AWS AWS Identity & Access Management 2

Question 1

Which AWS Security Token Service feature issues temporary security credentials to users authenticated by an external identity provider?

Accepted Answer

AssumeRoleWithWebIdentity

Answer

AssumeRoleWithWebIdentity allows users authenticated by web identity providers like Amazon, Google, or Facebook to receive temporary AWS credentials.

Question 2

Which AWS service provides a hierarchical structure to centrally manage multiple AWS accounts, apply governance policies, and consolidate billing?

Accepted Answer

AWS Organizations

Answer

AWS Organizations lets you group accounts into organizational units (OUs) and apply Service Control Policies for centralized governance.

Question 3

What is the maximum session duration that can be configured when assuming an IAM role?

Accepted Answer

12 hours

Answer

IAM role session durations can be set up to 12 hours (43,200 seconds) when the role's maximum session duration is configured accordingly.

Question 4

Which AWS service issues and manages SSL/TLS certificates for use with AWS services and provides automatic renewal?

Accepted Answer

AWS Certificate Manager

Answer

AWS Certificate Manager (ACM) provisions, manages, and auto-renews public and private SSL/TLS certificates for use with AWS services.

Question 5

What IAM Condition key can enforce MFA authentication before allowing access to sensitive API operations?

Accepted Answer

aws:MFAPresent

Answer

The condition key `aws:MultiFactorAuthPresent` (commonly shortened as MFAPresent) can be used in IAM policies to require MFA for sensitive operations.

AWS Practice Test

AWS Practice Test

AWS AWS Identity & Access Management 2