Quiz
Chapter 6 - 13 - Authentication and Authorization—AWS Identity
Erstelle ein kostenloses Konto, um dieses Quiz zu beenden
Speichere deinen Fortschritt und sieh dir dein Endergebnis an.
oder mit deiner E-Mail registrieren
Schon ein Konto? Anmelden
Fragen in diesem Quiz (20)
1Which of the following is the greatest risk posed by using your AWS account root user for
day-to-day operations?- AThere would be no easy way to control resource usage by project or class.
- BThere would be no effective limits on the effect of an action, making it more likely for
unintended and unwanted consequences to result. - CSince root has full permissions over your account resources, an account compromise at
the hands of hackers would be catastrophic. - DIt would make it difficult to track which account user is responsible for specific actions.
2Which of the following statements is a correct description of IAM policies?
- AThe Action element refers to the way IAM will react to a request.
- BThe * character applies an element globally—as broadly as possible.
- CThe Resource element refers to the third-party identities that will be allowed to access
the account. - DThe Effect element refers to the anticipated resource state after a request is granted.
3Which of the following will—when executed on its own—prevent an IAM user with no
existing policies from launching an EC2 instance? (Choose three.)- AAttach no policies to the user.
- BAttach two policies to the user with one policy permitting full EC2 access and the
other permitting IAM password changes but denying EC2 access. - CAttach a single policy permitting the user to create S3 buckets.
- DAttach the AdministratorAccess policy.
4Which of the following are important steps for securing IAM user accounts? (Choose two.)
- ANever use the account to perform any administration operations.
- BEnable multifactor authentication (MFA).
- CAssign a long and complex password.
- DDelete all access keys.
5Which of the following security credentials can be used for encrypting SOAP requests to
AWS services? (Choose two.)- AX.509 certificates
- BAccess keys
- CPasswords
- DKey pairs
6Which of the following AWS CLI commands can tell you whether an access key is still
being used?- Aaws iam get-access-key-used ––access-key-id
- Baws iam ––get-access-key-last-used access-key-id
- Caws iam get-access-key-last-used access-last-key-id
- Daws iam get-access-key-last-used ––access-key-id
7Which of the following is the greatest benefit of organizing your users into groups?
- AIt enhances security by consolidating resources.
- BIt simplifies the management of user permissions.
- CIt allows for quicker response times to service interruptions.
- DIt simplifies locking down the root user.
8Which of the following is not considered a trusted entity in the context of IAM roles?
- AA web identity authenticating with Google
- BAn identity coming through a SAML-based federated provider
- CAn identity using an X.509 certificate
- DA web identity authenticating with Amazon Cognito
9Which of the following AWS services provides virtual hardware devices for managing
encryption infrastructure that’s FIPS 140-2 compliant?- AAWS CloudHSM
- BAWS Key Management Service
- CAWS Security Token Service
- DAWS Secrets Manager
10Which of the following is the best tool for authenticating access to a VPC-based MS Share-
Point farm?- AAmazon Cognito
- BAWS Directory Service for Microsoft Active Directory
- CAWS Secrets Manager
- DAWS Key Management Service
11What is the function of Amazon Cognito identity pools?
- AGive your application users temporary, controlled access to other services in your AWS
account. - BAdd user sign-up and sign-in to your applications.
- CIncorporate encryption infrastructure into your application lifecycle.
- DDeliver up-to-date credentials to authenticate RDS database requests.
- AGive your application users temporary, controlled access to other services in your AWS
12An employee with access to the root user on your AWS account has just left your company.
Since you can’t be 100 percent sure that the former employee won’t try to harm your
company, which of the following steps should you take? (Choose two.)- AChange the password and MFA settings for the root account.
- BDelete and re-create all existing IAM policies.
- CChange the passwords for all your IAM users.
- DDelete the former employee’s own IAM user (within the company account).
13Which of the following elements will not play any role in crafting an IAM policy?
- AAction
- BRegion
- CEffect
- DResource
14Which of the following are necessary steps for creating an IAM role? (Choose two.)
- ADefine the action.
- BSelect at least one policy.
- CDefine a trusted entity.
- DDefine the consumer application.
15Which of the following uses authentication based on AWS Security Token Service (STS)
tokens?- APolicies
- BUsers
- CGroups
- DRoles
16What format must be used to write an IAM policy?
- AHTML
- BKey/value pairs
- CJSON
- DXML
17If you need to allow a user full control over EC2 instance resources, which two of the
following must be included in the policy you create?- A"Target": "ec2:*"
- B"Action": "ec2:*"
- C"Resource": "ec2:*"
- D"Effect": "Allow"
18What is the function of Amazon Cognito user pools?
- AGive your application users temporary, controlled access to other services in your AWS
account. - BAdd user sign-up and sign-in to your applications.
- CIncorporate encryption infrastructure into your application lifecycle.
- DDeliver up-to-date credentials to authenticate RDS database requests.
- AGive your application users temporary, controlled access to other services in your AWS
19Which of the following best describe the “managed” part of AWS Managed Microsoft AD?
(Choose two.)- AIntegration with on-premises AD domains is possible.
- BAD domain controllers are launched in two availability zones.
- CData is automatically replicated.
- DUnderlying AD software is automatically updated.
20Which of the following steps are part of the access key rotation process? (Choose three.)
- AMonitor the use of your new keys.
- BMonitor the use of old keys.
- CDeactivate the old keys.
- DDelete the old keys.
Informationen
- Beschreibung
- AWS (AWS - Study Book) Quiz am Chapter 6 - 13 - Authentication and Authorization—AWS Identity, erstellt von Fausto Trindade am 03/02/2020.
- Autor
- Fausto Trindade
- Sprache
- Português
- Aufrufe
- 1
- Schlagwörter
- Bewertung
- Noch keine Bewertungen Bewerte dieses Quiz