01
True or false
1 point
True or false: Because the AWS account root user has extensive access, it should be protected and avoided for routine work.
Free Practice Quiz Question List
2 AWS Identity and Access Management Online Quiz Questions
Use this free practice quiz with 20 questions to review 2 AWS Identity and Access Management, test your knowledge, and prepare for your next test or exam.
20 questions
02
True or false
1 point
True or false: In IAM, authentication decides whether a request is permitted, while authorization verifies an identity.
- A
True
- B
False
03
Written response
1 point
What IAM process verifies an identity?
04
Written response
1 point
What IAM control sets the maximum permissions an identity-based policy can grant without granting permissions by itself?
05
Fill in the blank
1 point
A team needs to specify which principals may assume an IAM role and under what conditions. The team should configure the role's .
06
Fill in the blank
1 point
In a typical IAM policy statement, which optional field specifies circumstances required for the statement to apply?
07
Choose one
1 point
A team wants to attach a policy directly to a supported resource, such as an S3 bucket. Which policy type should it use?
- A
An identity-based policy
- B
A resource-based policy
- C
A permissions boundary
- D
A role trust policy
08
Choose one
1 point
A request matches both an applicable Allow statement and an applicable explicit Deny statement. What is the result?
- A
The request is allowed because an Allow always takes precedence.
- B
The request is denied because an explicit Deny overrides an Allow.
- C
The request is allowed only if the policy has a Condition field.
- D
The request is denied only if the user belongs to an IAM group.
09
Choose all
1 point
Select all the policy requirements that must be met for a principal to assume a role and perform a requested action.
- A
A trust policy that permits the principal to assume the role.
- B
A permissions boundary that grants the requested action by itself.
- C
A permissions policy that allows the assumed role session to perform the action.
- D
Membership in an IAM group, because groups can be assumed as roles.
10
Choose all
1 point
Select all practices that support least privilege when designing AWS access.
- A
Scope policies to the specific actions and resource ARNs required.
- B
Use broad action and resource wildcards by default to simplify policy management.
- C
Use separate roles for different tasks or environments.
- D
Review permissions regularly and remove unused access.
11
Choose one
1 point
A person needs access to resources in another AWS account. Which IAM identity type is commonly used for this cross-account access?
- A
An IAM group
- B
A permissions boundary
- C
An IAM role
- D
A resource ARN
12
Choose one
1 point
An organization is choosing an access pattern for its employees. Which approach best follows the material's workforce-access recommendations?
- A
Create a separate long-term IAM user for every employee.
- B
Use an IAM group as the principal employees assume.
- C
Use a trusted identity provider and temporary role sessions for workforce access.
- D
Store shared long-term access keys in a configuration file.
13
True or false
1 point
True or false: An IAM group is a principal that can be assumed as a role.
- A
True
- B
False
14
Open ended
1 point
A company has a reporting analyst who needs to read one reports bucket and a deployment task that needs to update a defined set of application resources. Propose an IAM access design that limits the impact of mistakes or compromised credentials.
15
Choose one
1 point
A team wants to manage the same permissions for several IAM users together. Which IAM identity should it use?
- A
They are principals that applications can assume to receive temporary credentials.
- B
They collect IAM users so shared permissions can be managed together.
- C
They define which external identity providers may sign in to AWS.
- D
They set the maximum permissions an identity-based policy can grant.
16
Written response
1 point
In an IAM policy statement, which field specifies the API operations covered by the statement?
17
Written response
1 point
An administrator attaches a policy directly to a supported resource, such as an S3 bucket. What type of policy is it?
18
Choose one
1 point
An application running on an AWS compute service needs access to a specific S3 bucket. Which approach best avoids storing long-term access keys in the application code?
- A
Create a separate IAM user for the application and embed its long-term access keys in the code.
- B
Add the application to an IAM group and have the group assume a role.
- C
Attach an IAM role to the compute service and use its temporary credentials.
- D
Use the account root user credentials for the application's AWS requests.
19
Choose one
1 point
A request matches an applicable Allow statement and an applicable explicit Deny statement. What is the access decision?
- A
The request is denied because an explicit Deny overrides an Allow.
- B
The request is allowed because the Allow statement takes precedence.
- C
The result depends only on whether the user belongs to an IAM group.
- D
The request is allowed unless a permissions boundary explicitly grants it.
20
Choose one
1 point
A company wants employees managed by its external identity provider to access AWS without creating a separate long-term IAM user for each person. Which approach matches IAM federation?
- A
Create a separate long-term IAM user for every employee and require them to use its credentials.
- B
Use an external identity provider and have employees obtain temporary credentials through a role.
- C
Add the external identity provider as an IAM group and let the group assume a role.
- D
Use the AWS account root user as the shared identity for employees.
Related study packs and tools
- Quiz
1 Foundations of Threat Analysis
A medium-difficulty quiz on threat-analysis concepts, evidence, lifecycle, and defensive decisions.
- Quiz
1 Networking Fundamentals
A medium-difficulty quiz on networking fundamentals, including communication roles, protocol layers, data units, and network models.
CompTIA A+ NetworkingUpdated - Flashcards
2 Protocols and Ports
Review how TCP and UDP work, what common network ports indicate, and how to interpret port clues cautiously.
CompTIA A+ NetworkingUpdated - Quiz
2 Protocols and Ports
A medium-difficulty quiz on interpreting network protocols, ports, and common traffic patterns.
CompTIA A+ NetworkingUpdated - Quiz
4 Wi-Fi Networks
A 14-question quiz on Wi-Fi networks, moving from core concepts to applied troubleshooting and explanation.
CompTIA A+ NetworkingUpdated - Quiz
5 Network Operations and Reliability
A medium-difficulty quiz on network operations, monitoring, configuration management, resilience, and recovery planning.
- Quiz
6 Certificates and Public Key Infrastructure
A medium-difficulty quiz on certificates and public key infrastructure, focused on applying concepts to practical validation and issuance scenarios.
- Study guide
6 Security Operations and Incident Response
Learn how security teams monitor activity, manage vulnerabilities, respond to incidents, preserve digital evidence, and restore services safely.
- Quiz
6 SOHO Network Setup and Troubleshooting
A medium-difficulty quiz on setting up, securing, and troubleshooting a small-office/home-office network.
CompTIA A+ NetworkingUpdated - Study guide
7 Integrated Troubleshooting Practice
A practical workflow for isolating mixed hardware, display, storage, mobile-device, and network problems, protecting data, and verifying repairs.
- Study guide
8 Comprehensive Security+ Practice and Review
A scenario-focused guide to Security+ SY0-701 concepts, emphasizing evidence-based incident response, access control, cryptography, vulnerability handling, recovery objectives, and risk governance.
- Study guide
8 Security Operations and Incident Response
Learn how to recognize and assess security incidents, preserve evidence, contain and remove threats, restore trustworthy services, and improve security through lessons learned.