AWS AWS Security and IAM 1 — Questions and Answers
Question 1: Which AWS service provides centralized identity and access management for AWS resources?
- AWS IAM (Correct answer)
- AWS Shield
- AWS WAF
- AWS Macie
Correct answer: AWS IAM
AWS IAM (Identity and Access Management) is the service that controls who can access which AWS resources.
Question 2: What is the principle of least privilege in AWS IAM?
- Granting only the permissions required to perform a task (Correct answer)
- Giving all users admin access
- Rotating passwords every 30 days
- Using MFA for all users
Correct answer: Granting only the permissions required to perform a task
The principle of least privilege means granting users only the minimum permissions they need to do their job.
Question 3: Which IAM entity is used to grant permissions to AWS services like EC2 or Lambda?
- IAM Role (Correct answer)
- IAM User
- IAM Group
- IAM Policy
Correct answer: IAM Role
IAM Roles are used to grant AWS services permissions to interact with other AWS services.
Question 4: What does MFA stand for in the context of AWS security?
- Multi-Factor Authentication (Correct answer)
- Multiple File Access
- Managed Feature Authority
- Multi-Function Authorization
Correct answer: Multi-Factor Authentication
MFA stands for Multi-Factor Authentication, adding an extra layer of security beyond just a password.
Question 5: Which AWS service helps detect and protect against DDoS attacks?
- AWS Shield (Correct answer)
- AWS IAM
- AWS Inspector
- AWS GuardDuty
Correct answer: AWS Shield
AWS Shield is a managed DDoS protection service that safeguards applications running on AWS.
Question 6: What is an AWS IAM policy?
- A JSON document that defines permissions (Correct answer)
- A billing plan for AWS services
- A network access control list
- A hardware security module
Correct answer: A JSON document that defines permissions
An IAM policy is a JSON document that specifies what actions are allowed or denied on which AWS resources.
AWS AWS Security and IAM 1
Which AWS service provides centralized identity and access management for AWS resources?