A company's Trusted Advisor dashboard shows a red check for 'IAM Use' indicating that IAM users have not been used in the last 90 days. The security team wants to remediate this finding by removing unused IAM users. Before deleting them, what should they do to ensure the users are not needed?

Disable the users' access keys and wait for a week.

Review CloudTrail logs to confirm there is no recent API activity from these users.

Use the IAM Policy Simulator to test the users' permissions.

Immediately delete the users because Trusted Advisor flagged them.

A company requires all IAM users to use MFA. The security team wants to enforce this by denying any API action if the user has not authenticated with MFA. Which IAM policy element should be used?

A condition in the IAM policy that checks aws:MultiFactorAuthPresent is true.

A resource policy on each AWS resource that requires MFA.

An IAM password policy that requires MFA to be enabled.

An SCP that requires MFA for all users in the organization.

Which AWS feature adds an extra layer of security by requiring a user to provide a one-time code from a hardware device or virtual app in addition to their password?

Multi-Factor Authentication (MFA)

AWSCertified CloudOps Engineer - Associate

Domain 4Objective 1

Task 4.1: Implement and Manage Security and Compliance Tools and Policies. SOA-C03 Practice Questions (Page 6)

Part of the Content Domain 4: Security and Compliance domain, which makes up ~17% of our current practice bank. AWS does not publish an official question count, but from its 130-minute exam (~50–85 total, ~9–14 in this domain), expect 5–7 from this objective — we provide 36 practice questions to prepare you well beyond it. (estimate)

36questions here

8free pages

16concepts

16 Concepts in This Objective

IAM Password Policies
Multi-Factor Authentication (MFA)
IAM Roles
Federated Identity
Resource Policies
Policy Conditions
AWS CloudTrail for Auditing
IAM Access Analyzer
IAM Policy Simulator
AWS Organizations
Service Control Policies (SCPs)
IAM Identity Center
Trusted Advisor Security Checks
Remediation Strategies
Region and Service Selection
AWS Config Conformance Packs

Questions 26–30

26foundation · easy
Which IAM entity is designed to be assumed by an AWS service, application, or user to obtain temporary permissions?
Select an answer first
27foundation · easy
Which AWS service provides a centralized place to manage single sign-on (SSO) and user access to multiple AWS accounts and business applications?
Select an answer first
28application · medium
A company's Trusted Advisor dashboard shows a red check for 'IAM Use' indicating that IAM users have not been used in the last 90 days. The security team wants to remediate this finding by removing unused IAM users. Before deleting them, what should they do to ensure the users are not needed?
Select an answer first
29application · medium
A company requires all IAM users to use MFA. The security team wants to enforce this by denying any API action if the user has not authenticated with MFA. Which IAM policy element should be used?
Select an answer first
30foundation · easy
Which AWS feature adds an extra layer of security by requiring a user to provide a one-time code from a hardware device or virtual app in addition to their password?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SOA-C03

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by AWS. “SOA-C03” is a trademark of its owner, used for identification only.

Task 4.1: Implement and Manage Security and Compliance Tools and Policies. SOA-C03 Practice Questions (Page 6)

Questions 26–30

Which IAM entity is designed to be assumed by an AWS service, application, or user to obtain temporary permissions?

Which AWS service provides a centralized place to manage single sign-on (SSO) and user access to multiple AWS accounts and business applications?

A company's Trusted Advisor dashboard shows a red check for 'IAM Use' indicating that IAM users have not been used in the last 90 days. The security team wants to remediate this finding by removing unused IAM users. Before deleting them, what should they do to ensure the users are not needed?

A company requires all IAM users to use MFA. The security team wants to enforce this by denying any API action if the user has not authenticated with MFA. Which IAM policy element should be used?

Which AWS feature adds an extra layer of security by requiring a user to provide a one-time code from a hardware device or virtual app in addition to their password?

Keep studying — Content Domain 4: Security and Compliance