Module 4 Knowledge Check

After initial login, what does AWS recommend as best practice for the AWS account root user? (Select the best answer.)

After initial login, AWS recommends deleting the access keys of the AWS account root user as the best practice.

In the shared responsibility model, AWS is responsible for providing what? (Select the best answer.)

In the shared responsibility model, AWS is responsible for providing security of the cloud.

Which of the following is the responsibility of AWS under the AWS shared responsibility model? (Select the best answer.)

Maintaining physical hardware is the responsibility of AWS under the shared responsibility model.

Which of the following are best practices to secure your account using AWS Identity and Access Management (IAM)? (Choose two.)

Managing access to AWS resources and defining fine-grained access rights are best practices when securing accounts with AWS IAM.

True or False? AWS Organizations enables you to consolidate multiple AWS accounts so that you centrally manage them.

When creating an IAM policy, a user can be granted AWS Management Console access and programmatic access.

When creating an AWS Identity and Access Management (IAM) policy, what are the two types of access that can be granted to a user? (Choose two.)

When creating an IAM policy, a user can be granted AWS management console access and programmatic access.

In the shared responsibility model, which two of the following are examples of "security in the cloud" (Choose two.)

"Encryption of data at rest and data in transit" and "Security group configurations" are examples of security in the cloud.

True or False? AWS Key Management Service (AWS KMS) enables you to assess, audit, and evaluate the configurations of your AWS resources.

AWS Key Management Service (AWS KMS) is a service that allows you to create and manage encryption keys and control the use of encryption access across a wide range of AWS services and in your applications.

Which of the following should be done by the AWS account root user.

Changing the AWS support plan can only be done by the AWS account root user. The other tasks are done with IAM.

How would the system administrator add an additional layer of login security to a user's AWS management console? (Select the best answer.)

To add an additional layer of login security to a user's AWS Management Console, enable multi-factor authentication.