GIAC GCFR Exam - Topic 13 Question 34 Discussion

Actual exam question for GIAC's GCFR exam

Question #: 34
Topic #: 13

[All GCFR Questions]

Which AWS authentication method provides temporary, limited privilege credentials for 1AM users or federated users?

AlAMRole

BAPI Key

CSAML Token

Show Suggested Answer

Suggested Answer: A

by Lettie at Nov 18, 2024, 06:12 AM

Limited Time Offer

25%

Off

Get Premium GCFR Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Billy

8 months ago

Really? I didn't know that!

upvoted 0 times

...

Tonja

9 months ago

Nope, IAM Roles are the way to go!

upvoted 0 times

...

Loise

9 months ago

Wait, are you sure? I thought SAML Tokens were for that.

upvoted 0 times

...

Kenneth

9 months ago

Agreed, it's all about those temporary credentials.

upvoted 0 times

...

Albina

9 months ago

Definitely IAM Role!

upvoted 0 times

...

Arlen

9 months ago

I’m a bit confused; I thought SAML tokens were for authentication, not for providing temporary credentials.

upvoted 0 times

...

Rodrigo

10 months ago

I'm leaning towards IAM Role too, but I feel like API Keys could also be relevant in some contexts.

upvoted 0 times

...

Inocencia

10 months ago

I remember practicing a question about federated users, and I think it mentioned SAML tokens, but that doesn't sound like temporary credentials.

upvoted 0 times

...

Skye

10 months ago

I think the answer might be IAM Role, but I'm not completely sure. It seems like the right choice for temporary credentials.

upvoted 0 times

...

Dona

10 months ago

Okay, I've got this. The key is that the question is asking about a method that provides temporary, limited-privilege credentials. That sounds like IAM roles to me, so I'll select option A.

upvoted 0 times

...

Bernadine

10 months ago

I'm a bit confused by the wording of this question. Is it asking about IAM users or federated users? I'll have to re-read it a few times to make sure I understand.

upvoted 0 times

...

Brice

10 months ago

Ah, I remember learning about this in class. AWS IAM roles are the way to go for temporary, limited credentials. Option A is the correct answer.

upvoted 0 times

...

Chery

10 months ago

Hmm, I'm a bit unsure about this one. I know AWS has different authentication methods, but I can't quite remember the specifics. I'll have to think this through carefully.

upvoted 0 times

...

Yen

10 months ago

I'm pretty sure this is asking about AWS IAM roles, which provide temporary, limited-privilege credentials for IAM users or federated users. I'll go with option A.

upvoted 0 times

...

Sabina

1 year ago

I'm just glad they didn't ask about AWS's sense of humor. Apparently, it's not the best, but at least they have one. Unlike my bad puns.

upvoted 0 times

Penney

1 year ago

A) lAMRole

upvoted 0 times

...

Adelina

1 year ago

C) SAML Token

upvoted 0 times

...

Mona

1 year ago

A) lAMRole

upvoted 0 times

...

Alfreda

1 year ago

Option C is the way to go. I mean, who doesn't love a good SAML Token? It's like the secret handshake of the AWS world.

upvoted 0 times

Peggie

1 year ago

I agree, SAML Tokens make authentication so much easier for 1AM and federated users.

upvoted 0 times

...

Bernardo

1 year ago

Definitely! SAML Tokens are the best for providing temporary credentials.

upvoted 0 times

...

Elenora

1 year ago

C) SAML Token

upvoted 0 times

...

Tess

1 year ago

Hmm, this one's tricky. I was hoping for a multiple-choice question on AWS storage services. At least this doesn't have any 'trick' answers like 'All of the above'.

upvoted 0 times

Royal

1 year ago

C) SAML Token

upvoted 0 times

...

Glennis

1 year ago

B) API Key

upvoted 0 times

...

Olen

1 year ago

A) lAMRole

upvoted 0 times

...

Verda

1 year ago

Definitely C. IAM Roles are for granting long-term permissions, not temporary ones. And API Keys are for programmatic access, not federated identity.

upvoted 0 times

...

Rikki

1 year ago

I think the correct answer is Option C, SAML Token. That's the only one that provides temporary, limited privilege credentials for IAM users or federated users.

upvoted 0 times