Security & ComplianceQuestion 54 of 100
What is the benefit of using temporary security credentials provided by IAM roles instead of long-term access keys?
a.They never expire, so they are easier to manage
b.They automatically expire, reducing the risk if they are exposed
c.They grant full administrative access by default
d.They are stored permanently in application code
Explanation
Temporary credentials from roles expire automatically after a short period, limiting the window of exposure if they are leaked. This is more secure than long-term keys, which remain valid until manually rotated or deleted.
Practice all 100 questions free — no signup required.
Related questions on this topic
- Which of the following is an IAM best practice?
- Which service aggregates security findings from services like GuardDuty, Inspector, and Macie into a single dashboard and runs automated best-practice checks?
- A customer stores objects in Amazon S3 and wants AWS to manage the encryption keys and apply encryption automatically. Which option fits?
- Which statement best distinguishes an IAM user from an IAM role?
- According to the shared responsibility model, who is responsible for classifying data and configuring access controls on it?
- Which service would you use to get automated recommendations that include security checks such as identifying publicly accessible resources or missing MFA on the root account?
Last reviewed: · editorial process
PrepPass Editorial Team · Verified against AWS Certified Cloud Practitioner (CLF-C02) · How we review