AWS Governance

What is the primary purpose of using permissions boundaries in AWS Identity and Access Management (IAM)?

• To assign fine-grained permissions to individual resources.

• To set the maximum permissions a user or group can have within an AWS account.

• To define network access controls for AWS resources.

• To configure cross-account access between AWS accounts.

In AWS networking, what best describes the role of the "Hub" in a Hub & Spoke architecture?

• The central point connecting multiple VPCs.

• A VPC with limited connectivity to other VPCs.

• A VPC with direct connections to end-users.

• A region-specific virtual network.

What is the key benefit of using Transit Gateway in AWS networking compared to traditional VPC peering?

• Reduced latency in communication between VPCs.

• Increased security with end-to-end encryption.

• Simplified management of VPC connections.

• Enhanced scalability of VPC resources.

In AWS Organizations, what is the purpose of organizational units (OUs)?

• To define fine-grained permissions for individual users.

• To group AWS accounts for applying common policies.

• To establish direct network connections between accounts.

• To configure cross-region access for resources.

What is the purpose of service control policies (SCPs) in AWS Organizations?

• To define fine-grained permissions for individual users.

• To restrict the maximum permissions across all AWS accounts.

• To establish direct network connections between accounts.

• To configure cross-region access for resources.

What is the purpose of AWS Control Tower in AWS ?

• To manage permissions for IAM users.

• To automate the deployment and management of a secure, multi-account AWS environment.

• To configure network access controls for AWS resources.

• To establish direct connections between different VPCs.

Which AWS service is responsible for providing a centralized location for users to access their AWS accounts, manage permissions, and view usage information?

• AWS Organizations

• AWS Identity and Access Management (IAM)

• AWS Control Tower

• AWS Identity Center

How can AWS Organizations help in managing billing for multiple AWS accounts?

• By consolidating billing information for linked accounts.

• By defining fine-grained permissions for billing access.

• By obtaining more details about resource consumption.

• By adding features to export the data to other systems.

What is the purpose of AWS Control Tower's "guardrails" (controls)?

• To define fine-grained permissions for individual users.

• To ensure end-to-end encryption for network traffic.

• To automate the enforcement of AWS best practices.

• To establish direct connections between VPCs.

How can a Service Control Policy (SCP) affect the root identity of an AWS account?

• It can modify the root user's password.

• It can restrict the root user's permissions.

• It can create a new root user.

• It can delete the root user.