SAA-C03 · Question #209
A company is performing a security review of its Amazon EMR API usage. The company's developers use an integrated development environment (IDE) that is hosted on Amazon EC2 instances. The IDE is confi
Sign in or unlock SAA-C03 to reveal the answer and full explanation for question #209. The question stem and answer options stay visible for context.
Question
A company is performing a security review of its Amazon EMR API usage. The company's developers use an integrated development environment (IDE) that is hosted on Amazon EC2 instances. The IDE is configured to authenticate users to AWS by using access keys. Traffic between the company's EC2 instances and EMR cluster uses public IP addresses. A solutions architect needs to improve the company's overall security posture. The solutions architect needs to reduce the company's use of long-term credentials and to limit the amount of communication that uses public IP addresses. Which combination of steps will MOST improve the security of the company's architecture? (Select TWO.)
Options
- ASet up a gateway endpoint to the EMR cluster.
- BSet up interface VPC endpoints to connect to the EMR cluster.
- CSet up a private NAT gateway to connect to the EMR cluster.
- DSet up IAM roles for the developers to use to connect to the Amazon EMR API.
- ESet up AWS Systems Manager Parameter Store to store access keys for each developer.
Unlock SAA-C03 to see the answer
You've previewed enough free SAA-C03 questions. Unlock SAA-C03 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.