All fields

“IAM” in Information Technology

70 questions across 3 technologies.

Information Technology

70 questions in 3 technologies

#QuestionTechnologyTopicLevel
1What is AWS IAM and what fundamental problem does it solve for controlling access to AWS resources? AWS › IAMAWSIAMBeginner
2What is the difference between an IAM user, an IAM group, and an IAM role? AWS › IAMAWSIAMBeginner
3How do IAM policies use the combination of effect, action, resource, and condition elements to precisely define permissions? AWS › IAMAWSIAMIntermediate
4What is the principle of least privilege in IAM, and what practical strategies help apply it effectively? AWS › IAMAWSIAMIntermediate
5How does IAM policy evaluation logic determine the final outcome when a user has multiple applicable policies, including identity based and resource based policies? AWS › IAMAWSIAMIntermediate
6How does IAM support federated identity and single sign on integration with external identity providers like corporate Active Directory or a SAML based provider? AWS › IAMAWSIAMAdvanced
7How should an organization design a comprehensive IAM governance strategy combining permission boundaries, service control policies, and regular access reviews across a growing organization? AWS › IAMAWSIAMAdvanced
8How does EKS integrate with IAM for authentication and authorization within a Kubernetes cluster? AWS › Amazon EKS (Elastic Kubernetes Service)AWSAmazon EKS (Elastic Kubernetes Service)Intermediate
9What is IAM Identity Center, and why is it recommended over creating individual IAM users for team access to an AWS account? AWS › AWS Free Tier & Account SetupAWSAWS Free Tier & Account SetupIntermediate
10How can IAM policies restrict access to specific secrets, ensuring only authorized applications or users can retrieve sensitive credentials? AWS › AWS Secrets Manager & Parameter StoreAWSAWS Secrets Manager & Parameter StoreIntermediate
11How can ECR repository policies control which IAM users, roles, or other AWS accounts can access a specific container image repository? AWS › Elastic Container Registry (ECR)AWSElastic Container Registry (ECR)Intermediate
12How can tags be used alongside IAM policies to implement attribute based access control, restricting actions based on a resource's specific tag values? AWS › Tagging Strategies & Resource ManagementAWSTagging Strategies & Resource ManagementIntermediate
13How can cross account IAM roles enable secure resource sharing and centralized management across accounts within an organization? AWS › AWS Organizations & Multi Account StrategyAWSAWS Organizations & Multi Account StrategyAdvanced
14What is the 'diamond problem', and how does Python's MRO solve it? Python › Multiple Inheritance & MROPythonMultiple Inheritance & MROIntermediate
15How is the 'diamond problem' (a class implementing two interfaces with conflicting default methods) resolved in Java, and what rule determines which default method 'wins' or whether the compiler requires explicit resolution? Java › Interfaces & Abstract ClassesJavaInterfaces & Abstract ClassesAdvanced
16What is Amazon API Gateway and why is it used? AWS › Amazon API GatewayAWSAmazon API GatewayBeginner
17What is Amazon Rekognition and what kinds of tasks can it perform on images and videos? AWS › AWS AI Services (Rekognition, Polly, Lex & Comprehend)AWSAWS AI Services (Rekognition, Polly, Lex & Comprehend)Beginner
18How does domain validation work when requesting a certificate through ACM? AWS › AWS Certificate Manager (ACM)AWSAWS Certificate Manager (ACM)Beginner
19What is the AWS Certified Cloud Practitioner certification, and who should start with it? AWS › AWS Certification Paths & Career RoadmapAWSAWS Certification Paths & Career RoadmapBeginner
20How do you configure authentication credentials for the AWS CLI to securely access your AWS account? AWS › AWS CLI & SDKsAWSAWS CLI & SDKsBeginner
21What is AWS CloudTrail and why is it important for security and compliance? AWS › AWS CloudTrail & AuditingAWSAWS CloudTrail & AuditingBeginner
22How do AWS Config rules work to evaluate resource compliance? AWS › AWS ConfigAWSAWS ConfigBeginner
23What is a Virtual Private Gateway, and how does it relate to establishing hybrid connectivity with a VPC? AWS › AWS Direct Connect & Hybrid ConnectivityAWSAWS Direct Connect & Hybrid ConnectivityBeginner
24What are the essential steps for securely setting up a new AWS account for the first time? AWS › AWS Free Tier & Account SetupAWSAWS Free Tier & Account SetupBeginner
