What is the primary purpose of AWS Control Tower?

To provide a backup solution for EC2 instances

To provide a pre-configured environment for setting up and governing a multi-account AWS environment

To monitor application performance in real time

Which AWS service or feature can be used to enforce MFA for IAM users?

IAM policy with a condition that requires MFA

Under the AWS Shared Responsibility Model, which of the following is the customer responsible for when using Amazon EC2?

Securing the physical data center

Patching the guest operating system

Replacing failed hardware in the rack

What is the purpose of a Service Control Policy (SCP) in AWS Organizations?

To automatically grant permissions to all users in member accounts

To create IAM users in member accounts

To define the maximum permissions that member accounts can grant to their IAM principals

To manage the billing of all member accounts

AWSCertified Solutions Architect - Associate

Domain 1Objective 1

Task 1.1: Design Secure Access to AWS Resources SAA-C03 Practice Questions (Page 3)

Part of the Design Secure Architectures domain, which makes up ~18% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

14concepts

Questions 11–15

11foundation · easy
What is the primary purpose of AWS Control Tower?
Select an answer first
12foundation · easy
Which AWS service commonly uses resource-based policies to grant access to the resource itself?
Select an answer first
13foundation · easy
Which AWS service or feature can be used to enforce MFA for IAM users?
Select an answer first
14foundation · easy
Under the AWS Shared Responsibility Model, which of the following is the customer responsible for when using Amazon EC2?
Select an answer first
15foundation · easy
What is the purpose of a Service Control Policy (SCP) in AWS Organizations?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAA-C03” is a trademark of its owner, used for identification only.