A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application. Which AWS service provides this functionality?
Correct Answer: D
Question 127
An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region. How should the company respond to the auditor's request?
Correct Answer: D
AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA). You can use AWS Artifact to download the applicable report for AWS security controls and provide it to the auditor.
Question 128
A company wants to allow users to authenticate and authorize multiple AWS accounts by using a single set of credentials. Which AWS service or resource will meet this requirement?
Correct Answer: C
AWS IAM Identity Center (AWS Single Sign-On) is a cloud-based service that makes it easy to centrally manage single sign-on (SSO) access to multiple AWS accounts and business applications. You can use AWS SSO to enable your users to sign in to the AWS Management Console or the AWS Command Line Interface (AWS CLI) with their existing corporate credentials2. You can also manage SSO access and user permissions across all your AWS accounts in AWS Organizations3. Reference: AWS Single Sign-On - AWS Documentation, AWS Organizations - AWS Documentation
Question 129
A company wants to migrate its applications to the AWS Cloud. The company plans to identity and prioritize any business transformation opportunities and evaluate its AWS Cloud readiness. Which AWS service or tool should the company use to meet these requirements?
Correct Answer: A
AWS Cloud Adoption Framework (AWS CAF) is a set of best practices, tools, and guidance that helps organizations get started with cloud technologies. AWS CAF helps organizations identify and prioritize transformation opportunities, evaluate and improve their cloud readiness, and iteratively evolve their transformation roadmap. AWS CAF groups its capabilities in six perspectives: Business, People, Governance, Platform, Security, and Operations. Each perspective comprises a set of capabilities that functionally related stakeholders own or manage in the cloud transformation journey1 AWS Managed Services (AMS) is a service that operates AWS infrastructure on behalf of customers, providing a secure AWS Landing Zone, features that help meet various compliance program requirements, a proven enterprise operating model, on-going cost optimization, and day-to-day infrastructure management. AMS does not help customers identify and prioritize business transformation opportunities or evaluate their cloud readiness2 AWS Well-Architected Framework is a set of six pillars and lenses that help cloud architects design and run workloads in the cloud. It provides a consistent approach for customers and AWS Partners to evaluate and implement designs that scale with their needs. AWS Well-Architected Framework helps customers understand the pros and cons of decisions they make while building systems on AWS, but it does not help them identify and prioritize business transformation opportunities3 AWS Migration Hub is a tool that lets customers discover, plan, and track their existing servers and applications for migration to AWS. It offers journey templates, cross-team collaboration, application and server discovery, strategy recommendations, orchestration and simple dashboard. AWS Migration Hub simplifies the migration and modernization process, but it does not help customers identify and prioritize business transformation opportunities or evaluate their cloud readiness4 References: 1: AWS Cloud Adoption Framework 2: Cloud Management Services - AWS Managed Services - AWS 3: AWS Well-Architected - Build secure, efficient cloud applications 4: Cloud Inventory Management - AWS Migration Hub - AWS
Question 130
Which of the following is a benefit of decoupling an AWS Cloud architecture?
Correct Answer: B
A benefit of decoupling an AWS Cloud architecture is the ability to upgrade components independently. Decoupling is a way of designing systems to reduce interdependencies and minimize the impact of changes. Decoupling allows components to interact with each other through well-defined interfaces, rather than direct references. This reduces the risk of failures and errors propagating across the system, and enables greater scalability, availability, and maintainability. By decoupling an AWS Cloud architecture, the user can upgrade or modify one component without affecting the other components5.