25What is the difference between a customer managed key and an AWS managed key in KMS? AWS › AWS KMS & Data EncryptionAWSAWS KMS & Data EncryptionBeginner
26What is AWS Organizations and what benefits does it provide for managing multiple AWS accounts? AWS › AWS Organizations & Multi Account StrategyAWSAWS Organizations & Multi Account StrategyBeginner
27Why do organizations commonly adopt a multi account strategy instead of running all workloads within a single AWS account? AWS › AWS Organizations & Multi Account StrategyAWSAWS Organizations & Multi Account StrategyBeginner
28What is AWS Secrets Manager and what problem does it solve for applications that need database credentials or API keys? AWS › AWS Secrets Manager & Parameter StoreAWSAWS Secrets Manager & Parameter StoreBeginner
29What is AWS Systems Manager Parameter Store, and how does it differ from Secrets Manager? AWS › AWS Secrets Manager & Parameter StoreAWSAWS Secrets Manager & Parameter StoreBeginner
30What is Systems Manager Session Manager, and how does it improve the security of accessing EC2 instances compared to traditional SSH? AWS › AWS Systems ManagerAWSAWS Systems ManagerBeginner
31What are the core categories of AWS services that every cloud beginner should understand before diving into any specific service? AWS › Core Services OverviewAWSCore Services OverviewBeginner
32How do you authenticate Docker to push and pull images from a private ECR repository? AWS › Elastic Container Registry (ECR)AWSElastic Container Registry (ECR)Beginner
33What is the AWS Well-Architected Framework and what are its six pillars? AWS › Well-Architected FrameworkAWSWell-Architected FrameworkBeginner
34How does API Gateway handle authentication and authorization for incoming requests? AWS › Amazon API GatewayAWSAmazon API GatewayIntermediate
35How do you secure content delivered through CloudFront so only authorized users can access it? AWS › Amazon CloudFront & Content DeliveryAWSAmazon CloudFront & Content DeliveryIntermediate
36What is a task definition in ECS and what does it contain? AWS › Amazon ECS (Elastic Container Service)AWSAmazon ECS (Elastic Container Service)Intermediate
37How does networking work for containers running in ECS, particularly with the awsvpc network mode? AWS › Amazon ECS (Elastic Container Service)AWSAmazon ECS (Elastic Container Service)Intermediate
38How can you control access permissions for files and directories stored in EFS? AWS › Amazon EFS (Elastic File System)AWSAmazon EFS (Elastic File System)Intermediate
39How does Kubernetes networking work within an EKS cluster using the Amazon VPC CNI plugin? AWS › Amazon EKS (Elastic Kubernetes Service)AWSAmazon EKS (Elastic Kubernetes Service)Intermediate
40What is a custom event bus in EventBridge, and when would you create one instead of using the default event bus? AWS › Amazon EventBridgeAWSAmazon EventBridgeIntermediate
41How does QuickSight support row level security to control what data different users can see? AWS › Amazon QuickSight & Business IntelligenceAWSAmazon QuickSight & Business IntelligenceIntermediate
42What is SageMaker Studio, and how does it improve the machine learning development experience? AWS › Amazon SageMaker & Machine Learning on AWSAWSAmazon SageMaker & Machine Learning on AWSIntermediate
43How do backup vaults and vault lock in AWS Backup help protect against accidental or malicious data deletion? AWS › AWS Backup & Disaster RecoveryAWSAWS Backup & Disaster RecoveryIntermediate
44How does CodePipeline support manual approval stages, and why are they useful in a CI/CD process? AWS › AWS CodePipeline, CodeBuild & CodeDeploy (CI/CD)AWSAWS CodePipeline, CodeBuild & CodeDeploy (CI/CD)Intermediate
45How does networking and security isolation work for tasks running on Fargate? AWS › AWS FargateAWSAWS FargateIntermediate
46How do KMS key policies and grants control who can use a specific encryption key? AWS › AWS KMS & Data EncryptionAWSAWS KMS & Data EncryptionIntermediate
47What are Organizational Units in AWS Organizations, and how do they help structure a large number of accounts logically? AWS › AWS Organizations & Multi Account StrategyAWSAWS Organizations & Multi Account StrategyIntermediate
48What are Service Control Policies, and how do they enforce security and compliance guardrails across an entire organization? AWS › AWS Organizations & Multi Account StrategyAWSAWS Organizations & Multi Account StrategyIntermediate
