Free Practice Quiz Question List

1 IAM Fundamentals and Least Privilege Online Quiz Questions

Use this free practice quiz with 20 questions to review 1 IAM Fundamentals and Least Privilege, test your knowledge, and prepare for your next test or exam.

20 questions

True or false

1 point

A principal successfully authenticates to AWS. Does this alone mean the principal is authorized to use every AWS service and resource?

A
True
B
False

Fill in the blank

1 point

After confirming a principal's identity, AWS evaluates whether that principal may perform a requested action on a resource. This permission decision is .

Written response

1 point

What IAM principle means granting only the permissions needed for a task, and no more?

True or false

1 point

A team administrator wants to manage common permissions for several employees together. An IAM group can help manage their permissions, but each employee signs in as an IAM user.

A
True
B
False

Choose one

1 point

An application needs temporary AWS credentials to access resources. Which IAM identity type is designed to be assumed by a trusted principal for this purpose?

A
IAM group
B
IAM role
C
AWS account root user
D
IAM user with long-term credentials

Written response

1 point

A trusted principal assumes an identity and receives temporary credentials with that identity's attached permissions. What IAM identity type was assumed?

Choose all

1 point

Which items are commonly specified in an IAM policy statement? Select all correct choices.

A
Effect
B
Action
C
Resource
D
Condition
E
The employee's job title

Fill in the blank

1 point

Unless applicable permissions allow a request, AWS denies it .

Choose one

1 point

A principal's applicable permissions include an allow for an action and an explicit deny for that same action. What is the outcome?

A
The allow takes precedence because it appears in a policy.
B
The request is allowed unless the principal lacks MFA.
C
The explicit deny overrides the allow.
D
The request is allowed because the principal can sign in.

Choose all

1 point

A team is reviewing access for a reporting application that only needs to read certain reports. Which measures apply least privilege? Select all correct choices.

A
Limit permissions to the actions the task needs.
B
Grant account-wide administration so future tasks are covered.
C
Restrict permissions to the specific resources needed.
D
Review permissions when responsibilities change.
E
Share one powerful credential across different jobs.

Choose one

1 point

A company is deciding who should configure its IAM users, credentials, MFA, and permissions. Under the AWS shared responsibility model, who is responsible for these choices?

A
AWS chooses and configures the customer's identities and permissions.
B
The customer configures identities, credentials, MFA, and permissions appropriately.
C
The customer is responsible for the security of the infrastructure that runs AWS services.
D
IAM tools automatically ensure that customers use permissions safely.

Open ended

1 point

A reporting application only needs to read specific reports in an S3 bucket. Describe an IAM approach that follows least privilege, including which access to grant and which access to avoid.

Choose one

1 point

An administrator is setting everyday access practices for an AWS account. Which approach is appropriate for the account root user?

A
Use the root user for routine administration because it has broad access.
B
Protect the root user and reserve it for tasks that specifically require it.
C
Share root credentials with each administrator to simplify access.
D
Attach the root user's credentials to applications that need temporary access.

True or false

1 point

Requiring a security key in addition to other sign-in credentials is an example of MFA that strengthens authentication.

A
True
B
False

Choose one

1 point

An application successfully authenticates by using an IAM role, but its request to read an S3 bucket is denied. What must be true for the request to succeed?

A
The application needs to authenticate again because a denied request proves its identity was not verified.
B
The application is authenticated, but authorization must allow the requested action on that bucket.
C
The application should sign in as the account root user to gain permission.
D
The application needs an IAM group because groups authorize requests made by roles.

Choose one

1 point

An administrator wants to manage the same common permissions for several IAM users. Which statement correctly describes how an IAM group can help?

A
A group signs in and passes its credentials to each member user.
B
A group assumes a role whenever one of its members makes a request.
C
A group helps manage common permissions, while its users—not the group—sign in.
D
A group is a resource-based policy attached to an AWS resource.

Choose one

1 point

A trusted principal needs temporary access to perform a specific task. Which IAM approach best fits this need?

A
Have the trusted principal assume a role that grants the required permissions through temporary credentials.
B
Create a group for the trusted principal and have the group sign in.
C
Share the account root user’s long-term credentials with the principal.
D
Create a user with permanent credentials for every request.

Written response

1 point

What IAM term describes the identity making a particular request?

Choose one

1 point

A team is deciding how to use the AWS account root user. Which practice best follows the guidance for this identity?

A
Use the root user for routine work so its broad access is always available.
B
Protect the root user and reserve it for tasks that specifically require it.
C
Share root credentials among administrators to simplify access management.
D
Attach the root user to an IAM group for everyday permission management.

Written response

1 point

What is the name of the optional policy element that specifies circumstances that must be met for a permission to apply?

1 IAM Fundamentals and Least Privilege Online Quiz Questions

Related study packs and tools