MENU
A DevOps engineer at a company is supporting an AWS environment in which all users use AWS IAM Identity Center (AWS Single Sign-On). The company wants to immediately disable credentials of any new IAM user and wants the security team to receive a notification.
Which combination of steps should the DevOps engineer take to meet these requirements? (Choose three.)
Suggested Answer: A, C, E
Get Premium DOP-C02 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
12 comments · newest first
CA
Carylon
11 months ago
I think the Lambda function should disable access keys too, right?
CH
Chanel
12 months ago
SNS for notifications is a must! Good call.
MO
Mozelle
12 months ago
Wait, can you really delete login profiles like that? Seems risky.
WY
Wynell
1 year ago
Totally agree, that's the way to go!
CO
Coleen
1 year ago
Gotta use EventBridge for the CreateUser API call!
WI
Wilda
1 year ago
I’m a bit confused about the login profiles. Do we need to delete them as well? I think option D could be relevant, but I’m not completely certain.
EL
Eloisa
1 year ago
I practiced a similar question, and I think we need to notify the security team too. So, option E seems like a good choice for that.
LE
Lelia
1 year ago
I'm not entirely sure, but I feel like we should also disable access keys when a new user is created. That makes me lean towards option C.
DO
Dominga
1 year ago
I remember that we need to react to the CreateUser API call, so I think option A is definitely one of the steps.
JO
Joni
1 year ago
Okay, I've got a good handle on this. The key is to identify the right error handling mechanism based on the specific scenario described in the question. I think option B is the best approach, as it directly addresses the issue of handling errors in the Verification Webservice API.
ME
Melvin
1 year ago
The exam question reminds me of a practice question we had on performance metrics. I remember payload being one of the choices.
VA
Val
1 year ago
I'm a little confused by the options here. I don't think the duration of security violations or the cost per incident are the most important things to include. The focus should really be on the regulatory requirements and how the service provider will comply with them.