{"id":174,"date":"2021-01-04T08:11:00","date_gmt":"2021-01-04T08:11:00","guid":{"rendered":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/aws-certified-security-specialty-scs-c01-question167\/"},"modified":"2021-01-04T08:11:00","modified_gmt":"2021-01-04T08:11:00","slug":"aws-certified-security-specialty-scs-c01-question167","status":"publish","type":"post","link":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/aws-certified-security-specialty-scs-c01-question167\/","title":{"rendered":"AWS Certified Security &#8211; Specialty SCS-C01 &#8211; Question167"},"content":{"rendered":"<div class=\"question\">A company\u2019s Security Engineer has been tasked with restricting a contractor\u2019s IAM account access to the company\u2019s Amazon EC2 console without providing access to any other AWS services. The contractor\u2019s IAM account must not be able to gain access to any other AWS service, even if the IAM account is assigned additional permissions based on IAM group membership.<br \/>\nWhat should the Security Engineer do to meet these requirements? <br \/><strong><br \/>A.<\/strong> Create an Inline IAM user policy that allows for Amazon EC2 access for the contractor\u2019s IAM user. <br \/><strong>B.<\/strong> Create an IAM permissions boundary policy that allows Amazon EC2 access. Associate the contractor\u2019s IAM account with the IAM permissions boundary policy. <br \/><strong>C.<\/strong> Create an IAM group with an attached policy that allows for Amazon EC2 access. Associate the contractor\u2019s IAM account with the IAM group. <br \/><strong>D.<\/strong> Create an IAM role that allows for EC2 and explicitly denies all other services. Instruct the contractor to always assume this role.<\/div>\n<p><\/p>\n<style> .hidden-div{ display:none } <\/style>\n<p>\t\t\t\t\t\t\t<button onclick=\"getElementById('hidden-div').style.display = 'block'\"> Show Answer <\/button> <button onclick=\"getElementById('hidden-div').style.display = 'none'\">Hide Answer<\/button><\/p>\n<div class=\"hidden-div\" id=\"hidden-div\"><span style=\"\"><\/p>\n<div class=\"answer\">Correct Answer: <strong>B<\/strong><\/div>\n<p><\/strong><\/span> <\/div>\n","protected":false},"excerpt":{"rendered":"<p>A company\u2019s Security Engineer has been tasked with restricting a contractor\u2019s IAM account access to the company\u2019s Amazon EC2 console without providing access to any other AWS services. The contractor\u2019s IAM account must not be able to gain access to any other AWS service, even if the IAM account is assigned additional permissions based on [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[2],"tags":[3,170],"class_list":["post-174","post","type-post","status-publish","format-standard","hentry","category-aws-certified-security-specialty-scs-c01","tag-aws-certified-security-specialty-scs-c01","tag-question-167"],"_links":{"self":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts\/174","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/comments?post=174"}],"version-history":[{"count":0,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/posts\/174\/revisions"}],"wp:attachment":[{"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/media?parent=174"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/categories?post=174"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/exampracticetests.com\/aws\/Security-Specialty_SCS-C01\/wp-json\/wp\/v2\/tags?post=174"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}