Security & ComplianceCâu 51 / 100
Which statement best distinguishes an IAM user from an IAM role?
a.A role always has a permanent password, while a user never does
b.A user represents a specific identity with long-term credentials, while a role is assumed temporarily by trusted entities
c.Roles can only be used by AWS employees
d.Users cannot be assigned any permissions
Giải thích
An IAM user is a persistent identity with its own long-term credentials, whereas an IAM role is assumed temporarily and provides short-term credentials to whoever or whatever assumes it. Roles are ideal for granting access to applications, services, or federated users.
Luyện miễn phí toàn bộ 100 câu hỏi — không cần đăng ký.
Câu hỏi liên quan cùng chủ đề
- Which of the following is an IAM best practice?
- Which service aggregates security findings from services like GuardDuty, Inspector, and Macie into a single dashboard and runs automated best-practice checks?
- A customer stores objects in Amazon S3 and wants AWS to manage the encryption keys and apply encryption automatically. Which option fits?
- According to the shared responsibility model, who is responsible for classifying data and configuring access controls on it?
- Which service would you use to get automated recommendations that include security checks such as identifying publicly accessible resources or missing MFA on the root account?
- What is the benefit of using temporary security credentials provided by IAM roles instead of long-term access keys?
Cập nhật gần nhất: · quy trình kiểm tra
Đội Ngũ Biên Tập PrepPass · Đối chiếu với AWS Certified Cloud Practitioner (CLF-C02) · Quy trình kiểm tra