CLF-C02 Identity and Access Management 2

Question 1

Which type of IAM policy is attached directly to IAM users, groups, or roles?

Accepted Answer

Identity-based policy

Answer

Identity-based policies are attached to IAM identities (users, groups, or roles) and define what actions those identities are permitted to perform.

Question 2

What are IAM access keys used for?

Accepted Answer

Programmatic access to AWS services via CLI or SDK

Answer

IAM access keys (consisting of an access key ID and secret access key) are used for programmatic access to AWS through the CLI, SDK, or direct API calls.

Question 3

Which IAM feature acts as a guardrail by setting the maximum permissions an IAM entity can ever receive?

Accepted Answer

Permissions Boundary

Answer

Permissions boundaries define the maximum permissions an IAM entity can be granted, even if attached policies would otherwise allow more.

Question 4

Which statement about IAM groups is accurate?

Accepted Answer

A single IAM user can belong to multiple groups

Answer

An IAM user can be a member of multiple groups simultaneously, inheriting the combined permissions from all groups they belong to.

Question 5

When an IAM policy contains both an explicit Allow and an explicit Deny for the same action, what is the result?

Accepted Answer

Deny takes precedence

Answer

In IAM, an explicit Deny always overrides any Allow, ensuring that denied permissions cannot be inadvertently granted by another policy.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Identity and Access Management 2