ACA ACA Identity and Access Management

Question 1

What is the primary purpose of Alibaba Cloud RAM (Resource Access Management)?

Accepted Answer

To control user identities and access permissions to cloud resources

Answer

To manage virtual machines

Answer

To configure network routing tables

Answer

To monitor cloud resource usage

Question 2

Which of the following best describes a RAM user?

Accepted Answer

An entity created under an Alibaba Cloud account representing a person or application

Answer

A physical server managed by Alibaba Cloud

Answer

A virtual machine instance in an ECS cluster

Answer

A temporary security credential issued by STS

Question 3

What is the difference between a System Policy and a Custom Policy in Alibaba Cloud RAM?

Accepted Answer

System policies are predefined by Alibaba Cloud; custom policies are user-defined

Answer

System policies are free; custom policies cost extra

Answer

System policies apply only to RAM users; custom policies apply to roles

Answer

System policies cannot be edited; custom policies expire after 30 days

Question 4

Which RAM entity should be used to grant an ECS instance permission to call other Alibaba Cloud services without embedding credentials?

Accepted Answer

RAM Role

Answer

RAM User

Answer

RAM Group

Answer

STS Token

Question 5

What does STS (Security Token Service) provide in the context of Alibaba Cloud RAM?

Accepted Answer

Temporary security credentials with a configurable expiration time

Answer

Permanent AccessKey pairs for RAM users

Answer

SSL certificates for HTTPS endpoints

Answer

Storage encryption keys for OSS buckets

Question 6

In Alibaba Cloud RAM, what is the effect of attaching a Deny statement to a policy when the same action is also allowed by another policy?

Accepted Answer

The Deny always overrides the Allow, blocking the action

Answer

The Allow takes precedence over the Deny

Answer

The Deny is ignored if it conflicts with an Allow

Answer

The result depends on which policy was attached first