CLF-C02 Identity and Access Management 3

Question 1

What is the primary purpose of AWS IAM Identity Center (formerly AWS Single Sign-On)?

Accepted Answer

Centrally managing access for multiple AWS accounts and applications with SSO

Answer

IAM Identity Center provides centralized access management across multiple AWS accounts and business applications, enabling single sign-on for users.

Question 2

Which of the following is an AWS best practice for managing IAM access keys?

Accepted Answer

Rotate access keys regularly and use IAM roles where possible instead of keys

Answer

AWS recommends rotating access keys regularly and preferring IAM roles over long-term access keys to reduce the risk of credential exposure.

Question 3

What does the IAM Policy Simulator allow you to do?

Accepted Answer

Test the effects of IAM policies to see what actions they allow or deny

Answer

The IAM Policy Simulator lets you test and troubleshoot policies before applying them by simulating API calls and checking whether they would be allowed or denied.

Question 4

Which type of policy is used with AWS Organizations to set the maximum available permissions for all accounts within an organization or organizational unit?

Accepted Answer

Service Control Policy (SCP)

Answer

Service Control Policies (SCPs) are applied at the AWS Organizations level to set guardrails on the maximum permissions available to accounts within an organization or OU.

Question 5

What is the purpose of an IAM credential report?

Accepted Answer

To audit IAM users and the status of their credentials across the account

Answer

IAM credential reports provide a downloadable CSV listing all IAM users and the status of their passwords, access keys, and MFA devices, supporting security audits.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Identity and Access Management 3