SCS-C02 · Question #47
A security engineer is designing an IAM policy to protect AWS API operations. The policy must enforce multi-factor authentication (MFA) for IAM users to access certain services in the AWS production a
Sign in or unlock SCS-C02 to reveal the answer and full explanation for question #47. The question stem and answer options stay visible for context.
Question
A security engineer is designing an IAM policy to protect AWS API operations. The policy must enforce multi-factor authentication (MFA) for IAM users to access certain services in the AWS production account. Each session must remain valid for only 2 hours. The current version of the IAM policy is as follows:
Which combination of conditions must the security engineer add to the IAM policy to meet these requirements? (Choose two.)
Exhibit
Options
- A"Bool": {"aws:MultiFactorAuthPresent": "true"}
- B"Bool": {"aws:MultiFactorAuthPresent": "false"}
- C"NumericLessThan": {"aws:MultiFactorAuthAge": "7200"}
- D"NumericGreaterThan": {"aws:MultiFactorAuthAge": "7200"}
- E"NumericLessThan": {"MaxSessionDuration": "7200"}
Unlock SCS-C02 to see the answer
You've previewed enough free SCS-C02 questions. Unlock SCS-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.