IAM & AWS CLI Quiz

Score: 0%Correct: 0Incorrect: 0

Question 1: What are IAM Policies?

A set of policies that define a password for IAM UsersA set of policies defined by AWS that show how customers interact with AWSJSON documents that define a set of permissions for making requests to AWS services, and can be used by IAM Users, User Groups, and IAM RolesA set of policies that defines how AWS accounts interact with each other

Question 2: Which principle should you apply regarding IAM Permissions?

Grant more permissions if your employee asks you toGrant least privilegeRestrict root account permissionsGrant most privilege

Question 3: Which of the following is an IAM Security Tool?

IAM Services ReportIAM Security AdvisorIAM Credentials ReportIAM Root Account Manager

Question 4: What should you do to increase your root account security?

Enable Multi-Factor Authentication (MFA)Don't create IAM Users, only access your AWS account using the root accountRemove permissions from the root accountOnly access AWS services through AWS Command Line Interface (CLI)

Question 5: An IAM policy consists of one or more statements. A statement in an IAM Policy consists of the following, EXCEPT:

EffectResourcePrincipalActionVersion

Question 6: Which of the following is an IAM best practice?

Create several IAM Users for one physical personDo not enable MFA for easier accessDon't use the root user accountShare your AWS account credentials with your colleague, so (s)he can perform a task for you

Question 7: What is a proper definition of an IAM Role?

Permissions assigned to IAM Users to perform actionsAn IAM entity that defines a password policy for IAM UsersAn IAM entity that defines a set of permissions for making requests to AWS services, and will be used by an AWS serviceIAM Users in multiple User Groups

Question 8: Which answer is INCORRECT regarding IAM Users?

IAM Users access AWS services using root account credentialsIAM Users can belong to multiple User GroupsIAM Policies can be attached directly to IAM UsersIAM Users don't have to belong to a User Group

Question 9: IAM User Groups can contain IAM Users and other User Groups.

FalseTrue