IAM EXAM QUIZ QUESTIONS AND VERIFIED ANSWERS
When requested through an STS API call, credentials are return with what components? - CORRECT
ANSWER✅✅✅Security token, access key ID, secret access key, expiration
which of the following are managed using IAM (choose 2)
A. Multi-Factor Authentication
B. Bucket Policies
C. Billing Reports
D. Roles
E. Security Groups - CORRECT ANSWER✅✅✅MFA + Roles
IAM is used to manage users and their access to AWS, and AWS service, as well as access from one AWS
resource to another including: Users, Groups, Roles, Access Policies, API Keys, Password Policies, Multi-
Factor Authentication.
Security groups are manged through EC2 or VPC services.
You have hired an engineer, Kathy Johnson, and have created an IAM user for her in the company's AWS
account. She will be overseeing the company's DynamoDB database, so you attached the
"AmazonDynamoDBFullAccess" IAM Policy to her IAM user. Six months later, Kathy was promoted to a
manager and you added her to the "Managers" IAM group. The "Managers" group does not have the
"AmazonDynamoDBFullAccess" policy attached to it. What will happen to Kathy's DynamoDB access? -
CORRECT ANSWER✅✅✅B. Nothing, as an IAM user can have multiple IAM permission policies
attached to them at the same time, either directly to the user or through an associated IAM group. The
multiple policies are combined and evaluated together.
When requested through an STS API call, credentials are return with what components? - CORRECT
ANSWER✅✅✅Security token, access key ID, secret access key, expiration
which of the following are managed using IAM (choose 2)
A. Multi-Factor Authentication
B. Bucket Policies
C. Billing Reports
D. Roles
E. Security Groups - CORRECT ANSWER✅✅✅MFA + Roles
IAM is used to manage users and their access to AWS, and AWS service, as well as access from one AWS
resource to another including: Users, Groups, Roles, Access Policies, API Keys, Password Policies, Multi-
Factor Authentication.
Security groups are manged through EC2 or VPC services.
You have hired an engineer, Kathy Johnson, and have created an IAM user for her in the company's AWS
account. She will be overseeing the company's DynamoDB database, so you attached the
"AmazonDynamoDBFullAccess" IAM Policy to her IAM user. Six months later, Kathy was promoted to a
manager and you added her to the "Managers" IAM group. The "Managers" group does not have the
"AmazonDynamoDBFullAccess" policy attached to it. What will happen to Kathy's DynamoDB access? -
CORRECT ANSWER✅✅✅B. Nothing, as an IAM user can have multiple IAM permission policies
attached to them at the same time, either directly to the user or through an associated IAM group. The
multiple policies are combined and evaluated together.
