An application needs to securely retrieve database credentials at runtime. Which AWS service should be integrated into the application to fetch these secrets?

AWS Key Management Service (KMS)

AWS Identity and Access Management (IAM)

A company is using AWS Organizations to manage multiple accounts. The security team wants to detect and respond to potential security threats across all accounts, including unusual API activity and compromised credentials. The team also wants to aggregate findings in a single dashboard. Which combination of services should the solutions architect implement?

Enable AWS WAF in the organization and use Amazon Detective to aggregate findings.

Enable Amazon Macie in the organization and use AWS Trusted Advisor to aggregate findings.

Enable Amazon GuardDuty in the organization and use AWS Security Hub to aggregate findings.

Enable AWS Config in the organization and use AWS CloudTrail to aggregate findings.

AWSCertified Solutions Architect - Associate

Domain 1Objective 2

Task 1.2: Design Secure Workloads and Applications SAA-C03 Practice Questions (Page 6)

Part of the Design Secure Architectures domain, which makes up ~18% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–15 in this domain), expect 3–5 from this objective — we provide 28 practice questions to prepare you well beyond it. (estimate)

28questions here

6free pages

10concepts

Questions 26–28

26foundation · easy
An application needs to securely retrieve database credentials at runtime. Which AWS service should be integrated into the application to fetch these secrets?
Select an answer first
27foundation · easy
A security engineer needs to filter traffic at the subnet level and explicitly allow or deny traffic based on source IP and port. Which AWS feature is designed for this?
Select an answer first
28expert · hard
A company is using AWS Organizations to manage multiple accounts. The security team wants to detect and respond to potential security threats across all accounts, including unusual API activity and compromised credentials. The team also wants to aggregate findings in a single dashboard. Which combination of services should the solutions architect implement?
Select an answer first

Finished these 3 questions?

Review the revealed explanations, or continue through the curriculum.

No more pagesBack to SAA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SAA-C03” is a trademark of its owner, used for identification only.

Task 1.2: Design Secure Workloads and Applications SAA-C03 Practice Questions (Page 6)

Questions 26–28

An application needs to securely retrieve database credentials at runtime. Which AWS service should be integrated into the application to fetch these secrets?

A security engineer needs to filter traffic at the subnet level and explicitly allow or deny traffic based on source IP and port. Which AWS feature is designed for this?

Keep studying — Design Secure Architectures