1. What is IAM User ? Junior A. centralized workforce single sign-on and permission management across AWS accounts B. an identity representing a person or application with long-term credentials C. the policy attached to a role specifying which principals are allowed to assume it D. Web Application Firewall; filters HTTP traffic to block common web exploits
2. Which term means: "an identity representing a person or application with long-term credentials"? Junior A. Resource-Based Policy B. IAM User C. Secrets Manager D. KMS
3. Which statement is correct? Junior A. IAM User — a JSON document defining permissions (allow/deny) attached to users, groups, or roles B. IAM User — an identity representing a person or application with long-term credentials C. IAM User — a threat-detection service that continuously monitors accounts for malicious activity D. IAM User — an advanced policy that sets the maximum permissions an IAM entity can have
4. What is IAM Role ? Junior A. centralized workforce single sign-on and permission management across AWS accounts B. a permissions policy attached directly to a resource specifying who may access it C. an identity with permissions that can be assumed temporarily by trusted entities D. a threat-detection service that continuously monitors accounts for malicious activity
5. Which term means: "an identity with permissions that can be assumed temporarily by trusted entities"? Junior A. IAM Role B. GuardDuty C. WAF D. Instance Profile
6. Which statement is correct? Junior A. IAM Role — Web Application Firewall; filters HTTP traffic to block common web exploits B. IAM Role — an identity with permissions that can be assumed temporarily by trusted entities C. IAM Role — a container for an IAM role that grants permissions to applications on an EC2 instance D. IAM Role — a service that stores, rotates, and retrieves secrets like database credentials
7. What is IAM Policy ? Junior A. Web Application Firewall; filters HTTP traffic to block common web exploits B. a JSON document defining permissions (allow/deny) attached to users, groups, or roles C. the policy attached to a role specifying which principals are allowed to assume it D. an advanced policy that sets the maximum permissions an IAM entity can have
8. Which term means: "a JSON document defining permissions (allow/deny) attached to users, groups, or roles"? Junior A. IAM Identity Center B. GuardDuty C. Resource-Based Policy D. IAM Policy
9. Which statement is correct? Junior A. IAM Policy — Web Application Firewall; filters HTTP traffic to block common web exploits B. IAM Policy — the policy attached to a role specifying which principals are allowed to assume it C. IAM Policy — a permissions policy attached directly to a resource specifying who may access it D. IAM Policy — a JSON document defining permissions (allow/deny) attached to users, groups, or roles
10. What is Trust Policy ? Mid A. a JSON document defining permissions (allow/deny) attached to users, groups, or roles B. the policy attached to a role specifying which principals are allowed to assume it C. a threat-detection service that continuously monitors accounts for malicious activity D. Web Application Firewall; filters HTTP traffic to block common web exploits
11. Which term means: "the policy attached to a role specifying which principals are allowed to assume it"? Mid A. IAM Identity Center B. Trust Policy C. Permission Boundary D. KMS
12. Which statement is correct? Mid A. Trust Policy — an identity with permissions that can be assumed temporarily by trusted entities B. Trust Policy — an Organizations policy that limits the maximum permissions for accounts in an OU C. Trust Policy — a collection of IAM users that share a common set of permissions D. Trust Policy — the policy attached to a role specifying which principals are allowed to assume it
13. What is KMS ? Mid A. a threat-detection service that continuously monitors accounts for malicious activity B. the policy attached to a role specifying which principals are allowed to assume it C. a JSON document defining permissions (allow/deny) attached to users, groups, or roles D. Key Management Service; managed creation and control of encryption keys
14. Which term means: "Key Management Service; managed creation and control of encryption keys"? Mid A. Secrets Manager B. KMS C. IAM Identity Center D. Trust Policy
15. Which statement is correct? Mid A. KMS — a collection of IAM users that share a common set of permissions B. KMS — Key Management Service; managed creation and control of encryption keys C. KMS — an Organizations policy that limits the maximum permissions for accounts in an OU D. KMS — an advanced policy that sets the maximum permissions an IAM entity can have
