Troubleshooting IAM Conflicts Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering IAM Policies and Permissions

Troubleshooting IAM Conflicts Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    In AWS IAM, if a user has an Allow policy and a Deny policy applied to them for the same action, which one takes precedence?

  2. 2

    A developer is unable to access an S3 bucket despite having an IAM policy that grants 's3:ListBucket'. What is the most likely cause if no explicit deny exists?

  3. 3

    An IAM user is a member of two groups. Group A has a policy allowing access to DynamoDB, and Group B has a policy denying access to DynamoDB. What is the user's effective permission?

  4. 4

    You have an IAM user with a policy that allows 'ec2:StartInstances' for a specific instance ID. You also have a Service Control Policy (SCP) at the Organization level that denies 'ec2:StartInstances' for all users. Can the user start the instance?

  5. 5

    A user is assigned an IAM policy that allows 's3:*' and a Permission Boundary that only allows 's3:ListBucket'. When the user attempts to 's3:PutObject', what is the result?