AWS Fundamentals for Students

What is the purpose of the AWS root account?

• To create IAM users and roles without full access.

• To manage billing and payment information only.

• The purpose of the AWS root account is to provide full administrative access to manage all AWS resources and settings.

• To provide limited access to specific AWS services.

How can you secure the AWS root account?

• Use the root account for all administrative tasks.

• Disable all security features for the root account.

• Enable MFA and use IAM users instead of the root account.

• Share the root account credentials with team members.

What is IAM in AWS and why is it important?

• IAM is a service that helps manage user access and permissions in AWS, ensuring secure and controlled access to resources.

• IAM is a database service for storing user data in AWS.

• IAM is a networking service that connects different AWS regions.

• IAM is a monitoring tool for tracking AWS resource usage.

How do you create a new IAM user in AWS?

• Log in to AWS Management Console > IAM > Users > Delete user > Confirm deletion.

• Log in to AWS Management Console > IAM > Roles > Create role > Enter details > Set permissions > Create role.

• Log in to AWS Management Console > IAM > Groups > Create group > Enter details > Set permissions > Create group.

• Log in to AWS Management Console > IAM > Users > Add user > Enter details > Set permissions > Create user.

What are IAM policies and how do they work?

• IAM policies are only applicable to on-premises servers.

• IAM policies are graphical user interfaces for managing AWS resources.

• IAM policies are JSON documents that define permissions for AWS resources, specifying who can perform which actions.

• IAM policies are physical devices that control network traffic.

What is the difference between IAM roles and IAM users?

• IAM users have permanent credentials; IAM roles provide temporary access.

• IAM users can be assumed by other users; IAM roles cannot be assumed by anyone.

• IAM roles are used for managing user accounts; IAM users are for temporary access.

• IAM users can access resources without permissions; IAM roles require explicit permissions.

How can you assign permissions to an IAM user?

• Permissions can only be assigned at the account level.

• IAM users cannot have permissions assigned directly.

• Attach policies to the IAM user or add the user to a group with the required permissions.

• Assign permissions through the AWS CLI only.

What is the purpose of AWS CloudWatch?

• To manage user permissions in AWS IAM.

• To store data in AWS S3 buckets.

• The purpose of AWS CloudWatch is to monitor and manage AWS resources and applications.

• To create virtual machines in AWS EC2.

How do you set up a CloudWatch alarm?

• Open the EC2 console and create a new instance.

• Set up a VPC and configure subnets.

• Open the CloudWatch console, create an alarm, select a metric, define conditions, configure actions, and review.

• Install CloudTrail and enable logging.

What metrics can you monitor using CloudWatch?

• CPU utilization, disk I/O, network traffic, custom application metrics.

• Database connections

• User login attempts

• Memory usage