Task Statement 2.3: Identify AWS Access Management Capabilities. CLF-C02 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company wants its employees to sign in to the AWS Management Console using their existing corporate Active Directory credentials. The company also wants to enforce MFA for all console sign-ins. Which combination of AWS services should the company use?

   • AIAM Identity Center connected to AWS Managed Microsoft AD, with MFA enforced in IAM Identity Center.
   • BIAM users with the same passwords as Active Directory, and MFA enabled on each IAM user.
   • CAWS Organizations with an SCP that requires MFA, and IAM users for each employee.
   • DIAM roles for each employee with a trust policy for Active Directory, and MFA on the roles.
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which of the following is an AWS responsibility under the shared responsibility model?

   • AManaging IAM policies for user access
   • BConfiguring security groups for EC2 instances
   • CPatching the operating system of an EC2 instance
   • DSecuring the physical data centers that host AWS services
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   What is a recommended best practice for managing IAM access keys?

   • AStore access keys in plain text files on EC2 instances
   • BShare access keys with team members to simplify access
   • CUse the same access key for all IAM users in an account
   • DRotate access keys regularly and avoid embedding them in code
   Reveal Solution Discussion Select an answer first
5. 4foundation · easy

   What is the primary purpose of AWS IAM Identity Center?

   • ATo provide a firewall for AWS resources
   • BTo create and manage IAM users and groups within a single AWS account
   • CTo provide single sign-on and centralized access management across multiple AWS accounts and business applications
   • DTo manage the physical security of AWS data centers
   Reveal Solution Discussion Select an answer first
6. 5foundation · easy

   What is the purpose of an IAM policy?

   • ATo create a new IAM user in an AWS account
   • BTo establish a connection between an AWS account and an on-premises network
   • CTo provide a secure way to store passwords for IAM users
   • DTo define permissions that specify what actions are allowed or denied on which AWS resources
   Reveal Solution Discussion Select an answer first