NEW
Font size
WorksheetsCloud QUIZ
Total questions: 12
Worksheet time: 8mins
Least Privilege approach is to give users as many rights as possible and revoke back after.
true
false
Which IAM Entity is ideal for AWS services that need to make calls to other AWS services on your behalf?
User
Group
Role
What is required to make programmatic calls to AWS using AWS CLI, the AWS SDKs, or direct HTTPS calls using the APIs for individual services?
Admin User Priviledges
I am User access Key/ secret key
IAM Role
MFA Authentication
Which type of identity-based policy provides a more precise access control and can be attached to multiple entities?
AWS Managed
Customer Managed
Inline
if policies that apply to a request include an Allow statement and a Deny Statement, the allow statement supercedes the Deny Statement
True
False
An implicit denial occurs when there is no applicable Deny statement but also no applicable Allow statement.
True
False
Which type of identity-based policy maintains a strict one-to-one relationship between the policy and the principal entity that it's applied to?
AWS Managed
Customer Managed
Inline
A solutions architect is deploying an application on Amazon EC2, which must call AWS APIs. What method should they use to securely pass credentials to the application?
Pass API credentials to the instance using instance user data.
Store API credentials as an object in an Amazon S3 bucket.
Embed the API credentials into the application.
Assign an IAM role to the EC2 instance.
Which of the following is NOT a feature of AWS Security Token Service?
AWS STS enables users to request temporary limited-privilege credentials.
AWS STS enables users to assume a role.
AWS STS enables users to request Git credentials.
AWS STS generates federated credentials for IAM users.
A solutions architect has written an AWS Lambda function that writes customer data to an Amazon DynamoDB table. Which of the following must be in place to ensure that the Lambda function can interact with the DynamoDB table?
An IAM role is attached to the Lambda function with the required DynamoDB privileges.
An IAM user is attached to the Lambda function that has the required DynamoDB privileges.
Access keys are embedded in the AWS Lambda function.
The IAM user password is embedded in the AWS Lambda function.
An architect is developing a mobile application and wants to issue temporary security credentials to users of the application. Which is the best service to achieve this?
AWS STS
Amazon Cognito
AWS SSO
AWS IAM
A security engineer is approached by a solutions architect after an EC2 instance was shut down unexpectedly, compromising the workload. Which AWS service is used to investigate who shut down the workload?
AWS CloudTrail
Amazon CloudWatch
AWS Config
AWS Systems Manager
