AWS CLF-C02

Identity and Access Management

12 of 60 questions in the app

AWS IAM

  1. What is AWS Identity and Access Management (IAM) for? Easy
  2. What is an IAM user? Easy
  3. What are IAM groups used for? Easy
  4. What distinguishes an IAM role from an IAM user? Easy
  5. In which format are IAM policies written? Easy
  6. What is an AWS managed policy? Easy

Least privilege

  1. What does the principle of least privilege state? Easy

Root user

  1. What is the root user of an AWS account? Easy

AWS IAM

  1. Which elements does a statement in an IAM policy have? Medium
  2. A user has one policy that allows s3:DeleteObject and a second one that explicitly denies the same action. What applies? Medium

AWS IAM

  1. A new IAM user without any attached policy tries to launch an EC2 instance. What happens and why? Hard
  2. A group allows ec2:*, and an organization service control policy denies ec2:TerminateInstances. Which statements are correct for a user of this group? Hard

Certifications & exams

Which exam comes next?

You can already practise for 31 exams, and 20 are up for a vote. See all certifications with their official information, cast your vote or suggest your exam.

See all certifications