Chapter 6 AWS

Question 1 of 10

1

Which of the following methods will allow an application using an AWS SDK to be authenticated as a principal to access AWS Cloud services? (Choose 2 answers)

Select one or more of the following:

Create an IAM user and store the user name and password for the user in the application’s configuration.
Create an IAM user and store both parts of the access key for the user in the application’s configuration.
Run the application on an Amazon EC2 instance with an assigned IAM role
Make all the API calls over an SSL connection.

Explanation

Question 2 of 10

1

Which of the following are found in an IAM policy? (Choose 2 answers)

Select one or more of the following:

Service Name
Region
Action
Password

Explanation

Question 3 of 10

1

Your AWS account administrator left your company today. The administrator had access to the root user and a personal IAM administrator account. With these accounts, he generated other IAM accounts and keys. Which of the following should you do today to protect your AWS infrastructure? (Choose 4 answers)

Select one or more of the following:

Change the password and add MFA to the root user.
Put an IP restriction on the root user.
Rotate keys and change passwords for IAM accounts.
Delete all IAM accounts.
Delete the administrator’s personal IAM account.
Relaunch all Amazon EC2 instances with new roles.

Explanation

Question 4 of 10

1

Which of the following actions can be authorized by IAM? (Choose 2 answers)

Select one or more of the following:

Installing ASP.NET on a Windows Server
Launching an Amazon Linux EC2 instance
Querying an Oracle database
Adding a message to an Amazon Simple Queue Service (Amazon SQS) queue

Explanation

Question 5 of 10

1

Which of the following are IAM security features? (Choose 2 answers)

Select one or more of the following:

Password policies
Amazon DynamoDB global secondary indexes
MFA
Consolidated Billing

Explanation

Question 6 of 10

1

Which of the following are benefits of using Amazon EC2 roles? (Choose 2 answers)

Select one or more of the following:

No policies are required.
Credentials do not need to be stored on the Amazon EC2 instance.
Key rotation is not necessary.
Integration with Active Directory is automatic.

Explanation

Question 7 of 10

1

Which of the following are based on temporary security tokens? (Choose 2 answers)

Select one or more of the following:

Amazon EC2 roles
MFA
Root user
Federation

Explanation

Question 8 of 10

1

Your security team is very concerned about the vulnerability of the IAM administrator user accounts (the accounts used to configure all IAM features and accounts). What steps can be taken to lock down these accounts? (Choose 3 answers)

Select one or more of the following:

Add multi-factor authentication (MFA) to the accounts.
Limit logins to a particular U.S. state.
Implement a password policy on the AWS account.
Apply a source IP address condition to the policy that only grants permissions when the user is on the corporate network.
Add a CAPTCHA test to the accounts.

Explanation

Question 9 of 10

1

You want to grant the individuals on your network team the ability to fully manipulate Amazon EC2 instances. Which of the following accomplish this goal? (Choose 2 answers)

Select one or more of the following:

Create a new policy allowing EC2:* actions, and name the policy NetworkTeam.
Assign the managed policy, EC2FullAccess, to a group named NetworkTeam, and assign all the team members’ IAM user accounts to that group.
Create a new policy that grants EC2:* actions on all resources, and assign that policy to each individual’s IAM user account on the network team.
Create a NetworkTeam IAM group, and have each team member log in to the AWS Management Console using the user name/password for the group.

	Created by Tim Urista about 6 years ago

Ch6 of aws associate exam

Chapter 6 AWS

Question 1 of 10

Which of the following methods will allow an application using an AWS SDK to be authenticated as a principal to access AWS Cloud services? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 2 of 10

Which of the following are found in an IAM policy? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 3 of 10

Select one or more of the following:

Explanation

Question 4 of 10

Which of the following actions can be authorized by IAM? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 5 of 10

Which of the following are IAM security features? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 6 of 10

Which of the following are benefits of using Amazon EC2 roles? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 7 of 10

Which of the following are based on temporary security tokens? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 8 of 10

Your security team is very concerned about the vulnerability of the IAM administrator user accounts (the accounts used to configure all IAM features and accounts). What steps can be taken to lock down these accounts? (Choose 3 answers)

Select one or more of the following:

Explanation

Question 9 of 10

You want to grant the individuals on your network team the ability to fully manipulate Amazon EC2 instances. Which of the following accomplish this goal? (Choose 2 answers)

Select one or more of the following:

Explanation

Question 10 of 10

What is the format of an IAM policy?

Select one of the following:

Explanation