Which action is a security best practice for the AWS root user?

Store root user credentials in a shared team password manager

Enable MFA and use the root user only for tasks that require it

Create a second root user for backup access

Use the root user to create IAM users

A company has an EC2 instance that needs to access an S3 bucket to read and write data. The company wants to avoid storing long-term credentials on the instance. What should a solutions architect do?

Use AWS Secrets Manager to store the S3 credentials and have the instance retrieve them.

Create an S3 bucket policy that allows the EC2 instance's public IP address to access the bucket.

Create an IAM role with the necessary S3 permissions and attach it to the EC2 instance.

Create an IAM user with the necessary S3 permissions and store the access keys on the instance.

What is the recommended security best practice for the AWS account root user?

Use the root user for daily administrative tasks

Share the root user credentials with the IT team

Create access keys for the root user for programmatic access

Enable multi-factor authentication (MFA) on the root user

A company is migrating a legacy application to AWS. The application runs on an EC2 instance and stores data in an S3 bucket. The company's security team is concerned about who is responsible for patching the operating system of the EC2 instance. What should a solutions architect tell the security team?

AWS and the customer share responsibility for patching the operating system of the EC2 instance.

AWS is responsible for patching the operating system of the EC2 instance.

The customer is responsible for patching the operating system of the EC2 instance.

The responsibility depends on the specific EC2 instance type.

Which AWS service allows you to centrally manage multiple AWS accounts and apply service control policies?

AWS Identity and Access Management (IAM)

AWSCertified Solutions Architect - Associate

Domain 1Objective 1

Task 1.1: Design Secure Access to AWS Resources SAA-C03 Practice Questions (Page 5)

Part of the Design Secure Architectures domain, which makes up ~18% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 37 practice questions to prepare you well beyond it. (estimate)

37questions here

8free pages

14concepts

Questions 21–25

21foundation · easy
Which action is a security best practice for the AWS root user?
Select an answer first
22application · medium
A company has an EC2 instance that needs to access an S3 bucket to read and write data. The company wants to avoid storing long-term credentials on the instance. What should a solutions architect do?
Select an answer first
23foundation · easy
What is the recommended security best practice for the AWS account root user?
Select an answer first
24application · medium
A company is migrating a legacy application to AWS. The application runs on an EC2 instance and stores data in an S3 bucket. The company's security team is concerned about who is responsible for patching the operating system of the EC2 instance. What should a solutions architect tell the security team?
Select an answer first
25foundation · easy
Which AWS service allows you to centrally manage multiple AWS accounts and apply service control policies?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SAA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAA-C03” is a trademark of its owner, used for identification only.