Task 6.1: Develop a Strategy to Centrally Deploy and Manage AWS Accounts SCS-C03 Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   What is a recommended strategy for managing root user credentials for member accounts in an organization?

   • AUse the same password for all root users to simplify management.
   • BUse AWS Secrets Manager to centrally store and rotate root user passwords.
   • CDisable the root user for all member accounts.
   • DStore the root user passwords in a shared spreadsheet accessible to all administrators.
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   Which type of MFA device is commonly recommended for root user accounts in member accounts?

   • AHardware MFA device (e.g., YubiKey)
   • BSMS text message
   • CVirtual MFA device on a smartphone
   • DEmail-based one-time password
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   What is the effect of a service control policy (SCP) on IAM permissions in an AWS account?

   • AIt only applies to the root user, not IAM users.
   • BIt restricts the maximum permissions that IAM users and roles can have.
   • CIt replaces IAM policies for all users and roles.
   • DIt grants additional permissions to IAM users and roles.
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A company wants to enforce a specific configuration for Amazon S3 buckets across all accounts in its AWS Organization. The configuration requires that all S3 buckets have versioning enabled and that encryption is enforced. The company wants to use a policy that is centrally managed and automatically enforced. Which policy type should they use?

   • AService control policy (SCP) that denies s3:PutBucketVersioning and s3:PutEncryptionConfiguration.
   • BDeclarative policy that specifies the required S3 bucket configuration.
   • CResource control policy (RCP) that requires versioning and encryption on S3 buckets.
   • DAWS Config rule with auto-remediation that enables versioning and encryption.
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which AWS resource can be controlled by a resource control policy (RCP)?

   • AOrganizational unit
   • BAWS account
   • CIAM role
   • DAmazon S3 bucket
   Reveal Solution Discussion Select an answer first