SAP-C02 Question #625: Real Exam Question with Answer & Explanation

Question

A financial services company has an asset management product that thousands of customers use around the world. The customers provide feedback about the product through surveys. The company is building a new analytical solution that runs on Amazon EMR to analyze the data from these surveys. The following user personas need to access the analytical solution to perform different actions: - Administrator: Provisions the EMR cluster for the analytics team based on the team's requirements - Data engineer: Runs ETL scripts to process, transform, and enrich the datasets - Data analyst: Runs SQL and Hive queries on the data A solutions architect must ensure that all the user personas have least privilege access to only the resources that they need. The user personas must be able to launch only applications that are approved and authorized. The solution also must ensure tagging for all resources that the user personas create. Which solution will meet these requirements?

Options

• ACreate IAM roles for each user persona. Attach identity-based policies to define which actions the
• BSetup Kerberos-based authentication for EMR clusters upon launch. Specify a Kerberos security
• CUse AWS Service Catalog to control the Amazon EMR versions available for deployment, the
• DLaunch the EMR cluster by using AWS CloudFormation, Attach resource-based policies to the