Which service enables AWS customers to manage users and permissions in AWS?
a.AWS Access Control Service (ACS)
b.AWS Identity and Access Management (IAM)
c.AWS Identity Manager (AIM) - ANS B
IAM provides several policy templates you can use to automatically assign permissions to the g...
Which service enables AWS customers to manage users and permissions in AWS?
a.AWS Access Control Service (ACS)
b.AWS Identity and Access Management (IAM)
c.AWS Identity Manager (AIM) - ANS B
IAM provides several policy templates you can use to automatically assign permissions to the
groups you create. The _____ policy template gives the Admins group permission to access all
account resources, except your AWS account information
a.Read Only Access
b.Power User Access
c.AWS Cloud Formation Read Only Access
d.Administrator Access - ANS D
Every user you create in the IAM system starts with _________.
a.Partial permissions
b.Full permissions
c.No permissions - ANS c
Groups can't _____.
a.be nested more than 3 levels
b.be nested at all
c.be nested more than 4 levels
d.be nested more than 2 levels - ANS b
The _____ service is targeted at organizations with multiple users or systems that use AWS
products such as Amazon EC2, Amazon SimpleDB, and the AWS Management Console.
a.Amazon RDS
b.AWS Integrity Management
c.AWS Identity and Access Management
d.Amazon EMR - ANS c
An AWS customer is deploying an application that is composed of an AutoScaling group of EC2
Instances. The customers security policy requires that every outbound connection from these
instances to any other service within the customers Virtual Private Cloud must be authenticated
using a unique x 509 certificate that contains the specific instanceid. In addition an x 509
, certificates must Designed by the customer's Key management service in order to be trusted for
authentication. Which of the following configurations will support these requirements?
a.Configure an IAM Role that grants access to an Amazon S3 object containing a signed
certificate and configure the Auto Scaling group to launch instances with this role Have the
instances bootstrap get the certificate from Amazon S3 upon first boot.
b.Embed a certificate into the Amazon Machine Image that is used by the Auto Scaling group
Have the launched instances gener - ANS a
When assessing an organization AWS use of AWS API access credentials which of the
following three credentials should be evaluated? Choose 3 answers
a.Key pairs
b.Console passwords
c.Access keys
d.Signing certificates
e.Security Group memberships - ANS acd
An organization has created 50 IAM users. The organization wants that each user can change
their password but cannot change their access keys. How can the organization achieve this?
a.The organization has to create a special password policy and attach it to each user
b.The root account owner has to use CLI which forces each IAM user to change their password
on first login
c.By default each IAM user can modify their passwords
d.Root account owner can set the policy from the IAM console under the password policy
screen - ANS d
An organization has created 50 IAM users. The organization has introduced a new policy which
will change the access of an IAM user. How can the organization implement this effectively so
that there is no need to apply the policy at the individual user level?
a.Use the IAM groups and add users as per their role to different groups and apply policy to
group
b.The user can create a policy and apply it to multiple users in a single go with the AWS CLI
c.Add each user to the IAM role as per their organization role to achieve effective policy setup
d.Use the IAM role and implement access at the role level - ANS a
Your organization's security policy requires that all privileged users either use frequently rotated
passwords or one-time access credentials in addition to username/password. Which two of the
following options would allow an organization to enforce this policy for AWS users? Choose 2
answers
a.Configure multi-factor authentication for privileged IAM users
b.Create IAM users for privileged accounts
Implement identity federation between your organization's c.Identity provider leveraging the IAM
Security Token Service
d.Enable the IAM single-use password policy option for privileged users - ANS ab
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller DocLaura. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $10.39. You're not tied to anything after your purchase.
