Mock exam 1

1. When IAM policies are being evaluated for their logic of access, which two of the following statements are incorrect?
   1. Explicit denies are always overruled by an explicit allow.
   2. The order in which the policies are evaluated does not matter regarding the end result.
   3. Explicit allows are always overruled by an explicit deny.
   4. Access to all resources is denied by default until access is granted.
   5. Access to all resources is allowed by default until access is denied.
2. Your security team has been tasked with implementing a solution to monitor your EC2 fleet of instances. Upon review, you decide to implement Amazon Inspector. What are the three prerequisites that you would need to implement before using Amazon Inspector? (Choose three answers)
   1. Deploy Amazon Inspector agents to your EC2 fleet.
   2. Create an IAM service-linked role that allows Amazon Inspector to access your EC2 fleet.
   3. Create an assessment target group for your EC2 fleet.
   4. Deploy an Amazon Inspector log file to your EC2...