Chapter 7 - Security Services

What is the default mind-set of IAM?

• Access based on user roles

• Full access to everything

• Limited access to certain resources

• No access to anything

Answer explanation

The default mind-set of IAM is 'No access to anything'. This principle ensures that users have no permissions until explicitly granted, enhancing security by minimizing potential risks.

What does IAM stand for?

• Identity and Access Module

• Identity and Application Management

• Identity and Account Management

• Identity and Access Management

Answer explanation

IAM stands for Identity and Access Management, which refers to the policies and technologies used to ensure that the right individuals have the appropriate access to technology resources.

Which of the following is a responsibility of AWS regarding IAM?

• Enforcing security policies

• Creating IAM users

• Managing user passwords

• Providing the toolset for security

Answer explanation

AWS provides the toolset for security, including IAM, but does not enforce security policies, create users, or manage passwords directly. Users are responsible for implementing and managing these aspects.

What is required for IAM to control access?

• AWS account verification

• IAM security policies

• Resource tagging

• User authentication

Answer explanation

IAM security policies are essential for controlling access, as they define permissions for users and resources. Without these policies, IAM cannot effectively manage who can access what within an AWS account.

Which of the following is NOT a feature of IAM?

• Automatic user creation

• Granular permission control

• Bundled in the price

• Full integration with AWS services

Answer explanation

Automatic user creation is not a feature of IAM; it requires manual setup or integration with other services. IAM provides granular permission control, is bundled in the price, and integrates fully with AWS services.

What does MFA stand for in the context of IAM?

• Multiple Factor Access

• Managed Factor Authentication

• Multi-user Factor Authentication

• Multifactor Authentication

Answer explanation

MFA stands for Multifactor Authentication, which is a security mechanism that requires multiple forms of verification to access a system, enhancing security beyond just a password.

What is the purpose of IAM roles?

• To provide temporary access to AWS resources

• To permanently assign permissions

• To manage user accounts

• To create IAM policies

Answer explanation

IAM roles are designed to provide temporary access to AWS resources, allowing users or services to assume roles with specific permissions without permanently assigning those permissions.

Which of the following is a type of IAM policy?

• Role-Based Policies

• Service-Based Policies

• User-Based Policies

• Identity-Based Policies

Answer explanation

Identity-Based Policies are a type of IAM policy that attach permissions directly to an identity (user, group, or role). They define what actions an identity can perform on specific resources.

What is the maximum number of IAM groups an IAM user can belong to?

• 5

• 10

• 20

• 15

Answer explanation

An IAM user can belong to a maximum of 10 IAM groups. This limit is set by AWS to manage permissions effectively and ensure optimal performance.

What is the primary function of IAM policies?

• Define permissions for AWS resources

• Create user accounts

• Control access to the AWS Management Console

• Manage billing information

Answer explanation

The primary function of IAM policies is to define permissions for AWS resources, allowing you to control who can access and manage those resources effectively.