Examkin

Soru

Zorluk: KolayIdentity and Access Management (IAM)

A local healthcare provider is setting up access control for its staff in the AWS Cloud. The administrator needs to configure secure access for human users and application services while adhering to AWS Identity and Access Management (IAM) best practices. Which of the following actions represent AWS-recommended IAM security best practices for this setup? (Select TWO.)

  1. Enable multi-factor authentication (MFA) for all IAM users who have administrative permissions.Cevap
  2. Assign IAM roles to application servers that require access to other AWS services instead of using long-term credentials.Cevap
  3. C
    Embed permanent IAM user access keys directly within application code to allow services to retrieve files.
  4. D
    Use the AWS account root user credentials for daily system administration tasks to guarantee complete administrative oversight.
  5. E
    Create IAM policies to manage the physical security and visitor access of AWS data center facilities hosting the systems.

Cevap

Enabling multi-factor authentication (MFA) for administrative accounts and assigning IAM roles to application servers needing access to AWS services.
The correct actions are enabling multi-factor authentication (MFA) for accounts with administrative privileges and assigning IAM roles to application servers. MFA provides a critical layer of defense-in-depth, while IAM roles supply temporary, rotating credentials to applications running on AWS, minimizing the threat of credential exposure.

Adım Adım Çözüm

1
Identify the security requirements for human administrative access versus application access in AWS.
Human users require secure administrative access, whereas applications require programmatic access to AWS services.
AWS separates access strategies for identity types to maintain strict credential isolation.
2
Apply the principle of least privilege and credential safety: require multi-factor authentication for administrative users to protect access, and use IAM roles to delegate temporary credentials to application servers.
MFA is configured for admin users, and IAM roles are assigned to the servers hosting the applications.
These steps ensure that administrators are strongly authenticated and that applications do not use hardcoded or permanent keys.

Anahtar Kavram

AWS IAM Security Best Practices
Tahmini Süre:1m 0s
Bu soruyu puanla

Konular

Identity and Access Management (IAM)

Bu konudan daha fazla soru