Exam/Practice Questions - Identity and Access Management (IAM) ALL SOLUTION 2023/24 EDITION GUARANTEED GRADE A+

Which statement best describes IAM? a. IAM stands for Improvised Application Management, and it allows you to deploy and manage applications in the AWS Cloud. b. IAM allows you to manage users, groups, roles, and their corresponding level of access to the AWS Platform. c. IAM allows you to manage users' passwords only. AWS staff must create new users for your organization. This is done by raising a ticket. d. IAM allows you to manage permissions for AWS resources only. b. You have created a new AWS account for your company, and you have also configured multi-factor authentication on the root account. You are about to create your new users. What strategy should you consider in order to ensure that there is good security on this account. a. Require users to only be able to log in using biometric authentication. b. Give all users the same password so that if they forget their password they can just ask their co-workers. c. Restrict login to the corporate network only. d. Enact a strong password policy: user passwords must be changed every 45 days, with each password containing a combination of capital letters, lower case letters, numbers, and special symbols. d. Using SAML (Security Assertion Markup Language 2.0), you can give your federated users single sign-on (SSO) access to the AWS Management Console. a. False b. True b Which of the following is not a component of IAM? a. Roles b. Users c. Organizational Units d. Groups c. Organization Units is part of AWS Organization. A new employee has just started work, and it is your job to give her administrator access to the AWS console. You have given her a user name, an access key ID, a secret access key, and you have generated a password for her. She is now able to log in to the AWS console, but she is unable to interact with any AWS services. What should you do next? a. Ensure she is logging in to the AWS console from your corporate network and not the normal internet. b. Grant her Administrator access by adding her to the Administrators' group. c. Tell her to log out and try logging back in again. d. Require multi-factor authentication for her user account. b. Which of the following is not a feature of IAM? a. IAM allows you to setup biometric authentication, so that no passwords are required. b. IAM offers fine-grained access control to AWS resources. c. IAM offers centralized control of your AWS account. d. IAM integrates with existing active directory account allowing single sign-on. a When you create a new user, that user ________. a. Will be able to interact with AWS using their access key ID and CONTINUED...