user has successfully logged in to Facebook and received an authentication token, Cognito should be used to exchange the token for temporary access to DynamoDB