Implement techniques for identity and access management at scale.
25 practice questions under this official exam objective (DOP-C02), each with the answer key, an option-by-option explanation and instant feedback.
Questions under this objective
25 total · page 2 of 2Attach a resource policy to the API Gateway API allowing only the specific VPC IDs
The API must be reachable only from specific VPCs in the company, which is a caller-identity restriction rather than a network configuration. Amazon A
Use an SCP to require the CostCenter tag, a tag policy for valid values, and update the sc
Developers are tagging EC2 instances with arbitrary CostCenter values to silence the notification script, so the tag key is present but the value is m
Apply a permissions boundary through the CDK bootstrap default so both deployment and Lamb
Both the role developers assume to deploy the CDK application and the roles the CDK application attaches to the Lambda functions it creates carry more
Create a cross-account role in the management account that the new account's Lambda execut
Only the Organizations management account can create new accounts, so moving the Lambda function to a dedicated account requires the new account's Lam
Create a role with a permissions boundary that permits creating policies and roles, and gr
The developer needs to create and configure service-linked IAM roles for the proof of concept and nothing more. Creating an IAM role that carries the