ACA ACA Identity and Access Management 2

Question 1

What is the recommended way to organize RAM users that share the same job function in Alibaba Cloud?

Accepted Answer

Add all users to a RAM Group and attach policies to the group

Answer

RAM Groups let you manage permissions for multiple users with the same role by attaching policies once to the group rather than to each individual user.

Question 2

Which of the following is true about the Alibaba Cloud account root user (primary account)?

Accepted Answer

It has unrestricted access to all resources and should be protected carefully

Answer

The root account has full, unrestricted access to all Alibaba Cloud services and billing, so best practice is to use RAM users for daily tasks and secure the root account with MFA.

Question 3

What is a trust policy in the context of a RAM Role?

Accepted Answer

A policy specifying which entities are allowed to assume the role

Answer

The trust policy (principal definition) on a RAM role specifies which Alibaba Cloud accounts, services, or users are permitted to assume that role.

Question 4

A developer needs to access OSS from a mobile app without exposing long-term credentials. Which approach should be used?

Accepted Answer

Use STS to issue short-lived tokens for the mobile app

Answer

STS temporary credentials are the secure approach for mobile and untrusted environments because they expire and limit exposure if compromised.

Question 5

Which RAM policy element is used to specify the Alibaba Cloud resource an action applies to?

Accepted Answer

Resource

Answer

The Resource element in a RAM policy uses an ARN (Alibaba Cloud Resource Name) format to identify the specific resource the policy statement applies to.

ACA - Alibaba Cloud Certified Associate Practice Test

ACA - Alibaba Cloud Certified Associate Practice Test

ACA ACA Identity and Access Management 2