NEW
Font size
WorksheetsIntoduction to AWS IAM
Total questions: 40
Worksheet time: 33mins
What is AWS IAM?
A service for managing server instances in AWS.
A service for managing user identities and access to AWS resources.
A service for managing storage and databases in AWS.
A service for monitoring and logging in AWS.
Which AWS IAM entity is used to grant permissions for accessing AWS resources?
Users
Roles
Groups
Policies
What is an IAM role?
A group of IAM users with similar permissions.
An IAM entity with temporary credentials used by applications running on EC2 instances.
A policy document that defines permissions for AWS resources.
An IAM user with administrative privileges.
What is the purpose of an IAM policy?
To define the password requirements for IAM users.
To define permissions for AWS resources.
To define the network access rules for VPCs.
To define the backup and recovery options for EC2 instances.
Which AWS service allows you to enable multi-factor authentication (MFA) for IAM users?
AWS CloudTrail
AWS S3
AWS IAM
AWS VPC
What is the main purpose of IAM groups?
To define permissions for IAM users.
To enable cross-account access to AWS resources.
To allow IAM users to assume roles in other AWS accounts.
To organize IAM users and apply policies to them in a group.
Which AWS service provides a way to securely access and manage AWS services using a command-line interface?
AWS IAM
AWS CloudFormation
AWS CLI (Command Line Interface)
AWS Lambda
Which of the following authentication methods are supported by IAM?
Username and password
Access keys
Multi-factor authentication (MFA)
All of the above
What does IAM stand for in AWS?
Intelligent Asset Manager
Integrated Access Manager
Identity and Access Management
Instance Authentication Module
Which of the following is true about IAM users?
They have full administrative privileges in AWS.
They can access and manage AWS resources.
They are AWS service accounts used for internal processes.
They can only be created by the root AWS account.
What is the recommended way to grant permissions to an IAM user or group?
Using IAM policies
Sharing access keys and secret keys.
Modifying the AWS account root user permissions.
Creating separate AWS accounts for each user.
Which AWS service allows you to integrate external identity providers with IAM?
AWS CloudFormation
Amazon S3
AWS Single Sign-On (SSO)
AWS Lambda
How can you enable multi-factor authentication (MFA) for an IAM user?
Use a hardware token provided by AWS.
Configure it directly in the IAM user settings.
Contact AWS support to enable MFA.
MFA is only available for the root AWS account.
What is the purpose of IAM access keys?
To authenticate AWS API requests.
To encrypt and store sensitive data in AWS services.
To manage IAM user passwords.
To enable multi-factor authentication for IAM users.
Which AWS service allows you to grant temporary access to your AWS resources to users outside your organization?
IAM Access Analyzer
Amazon Simple Queue Service (SQS)
AWS Single Sign-On (SSO)
AWS Security Token Service (STS)
What is the default action when no explicit permissions are granted to an IAM user?
The user is granted full access to all AWS resources
The user is denied access to all AWS resources
The user inherits the permissions of the root account
The user is prompted to request permissions
Which AWS service can be used to audit and monitor IAM activity?
AWS CloudTrail
AWS Lambda
AWS CloudFormation
AWS Config
Which of the following is NOT a valid IAM entity in AWS?
User
Group
Role
Service
Which of the following is not a feature of IAM?
Centralized control of AWS account
Fine-grained access control to AWS resources
Multi-factor authentication (MFA)
Automated scaling of resources
How are IAM policies defined in AWS?
In YAML format
In JSON format
In XML format
In binary format
Which of the following actions can be performed using IAM policies?
Granting permissions to users
Creating IAM groups
Configuring VPC settings
Launching EC2 instances
How are IAM policies associated with users, groups, and roles in AWS IAM?
They are attached directly to each user, group, or role.
They are stored separately in an S3 bucket and linked to each entity.
They are inherited from the root account and cannot be modified.
They are applied globally to all users, groups, and roles.
True or False: IAM policies are JSON documents that define permissions and can be attached to users, groups, and roles in AWS.
True
False
What does the principle of least privilege mean in the context of AWS IAM?
Granting maximum permissions to all IAM users
Restricting access to only a single AWS service
Giving access to resources based on user location
Providing users with only the permissions they need to perform their tasks
What is the recommended way to grant temporary access to an AWS resource to an external user without creating an IAM user account?
Share your root account credentials
Create an IAM user account for the external user
Use AWS Identity Federation and temporary security credentials
Attach an IAM policy directly to the resource
What is the default action when you create a new IAM user in AWS?
The user has full administrative access to all AWS services and resources.
The user has no access to any AWS services or resources.
The user inherits the permissions of the root account.
The user is prompted to set up their own access permissions.
How can you enforce a strong password policy for IAM users in AWS?
By enabling multi-factor authentication (MFA) for all IAM users
By regularly rotating IAM user access keys
By requiring IAM users to use complex and regularly updated passwords
By assigning IAM users to a specific IAM group
Which AWS IAM feature allows you to grant users temporary access to AWS resources?
IAM policies
IAM roles
IAM groups
IAM permissions
What is the purpose of an IAM policy simulator in AWS?
To track and monitor IAM user activities in real-time
To test the effectiveness of IAM policies before deploying them
To enforce compliance with AWS security best practices
To generate IAM access reports for auditing purposes
Which AWS service provides a graphical interface for managing IAM resources?
AWS CloudFormation
AWS Identity and Access Management (IAM) Console
AWS Elastic Beanstalk
AWS Simple Storage Service (S3)
True or False: IAM users inherit the permissions of the IAM groups they belong to.
True
False
Which of the following actions can be performed by an IAM user with the "IAMFullAccess" policy attached?
Create S3 buckets and upload files
Launch and terminate EC2 instances
Manage IAM users and groups
Access billing and cost management information
True or False: IAM policies can be attached to both IAM users and IAM roles.
True
False
Which statement is true about IAM access keys?
IAM access keys are used for passwordless authentication.
IAM access keys are used to sign and encrypt data in transit.
IAM access keys consist of a public key and a private key.
IAM access keys are used to make programmatic API calls to AWS.
What is the recommended way to manage access and permissions in AWS?
Creating separate AWS accounts for each user
Sharing the root AWS account credentials with all users
Assigning IAM roles to users based on their job functions
Granting full administrative access to all users by default
Which of the following is a best practice for IAM?
Sharing IAM user credentials among multiple users
Assigning the most permissive IAM policies to all users
Regularly rotating IAM access keys
Creating separate IAM users for each AWS service.
Which AWS service allows you to simulate and test IAM policies before applying them?
AWS Config
AWS IAM Analyzer
AWS IAM Access Advisor
AWS IAM Policy Simulator
Which statement accurately describes IAM roles for EC2 instances?
IAM roles can only be assigned to EC2 instances at launch time
IAM roles for EC2 instances are used for SSH key management
IAM roles for EC2 instances are used to manage EC2 instance types
IAM roles for EC2 instances provide temporary credentials for applications running on the instance
What is the minimum permission required for a user to manage IAM users and groups?
IAMReadOnlyAccess
IAMUserChangePassword
IAMUserAdmin
IAMFullAccess
Which of the following is NOT a component of AWS IAM?
Users
Roles
Policies
Security Groups
