Font size
WorksheetsChapter 4 - AWS IAM
Total questions: 22
Worksheet time: 12mins
What is the purpose of IAM Users and Groups in AWS?
IAM Users and Groups in AWS are designed for entertainment purposes.
IAM Users and Groups in AWS are used to manage physical hardware.
IAM Users and Groups in AWS are used to manage access to AWS services and resources.
IAM Users and Groups in AWS are used for billing purposes only.
Explain the concept of IAM Roles and Policies.
IAM Roles are used for managing network configurations
Policies are used for defining user authentication methods
IAM Roles define permissions for making AWS service requests, while Policies define permissions for IAM entities.
IAM Roles are only applicable to on-premises servers
How are IAM Permissions and Access managed in AWS IAM?
By asking other AWS users for permission
By creating policies that define permissions and attaching them to IAM identities.
By sending emails to AWS support
By writing code directly in the AWS Management Console
How can you create a new IAM user in AWS?
Use AWS SDK > Write code to create user > Execute script > Set permissions
Log in to AWS Management Console > IAM > Users > Add user > Enter details > Set permissions > Create user
Navigate to S3 > Create new user > Enter details > Set permissions > Save
Access AWS CLI > Run command to create user > Enter details > Set permissions
In AWS IAM, there are two primary types of policies used to manage permissions. What are them?
Access Control Lists
Attribute-Based Policies
Policy Documents
Identity-Based Policies
Resource-Based Policies
How can you grant permissions to an IAM user in AWS?
Modify the user's password to grant permissions
Create an IAM policy with the required permissions, attach the policy to the IAM user.
Grant permissions directly through the AWS Management Console
Assign a new IAM role to the user
Explain the concept of IAM Access Keys.
IAM Access Keys are long-term credentials used to access AWS services programmatically.
IAM Access Keys are used for physical access to AWS data centers.
IAM Access Keys are temporary credentials that expire after 24 hours.
IAM Access Keys are used for accessing Google Cloud Platform services.
What are the advantages of using IAM Groups in AWS?
IAM Groups in AWS provide easier permission management, consistency in permissions across users with similar roles, and simplification of user access control.
IAM Groups in AWS provide unlimited storage capacity
IAM Groups in AWS increase network latency
IAM Groups in AWS can only be used for billing purposes
How can you monitor IAM activity in AWS?
Use AWS Config to monitor IAM activity.
Set up AWS CloudWatch to monitor IAM activity.
Implement AWS Trusted Advisor to monitor IAM activity.
Enable AWS CloudTrail to monitor IAM activity.
What are the key components of IAM Policies?
Resources
Adjectives
Actions
Effects
Conditions
Which IAM group should be assigned to a user who needs read-only access to Amazon S3?
(Refer to your class activity 1 practical exercise in chapter 4)
EC2-Support
EC2-Admin
S3-Support
Admin-Group
What is the primary permission for the group EC2-Support?
(Refer to your class activity 1 practical exercise in chapter 4)
Full access to Amazon EC2
Read-only access to Amazon EC2
Full access to Amazon S3
Read-only access to Amazon S3
Which IAM group should you assign to a user who needs to be able to view, start, and stop Amazon EC2 instances?
(Refer to your class activity 1 practical exercise in chapter 4)
EC2-Support
Admin-Group
S3-Support
EC2-Admin
A new staff member needs access to Amazon S3 and also requires the ability to start and stop Amazon EC2 instances. Which combination of IAM groups should they be assigned to ensure they have the necessary permissions?
(Refer to your class activity 1 practical exercise in chapter 4)
EC2-Support
Admin-Group
S3-Support
EC2-Admin
You are reviewing the permissions of a user who is a member of both the EC2-Support group and the S3-Support group. This user reports they cannot start or stop EC2 instances. What is the most likely reason for this issue?
(Refer to your class activity 1 practical exercise in chapter 4)
The S3-Support group has conflicting permissions with EC2-Support, causing the EC2 permissions to be overridden.
The EC2-Support group does not grant permissions to start or stop EC2 instances, only read-only access.
The S3-Support group restricts EC2 actions due to a policy condition.
The EC2-Support group has explicit deny permissions that override the permissions of the S3-Support group.
An IAM user cannot be a member of more than _ groups.
(a)
The S3-Support group has the (a) policy attached.
(Refer to your class activity 1 practical exercise in chapter 4)
After the exercise, user-3 is under which IAM Group?
(Refer to your class activity 1 practical exercise in chapter 4)
S3-Support
EC2-Admin
EC2-Support
No Group
Which user can only view the EC2 list but unable to control the EC2?
(Refer to your class activity 1 practical exercise in chapter 4)
user-1
user-2
user-3
What is the exact managed policy name attached to S3-Support group?
(Refer to your class activity 1 practical exercise in chapter 4)
(a)
What is the password used to log in as user-3?
(Refer to your class activity 1 practical exercise in chapter 4)
(a)
(a) is the process of giving authority to a user to access a resource as well as determine the access level and privileges towards a particular organization’s asset or resource
