AWS Security and Access Management Quiz

What is the primary purpose of AWS Identity and Access Management (IAM)?

• To manage billing for AWS services

• To manage permissions and access to AWS resources

• To monitor network traffic

• To provide data storage solutions

Which AWS service is used to encrypt data at rest?

• AWS CloudTrail

• AWS Organizations

• AWS Key Management Service (AWS KMS)

• Amazon Inspector

What does ABAC stand for in the context of AWS permissions management?

• Attribute-Based Access Control

• Access-Based Attribute Control

• Account-Based Access Control

• Authorization-Based Access Control

Which of the following is a benefit of using IAM groups?

• Groups can be nested within other groups

• Permissions can be assigned to multiple users at once

• Groups can only contain one user

• Each user must have a unique policy

What is the role of AWS Security Token Service (AWS STS)?

• To provide permanent credentials to users

• To manage user identities across AWS accounts

• To encrypt data at rest

• To request temporary, limited-privilege credentials

Which AWS service allows for centralized management of multiple AWS accounts?

• AWS IAM

• AWS KMS

• Amazon Cognito

• AWS Organizations

What is the main advantage of using service control policies (SCPs) in AWS Organizations?

• They set permission boundaries for IAM roles

• They provide a way to manage user passwords

• They control maximum available permissions for accounts

• They allow for detailed billing reports

Which encryption method uses a pair of keys for secure data transmission?

• Data masking

• Hashing

• Symmetric encryption

• Asymmetric encryption

What is the purpose of Amazon Cognito?

• To encrypt data at rest

• To manage AWS billing

• To provide user authentication and management for applications

• To monitor AWS service usage

Which AWS service helps identify sensitive data stored in Amazon S3?

• AWS Inspector

• AWS WAF

• AWS CloudTrail

• Amazon Macie