ACA ACA Identity and Access Management

Question 1

What is the primary purpose of Alibaba Cloud RAM (Resource Access Management)?

Accepted Answer

To control user identities and access permissions to cloud resources

Answer

RAM is Alibaba Cloud's identity and access management service that lets you control who can access which cloud resources and under what conditions.

Question 2

Which of the following best describes a RAM user?

Accepted Answer

An entity created under an Alibaba Cloud account representing a person or application

Answer

A RAM user is a sub-identity created within an Alibaba Cloud account to represent a specific person or application with its own credentials.

Question 3

What is the difference between a System Policy and a Custom Policy in Alibaba Cloud RAM?

Accepted Answer

System policies are predefined by Alibaba Cloud; custom policies are user-defined

Answer

System policies are maintained by Alibaba Cloud with preset permissions for common services, while custom policies are authored by the account holder for fine-grained control.

Question 4

Which RAM entity should be used to grant an ECS instance permission to call other Alibaba Cloud services without embedding credentials?

Accepted Answer

RAM Role

Answer

A RAM role assigned to an ECS instance lets the instance obtain temporary credentials automatically, eliminating the need to embed AccessKey credentials.

Question 5

What does STS (Security Token Service) provide in the context of Alibaba Cloud RAM?

Accepted Answer

Temporary security credentials with a configurable expiration time

Answer

STS issues short-lived tokens with a defined TTL, reducing risk by ensuring credentials expire and cannot be reused indefinitely.

ACA - Alibaba Cloud Certified Associate Practice Test

ACA - Alibaba Cloud Certified Associate Practice Test

ACA ACA Identity and Access Management