IAM Fundamentals, Principals, and Roles CSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   An organization has a policy that no user should have permissions that allow both creating new IAM users and deleting production databases. How can this be enforced using RBAC?

   • ACreate two separate roles: one for IAM administration and one for database administration, and assign users to only one role.
   • BGrant all administrators full administrator access and rely on monitoring to detect misuse.
   • CUse a group that contains both IAM and database permissions and add all administrators to it.
   • DCreate a single role that includes both IAM and database permissions and assign it to all administrators.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   An application running on an EC2 instance needs to read from an S3 bucket. The security team wants to avoid storing long-term credentials on the instance. What should they configure?

   • AUse the root account credentials for the application.
   • BCreate an IAM user and embed the credentials in the AMI.
   • CStore the AWS access key and secret key in the application configuration file.
   • DCreate an IAM role with an S3 read policy and attach it to the EC2 instance profile.
   Reveal Solution Discussion Select an answer first
4. 18foundation · medium

   In RBAC, how are permissions assigned to a user?

   • ABy granting permissions directly to the user's email address
   • BBy editing the user's individual permission list
   • CBy adding the user to a role that has the necessary permissions
   • DBy creating a new group for each user
   Reveal Solution Discussion Select an answer first
5. 19foundation · medium

   How does an IAM role differ from an IAM user?

   • AA role is a type of group
   • BA role is used only for human users
   • CA role has permanent credentials that never expire
   • DA role is an identity that can be assumed by users or services to obtain temporary permissions
   Reveal Solution Discussion Select an answer first
6. 20foundation · medium

   What is the primary benefit of Role-Based Access Control (RBAC)?

   • AIt prevents all security breaches
   • BIt simplifies permission management by assigning permissions to roles based on job functions
   • CIt automatically encrypts all data
   • DIt eliminates the need for authentication
   Reveal Solution Discussion Select an answer first