Big Data Session 2

What is the best practice regarding the AWS root user?

• Use it for daily administrative tasks

• Do not use it except when necessary

• Share it with team members for easy access

• Use it as the primary IAM role

Which of the following is a responsibility of AWS under the shared responsibility model?

• Securing customer applications

• Managing customer IAM users and policies

• Maintaining the physical security of data centers

• Encrypting customer data

What is the primary function of AWS IAM (Identity and Access Management)?

• Encrypting stored data

• Managing permissions and access to AWS resources

• Providing virtual machines for computation

• Storing structured data

What is an IAM Role in AWS?

• A set of permissions assigned to a user

• A temporary identity with specific permissions that can be assumed when needed

• A database storage system

• A physical server in an AWS data center

What is meant by “least privilege access” in AWS security?

• Giving users full admin rights

• Granting users only the permissions they need to perform their tasks

• Using root user for all AWS activities

• Disabling multi-factor authentication

What does AWS Multi-Factor Authentication (MFA) do?

• Encrypts all stored data

• Requires multiple identity verifications before granting access

• Automatically grants admin access

• Replaces the need for IAM policies

What is AWS Key Management Service (KMS) used for?

• Running machine learning models

• Managing and encrypting cryptographic keys

• Hosting static websites

• Deploying AI models

What is AWS Organizations used for?

• Managing multiple AWS accounts centrally

• Creating virtual machines

• Running AI models

• Encrypting database records

What is the purpose of Service Control Policies (SCPs) in AWS Organizations?

• To provide detailed permissions to specific IAM users

• To define security groups for EC2 instances

• To set permission boundaries across multiple AWS accounts

• To encrypt data in transit

In AWS IAM, what happens if a permission is not explicitly allowed?

• It is implicitly denied

• It is automatically granted

• The user is prompted to approve it

• It is stored in a pending state