Identity and Access Management (IAM) Exam with ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
verified detailed answers ||\\//|| ||\\//||
Which statement best describes IAM? ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. IAM stands for Improvised Application Management, and it allows you to deploy and
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
manage applications in the AWS Cloud. ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
b. IAM allows you to manage users, groups, roles, and their corresponding level of access to
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
the AWS Platform.
||\\//|| ||\\//||
c. IAM allows you to manage users' passwords only. AWS staff must create new users for
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
your organization. This is done by raising a ticket.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
d. IAM allows you to manage permissions for AWS resources only. - correct answer✔✔b.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
You have created a new AWS account for your company, and you have also configured multi-
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
factor authentication on the root account. You are about to create your new users. What
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
strategy should you consider in order to ensure that there is good security on this account.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. Require users to only be able to log in using biometric authentication.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
b. Give all users the same password so that if they forget their password they can just ask
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
their co-workers. ||\\//||
c. Restrict login to the corporate network only.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
, d. Enact a strong password policy: user passwords must be changed every 45 days, with each
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
password containing a combination of capital letters, lower case letters, numbers, and
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
special symbols. - correct answer✔✔d. ||\\//|| ||\\//|| ||\\//|| ||\\//||
Using SAML (Security Assertion Markup Language 2.0), you can give your federated users
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
single sign-on (SSO) access to the AWS Management Console.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. False ||\\//||
b. True - correct answer✔✔b
||\\//|| ||\\//|| ||\\//|| ||\\//||
Which of the following is not a component of IAM? ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. Roles ||\\//||
b. Users ||\\//||
c. Organizational Units
||\\//|| ||\\//||
d. Groups - correct answer✔✔c.
||\\//|| ||\\//|| ||\\//|| ||\\//||
Organization Units is part of AWS Organization. ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
A new employee has just started work, and it is your job to give her administrator access to
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
the AWS console. You have given her a user name, an access key ID, a secret access key, and
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
you have generated a password for her. She is now able to log in to the AWS console, but
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
she is unable to interact with any AWS services. What should you do next?
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. Ensure she is logging in to the AWS console from your corporate network and not the
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
normal internet. ||\\//||
verified detailed answers ||\\//|| ||\\//||
Which statement best describes IAM? ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. IAM stands for Improvised Application Management, and it allows you to deploy and
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
manage applications in the AWS Cloud. ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
b. IAM allows you to manage users, groups, roles, and their corresponding level of access to
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
the AWS Platform.
||\\//|| ||\\//||
c. IAM allows you to manage users' passwords only. AWS staff must create new users for
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
your organization. This is done by raising a ticket.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
d. IAM allows you to manage permissions for AWS resources only. - correct answer✔✔b.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
You have created a new AWS account for your company, and you have also configured multi-
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
factor authentication on the root account. You are about to create your new users. What
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
strategy should you consider in order to ensure that there is good security on this account.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. Require users to only be able to log in using biometric authentication.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
b. Give all users the same password so that if they forget their password they can just ask
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
their co-workers. ||\\//||
c. Restrict login to the corporate network only.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
, d. Enact a strong password policy: user passwords must be changed every 45 days, with each
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
password containing a combination of capital letters, lower case letters, numbers, and
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
special symbols. - correct answer✔✔d. ||\\//|| ||\\//|| ||\\//|| ||\\//||
Using SAML (Security Assertion Markup Language 2.0), you can give your federated users
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
single sign-on (SSO) access to the AWS Management Console.
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. False ||\\//||
b. True - correct answer✔✔b
||\\//|| ||\\//|| ||\\//|| ||\\//||
Which of the following is not a component of IAM? ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. Roles ||\\//||
b. Users ||\\//||
c. Organizational Units
||\\//|| ||\\//||
d. Groups - correct answer✔✔c.
||\\//|| ||\\//|| ||\\//|| ||\\//||
Organization Units is part of AWS Organization. ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
A new employee has just started work, and it is your job to give her administrator access to
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
the AWS console. You have given her a user name, an access key ID, a secret access key, and
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
you have generated a password for her. She is now able to log in to the AWS console, but
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
she is unable to interact with any AWS services. What should you do next?
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
a. Ensure she is logging in to the AWS console from your corporate network and not the
||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//|| ||\\//||
normal internet. ||\\//||
