Quizz Module 8

Which statement describes AWS Identity and Access Management (IAM) users?

• IAM users are used to control access to a specific AWS resource.

• IAM user names can represent a collection of individuals.

• Every IAM user for an account must have a unique name.

• Every IAM user name is unique across all AWS accounts.

How can you grant the same level of permissions to multiple users within an account?

• Apply an AWS Identity and Access Management (IAM) policy to an IAM group.

• Apply an AWS Identity and Access Management (IAM) policy to an IAM role.

• Create a resource-based policy.

• Create an organization in AWS Organizations.

Which statements describe AWS Identity and Access Management (IAM) roles? (Select TWO)

• They are uniquely associated to an individual.

• They can only be used by accounts associated to the person who creates the role.

• They can be assumed by individuals, applications, and services.

• They provide temporary security credentials.

• They provide permanent security credentials.

Which statement describes a resource-based policy?

• It can be applied to any AWS resource.

• It can be an AWS managed policy.

• It is attached to a user or group.

• It is always an inline policy.

How does AWS Identity and Access Management (IAM) evaluate a policy?

• It checks for explicit allow statements before it checks for explicit deny statements.

• It checks for explicit deny statements before it checks for explicit allow statements.

• If there is no explicit deny statement or explicit allow statement, users will have access by default.

• An explicit deny statement does not override an explicit allow statement.

A team of developers needs access to several services and resources in a virtual private cloud (VPC) for 9 months. How can you use AWS Identity and Access Management (IAM) to enable access for them?

• Create a single IAM user for the developer team and attach the required IAM policies.

• Create an IAM user for each developer, and attach the required IAM policies to each IAM user.

• Create an IAM user for each developer, put them all in an IAM group, and attach the required IAM policies to the IAM group.

• Create a single IAM user for the developer team, place it in an IAM group, and attach the required IAM policies to the IAM group.

How does identity federation increase security for an application that is built in Amazon Web Services (AWS)?

• Users can use single sign-on (SSO) to access the application through an existing authenticated identity.

• The application can synchronize users' user names and passwords in AWS Identity and Access Management (IAM) with their social media accounts.

• The browser can establish a trust relationship with the application to bypass the need for multi-factor authentication (MFA).

• Users can use their AWS Identity and Access Management (IAM) accounts to log in to on-premises systems.

Which services can you use to enable identity federation for your applications that are built in Amazon Web Services (AWS)? (Select TWO)

• AWS WAF

• AWS Key Management Service (AWS KMS)

• AWS Security Token Service (AWS STS)

• AWS CloudHSM

• Amazon Cognito

What service helps you centrally manage billing; control access, compliance and security; and share resources across multiple Amazon Web Services (AWS) accounts?

• AWS Identity and Access Management (IAM)

• AWS Control Tower

• AWS Organizations

• Amazon Virtual Private Cloud (Amazon VPC) peering

A technology company's employees log in to their Amazon Web Services (AWS) accounts through AWS Identity and Access Management (IAM) users. They have administrator access and access to the root users. Which resource can prevent them from deleting the AWS CloudTrail logs?

• An IAM policy that is attached to each IAM user

• A service control policy (SCP) that is attached to the organizational unit (OU)

• An Amazon S3 bucket policy that is attached to logging buckets

• IAM users with administrative access can override the S3 bucket policies.