AWS IAM

Which IAM entity is used to define permissions in AWS?

• Security Group

• Policy

• Route Table

• Key Pair

Which type of IAM policy is directly attached to a single user, group, or role?

• SCP

• Managed Policy

• Inline Policy

• Resource Policy

What is the default maximum session duration for an IAM role?

• 15 minutes

• 1 hour

• 12 hours

• 24 hours

Which AWS service helps analyze external access granted to resources?

• CloudTrail

• GuardDuty

• IAM Access Analyzer

• Macie

What does the 'Principal' element specify in an IAM policy?

• Allowed actions

• AWS Region

• Resource ARN

• Who can access the resource

Which IAM feature provides temporary credentials?

• Access Keys

• IAM Roles

• MFA Devices

• Password Policies

Which policy type can restrict permissions across all AWS accounts in an organization?

• Resource Policy

• Inline Policy

• SCP

• Bucket Policy

Which IAM credential should be avoided for applications running on EC2?

• IAM Role

• Temporary Credentials

• Hardcoded Access Keys

• STS Tokens

Which AWS service issues temporary security credentials?

• IAM Identity Center

• AWS STS

• AWS Organizations

• AWS Config

What is the effect of an explicit deny in IAM?

• Ignored if Allow exists

• Overrides all Allows

• Works only for users

• Applies only to groups