ExamPark
Course menuCLF-C02

Exams / CLF-C02 / IAM users, groups and policies / Question 2

CLF-C02 practice question: IAM users, groups and policies (2 of 2)

Security and Compliance A free question from our original CLF-C02 practice exam. Try it, then open the answer to see why each option is right or wrong.

Last verified against current AWS documentation ·How we write our questions

An auditor asks for one file that lists every IAM user in a single AWS account, showing whether each user has MFA turned on and when each user's access keys were last rotated.

The file must open in a spreadsheet.

What is the quickest way to provide it?

Choose one answer.

  1. A. Run IAM Access Analyzer and export its findings for the account
  2. B. Export the last-accessed data from IAM Access Advisor for each user
  3. C. Download the AWS Artifact report for the account from the console
  4. D. Generate and download the IAM credential report as a CSV file
Show the answer and explanation

Answer: D

  • A. Wrong: Access Analyzer finds resources shared with outside accounts. It does not list MFA status or key rotation dates for each user.
  • B. Wrong: Access Advisor shows which services a user or role has used and when. It does not show MFA status or when access keys were rotated.
  • C. Wrong: AWS Artifact provides AWS's own compliance reports and agreements, not details about the customer's IAM users.
  • D. Right: Correct. The credential report lists every IAM user in the account, with columns for MFA status and access key rotation dates. It downloads as a CSV file that opens in a spreadsheet. Learn more: Generate credential reports for your AWS account (opens in a new tab)

Explanation

The IAM credential report is generated per account and downloaded as a CSV file. It lists every IAM user with columns such as mfa_active and access_key_1_last_rotated, which is what the auditor needs. The other options answer different questions: Access Analyzer finds shared resources, Access Advisor shows service use, and Artifact holds AWS's own compliance documents.

Study

Keep practicing

Answer questions with a score at the end, or practice just this topic with the explanation after each one. No sign-up needed.

Take the free CLF-C02 practice examPractice IAM users, groups and policiesAll IAM users, groups and policies questions

Want more on IAM users, groups and policies? The 5 full-length practice sets have 10 more IAM users, groups and policies questions, 325 in all, none of them in the free exam. One payment of $14.99, no subscription. See the practice sets