26-04 Identity and Access Management
# Question 1
You wish to deploy a dev and test environment on AWS. You want to ensure that your developers can access your AWS account using a highly secure authentication process and follow best practices. Which of the following two configuration options will help ensure enhanced security? (Choose two answers)
- A. Configure your IAM accounts with MFA.
- B. Configure your IAM password policy with complexity rules.
- C. Ensure you encrypt your EBS volumes.
- D. Create RDS databases with Multi-AZ.
- E. Provide the root account credential details to your developers.
# Question 2
Your developer is working from home this weekend and needs to access your AWS account using the CLI to configure your RDS database from their local computer. Which type of IAM credentials would they need to configure the AWS CLI tool on their machine?
- A. IAM username and password
- B. Access key IDs and secret access keys
- C. Access keys and secret ID
- D. HTTPS
# Question 3
Which AWS service enables you to troubleshoot your IAM policies and identify the sets of permissions that may be denying access to a given AWS service?
- A. IAM policy simulator
- B. CloudWatch
- C. CloudTrail
- D. IAM policy manager
# Question 4
Which of the following AWS services is a better option to securely grant your application running on an EC2 instance access to a backend database running on Amazon RDS?
- A. Access keys
- B. IAM role
- C. IAM group
- D. Security group
# Question 5
Which format are IAM policy documents written in?
- A. JSON
- B. YAML
- C. XML
- D. JAVA
# Question 6
What best practice strategy should you follow when assigning permissions to IAM users and groups?
- A. Follow the principle of least privilege.
- B. Follow the principle of most privilege.
- C. Follow the ITIL principles.
- D. Follow the GDPR principle.
# Question 7
Which IAM service enables you to effectively manage users by creating a collection of them based on their job function and assigning them permissions according to their roles to the entire collective?
- A. IAM groups
- B. IAM policies
- C. IAM collection
- D. IAM roles
# Question 8
Which feature of IAM enables you to use your existing corporate Active Directory user credentials to log in to the AWS Management Console and therefore offer an SSO service?
- A. Identity federation
- B. IAM user database
- C. Active Directory users and computers
- D. MFA
# Question 9
Which AWS service enables you to generate and download a report that lists your IAM users and the state of their various credentials, including passwords, access keys, and MFA devices?
- A. AWS policies
- B. AWS Explorer
- C. Credentials report
- D. User report
# Question 10
Which AWS service is responsible for assigning and managing temporary credentials to entities that assume an IAM role?
- A. AWS Password Manager
- B. AWS Security Token Service
- C. AWS Credentials Manager
- D. AWS Credentials Report
# Answer Key
Answer Key
- A and B
- B
- A
- B
- A
- A
- A
- A
- C
- B