Which of the following is the first step to secure the AWS root account?

• Attach an IAM policy to the root account

• Enable MFA on the root account

• Create an IAM user for root access

• Create a group for the root account

What is the purpose of creating an IAM group in AWS?

• To set up network configurations for users.
• To create a backup of user data in AWS.
• The purpose of creating an IAM group in AWS is to manage permissions for multiple users collectively.
• To define billing limits for AWS services.

Which of the following are valid credentials for IAM users accessing AWS programmatically?

• Access Key ID and Secret Access Key
• OAuth Token
• Username and Password
• Session Token

What is the difference between IAM users categorized as "Human" and "Service"?

• The difference is that 'Human' users are individuals with direct access, while 'Service' users are applications or services accessing resources programmatically.
• Both 'Human' and 'Service' users have the same access rights.
• 'Human' users are automated systems, while 'Service' users are individuals.
• 'Human' users are only allowed to access public resources, while 'Service' users can access private resources.

What is required when logging in to the AWS Management Console as a human IAM user?

• UserName, PassWord, and AccessKey

• UserName, PassWord, and MFA (if enabled)

• AccessKey and SecretKey

• Only the MFA code

Which of the following AWS policy types is managed by AWS?

• User Managed Policies
• Inline Policies
• Service Control Policies
• AWS Managed Policies

What is a key security measure recommended for both Root users and IAM users

• AWS CLI access

• Disable all user accounts
• Enable Multi-Factor Authentication (MFA)
• Allow unrestricted access to all resources

Which access level allows users to create or modify resources?

• delete access
• write access
• execute access
• read access

What is the primary purpose of AWS CloudTrail?

• To store and manage AWS resources efficiently.
• To provide real-time monitoring of AWS services.
• To enable governance, compliance, and auditing of AWS account activity.
• To automate the deployment of AWS applications.

What AWS service can you use to query CloudTrail logs stored in an Amazon S3 bucket?

• Amazon Athena

• Amazon RDS
• Amazon Lamda

• Amazon Redshift