AWS Developer Application Authentication Quiz

1. Which AWS service encrypts credentials at rest and provides secret rotation?

AWS KMS

AWS Secrets Manager

AWS Certificate Manager

AWS CloudHSM

2. What is the recommended practice for storing database credentials in an application?

Hardcode in application source code

Store in AWS Secrets Manager or Parameter Store

Store in plaintext configuration files

Pass as command-line arguments

3. True or False: Temporary credentials from STS are always more secure than long-term access keys.

True

False

4. Which AWS service validates API requests and enforces authentication policies?

AWS API Gateway

AWS Lambda

AWS CloudTrail

AWS CloudWatch

5. What is the primary benefit of using IAM roles over access keys for applications?

Roles never expire

Automatic credential rotation without manual management

Roles cost less than access keys

Roles work offline

6. Which policy type defines what an IAM entity can do?

Trust policy

Identity-based policy

Resource-based policy

Session policy

7. True or False: Root AWS account credentials should be used daily for administrative tasks.

True

False

8. What does MFA (Multi-Factor Authentication) provide in AWS?

Encryption of data in transit

Additional security layer requiring second verification

Automatic backup of credentials

Rate limiting for API calls

9. Which authentication method should be used for cross-account access in AWS?

Shared root credentials

Cross-account IAM roles

Hardcoded access keys

Public IP addresses

10. True or False: An IAM user can have multiple access keys at the same time.

True

False

11. Which AWS service manages user identities and access control across AWS resources?

AWS IAM

AWS Cognito

AWS KMS

AWS Secrets Manager

12. What is the purpose of an IAM role trust policy?

Define permissions for resources

Specify which entities can assume the role

Encrypt sensitive data

Manage API rate limits

13. Which IAM policy effect explicitly denies an action?

Allow

Deny

Restrict

Block

14. What is the maximum duration for AWS STS temporary credentials?

1 hour

8 hours

12 hours

36 hours

15. Which authentication method is recommended for API calls from Lambda functions?

Hardcoded IAM credentials

IAM role attached to the Lambda execution role

Root account credentials

Temporary tokens stored in S3

16. What does an IAM access key consist of?

Only an access key ID

Access key ID and secret access key

Username and password

Session token only

17. Which AWS service is best for managing application user authentication and sign-up?

AWS IAM

AWS Cognito

AWS Directory Service

AWS Secrets Manager

18. What is the primary purpose of AWS STS (Security Token Service)?

Store secrets and credentials

Generate temporary security credentials

Encrypt data in transit

Manage API keys only

19. Which statement about IAM policies is correct?

Policies define what actions are allowed on AWS resources

Policies are only used for EC2 instances

Policies cannot be attached to user groups

Policies expire after 30 days automatically

20. What type of credentials should be used by an EC2 instance to access S3 buckets securely?

Root AWS account credentials

IAM role with attached policies

Hardcoded access keys in the application

Temporary session tokens only

AWS Developer Application Authentication Quiz

1. Which AWS service encrypts credentials at rest and provides secret rotation?

2.

What first name or nickname would you like us to use?

2. What is the recommended practice for storing database credentials in an application?

3. True or False: Temporary credentials from STS are always more secure than long-term access keys.

4. Which AWS service validates API requests and enforces authentication policies?

5. What is the primary benefit of using IAM roles over access keys for applications?

6. Which policy type defines what an IAM entity can do?

7. True or False: Root AWS account credentials should be used daily for administrative tasks.

8. What does MFA (Multi-Factor Authentication) provide in AWS?

9. Which authentication method should be used for cross-account access in AWS?

10. True or False: An IAM user can have multiple access keys at the same time.

11. Which AWS service manages user identities and access control across AWS resources?

12. What is the purpose of an IAM role trust policy?

13. Which IAM policy effect explicitly denies an action?

14. What is the maximum duration for AWS STS temporary credentials?

15. Which authentication method is recommended for API calls from Lambda functions?

16. What does an IAM access key consist of?

17. Which AWS service is best for managing application user authentication and sign-up?

18. What is the primary purpose of AWS STS (Security Token Service)?

19. Which statement about IAM policies is correct?

20. What type of credentials should be used by an EC2 instance to access S3 buckets securely?