An organization wants to ensure that an employee who leaves the company no longer has access to any cloud resources. What is the most effective IAM control?

Disable the employee's access keys but leave the password active.

Remove the employee from all groups but leave the user account active.

Change the employee's password and keep the account active.

Delete the employee's IAM user account immediately upon termination.

A company wants to ensure that human users and automated services have distinct identities and permissions. What is the recommended approach?

Create IAM users for humans and IAM roles for services, and grant each the minimum permissions needed.

Create IAM roles for humans and IAM users for services.

Use only groups for both humans and services.

Use the same IAM user for both humans and services to simplify management.

A company has a group of interns who need read-only access to a project management tool, but they should not be able to modify any data. Which IAM approach aligns with RBAC?

Create individual permissions for each intern based on their specific tasks.

Create a role named 'Intern' with read-only permissions and assign all interns to that role.

Use the same role as full-time employees but with a temporary password.

Create a single role for all employees with full access to the tool.

What is the purpose of an IAM role?

To store user credentials securely

To grant a set of permissions to an entity that assumes the role

What is a characteristic of an IAM group?

It is a temporary credential used to access resources

It is a service that runs in the cloud

It is a policy that defines permissions

It is a collection of users that can be assigned permissions collectively

EC-CouncilCloud Security Essentials

Domain 2Objective 1

IAM Fundamentals, Principals, and Roles CSE Practice Questions (Page 5)

Part of the Identity and Access Management in the Cloud domain, which makes up ~12% of our current practice bank.

31questions here

7free pages

6concepts

Questions 21–25

21application · medium
An organization wants to ensure that an employee who leaves the company no longer has access to any cloud resources. What is the most effective IAM control?
Select an answer first
22application · medium
A company wants to ensure that human users and automated services have distinct identities and permissions. What is the recommended approach?
Select an answer first
23application · medium
A company has a group of interns who need read-only access to a project management tool, but they should not be able to modify any data. Which IAM approach aligns with RBAC?
Select an answer first
24foundation · medium
What is the purpose of an IAM role?
Select an answer first
25foundation · medium
What is a characteristic of an IAM group?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to CSE

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by EC-Council. “CSE” is a trademark of its owner, used for identification only.