1. What is the proper definition of an IAM Role in AWS?

A) A security credential used to log in to the AWS Management Console.

B) A group of IAM users that share the same permissions.

C) A temporary identity with specific permissions that can be assumed by AWS services or users.

D) A JSON document that defines permissions for an AWS resource.

✅ Correct Answer: C – IAM Roles provide temporary security credentials that allow users or AWS services to assume permissions without needing long-term access keys.

2. Which of the following is an IAM security tool in AWS?

A) AWS CloudFormation

B) IAM Access Advisor

C) Amazon RDS

D) AWS Auto Scaling

✅ Correct Answer: B – IAM Access Advisor helps you analyze the permissions granted to users and roles by showing when they were last used, assisting in permission audits.

3. Which of the following statements about IAM Users is INCORRECT?

A) IAM users can be assigned to multiple IAM groups.

B) IAM users must have an access key and secret key to log in to the AWS Management Console.

C) IAM users can be assigned permissions through IAM policies.

D) IAM users can assume IAM roles if granted appropriate permissions.

✅ Correct Answer: B – IAM users log in to the AWS Management Console using a username and password, not an access key and secret key (which are used for API and CLI access).