GoConqr has a new look! Let us know what you think.

Sign up free

Quiz

IAM Quiz

Romulo Maciel 17 questions

Take the quiz

This quiz has a time limit, so it opens in the usual player.

Questions in this quiz (17)

  1. 1You are deploying an application on Amazon EC2, which must call AWS APIs. What method should you use to securely pass credentials to the application?
    1. AA. PassAPI credentials to the instance using Instance userdata.
    2. BB. StoreAPI credentials as an object in Amazon S3.
    3. CC. Embedthe API credentials into your application.
    4. DD. AssignIAM roles to the EC2 Instances.
  2. 2A Solutions Architect is designing a shared service for hosting containers from several customers on Amazon ECS. These containers will use several AWS services. A container from one customer should not be able access data from another customer. Which of the below solutions should the architect use to meet these requirements?
    1. AA. IAMroles for tasks
    2. BB. IAMroles for EC2 Instances
    3. CC. IAMInstance profile for EC2 Instances
    4. DD. SecurityGroup rules
  3. 3Which of the following is not a feature of AWS Security Token Service?
    1. AA. STS enables you to request temporary, limited-privilege credentials.
    2. BB. STS enables users to assume role.
    3. CC. STS generates Git Credentials for IAM users.
    4. DD. STS generates Federated Credentials for IAM users.
  4. 4Your organization AWS Setup has an AWS S3 bucket which stores confidential documents which can be only downloaded by users authenticated and authorized via your application. You do not want to create IAM users for each of these users and as a best practice you have decided to generate AWS STS Federated User temporary credentials each time when a download request is made and then use the credentials to generate presigned URL and redirect user for download. However, when user is trying to access the presigned URL, they are getting Access Denied Error. What could be the reason?
    1. AA. AWS STS service must be given access in S3 bucket ACL.
    2. BB. IAM User used to generate Federated User credentials does not have access on S3 bucket.
    3. CC. IAM Role used to generate Federated User credentials does not have access on S3 bucket.
    4. DD. Your application must be whitelisted in AWS STS service to perform FederatedUser action.
  5. 5Your organization has an AWS setup and planning to build Single Sign On for users to authenticate with on-premise Microsoft Active Directory Federation Services (ADFS) and let users login to AWS console using AWS STS Enterprise Identity Federation. Which of the following service you need to call from AWS STS service after you authenticate with your on-premise?
    1. AA. AssumeRoleWithSAML
    2. BB. GetFederationToken
    3. CC. AssumeRoleWithWebIdentity
    4. DD. GetCallerIdentity
  6. 6An EC2 Instance hosts a Java based application that accesses a DynamoDB table. This EC2 Instance is currently serving production users. Which of the following is a secure way for the EC2 Instance to access the DynamoDB table?
    1. AA. UseIAM Roles with permissions to interact with DynamoDB and assign it to the EC2Instance.
    2. BB. UseKMS Keys with the right permissions to interact with DynamoDB and assign it tothe EC2 Instance.
    3. CC. UseIAM Access Keys with the right permissions to interact with DynamoDB and assignit to the EC2 Instance.
    4. DD. UseIAM Access Groups with the right permissions to interact with DynamoDB andassign it to the EC2 Instance.
  7. 7You have created an AWS Lambda function that will write data to a DynamoDB table. Which of the following must be in place to ensure that the Lambda function can interact with the DynamoDB table?
    1. AA.
      Ensure an IAM Role is attached to the Lambda function which has the required DynamoDBprivileges.
    2. BB.
      Ensure an IAM User is attached to the Lambda function which has the required DynamoDB privileges.
    3. CC.
      Ensure the Access keys are embedded in the AWS Lambda function.
    4. DD.
      Ensure the IAM user password is embedded in the AWS Lambda function.
  8. 8You have both production and development based instances running on your VPC. It is required to ensure that people responsible for the development instances do not have access to work on production instances for better security. Which of the following would be the best way to accomplish this using policies? Choose the correct answer from the options given below.
    1. AA.
      Launch the test and production instances in separate VPCs and use VPC Peering.
    2. BB.
      Create an IAM Policy with a condition that allows access to only those instances which are used for production or development.
    3. CC.
      Launch the test and production instances in different Availability Zones and use Multi-Factor Authentication.
    4. DD.
      Define the tags on the test and production servers and add a condition to the IAMPolicy which allows access to specific tags.
  9. 9One plans on using SQS queues and AWS Lambda to leverage the Serverless aspects of the AWS Cloud. Each invocation to AWS Lambda will send a message to an SQS queue. In order for messages to be sent, which of the following must be in place?
    1. AA.
      The queue must be a FIFO queue.
    2. BB.
      An IAM Role with the required permissions.
    3. CC.
      The code for Lambda must be written in C#.
    4. DD.
      An IAM Group with the required permissions.
  10. 10You work in the media industry and have created a web application where users will be able to upload photos they create to your website. This web application must be able to call the S3 API in order to be able to function. Where should you store your API credentials whilst maintaining the maximum level of security?
    1. AA.
      Save the API credentials to your PHP files.
    2. BB.
      Don’t save your API credentials. Instead create a role in IAM and assign this role toan EC2 instance when you first create it.
    3. CC.
      Save your API credentials in a public Github repository.
    4. DD.
      Pass API credentials to the instance using instance user data.

Information

Description
Quiz on IAM Quiz , created by Romulo Maciel on 21/06/2020.
Language
Português
Views
8
Rating
No ratings yet
Rate this quiz
Rate this quiz

Feedback

What is it about?

What do you think of the new look?

How do you like it?