An EC2 instance needs to access an S3 bucket. What is the recommended way to grant the instance permissions without storing long-term credentials on the instance?

Use the root account credentials

Attach an IAM role to the EC2 instance

Create an IAM user and store access keys on the instance

Create an IAM group and add the instance to it

A company's security policy requires that IAM user passwords be at least 14 characters, contain uppercase, lowercase, numbers, and symbols, and expire every 90 days. The security team must enforce this for all IAM users in the account. What should they configure?

An SCP that requires password complexity for all IAM users.

An AWS Config rule that checks password complexity.

An IAM role that users must assume to change their passwords.

An IAM password policy with the required complexity and expiration settings.

AWSCertified CloudOps Engineer - Associate

Domain 4Objective 1

Task 4.1: Implement and Manage Security and Compliance Tools and Policies. SOA-C03 Practice Questions (Page 1)

Part of the Content Domain 4: Security and Compliance domain, which makes up ~17% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

16concepts

16 Concepts in This Objective

IAM Password Policies
Multi-Factor Authentication (MFA)
IAM Roles
Federated Identity
Resource Policies
Policy Conditions
AWS CloudTrail for Auditing
IAM Access Analyzer
IAM Policy Simulator
AWS Organizations
Service Control Policies (SCPs)
IAM Identity Center
Trusted Advisor Security Checks
Remediation Strategies
Region and Service Selection
AWS Config Conformance Packs

Questions 1–5

1foundation · easy
Which AWS Config feature allows you to deploy a collection of managed rules and remediation actions as a single package to enforce compliance across your AWS environment?
Select an answer first
2foundation · easy
An EC2 instance needs to access an S3 bucket. What is the recommended way to grant the instance permissions without storing long-term credentials on the instance?
Select an answer first
3application · medium
A company's security policy requires that IAM user passwords be at least 14 characters, contain uppercase, lowercase, numbers, and symbols, and expire every 90 days. The security team must enforce this for all IAM users in the account. What should they configure?
Select an answer first
4foundation · easy
Which type of policy is used in AWS Organizations to restrict the maximum permissions that can be granted to IAM users and roles in member accounts?
Select an answer first
5foundation · easy
Which AWS service provides security checks and recommendations, such as whether MFA is enabled on the root account or whether S3 buckets are publicly accessible?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.

Task 4.1: Implement and Manage Security and Compliance Tools and Policies. SOA-C03 Practice Questions (Page 1)

Questions 1–5

Which AWS Config feature allows you to deploy a collection of managed rules and remediation actions as a single package to enforce compliance across your AWS environment?

An EC2 instance needs to access an S3 bucket. What is the recommended way to grant the instance permissions without storing long-term credentials on the instance?

A company's security policy requires that IAM user passwords be at least 14 characters, contain uppercase, lowercase, numbers, and symbols, and expire every 90 days. The security team must enforce this for all IAM users in the account. What should they configure?

Which type of policy is used in AWS Organizations to restrict the maximum permissions that can be granted to IAM users and roles in member accounts?

Which AWS service provides security checks and recommendations, such as whether MFA is enabled on the root account or whether S3 buckets are publicly accessible?

Keep studying — Content Domain 4: Security and Compliance