AWS Cloud Practitioner Practice Exam 2023 with 100% correct answers

In AWS Identity and Access Management, which term refers to the IAM resource objects that AWS uses for authentication? Entities After configuring your VPC and all of the resources within it, you want to add an extra layer of security at the subnet level. Which AWS Service will you use to add this security? Network ACL In Identity and Access Management, which term applies to a person or application that uses the AWS account root user, an IAM user, or an IAM role to sign in and make requests to AWS? Principle As an AWS account administrator, you are in charge of creating AWS accounts and securing those accounts. What steps do you take? Create MFA for root account / Add IP restrictions for all accounts You need to set up a virtual firewall for your EC2 instance. What would you use? Security Group Your organization is multinational and uses multiple AWS regions. Which AWS Service can be used to route users to the nearest datacenter to reduce latency? AWS Route 53 A new application needs temporary access to resources in AWS. How can this be achieved? Create an IAM Role and have the application assume the role A company is configuring IAM for its new AWS account. There are 5 departments with between 5 to 10 users in each department. How can they efficiently apply access permissions for each of these departments and simplify management of these users? Create policies for each department that define the permissions needed / Create IAM group for each department and attach the policy to each group / Add each department's member to their respective IAM group Configuring user permissions so that users can access only the resource they need to do their job follows what principle? Principle Of Least Privilege Which policy will provide information on performing penetration testing on your EC2 instances? AWS Acceptable Use Policy Developers in your company need to interact with AWS from the Command Line Interface. Which security item will you need to provide to the developers? Provide the Access Keys to the developers A software development team has requested IAM access to be able to work with AWS from the CLI. What will you provide them? Provide the Access Keys to the software development team A small startup is configuring its AWS Cloud environment. What AWS Service will allow grouping these users together and applying permissions to them as a group? AWS IAM