CLF-C02 Identity and Access Management

Question 1

What is the primary purpose of AWS Identity and Access Management (IAM)?

Accepted Answer

To control who can access AWS services and what actions they can perform

Answer

IAM is used to manage authentication and authorization, controlling which users and services can access AWS resources and what actions they can take.

Question 2

Which IAM entity should be used to grant permissions to an AWS service such as EC2 to access S3?

Accepted Answer

IAM Role

Answer

IAM Roles are designed to grant permissions to AWS services so they can interact with other AWS services without requiring long-term credentials.

Question 3

What is the AWS best practice recommendation for the root account?

Accepted Answer

Enable MFA and avoid using it for everyday tasks

Answer

AWS recommends enabling MFA on the root account and reserving its use only for tasks that specifically require root-level access.

Question 4

What is an IAM policy?

Accepted Answer

A JSON document that defines allowed or denied actions on AWS resources

Answer

IAM policies are JSON documents specifying which actions are allowed or denied on which AWS resources, and they are attached to IAM identities or resources.

Question 5

Which of the following is NOT a valid IAM identity type?

Accepted Answer

Permission

Answer

IAM identity types are Users, Groups, and Roles; Permission is not an identity but rather something granted to identities through policies.

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

(CLF-C02) AWS Certified Cloud Practitioner Practice Test

CLF-C02 Identity and Access Management