A security administrator is creating a role for an AWS service (e.g., Lambda) to access a DynamoDB table. What must be included in the role's trust policy?

The AWS service (e.g., lambda.amazonaws.com) as the trusted entity.

The IAM user who will assume the role.

The ARN of the DynamoDB table as the principal.

The IAM policy that grants DynamoDB access.

What is the primary purpose of Identity and Access Management (IAM) in a cloud environment?

To monitor network traffic and detect intrusions in real time

To automatically patch vulnerabilities in cloud applications

To encrypt all data stored in the cloud to prevent unauthorized access

To ensure that only authorized identities can access specific cloud resources and perform permitted actions

What is the purpose of role separation in IAM?

To ensure that no single principal has excessive permissions across multiple functions

To reduce the number of users in the system

To eliminate the need for passwords

What is the purpose of a trust policy in IAM?

To define which principals are allowed to assume a role

To encrypt the role's credentials

To define what actions a role can perform on resources

EC-CouncilCloud Security Essentials

Domain 2Objective 1

IAM Fundamentals, Principals, and Roles CSE Practice Questions (Page 3)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

31questions here

7free pages

6concepts

Questions 11–15

11application · medium
A security administrator is creating a role for an AWS service (e.g., Lambda) to access a DynamoDB table. What must be included in the role's trust policy?
Select an answer first
12foundation · medium
Which of the following is a core component of IAM?
Select an answer first
13foundation · medium
What is the primary purpose of Identity and Access Management (IAM) in a cloud environment?
Select an answer first
14foundation · medium
What is the purpose of role separation in IAM?
Select an answer first
15foundation · medium
What is the purpose of a trust policy in IAM?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.