Which identity provider can be integrated with IAM Identity Center for federated access?

Microsoft Active Directory (on-premises)

Any SAML 2.0-compatible identity provider

A company has an S3 bucket that contains sensitive data. The company wants to allow a specific IAM role from another AWS account to read objects in the bucket. The company does not want to create IAM users in the bucket's account. What should a solutions architect do?

Create an IAM user in the bucket's account and share the access keys with the other account.

Use AWS Organizations to automatically grant the IAM role from the other account access to the bucket.

Create an IAM role in the bucket's account and allow the IAM role from the other account to assume it.

Create an S3 bucket policy that grants the s3:GetObject permission to the IAM role from the other account.

A company has an existing on-premises Active Directory and wants to allow its employees to access AWS resources using their corporate credentials. The company also wants to enforce MFA for all AWS access. What should a solutions architect do?

Create IAM users for each employee and enable MFA on each IAM user.

Set up a SAML 2.0 federation between the on-premises Active Directory and IAM, and configure the identity provider to require MFA.

Use AWS Directory Service to create a new managed Active Directory and migrate all users to it.

Create an IAM role for each employee and configure the Active Directory to assume the role.

What is the purpose of AWS IAM Identity Center (successor to AWS SSO)?

To replace AWS CloudTrail for logging

To provide a centralized place to manage access to multiple AWS accounts and business applications

To manage EC2 instance lifecycle

What is the primary benefit of using IAM roles instead of IAM users with long-term access keys for an application running on EC2?

Roles eliminate the need to manage and rotate long-term access keys

Roles allow the application to access any AWS account

Roles provide permanent credentials that never expire

Roles provide a static password for the application

AWSCertified Solutions Architect - Associate

Domain 1Objective 1

Task 1.1: Design Secure Access to AWS Resources SAA-C03 Practice Questions (Page 2)

Part of the Design Secure Architectures domain, which makes up ~18% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

14concepts

Questions 6–10

6foundation · easy
Which identity provider can be integrated with IAM Identity Center for federated access?
Select an answer first
7application · medium
A company has an S3 bucket that contains sensitive data. The company wants to allow a specific IAM role from another AWS account to read objects in the bucket. The company does not want to create IAM users in the bucket's account. What should a solutions architect do?
Select an answer first
8expert · hard
A company has an existing on-premises Active Directory and wants to allow its employees to access AWS resources using their corporate credentials. The company also wants to enforce MFA for all AWS access. What should a solutions architect do?
Select an answer first
9foundation · easy
What is the purpose of AWS IAM Identity Center (successor to AWS SSO)?
Select an answer first
10foundation · easy
What is the primary benefit of using IAM roles instead of IAM users with long-term access keys for an application running on EC2?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAA-C03” is a trademark of its owner, used for identification only.