GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

Chapter 6 - 13 - Authentication and Authorization—AWS Identity

Fausto Trindade 20 questions

Take the quiz

Questions in this quiz (20)

  1. 1Which of the following is the greatest risk posed by using your AWS account root user for
    day-to-day operations?
    1. AThere would be no easy way to control resource usage by project or class.
    2. BThere would be no effective limits on the effect of an action, making it more likely for
      unintended and unwanted consequences to result.
    3. CSince root has full permissions over your account resources, an account compromise at
      the hands of hackers would be catastrophic.
    4. DIt would make it difficult to track which account user is responsible for specific actions.
  2. 2Which of the following statements is a correct description of IAM policies?
    1. AThe Action element refers to the way IAM will react to a request.
    2. BThe * character applies an element globally—as broadly as possible.
    3. CThe Resource element refers to the third-party identities that will be allowed to access
      the account.
    4. DThe Effect element refers to the anticipated resource state after a request is granted.
  3. 3Which of the following will—when executed on its own—prevent an IAM user with no
    existing policies from launching an EC2 instance? (Choose three.)
    1. AAttach no policies to the user.
    2. BAttach two policies to the user with one policy permitting full EC2 access and the
      other permitting IAM password changes but denying EC2 access.
    3. CAttach a single policy permitting the user to create S3 buckets.
    4. DAttach the AdministratorAccess policy.
  4. 4Which of the following are important steps for securing IAM user accounts? (Choose two.)
    1. ANever use the account to perform any administration operations.
    2. BEnable multifactor authentication (MFA).
    3. CAssign a long and complex password.
    4. DDelete all access keys.
  5. 5Which of the following security credentials can be used for encrypting SOAP requests to
    AWS services? (Choose two.)
    1. AX.509 certificates
    2. BAccess keys
    3. CPasswords
    4. DKey pairs
  6. 6Which of the following AWS CLI commands can tell you whether an access key is still
    being used?
    1. Aaws iam get-access-key-used ––access-key-id
    2. Baws iam ––get-access-key-last-used access-key-id
    3. Caws iam get-access-key-last-used access-last-key-id
    4. Daws iam get-access-key-last-used ––access-key-id
  7. 7Which of the following is the greatest benefit of organizing your users into groups?
    1. AIt enhances security by consolidating resources.
    2. BIt simplifies the management of user permissions.
    3. CIt allows for quicker response times to service interruptions.
    4. DIt simplifies locking down the root user.
  8. 8Which of the following is not considered a trusted entity in the context of IAM roles?
    1. AA web identity authenticating with Google
    2. BAn identity coming through a SAML-based federated provider
    3. CAn identity using an X.509 certificate
    4. DA web identity authenticating with Amazon Cognito
  9. 9Which of the following AWS services provides virtual hardware devices for managing
    encryption infrastructure that’s FIPS 140-2 compliant?
    1. AAWS CloudHSM
    2. BAWS Key Management Service
    3. CAWS Security Token Service
    4. DAWS Secrets Manager
  10. 10Which of the following is the best tool for authenticating access to a VPC-based MS Share-
    Point farm?
    1. AAmazon Cognito
    2. BAWS Directory Service for Microsoft Active Directory
    3. CAWS Secrets Manager
    4. DAWS Key Management Service

Information

Description
AWS (AWS - Study Book) Quiz on Chapter 6 - 13 - Authentication and Authorization—AWS Identity, created by Fausto Trindade on 03/02/2020.
Language
Português
Views
1
Tags
awsaws - study book
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?