Font size
WorksheetsIAM 4thJune
Total questions: 15
Worksheet time: 8mins
Which of the following is the most secure way of giving access to AWS services to applications running on Ec2 instances?
Creating Service users
Creating service groups
Roles
Attaching policies to applications
True or False : An explicit Deny in IAM precedes over an explicit allow
TRUE
FALSE
TRUE or FALSE : By default a new user in IAM has permisiions to log in to the AWS Console.
TRUE
FLASE
In an IAM policy, following entity represents the user or service to whom access to a resource is granted or denied?
Statement ID
Resources
Principal
Conditions
Which of the following is not an IAM best practice?
Delete user accounts not in use
Configure IAM users long term Access/Secret key on EC2 instance instead of using Role
Manage permissions by adding users to groups
Enable MFA on user accounts
Which of the following set of credentials are used to log in to AWS programmatically? (Choose two)
Username
Access Key
Password
Secret Access Key
In order to grant access to users from another AWS account you should
Share your AWS console credentials with remote user
Share you Access/Secret keys with remote user
Create IAM role and provide assume role permissions for remote account
Create a new user into your AWS account and share credentials with remote user
An EC2 Instance hosts a Java based application that accesses a DynamoDB table. This EC2 Instance is currently serving production users. Which of the following is a secure way for the EC2 Instance to access the DynamoDB table?
UseIAM Roles with permissions to interact with DynamoDB and assign it to the EC2Instance
UseKMS Keys with the right permissions to interact with DynamoDB and assign it to the EC2 Instance.
UseIAM Access Keys with the right permissions to interact with DynamoDB and assign it to the EC2 Instance.
UseIAM Access Groups with the right permissions to interact with DynamoDB and assign it to the EC2 Instance.
An EC2 Instance setup in AWS will host an application which will make API calls to the Simple Storage Service. What is an ideal way for the application to access the Simple Storage Service?
Pass API credentials to the instance using instance user data.
Store API credentials as an object in a separate Amazon S3 bucket.
Embed the API credentials into your application.
Create and Assign an IAM role to the EC2 Instance.
You are developing a mobile application that needs to issue temporary security credentials to users. This is essential due to security concerns. Which of the below services can help achieve this?
AWS STS
AWS Trusted Advisor
AWS Config
AWS Inspector
Which user has no permission by default
EC2 user
IAM user
Root user
Service user
Acronym of AWS IAM
Amazons Web Services Identifies and Access Management
Amazons Web Services Identifies and Access Management
Amazon Web Services Identify and Access Managment
Identify and Access Management
What is Shared Access to your Account means? Choose Two
Grant to the different people for different resources
Easily share resources with the help of the shared access
Grant to the different people for different resources
Use resources in your AWS account without having to share your password or access key
Users is?
Permission to make AWS service requests
Perfrom any action in any other account
Entity that you create in AWS to represent the person or application
Permissions associated with
You use IAM to?
To have a full access to all the resources
Complete access to all AWS services
Control who is authenticated (sign in) and authorized (has permissions)
Access to all AWS and resources in the account
