CLF-C02 Identity and Access Management

Question 1

What is the primary purpose of AWS Identity and Access Management (IAM)?

Accepted Answer

To control who can access AWS services and what actions they can perform

Answer

To monitor AWS infrastructure performance

Answer

To manage encryption keys for AWS services

Answer

To configure network security groups

Question 2

Which IAM entity should be used to grant permissions to an AWS service such as EC2 to access S3?

Accepted Answer

IAM Role

Answer

IAM User

Answer

IAM Group

Answer

IAM Policy

Question 3

What is the AWS best practice recommendation for the root account?

Accepted Answer

Enable MFA and avoid using it for everyday tasks

Answer

Use it for all daily administrative tasks

Answer

Share it with trusted administrators only

Answer

Delete it after creating IAM users

Question 4

What is an IAM policy?

Accepted Answer

A JSON document that defines allowed or denied actions on AWS resources

Answer

A list of all IAM users in an AWS account

Answer

A billing configuration that enforces spending limits

Answer

A network rule that restricts IP-based access

Question 5

Which of the following is NOT a valid IAM identity type?

Accepted Answer

Permission

Answer

User

Answer

Group

Answer

Role

Question 6

What does the principle of least privilege mean in the context of AWS IAM?

Accepted Answer

Granting only the minimum permissions necessary to perform a required task

Answer

Providing all users with administrative access by default

Answer

Restricting users to the least expensive AWS services

Answer

Minimizing the total number of IAM users in an account

Question 7

Which AWS feature requires users to provide a second form of authentication in addition to a password?

Accepted Answer

Multi-Factor Authentication (MFA)

Answer

AWS Shield

Answer

AWS WAF

Answer

Amazon GuardDuty