Section 2: IAM - Identity and Access Management

What is the proper definition of IAM Roles?

• An IAM entity that defines a set of permissions for making AWS service requests that will be used by AWS services

• IAM Users in multiple Groups

• A password policy

• Permissions assigned to Users to perform actions

Which of the following is an IAM Security Tool?

• IAM Credentials Report

• IAM Root Account Manager

• IAM Services Report

• IAM Security Advisor

Which of the following is INCORRECT regarding IAM Users?

• IAM Users can belong to multiple groups

• IAM Users don't have to belong to a group

• IAM Users can have policies assigned to them

• IAM Users access AWS with the root account credentials

Which of the following is an IAM best practice?

• Don't use the root user account

• Create several users for a physical person

• Share credentials so a colleague can perform a task for you

• Do not enable MFA for easier access

What are IAM Policies?

• AWS services performable actions

• JSON documents to define Users, Groups or Roles' permissions

• Rules to set up a password for IAM Users

Under the shared responsibility model, what is the customer responsible for in IAM?

• Infrastructure security

• Compliance validation

• Configuration and vulnerability analysis

• Assigning users proper IAM policies

Which of the following statements is TRUE?

• The AWS CLI can interact with AWS using commands in your command-line shell, while the AWS SDK can interact with AWS programmatically

• The AWS SDK can interact with AWS using commands in your command-line shell, while the AWS CLI can interact with AWS programmatically

Which principle should you apply regarding IAM Permissions?

• Grant most privilege

• Grant least privilege

• Grant permissions if your employee asks you to

• Restrict root account permissions

What should you do to increase your root account security?

• Enable Multi-Factor Authentication (MFA)

• Remove permissions from the root account

• Use AWS only through the Command Line Interface (CLI)