nerdexam
AmazonAmazon

SAA-C03 · Question #161

SAA-C03 Question #161: Real Exam Question with Answer & Explanation

Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #161. The question stem and answer options stay visible for context.

Submitted by chiamaka_o· Mar 4, 2026Design Secure Architectures

Question

A company that has multiple AWS accounts maintains an on-premises Microsoft Active Directory. The company needs a solution to implement Single Sign-On for its employees. The company wants to use AWS IAM Identity Center. The solution must meet the following requirements: Allow users to access AWS accounts and third-party applications by using existing Active Directory credentials. Enforce multi-factor authentication (MFA) to access AWS accounts. Centrally manage permissions to access AWS accounts and applications. Which solution will meet these requirements?

Options

  • AIAM identity provider:Does not support centralized management across multiple accounts.
  • BAWS Managed AD:Unnecessary if an on-premises Active Directory already exists.
  • CIAM Identity Center + Existing AD:Best approach to integrate existing Active Directory for
  • DLambda for synchronization:Adds complexity and does not leverage IAM Identity Center

Unlock SAA-C03 to see the answer

You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Single Sign-On#IAM Identity Center#Active Directory Integration#MFA
Full SAA-C03 PracticeBrowse All SAA-C03 Questions