Module 2 - Identity & Access Management

Front

Which identities do Google Cloud IAM members use to access resources? Options: For Google Account, Google group, and service account → email address; for G Suite and Cloud Identity domain → domain name

Back

For Google Account, Google group, and service account → email address; for G Suite and Cloud Identity domain → domain name

Front

A developer launches an application on an AWS EC2 instance that needs to retrieve images from an S3 bucket. The admin creates a service role with a trust policy that allows the instance to assume the role and a permission policy granting read-only access to the S3 bucket. The application uses the temporary credentials provided by the role. In this scenario, must the developer manage credentials or request additional permissions from the admin?

Back

No, the developer does not need to manage credentials or request additional permissions.

Front

Which component of a cloud platform provides tools and interfaces for configuring, monitoring, and maintaining applications after migration to a public cloud?

Back

Management Component

Front

A cloud administrator must create separate subscriptions for each division in Azure but ensure consistent IAM role assignments across all. He needs an automated, repeatable method for provisioning identity and access resources at scale. Which service should he use?

Back

Azure AD Privileged Identity Management

Front

Aria is an IT manager at a company that wants to define infrastructure resources like IAM policies, EC2 instances, and networking in reusable templates to reduce human error and enforce consistent access control. Which AWS service should Aria use?

Back

AWS CloudFormation

Front

A global enterprise wants to automate provisioning of complex resource stacks including VPCs, IAM roles, and multi-tier applications. They require version-controlled, template-driven infrastructure that scales across regions. Which service meets this need?

Back

AWS CloudFormation

Front

A DevOps team at a large company wants to automatically deploy IAM policies and resource stacks across multiple AWS accounts with minimal manual intervention. They also want rollback capability if a deployment fails. Which service should they use?

Back

AWS CloudFormation