Module 4

Question 1

True or False?
AWS Organisations enables you to consolidate multiple AWS accounts so that you centrally manage them.

Answer 1

True

Question 2

Which of the following are best practices to secure your account using AWS Identity and Access Management (IAM) ? (Choose two)

1. Provide users with default administrative priviledges.
2. Leave unused and unnecessary users and credentials in place.
3. Manage access to AWS resources.
4. Avoid using IAM groups to grant the same access permissions to multiple users.
5. Define fine-grained access rights.

Answer 2

3. Manage access to AWS resources.
4. Define fine-grained access rights.

Question 3

Which of the following should be done by the AWS account root user? (Select the best answer.)

1. Secure access for applications
2. Integrate with other AWS services
3. Change granular permissions
4. Change the AWS support plan.

Answer 3

4. Change the AWS support plan.

Question 4

After initial login, what does AWS recommend as the best practtice for the AWS account root user? (Select the best answer.)

1. Delete the AWS account root user
2. Revoke all permissions on the AWS account root user
3. Restrict permission on the AWS account root user
4. Delete the access keys of the AWS account root user

Answer 4

4. Delete the access keys of the AWS account root user

Question 5

How would a system adminstrator add an additional layer of login security to a user’s AWS Management Console? (Select the best answer.)

1. Use Amazon Cloud Directory
2. Audit AWS Identity and Access Management (IAM) roles
3. Enable multi-factor authentication
4. Enable AWS CloudTrail

Answer 5

3. Enable multi-factor authentication

Question 6

True or False?
AWS Key Management Servise (KMS) enables you to assess, audit, and evaluate the configurations of your AWS resources.

Answer 6

False

Question 7

In the shared responsibility model, AWS is responsible for providing what ? (Select the best answer.)

1. Security of the cloud
2. Security to the cloud
3. Security for the cloud
4. Security in the cloud

Answer 7

1. Security of the cloud

Question 8

In the shared responsibility model, which of the following are examples of “security in the cloud” ? (Choose two)

1. Compliance with compute security standards and regulations
2. Physical security of the facilities in which the services operate
3. Security group configurations
4. Encryption of data at rest and data in transit
5. Protecting the global infrastructure

Answer 8

3. Security group configurations
4. Encryption of data at rest and data in transit

Question 9

Which of the the following is the responsibility of AWS under the AWS shared responsibility model? (Select the best answer.)

1. Configuring third-party applications
2. Maintaining physical hardware
3. Secuirty application access and data
4. Managing custom Amazon Maching Image (AMI)

Answer 9

2. Maintaining physical hardware

Question 10

When creating an AWS Identity and Access Management (IAM) policy, what are the two types of access that can be granted to a user? (Choose two)

1. Institutional access
2. Authorised access
3. Programmatic access
4. AWS Management Console access
5. Administrative root access

Answer 10

3. Programmatic access
4. AWS Management Console access