Amazon SAP-C02 Exam - Topic 1 Question 24 Discussion

Actual exam question for Amazon's SAP-C02 exam

Question #: 24
Topic #: 1

A financial company needs to create a separate AWS account for a new digital wallet application. The company uses AWS Organizations to manage its accounts. A solutions architect uses the 1AM user Supportl from the management account to create a new member account with finance1@example.com as the email address.

What should the solutions architect do to create IAM users in the new member account?

ASign in to the AWS Management Console with AWS account root user credentials by using the 64-character password from the initial AWS Organizations email senttofinance1@example.com. Set up the IAM users as required.

BFrom the management account, switch roles to assume the OrganizationAccountAccessRole role with the account ID of the new member account. Set up the IAM users as required.

CGo to the AWS Management Console sign-in page. Choose 'Sign in using root account credentials.' Sign in in by using the email address finance1@example.com and the management account's root password. Set up the IAM users as required.

DGo to the AWS Management Console sign-in page. Sign in by using the account ID of the new member account and the Supportl IAM credentials. Set up the IAM users as required.

Show Suggested Answer

Suggested Answer: D

The best solution is to turn on the Concurrency Scaling feature for the Amazon Redshift cluster. This feature allows the cluster to automatically add additional capacity to handle bursts of read queries without affecting the performance of write queries. The additional capacity is transparent to the users and is billed separately based on the usage. This solution meets the business requirements of servicing read and write queries at all times and is also cost-effective compared to the other options, which involve provisioning additional resources or resizing the cluster.Reference:Amazon Redshift Documentation,Concurrency Scaling in Amazon Redshift

by Gilma at Feb 13, 2024, 01:21 AM

Limited Time Offer

25%

Off

Get Premium SAP-C02 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Louann

3 months ago

D is confusing, why not just use the console directly?

upvoted 0 times

...

Noemi

3 months ago

Wait, can you really use the management account's root password for that?

upvoted 0 times

...

Trina

3 months ago

C sounds a bit risky, using root for everything isn't ideal.

upvoted 0 times

...

Sommer

4 months ago

I think A is safer since it uses root credentials.

upvoted 0 times

...

Kristine

4 months ago

Option B seems like the best choice for assuming roles.

upvoted 0 times

...

Jade

4 months ago

I feel like option D could work since it mentions using IAM credentials, but I’m not sure if the Support1 user has the right permissions to create IAM users in the new account.

upvoted 0 times

...

Maile

4 months ago

I practiced a similar question where we had to assume roles to manage accounts. I think option B aligns with that practice, but I need to double-check the specifics about the OrganizationAccountAccessRole.

upvoted 0 times

...

Felix

4 months ago

I'm a bit unsure about the root user part. I thought we shouldn't use root accounts for daily tasks, but option A and C both mention using root credentials.

upvoted 0 times

...

Virgilio

5 months ago

I remember that we discussed the importance of using roles instead of root credentials for security reasons. So, I think option B might be the right choice.

upvoted 0 times

...

Tresa

5 months ago

Alright, I've got this. Option B is the best approach - I'll switch roles to the OrganizationAccountAccessRole and then I can set up the IAM users in the new member account. Time to put my AWS knowledge to the test!

upvoted 0 times

...

Lisbeth

5 months ago

I think option B is the way to go. Assuming the OrganizationAccountAccessRole in the management account should give me the necessary permissions to set up IAM users in the new member account.

upvoted 0 times

...

Kimberlie

5 months ago

Hmm, this is a tricky one. I'm not sure if I should use the root user credentials or try to assume a role. I'll need to review the AWS Organizations documentation to make sure I'm doing this correctly.

upvoted 0 times

...

Tesha

5 months ago

Okay, let's think this through step-by-step. The key seems to be understanding how to access the new member account and set up IAM users there.

upvoted 0 times

...

Gail

5 months ago

I'm a bit confused by the wording of the question. Can I really just sign in using the root user credentials of the management account? That doesn't seem very secure.

upvoted 0 times

...

Eura

5 months ago

Lines of Code doesn't seem right, that's more of a simple size metric. Function Points is also not quite what they're looking for here. I'm leaning towards Cyclomatic Complexity, but I'll double-check my notes just to be sure.

upvoted 0 times

...

Malika

5 months ago

This seems like a tricky VPLS question. I'm not super familiar with the details of VPLS configurations, so I'll need to read through the options carefully and try to apply my general networking knowledge to figure this out.

upvoted 0 times

...

Camellia

2 years ago

I think option D is the right choice. We should sign in using the account ID of the new member account.

upvoted 0 times

...

Kirby

2 years ago

But wouldn't it be easier to just sign in using the root account credentials as mentioned in option C?

upvoted 0 times

...

Lisha

2 years ago

I disagree, I believe option B is the way to go. We should switch roles to assume the OrganizationAccountAccessRole role.

upvoted 0 times

...

Kirby

2 years ago

I think option A is the correct one. We need to sign in with the root user credentials and set up the IAM users.

upvoted 0 times

...

Quinn

2 years ago

Ah, the good old 'AWS Organizations' conundrum. Gotta love these tricky questions!

upvoted 0 times

...

Christoper

2 years ago

Alright, let's go through the options carefully. I think I have an idea, but I want to make sure I'm not missing anything.

upvoted 0 times

...

Avery

2 years ago

Wait, I think I've got it! Let me double-check the details and see which option makes the most sense.

upvoted 0 times

Naomi

2 years ago

A: Great. Let's make sure we follow the necessary steps carefully to avoid any issues in the future.

upvoted 0 times

...

Shayne

2 years ago

B: Definitely. It's better to take the time to verify all the details before proceeding.

upvoted 0 times

...

Alison

2 years ago

A: I agree. We should always double-check everything to ensure everything is set up correctly.

upvoted 0 times

...

Paris

2 years ago

B: Absolutely, it's important to follow best practices when setting up IAM users in a new member account.

upvoted 0 times

...

Lorenza

2 years ago

A: That sounds like the right approach. It ensures proper access control and security.

upvoted 0 times

...

Alysa

2 years ago

B: From the management account, switch roles to assume the OrganizationAccountAccessRole role with the account ID of the new member account. Set up the IAM users as required.

upvoted 0 times

...

Erinn

2 years ago

A: Sign in to the AWS Management Console with AWS account root user credentials by using the 64-character password from the initial AWS Organizations email sent to finance1@example.com. Set up the IAM users as required.

upvoted 0 times

...

Coleen

2 years ago

Whoa, this question is a tricky one! I'm not sure if I have the right approach here. Let me think this through...

upvoted 0 times

...