49How do Trusted Advisor's security checks help identify common misconfigurations before they become serious security incidents? AWS › AWS Trusted AdvisorAWSAWS Trusted AdvisorIntermediate
50How does understanding the AWS shared responsibility model help clarify which security and operational tasks are AWS's responsibility versus the customer's responsibility? AWS › Core Services OverviewAWSCore Services OverviewIntermediate
51How do CloudFormation nested stacks and cross stack references help organize very large and complex infrastructure definitions? AWS › IaC (CloudFormation)AWSIaC (CloudFormation)Intermediate
52How do S3 bucket policies and access control lists work together to control who can access objects stored in a bucket? AWS › S3 & StorageAWSS3 & StorageIntermediate
53How do Athena workgroups help manage query costs and access control across teams? AWS › Amazon AthenaAWSAmazon AthenaAdvanced
54How does EventBridge support cross account and cross region event routing? AWS › Amazon EventBridgeAWSAmazon EventBridgeAdvanced
55How does QuickSight support embedding dashboards into external applications for customers or partners? AWS › Amazon QuickSight & Business IntelligenceAWSAmazon QuickSight & Business IntelligenceAdvanced
56What licensing and cost models are available for Amazon QuickSight, and how do they affect adoption across a large organization? AWS › Amazon QuickSight & Business IntelligenceAWSAmazon QuickSight & Business IntelligenceAdvanced
57What security controls are available to restrict who can publish to or subscribe from an SNS topic? AWS › Amazon SNS (Simple Notification Service)AWSAmazon SNS (Simple Notification Service)Advanced
58What security and privacy considerations should be addressed when using AI services that process sensitive text, images, or voice data? AWS › AWS AI Services (Rekognition, Polly, Lex & Comprehend)AWSAWS AI Services (Rekognition, Polly, Lex & Comprehend)Advanced
59What is AWS Certificate Manager Private Certificate Authority, and when would an organization use it instead of public certificates? AWS › AWS Certificate Manager (ACM)AWSAWS Certificate Manager (ACM)Advanced
60How can you use AWS CLI and SDK credential chains to securely manage access across local development, CI/CD pipelines, and production environments? AWS › AWS CLI & SDKsAWSAWS CLI & SDKsAdvanced
61How can you design a multi account CI/CD pipeline using CodePipeline that deploys the exact same build to separate development, staging, and production AWS accounts? AWS › AWS CodePipeline, CodeBuild & CodeDeploy (CI/CD)AWSAWS CodePipeline, CodeBuild & CodeDeploy (CI/CD)Advanced
62How does AWS Config aggregator support monitoring compliance across multiple AWS accounts and regions from a single place? AWS › AWS ConfigAWSAWS ConfigAdvanced
63How can AWS Budgets Actions automatically respond to spending thresholds being exceeded, beyond just sending an alert? AWS › AWS Cost Management & BillingAWSAWS Cost Management & BillingAdvanced
64How should a growing organization transition from a single AWS account setup to a proper multi account structure as their AWS usage matures? AWS › AWS Free Tier & Account SetupAWSAWS Free Tier & Account SetupAdvanced
65How does AWS's global infrastructure support meeting data residency and sovereignty requirements for regulated industries? AWS › AWS Global Infrastructure (Regions, AZs & Edge Locations)AWSAWS Global Infrastructure (Regions, AZs & Edge Locations)Advanced
66How does AWS CloudHSM differ from KMS, and when would an organization need the additional control it provides? AWS › AWS KMS & Data EncryptionAWSAWS KMS & Data EncryptionAdvanced
67How should an organization design its overall account structure and governance model to balance security isolation with developer agility and operational efficiency? AWS › AWS Organizations & Multi Account StrategyAWSAWS Organizations & Multi Account StrategyAdvanced
68How should an organization design its security and identity management approach for workloads running on AWS Outposts within its own data center? AWS › AWS Outposts & Hybrid CloudAWSAWS Outposts & Hybrid CloudAdvanced
69How can an organization enable GuardDuty and Security Hub consistently across every account in an AWS Organization using delegated administration? AWS › AWS Security Hub & GuardDutyAWSAWS Security Hub & GuardDutyAdvanced
70How does EC2 Nitro System architecture improve performance, security, and efficiency compared to older EC2 hypervisor based virtualization? AWS › EC2 & ComputeAWSEC2 & ComputeAdvanced