AWS Identity and Access Management (IAM)

Using IAM you can create and manage

volume_mute

users

groups

user permissions

group permissions

EC2 instances

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

You can federate an external directly with AWS IAM to allow corporate users to use AWS resources

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Anonymous users can access AWS services an resources

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

An authenticated user is automatically allowed to use any AWS service

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

A user is granted permissions through a ___________

volume_mute

token

policy

document

type

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Actions and resources which are not defined in IAM policy are denied by default

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

Based on the following IAM policy, what action is the user explicitly allowed to perform?

volume_mute

{
    "Sid": "AllowManageOwnVirtualMFADevice",
    "Effect": "Allow",
    "Action": [
        "iam:CreateVirtualMFADevice"
    ],
    "Resource": "arn:aws:iam::*:mfa/*"
}

Attach an MFA device to a user account

Create a new virtual MFA device

Delete a virtual MFA device

Update the MFA device settings

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

What are the correct steps to allow a user to access AWS resources?

Please drag and drop the options to sort them

Create IAM users and add them to AIM groups

Create IAM groups

Create policies and attach them to IAM groups

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

AWS recommends not to use the root user for every day tasks

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

IAM users, applications, and services may assume IAM roles

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

An IAM role does not have a long-term defined credentials

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

An IAM role assigned to an IAM user allows to perform some tasks that may not be available in normal permissions

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

leveraging IAM role for users saves the need to modify user permissions every time it is required to allow for temporary permissions

volume_mute

True

False

note_alt Add notes

POINTS (1)

Correct Answer

Explanation

With AWS IAM, you can

volume_mute

Manage EC2 instances

Manage IAM users and their access

Manage IAM roles and their permissions

Manage federated users and their permissions

note_alt Add notes

POINTS (1)

Using IAM you can create and manage

Correct Answer

Explanation

You can federate an external directly with AWS IAM to allow corporate users to use AWS resources

Correct Answer

Explanation

Anonymous users can access AWS services an resources

Correct Answer

Explanation

An authenticated user is automatically allowed to use any AWS service

Correct Answer

Explanation

A user is granted permissions through a ___________

Correct Answer

Explanation

Actions and resources which are not defined in IAM policy are denied by default

Correct Answer

Explanation

Based on the following IAM policy, what action is the user explicitly allowed to perform?

Correct Answer

Explanation

What are the correct steps to allow a user to access AWS resources?

Correct Answer

Explanation

AWS recommends not to use the root user for every day tasks

Correct Answer

Explanation

IAM users, applications, and services may assume IAM roles

Correct Answer

Explanation

An IAM role does not have a long-term defined credentials

Correct Answer

Explanation

An IAM role assigned to an IAM user allows to perform some tasks that may not be available in normal permissions

Correct Answer

Explanation

leveraging IAM role for users saves the need to modify user permissions every time it is required to allow for temporary permissions

Correct Answer

Explanation

With AWS IAM, you can

Correct Answer

Explanation

Quran Recitation