16. What is Secrets Manager ? Mid A. a collection of IAM users that share a common set of permissions B. a service that stores, rotates, and retrieves secrets like database credentials C. an advanced policy that sets the maximum permissions an IAM entity can have D. an identity with permissions that can be assumed temporarily by trusted entities
17. Which term means: "a service that stores, rotates, and retrieves secrets like database credentials"? Mid A. Trust Policy B. IAM Group C. Secrets Manager D. IAM Identity Center
18. Which statement is correct? Mid A. Secrets Manager — an identity representing a person or application with long-term credentials B. Secrets Manager — a container for an IAM role that grants permissions to applications on an EC2 instance C. Secrets Manager — a service that stores, rotates, and retrieves secrets like database credentials D. Secrets Manager — an advanced policy that sets the maximum permissions an IAM entity can have
19. What is Permission Boundary ? Senior A. the policy attached to a role specifying which principals are allowed to assume it B. an advanced policy that sets the maximum permissions an IAM entity can have C. Key Management Service; managed creation and control of encryption keys D. Web Application Firewall; filters HTTP traffic to block common web exploits
20. Which term means: "an advanced policy that sets the maximum permissions an IAM entity can have"? Senior A. Permission Boundary B. IAM Identity Center C. IAM User D. KMS
21. Which statement is correct? Senior A. Permission Boundary — a collection of IAM users that share a common set of permissions B. Permission Boundary — an identity representing a person or application with long-term credentials C. Permission Boundary — Key Management Service; managed creation and control of encryption keys D. Permission Boundary — an advanced policy that sets the maximum permissions an IAM entity can have
22. What is Service Control Policy ? Senior A. the policy attached to a role specifying which principals are allowed to assume it B. Key Management Service; managed creation and control of encryption keys C. an advanced policy that sets the maximum permissions an IAM entity can have D. an Organizations policy that limits the maximum permissions for accounts in an OU
23. Which term means: "an Organizations policy that limits the maximum permissions for accounts in an OU"? Senior A. IAM User B. IAM Policy C. Service Control Policy D. GuardDuty
24. Which statement is correct? Senior A. Service Control Policy — a container for an IAM role that grants permissions to applications on an EC2 instance B. Service Control Policy — the policy attached to a role specifying which principals are allowed to assume it C. Service Control Policy — an Organizations policy that limits the maximum permissions for accounts in an OU D. Service Control Policy — a collection of IAM users that share a common set of permissions
25. What does aws iam create-user do? Junior A. creates an IAM role with a specified trust policy B. produces a report listing account users and their credential status C. creates a new IAM user in the account D. retrieves the current value of a stored secret
26. Which command will creates a new IAM user in the account? Junior A. aws iam generate-credential-report B. aws iam create-policy C. aws iam create-user D. aws secretsmanager get-secret-value
27. Which statement is correct? Junior A. aws iam create-user — attaches a managed policy to an IAM role B. aws iam create-user — lists managed policies attached to an IAM role C. aws iam create-user — creates a new IAM user in the account D. aws iam create-user — requests temporary security credentials by assuming an IAM role
28. What does aws iam attach-role-policy do? Junior A. creates a new IAM user in the account B. attaches a managed policy to an IAM role C. creates an IAM role with a specified trust policy D. produces a report listing account users and their credential status
29. Which command will attaches a managed policy to an IAM role? Junior A. aws iam attach-role-policy B. aws sts assume-role C. aws iam create-user D. aws secretsmanager get-secret-value
30. Which statement is correct? Junior A. aws iam attach-role-policy — attaches a managed policy to an IAM role B. aws iam attach-role-policy — creates a customer-managed IAM policy from a JSON document C. aws iam attach-role-policy — requests temporary security credentials by assuming an IAM role D. aws iam attach-role-policy — encrypts plaintext data using a specified KMS key Showing 30 of 72 AWS · IAM & Security questions — the full set, with answers, explanations and an AI tutor on every question, is inside.