Security & CompliancePregunta 51 de 100
Which statement best distinguishes an IAM user from an IAM role?
a.A role always has a permanent password, while a user never does
b.A user represents a specific identity with long-term credentials, while a role is assumed temporarily by trusted entities
c.Roles can only be used by AWS employees
d.Users cannot be assigned any permissions
Explicación
An IAM user is a persistent identity with its own long-term credentials, whereas an IAM role is assumed temporarily and provides short-term credentials to whoever or whatever assumes it. Roles are ideal for granting access to applications, services, or federated users.
Practica las 100 preguntas gratis — sin registro.
Preguntas relacionadas de este tema
- Which of the following is an IAM best practice?
- Which service aggregates security findings from services like GuardDuty, Inspector, and Macie into a single dashboard and runs automated best-practice checks?
- A customer stores objects in Amazon S3 and wants AWS to manage the encryption keys and apply encryption automatically. Which option fits?
- According to the shared responsibility model, who is responsible for classifying data and configuring access controls on it?
- Which service would you use to get automated recommendations that include security checks such as identifying publicly accessible resources or missing MFA on the root account?
- What is the benefit of using temporary security credentials provided by IAM roles instead of long-term access keys?
Última revisión: · proceso editorial
Equipo Editorial de PrepPass · Verificado con AWS Certified Cloud Practitioner (CLF-C02) · Cómo revisamos