Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AWS SAA-C03 > IAM, Accounts and AWS Organizations > Flashcards

IAM, Accounts and AWS Organizations Flashcards

1
Q

What is the maximum number of IAM users in an AWS account

A

5000

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which of the following are features of IAM groups
- Admin groupings of IAM Users
- Can hold Identity Permissions
- Can be used to login (Access Keys)
- Can be used to login (Username and password)
- Can be nested

A
  • Admin groupings of IAM Users
  • Can hold Identity Permissions
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Within AWS policies, what is always a priority?

A

Explicit Deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What two policies are assigned to an IAM Role
- Permissions Policy
- Assumption Policy
- Resource Policy
- Trust Policy

A
  • Permissions Policy
  • Trust Policy
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which of the following are true for IAM Roles
- Roles have associated Long Term Credentials (Access Keys)
- Roles can be assumed
- When assumed - temporary credentials are generated
- Roles can be logged into
- When an identity logs into a role - temporary credentials are generated

A
  • Roles can be assumed
  • When assumed - temporary credentials are generated
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What Three features are provided by AWS Organizations (pick all that apply)
- Consolidated billing
- Managed assistance for company and AWS account mergers
- AWS Account restrictions using SCP
- Account organisation via OU’s
- Protection against credential leaks
- Company ID reports

A
  • Consolidated billing
  • AWS Account restrictions using SCP
  • Account organisation via OU’s
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What functionality is provided by CloudTrail
- Log Ingestion
- Metrics management
- Account Restrictions
- Account wide Auditing and API Logging

A
  • Account wide Auditing and API Logging
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Is it possible to restrict what the Account Root User can do?
- Always
- Never
- If AWS Organisations are used
- If AWS Organizations are used .. but not the management account

A
  • If AWS Organizations are used .. but not the management account
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is Role Switching?
- Changing the permissions on an IAM Role
- Changing the TRUST on a Role
- Changing who can assume a Role
- Logging into a Role
- Assuming a role in another AWS account to access that account via the console UI

A
  • Assuming a role in another AWS account to access that account via the console UI
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are valid IAM Policy types (choose all that apply)
- AWS Managed Policy
- Customer Managed Policy
- Self-Managed Policy
- Inline Policies
- External Policies

A
  • AWS Managed Policy
  • Customer Managed Policy
  • Inline Policies
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are trust policies

A

The trust policy defines which principals can assume the role, and under which conditions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the 3 types of IAM identities

A

Users
Groups
Roles

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

When is it usually a good idea to create IAM users

A

When you can picture one, named thing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are permissions policies

A

The permissions policy grants the user of the role the needed permissions to carry out the intended tasks on the resource.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are the permissions policies priorities

A

First: Explicit deny
Second: Explicit allow
Third: Default deny

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

When should you use inline policies

A

For exceptions

17
Q

Can you log into IAM groups

A

No

18
Q

Do IAM groups have credentials

A

No

19
Q

Can groups be references as a principal in a policy

A

No

20
Q

Can groups be granted access by a resource policy

A

No

21
Q

Is there a built0in all-users group in IAM

A

No

22
Q

Can you do IAM group nesting

A

No

23
Q

Can you use external accounts/identities to access AWS resources?

A

No

24
Q

What kind of identity management should you use for a mobile app

A

Identity Federation

25
Q

Is a management account affected by SCPs

A

No

26
Q

What is a CloudTrail trail

A

A unit of config within the CloudTrail product

27
Q

Where does a CloudTrail trail log

A

It logs events for its region, or all regions if set (us-east-1)

28
Q

What is the default CloudTrail log

A

Free, but only stores 90 days of data

29
Q

How can you use CloudWatch ad S3 with Cloud Trails

A

Using trails

30
Q

Is Clous Trail logging real time

A

No

AWS SAA-C03 (18 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions