72 AWS · IAM & Security questions from the Cloud bank, written for Indian campus drives and tech interviews. Every question has a verified answer and an AI-tutor explanation on placd.
Free to start: the 2-minute IT readiness check — six questions and a result.
A.centralized workforce single sign-on and permission management across AWS accounts
B.an identity representing a person or application with long-term credentials
C.the policy attached to a role specifying which principals are allowed to assume it
D.Web Application Firewall; filters HTTP traffic to block common web exploits
Answer + AI explanation with Pro
2. Which term means: "an identity representing a person or application with long-term credentials"?
Junior
A.Resource-Based Policy
B.IAM User
C.Secrets Manager
D.KMS
Answer + AI explanation with Pro
3. Which statement is correct?
Junior
A.IAM User — a JSON document defining permissions (allow/deny) attached to users, groups, or roles
B.IAM User — an identity representing a person or application with long-term credentials
C.IAM User — a threat-detection service that continuously monitors accounts for malicious activity
D.IAM User — an advanced policy that sets the maximum permissions an IAM entity can have
Answer + AI explanation with Pro
4. What is IAM Role?
Junior
A.centralized workforce single sign-on and permission management across AWS accounts
B.a permissions policy attached directly to a resource specifying who may access it
C.an identity with permissions that can be assumed temporarily by trusted entities
D.a threat-detection service that continuously monitors accounts for malicious activity
Answer + AI explanation with Pro
5. Which term means: "an identity with permissions that can be assumed temporarily by trusted entities"?
Junior
A.IAM Role
B.GuardDuty
C.WAF
D.Instance Profile
Answer + AI explanation with Pro
6. Which statement is correct?
Junior
A.IAM Role — Web Application Firewall; filters HTTP traffic to block common web exploits
B.IAM Role — an identity with permissions that can be assumed temporarily by trusted entities
C.IAM Role — a container for an IAM role that grants permissions to applications on an EC2 instance
D.IAM Role — a service that stores, rotates, and retrieves secrets like database credentials
Answer + AI explanation with Pro
7. What is IAM Policy?
Junior
A.Web Application Firewall; filters HTTP traffic to block common web exploits
B.a JSON document defining permissions (allow/deny) attached to users, groups, or roles
C.the policy attached to a role specifying which principals are allowed to assume it
D.an advanced policy that sets the maximum permissions an IAM entity can have
Answer + AI explanation with Pro
8. Which term means: "a JSON document defining permissions (allow/deny) attached to users, groups, or roles"?
Junior
A.IAM Identity Center
B.GuardDuty
C.Resource-Based Policy
D.IAM Policy
Answer + AI explanation with Pro
9. Which statement is correct?
Junior
A.IAM Policy — Web Application Firewall; filters HTTP traffic to block common web exploits
B.IAM Policy — the policy attached to a role specifying which principals are allowed to assume it
C.IAM Policy — a permissions policy attached directly to a resource specifying who may access it
D.IAM Policy — a JSON document defining permissions (allow/deny) attached to users, groups, or roles
Answer + AI explanation with Pro
10. What is Trust Policy?
Mid
A.a JSON document defining permissions (allow/deny) attached to users, groups, or roles
B.the policy attached to a role specifying which principals are allowed to assume it
C.a threat-detection service that continuously monitors accounts for malicious activity
D.Web Application Firewall; filters HTTP traffic to block common web exploits
Answer + AI explanation with Pro
11. Which term means: "the policy attached to a role specifying which principals are allowed to assume it"?
Mid
A.IAM Identity Center
B.Trust Policy
C.Permission Boundary
D.KMS
Answer + AI explanation with Pro
12. Which statement is correct?
Mid
A.Trust Policy — an identity with permissions that can be assumed temporarily by trusted entities
B.Trust Policy — an Organizations policy that limits the maximum permissions for accounts in an OU
C.Trust Policy — a collection of IAM users that share a common set of permissions
D.Trust Policy — the policy attached to a role specifying which principals are allowed to assume it
Answer + AI explanation with Pro
13. What is KMS?
Mid
A.a threat-detection service that continuously monitors accounts for malicious activity
B.the policy attached to a role specifying which principals are allowed to assume it
C.a JSON document defining permissions (allow/deny) attached to users, groups, or roles
D.Key Management Service; managed creation and control of encryption keys
Answer + AI explanation with Pro
14. Which term means: "Key Management Service; managed creation and control of encryption keys"?
Mid
A.Secrets Manager
B.KMS
C.IAM Identity Center
D.Trust Policy
Answer + AI explanation with Pro
15. Which statement is correct?
Mid
A.KMS — a collection of IAM users that share a common set of permissions
B.KMS — Key Management Service; managed creation and control of encryption keys
C.KMS — an Organizations policy that limits the maximum permissions for accounts in an OU
D.KMS — an advanced policy that sets the maximum permissions an IAM entity can have
