AWS IAM

Which statement best describes IAM?

• IAM stands for Improvised Application Management, and it allows you to deploy and manage applications in the AWS Cloud.

• IAM allows you to manage users, groups, roles, and their corresponding level of access to the AWS Platform.

• IAM allows you to manage users' passwords only. AWS staff must create new users for your organization. This is done by raising a ticket

• IAM allows you to manage permissions for AWS resources only

You have created a new AWS account for your company, and you have also configured multi-factor authentication on the root account. You are about to create your new users. What strategy should you consider in order to ensure that there is good security on this account.

• Require users to only be able to log in using biometric authentication.

• Give all users the same password so that if they forget their password they can just ask their co-workers.

• Restrict login to the corporate network only.

• Enact a strong password policy: user passwords must be changed every 45 days, with each password containing a combination of capital letters, lower case letters, numbers, and special symbols.

What is a proper definition of an IAM Role?

• IAM Users in Multiple Groups

• IAM entity that define a password policy for IAM users

• An IAM entity that define a set of permissions for making requests to AWS services, and will be used by AWS service

• Permissions assigned to IAM users to perform actions

Using SAML (Security Assertion Markup Language 2.0), you can give your federated users single sign-on (SSO) access to the AWS Management Console

• True

• False

Which of the following is not a component of IAM?

• Roles

• Users

• Groups

• Organizational Units

Which of the following is an IAM Security Tool?

• IAM Credential Report

• IAM Root account manager

• IAM Services Report

• IAM Security advisor

Which answer is INCORRECT regarding IAM Users?

• IAM Users can belong to multiple user groups

• IAM users don't have to belong to user group

• IAM policies can be attached directly to IAM Users

• IAM users access AWS service using root account credentials

A new employee has just started work, and it is your job to give her administrator access to the AWS console. You have given her a user name, an access key ID, a secret access key, and you have generated a password for her. She is now able to log in to the AWS console, but she is unable to interact with any AWS services. What should you do next?

• Ensure she is logging in to the AWS console from your corporate network and not the normal internet

• Grant her Administrator access by adding her to the Administrators' group.

• Tell her to log out and try logging back in again.

• Require multi-factor authentication for her user account.