Tech SkillsSecurity

IAM Least Privilege Question Explained

This worked AWS Cloud Fundamentals practice question tests Security. Try the answer first, then review why B is the best choice.

Short answer

The correct answer is B. Grant only the permissions required for the task.

Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised. The key is to match the exact action in the prompt to the tool, command, or concept that performs that action directly. Here, B. Grant only the permissions required for the task is the only option that satisfies the scenario without adding unrelated behavior.

The Question

What does least privilege mean in IAM?

AGrant every user AdministratorAccess
BGrant only the permissions required for the taskCorrect
CShare root credentials with trusted teammates
DUse one access key for all apps

Why B is correct

Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised. The key is to match the exact action in the prompt to the tool, command, or concept that performs that action directly. Here, B. Grant only the permissions required for the task is the only option that satisfies the scenario without adding unrelated behavior.

Why the other options are wrong

Option A: Grant every user AdministratorAccess

Option A does not match the requirement in the prompt. The correct answer is B because Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised.

Option C: Share root credentials with trusted teammates

Option C does not match the requirement in the prompt. The correct answer is B because Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised.

Option D: Use one access key for all apps

Option D does not match the requirement in the prompt. The correct answer is B because Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised.

Key idea: Security

Security questions test whether you can connect a common workflow problem to the right practical command, service, or concept. Instead of memorizing isolated definitions, look for the job being done in the prompt: staging a file, querying rows, running code, persisting container data, checking a service, or choosing the right cloud building block. The best answer usually names the simplest tool that performs that job directly. For AWS Cloud Fundamentals, the safest study pattern is to read the scenario, underline the action verb, and eliminate answers that solve a different problem. If an option sounds related but changes the scope, adds risk, or describes a different layer of the stack, it is probably a distractor. After choosing an answer, explain why the other three fail; that habit builds the practical judgment these quizzes are meant to measure.

Ready to test the full skill?

Take the free AWS Cloud Fundamentals quiz and find the exact basics to review next. No signup required.

Practice related questions

Same skill area or adjacent concept. Use these after reviewing the explanation.

Related AWS Cloud Fundamentals Practice Questions