Answer + AI explanation with Pro
16. What is Secrets Manager?
Mid
A.a collection of IAM users that share a common set of permissions
B.a service that stores, rotates, and retrieves secrets like database credentials
C.an advanced policy that sets the maximum permissions an IAM entity can have
D.an identity with permissions that can be assumed temporarily by trusted entities
Answer + AI explanation with Pro
17. Which term means: "a service that stores, rotates, and retrieves secrets like database credentials"?
Mid
A.Trust Policy
B.IAM Group
C.Secrets Manager
D.IAM Identity Center
Answer + AI explanation with Pro
18. Which statement is correct?
Mid
A.Secrets Manager — an identity representing a person or application with long-term credentials
B.Secrets Manager — a container for an IAM role that grants permissions to applications on an EC2 instance
C.Secrets Manager — a service that stores, rotates, and retrieves secrets like database credentials
D.Secrets Manager — an advanced policy that sets the maximum permissions an IAM entity can have
Answer + AI explanation with Pro
19. What is Permission Boundary?
Senior
A.the policy attached to a role specifying which principals are allowed to assume it
B.an advanced policy that sets the maximum permissions an IAM entity can have
C.Key Management Service; managed creation and control of encryption keys
D.Web Application Firewall; filters HTTP traffic to block common web exploits
Answer + AI explanation with Pro
20. Which term means: "an advanced policy that sets the maximum permissions an IAM entity can have"?
Senior
A.Permission Boundary
B.IAM Identity Center
C.IAM User
D.KMS
Answer + AI explanation with Pro
21. Which statement is correct?
Senior
A.Permission Boundary — a collection of IAM users that share a common set of permissions
B.Permission Boundary — an identity representing a person or application with long-term credentials
C.Permission Boundary — Key Management Service; managed creation and control of encryption keys
D.Permission Boundary — an advanced policy that sets the maximum permissions an IAM entity can have
Answer + AI explanation with Pro
22. What is Service Control Policy?
Senior
A.the policy attached to a role specifying which principals are allowed to assume it
B.Key Management Service; managed creation and control of encryption keys
C.an advanced policy that sets the maximum permissions an IAM entity can have
D.an Organizations policy that limits the maximum permissions for accounts in an OU
Answer + AI explanation with Pro
23. Which term means: "an Organizations policy that limits the maximum permissions for accounts in an OU"?
Senior
A.IAM User
B.IAM Policy
C.Service Control Policy
D.GuardDuty
Answer + AI explanation with Pro
24. Which statement is correct?
Senior
A.Service Control Policy — a container for an IAM role that grants permissions to applications on an EC2 instance
B.Service Control Policy — the policy attached to a role specifying which principals are allowed to assume it
C.Service Control Policy — an Organizations policy that limits the maximum permissions for accounts in an OU
D.Service Control Policy — a collection of IAM users that share a common set of permissions
Answer + AI explanation with Pro
25. What does aws iam create-user do?
Junior
A.creates an IAM role with a specified trust policy
B.produces a report listing account users and their credential status
C.creates a new IAM user in the account
D.retrieves the current value of a stored secret
Answer + AI explanation with Pro
26. Which command will creates a new IAM user in the account?
Junior
A.aws iam generate-credential-report
B.aws iam create-policy
C.aws iam create-user
D.aws secretsmanager get-secret-value
Answer + AI explanation with Pro
27. Which statement is correct?
Junior
A.aws iam create-user — attaches a managed policy to an IAM role
B.aws iam create-user — lists managed policies attached to an IAM role
C.aws iam create-user — creates a new IAM user in the account
D.aws iam create-user — requests temporary security credentials by assuming an IAM role
Answer + AI explanation with Pro
28. What does aws iam attach-role-policy do?
Junior
A.creates a new IAM user in the account
B.attaches a managed policy to an IAM role
C.creates an IAM role with a specified trust policy
D.produces a report listing account users and their credential status
Answer + AI explanation with Pro
29. Which command will attaches a managed policy to an IAM role?
Junior
A.aws iam attach-role-policy
B.aws sts assume-role
C.aws iam create-user
D.aws secretsmanager get-secret-value
Answer + AI explanation with Pro
30. Which statement is correct?
Junior
A.aws iam attach-role-policy — attaches a managed policy to an IAM role
B.aws iam attach-role-policy — creates a customer-managed IAM policy from a JSON document
C.aws iam attach-role-policy — requests temporary security credentials by assuming an IAM role
D.aws iam attach-role-policy — encrypts plaintext data using a specified KMS key
Answer + AI explanation with Pro
Showing 30 of 72 AWS · IAM & Security questions — the full set, with answers, explanations and an AI tutor on every question, is inside.
Free to start
Start with a free readiness check
Sign up free for the 2-minute IT readiness check and a scored result. Answers, explanations and the AI tutor on every AWS · IAM & Security question come with Pro.