AWS SAA-C03 Practice Exam 4

A company has multiple AWS accounts in an AWS Organizations organization. The security team wants to ensure that no user or role in any member account can disable AWS CloudTrail. <br/><br/>Which solution is the MOST secure and requires the LEAST operational overhead?

An application running on Amazon EC2 instances needs to access an Amazon DynamoDB table. Both resources are in the same AWS account. <br/><br/>What is the MOST secure way to grant the EC2 instances access to the DynamoDB table?

A company is designing a web application that will be hosted on AWS. The application will use an Application Load Balancer (ALB) and Amazon EC2 instances in an Auto Scaling group. The company wants to protect the application from SQL injection and cross-site scripting (XSS) attacks. <br/><br/>Which TWO actions should a solutions architect take to meet these requirements? (Select TWO.)

A company is building a mobile app that requires users to authenticate using their social media accounts (Google, Facebook). Once authenticated, the app needs to directly access an Amazon S3 bucket to upload profile pictures. <br/><br/>Which combination of AWS services should the solutions architect use to provide this functionality MOST securely?

A solutions architect is designing a VPC for a three-tier web application. The database tier must be completely isolated from the internet. The application tier needs to download software updates from the internet but should not accept incoming internet connections. <br/><br/>How should the subnets be configured?