CLF-C02 Identity and Access Management 2

Question 1

Which type of IAM policy is attached directly to IAM users, groups, or roles?

Accepted Answer

Identity-based policy

Answer

Resource-based policy

Answer

Service control policy

Answer

Permissions boundary

Question 2

What are IAM access keys used for?

Accepted Answer

Programmatic access to AWS services via CLI or SDK

Answer

Encrypting data stored in Amazon S3

Answer

Logging into the AWS Management Console

Answer

Enabling MFA for IAM users

Question 3

Which IAM feature acts as a guardrail by setting the maximum permissions an IAM entity can ever receive?

Accepted Answer

Permissions Boundary

Answer

IAM Policy

Answer

IAM Role

Answer

Service Control Policy

Question 4

Which statement about IAM groups is accurate?

Accepted Answer

A single IAM user can belong to multiple groups

Answer

Groups can be nested inside other groups

Answer

Groups can directly assume IAM roles

Answer

Groups have their own access keys for API calls

Question 5

When an IAM policy contains both an explicit Allow and an explicit Deny for the same action, what is the result?

Accepted Answer

Deny takes precedence

Answer

Allow takes precedence

Answer

The most recently applied policy wins

Answer

The user is prompted to resolve the conflict

Question 6

Which AWS service generates temporary security credentials for federated users or applications assuming IAM roles?

Accepted Answer

AWS Security Token Service (STS)

Answer

IAM Users

Answer

IAM Groups

Answer

AWS Secrets Manager

Question 7

What is the default maximum number of IAM users allowed per AWS account?

Accepted Answer

5,000

Answer

100

Answer

500

Answer

Unlimited