ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 574 - SAP-C01 discussion

Report
Export

A company’s AWS architecture currently uses access keys and secret access keys stored on each instance to access AWS services. Database credentials are hard-coded on each instance. SSH keys for command-line remote access are stored in a secured Amazon S3 bucket. The company has asked its solutions architect to improve the security posture of the architecture without adding operational complexity. Which combination of steps should the solutions architect take to accomplish this? (Choose three.)

A.
Use Amazon EC2 instance profiles with an IAM role
Answers
A.
Use Amazon EC2 instance profiles with an IAM role
B.
Use AWS Secrets Manager to store access keys and secret access keys
Answers
B.
Use AWS Secrets Manager to store access keys and secret access keys
C.
Use AWS Systems Manager Parameter Store to store database credentials
Answers
C.
Use AWS Systems Manager Parameter Store to store database credentials
D.
Use a secure fleet of Amazon EC2 bastion hosts for remote access
Answers
D.
Use a secure fleet of Amazon EC2 bastion hosts for remote access
E.
Use AWS KMS to store database credentials
Answers
E.
Use AWS KMS to store database credentials
F.
Use AWS Systems Manager Session Manager for remote access
Answers
F.
Use AWS Systems Manager Session Manager for remote access
Suggested answer: A, B, D
asked 16/09/2024
Scott Wells
38 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first