ACA ACA Identity and Access Management 2

Question 1

What is the recommended way to organize RAM users that share the same job function in Alibaba Cloud?

Accepted Answer

Add all users to a RAM Group and attach policies to the group

Answer

Create a separate Alibaba Cloud account for each user

Answer

Assign identical custom policies individually to each user

Answer

Use a single shared AccessKey for all users

Question 2

Which of the following is true about the Alibaba Cloud account root user (primary account)?

Accepted Answer

It has unrestricted access to all resources and should be protected carefully

Answer

It should be used for all day-to-day operations

Answer

It has the same permission level as a RAM administrator user

Answer

It can be deleted and replaced by a RAM user for security

Question 3

What is a trust policy in the context of a RAM Role?

Accepted Answer

A policy specifying which entities are allowed to assume the role

Answer

A policy defining what actions the role can perform

Answer

An Alibaba Cloud-managed policy granting full access

Answer

A billing rule applied to role usage

Question 4

A developer needs to access OSS from a mobile app without exposing long-term credentials. Which approach should be used?

Accepted Answer

Use STS to issue short-lived tokens for the mobile app

Answer

Embed the root account AccessKey directly in the app

Answer

Use a RAM user AccessKey hardcoded in the app code

Answer

Grant the mobile app RAM administrator permissions

Question 5

Which RAM policy element is used to specify the Alibaba Cloud resource an action applies to?

Accepted Answer

Resource

Answer

Effect

Answer

Action

Answer

Condition

Question 6

What happens when a RAM user has no policies attached?

Accepted Answer

The user has no permissions and cannot perform any actions

Answer

The user inherits the permissions of the root account

Answer

The user has access to all free-tier services

Answer

The user automatically receives read-only access to all services