IAM Least Privilege Question Explained
This worked AWS Cloud Fundamentals practice question tests Security. Try the answer first, then review why B is the best choice.
Short answer
The correct answer is B. Grant only the permissions required for the task.
Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised. The key is to match the exact action in the prompt to the tool, command, or concept that performs that action directly. Here, B. Grant only the permissions required for the task is the only option that satisfies the scenario without adding unrelated behavior.
The Question
What does least privilege mean in IAM?
Why B is correct
Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised. The key is to match the exact action in the prompt to the tool, command, or concept that performs that action directly. Here, B. Grant only the permissions required for the task is the only option that satisfies the scenario without adding unrelated behavior.
Why the other options are wrong
Option A does not match the requirement in the prompt. The correct answer is B because Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised.
Option C does not match the requirement in the prompt. The correct answer is B because Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised.
Option D does not match the requirement in the prompt. The correct answer is B because Least privilege means identities receive only the actions and resources they need. It reduces blast radius when credentials or applications are compromised.
Key idea: Security
Security questions test whether you can connect a common workflow problem to the right practical command, service, or concept. Instead of memorizing isolated definitions, look for the job being done in the prompt: staging a file, querying rows, running code, persisting container data, checking a service, or choosing the right cloud building block. The best answer usually names the simplest tool that performs that job directly. For AWS Cloud Fundamentals, the safest study pattern is to read the scenario, underline the action verb, and eliminate answers that solve a different problem. If an option sounds related but changes the scope, adds risk, or describes a different layer of the stack, it is probably a distractor. After choosing an answer, explain why the other three fail; that habit builds the practical judgment these quizzes are meant to measure.
Ready to test the full skill?
Take the free AWS Cloud Fundamentals quiz and find the exact basics to review next. No signup required.
Practice related questions
Same skill area or adjacent concept. Use these after reviewing the explanation.