Permission Boundaries Quiz

5 questions • Pass: 70% • +25 pts

Quiz covering IAM Policies

Permission Boundaries Quiz

5 questions | Pass: 70% | Earn 25 points

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

  1. 1

    What is the primary purpose of an IAM permission boundary?

  2. 2

    If an IAM user has an identity-based policy allowing 's3:*' but a permission boundary that only allows 's3:ListBucket', what is the effective permission?

  3. 3

    Which of the following statements is true regarding how permission boundaries interact with SCPs (Service Control Policies)?

  4. 4

    An IAM user has an identity-based policy that denies 's3:DeleteBucket'. The user also has a permission boundary that allows 's3:*'. What is the result of a request to delete a bucket?

  5. 5

    You want to delegate the ability to create IAM users to a junior administrator but ensure they cannot grant themselves or others more permissions than they currently have. How do you achieve this?