Manage user access to AWS services and resources securely.

Automate software deployment in AWS

Optimize database performance in AWS

Monitor network traffic in AWS

servers

users, groups, roles, policies, permissions

databases

firewalls

IAM policies define the color scheme of a website

IAM policies define permissions for identities on AWS resources.

IAM policies are related to cooking recipes

IAM policies are used for managing physical access to buildings

An IAM role is an AWS identity with permission policies that can be assumed by anyone, while an IAM user is an entity representing a specific person or service.

An IAM role is a user-specific identity with permission policies, while an IAM user is a generic entity.

An IAM role is limited to specific services, while an IAM user has broader access.

An IAM role can only be used by one person, while an IAM user can be shared among multiple users.

Share your IAM credentials with colleagues

Use the same access key forever

Create IAM users with appropriate permissions, enable MFA, rotate access keys, use IAM roles for EC2 instances, and review IAM policies.

Never review or update IAM policies

MFA is a process that is not necessary in IAM as it does not provide any additional security benefits.

MFA is a security process that requires users to provide two or more forms of identification before accessing an account. It enhances security in IAM by adding an extra layer of protection.

MFA is a process that decreases security in IAM by making it easier for unauthorized users to access accounts.

MFA is a process that only requires one form of identification for accessing an account.

Create policies, attach policies to IAM groups or users, and ensure users are part of those groups.

Grant access manually

Use a magic spell to assign permissions

Send an email with permissions

The IAM policy simulator is a feature that allows users to create new IAM policies.

The IAM policy simulator is a tool provided by AWS that allows users to test and validate the permissions set in their IAM policies.

The IAM policy simulator is a service provided by Google Cloud Platform.

The IAM policy simulator is a tool for managing S3 buckets.

Never review or update permissions

Assign all permissions directly to individual users

Regularly review and update permissions, use groups to assign permissions, implement least privilege principle, enable multi-factor authentication, and monitor user activity.

Disable multi-factor authentication

True

False

username and password

pem file

MFA

access and secret key

username and password

pem file

MFA

root user

Virtualization

SOA

Grid Computing

All of the above

Change support plan

Secure root user

Set up admin user

Reset root password

Enable MFA (Multi Factor Authentication)

Replace password to very strong one

Apply Administrator Policy

Only root user can have MFA

Yes, but for programmatic use only

Yes, any IAM user can have MFA

True

False

Least-Privilege Principle

Less-Access Principle

Less-Privilege Principle

Least-Access Principle

True

False