Task 4.1: Design, Implement, and Troubleshoot Authentication Strategies SCS-C03 Practice Questions (Page 3)

Questions 11–15

1. 11application · medium

   A company uses an on-premises SAML 2.0 identity provider (IdP) for workforce authentication. The company wants to migrate from IAM users to IAM Identity Center for AWS account access. The IdP has already been configured as a SAML provider in IAM. What is the next step to enable federated access through IAM Identity Center?

   • ACreate a new IAM role with a trust policy that allows the SAML provider to assume it, and configure the role's permissions.
   • BCreate an IAM Identity Center permission set that references the SAML provider and assign it to the AWS account.
   • CEnable IAM Identity Center and create a new user in the default identity store that matches the SAML IdP's user attributes.
   • DAdd the SAML 2.0 IdP as the identity source in IAM Identity Center and configure the IdP's metadata.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   A company plans to use AWS IAM Identity Center as the central identity source for its workforce. Which of the following is a valid identity source that can be configured in IAM Identity Center?

   • AAWS IAM users and groups
   • BThe IAM Identity Center built-in directory
   • CAWS Directory Service Simple AD
   • DAmazon Cognito user pools
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A presigned URL for an Amazon S3 object is generated with a validity period of 15 minutes. What happens when the URL expires?

   • AThe URL becomes publicly accessible
   • BThe URL automatically renews
   • CThe object is deleted from the bucket
   • DThe URL returns an Access Denied error
   Reveal Solution Discussion Select an answer first
5. 14foundation · easy

   A Windows EC2 instance is unable to authenticate to the AWS Managed Microsoft AD directory. Which of the following is a common cause of domain join failures?

   • AThe instance is using a different operating system
   • BThe instance is in a public subnet
   • CIncorrect DNS resolution for the directory
   • DThe instance does not have an IAM role
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   An organization uses an external identity provider that supports SAML 2.0. They want to allow federated users to assume IAM roles in AWS. Which AWS resource must be created to establish a trust relationship with the external IdP?

   • AIAM role with a SAML provider as the trust policy
   • BAWS Organizations SCP
   • CAmazon S3 bucket policy
   • DIAM user with a password policy
   Reveal Solution Discussion Select an answer first