Identify AWS access management capabilities.
10 practice questions under this official exam objective (CLF-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
10 total · page 1 of 1Which AWS Service Provides a SAML 2.0 SSO Portal for Third-Party Apps?
AWS IAM Identity Center (formerly AWS Single Sign-On) is the workforce single sign-on service that gives users one portal for third-party business app
Which AWS tool audits password and access key rotation?
The IAM credential report is the AWS tool that produces an auditable, downloadable CSV of every IAM user's password age, password last-used date, acce
Which AWS service federates a third-party IdP for employee AWS access?
When employees must reach AWS accounts and services with their existing third-party IdP credentials, AWS IAM Identity Center (the successor to AWS SSO
AWS IAM Identity Center for Centralized Workforce Access
AWS IAM Identity Center (formerly AWS SSO) is the service designed for centrally managing workforce user access across multiple AWS accounts and appli
When to Create an IAM User Instead of an IAM Role
This CLF-C02 question tests which scenario calls for an IAM user rather than an IAM role in AWS identity design. It establishes that issuing long-term
AWS STS for Temporary Federated Credentials
This question identifies AWS Security Token Service (STS) as the correct service for issuing temporary, limited-privilege security credentials to fede
Which security feature must be provisioned for AWS CLI access?
The AWS CLI authenticates programmatic requests with an AWS access key — an access key ID paired with a secret access key — rather than a console user
Which AWS Service Provides a Portal for Assigned AWS Accounts and SaaS Apps?
AWS IAM Identity Center (AWS Single Sign-On) is the service for centrally managing workforce access to assigned AWS accounts and third-party SaaS appl
Which AWS Service Enables Single Sign-On Across Multiple AWS Accounts?
AWS IAM Identity Center (AWS Single Sign-On) is the service that lets users authenticate once and be authorized across many AWS accounts with one set
Which AWS Service Lets You Grant Permissions to Users as a Group?
AWS Identity and Access Management (IAM) is the service that lets a company organize users into IAM groups and attach permissions to the group rather