Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

* AWS Certified Solutions Architect - Associate > IAM & AWS CLI > Flashcards

IAM & AWS CLI Flashcards

1
Q

What does IAM stand for?

A

Identity & Access Management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Is IAM a regional or global service?

A

Global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the root account?

A

It is created by default when you create an account and shouldn’t be used or shared (except to initially set up account)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are users in IAM?

A

One user represents one person within your organization, and can be grouped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are groups in IAM?

A

A group of users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Do users have to belong to a group in IAM?

A

No (although it is best practice to assign users to groups)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Can a user belong to multiple groups in IAM?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Can a group in IAM contain other groups?

A

No, only users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

How are permissions handled in IAM?

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the least privilege principle?

A

Don’t give more permissions than a user needs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

How does policy inheritance work?

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the elements of an IAM policy?

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What can you define in an IAM password policy?

A
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are two defense mechanisms to protect IAM users?

A

Password policies and multi-factor authentication (MFA)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What should you add MFA (multi-factor authentication) to?

A

Root account and IAM users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the main benefit of MFA (multi-factor authentication)?

A

Even if a password is stolen or hacked, the account is not compromised

17
Q

What MFA (multi-factor authentication) device options are available in AWS?

A

Virtual MFA device (e.g. Google Authenticator or Authy), which supports multiple tokens on the same device

Universal Second Factor (U2F) Security Key (e.g. physical device, like Yubikey), which supports multiple root and IAM users using a single security key

Other hardware security device, like hardware key fob MFA device (e.g. Gemalto) and hardware key fob MFA device for AWS GovCloud (US) (e.g. SurepassID)

18
Q

How can users access AWS?

A
19
Q

What are AWS access keys and how do you create them?

A

They are used to protect the AWS CLI and SDK and users manage their own keys

Access Key Id ~= username
Secret Access Key ~= password

20
Q

What is the AWS CLI?

A
21
Q

What is the AWS SDK?

A
22
Q

What is AWS CloudShell

A

A terminal within the AWS cloud that is free to use

23
Q

What happens to file stored in AWS CloudShell if you restart your shell?

A

The files remain

24
Q

What is an IAM service role?

A
25
Q

What security tools are provided in IAM?

A
26
Q

What tool shows all the permissions granted to a user and when they were last accessed?

A

IAM Access Advisor (user-level)

You can determine access that is no longer needed.

27
Q

What tool shows all of the account’s users and a status of their credentials?

A

IAM Credentials Report (account-level)

28
Q

What are the IAM best practices?

A
29
Q

IAM Summary

A

* AWS Certified Solutions Architect - Associate (28 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions