AWS Chapter 5 IAM

What is the primary function of the AWS IAM service?

• Identity & access management

• Access key management

• SSH key pair management

• Federated access management

Which of the following are requirements you can include in an IAM password policy?(select THREE)

• Require at least one uppercase letter

• Require at least one number

• Require at least one space or null character

• Require at least one nonalphanumeric character

Which of the following should you do to secure your AWS root user? (Select TWO)

• Assign the root user to the "admins" IAM group

• Use the root user for day-to-day administration tasks

• Enable MFA

• Create a strong password

How does multi-factor authentication work?

• Instead of an access password, users authenticate via a physical MFA device

• In addition to an access password, users also authenticate via a physical MFA device

• Users authenticate using tokens sent to at least two MFA devices

• Users authenticate using password & also either a physical or virtual MFA device

Which of the following SSH commands will successfully connect to an EC2 Amazon Linux instance with an IP address of 54.7.35.103 using a key names mykey.pem?

• echo "mykey.pem ubuntu@54.7.35.103" ssh -i

• ssh -i mykey.pem ec2-user@54.7.35.103

• ssh -i mykey.pem@54.7.35.103

• ssh [e-mail]:54.7.35.103 -i

What's the most efficient method for managing permissions for multiple IAM users?

• Assign users requiring similar permission to IAM roles

• Assign users requiring similar permissions to IAM groups

• Assign IAM users permissions common to others with similar administration responsibilities

• Create roles based on IAM policies, and assign them to IAM users

What is IAM role?

• A set of permissions allowing access to specified AWS resources

• A set of IAM users given permissions to access specified AWS resources

• Permissions granted a trusted entity over specified AWS resources

• Permissions granted an IAM user over specified AWS resources

How can federated identities be incorporated into AWS workflows?(Select Two)

• You can provide users authenticated through a third party identity provider access to backend resources user by your mobile app

• You can use identities to guide your infrastructure design decisions

• You can use authenticated identities to import external data(like email records from gmail) into AWS databases

• You can provide admins authenticated through AWS Microsoft AD with access to a Microsoft Sharepoint farm running on AWS

Which of the following are valid third-party federated identity standards? (Select TWO)

• Secure Shell

• SSO

• SAML2.0

• Active Directory

What information does the IAM credential report provide?

• A record of API requests against your account resources

• A record of failed password account login attempts

• The current state of your account security settings

• The current state of security of your IAM users' access credentials