nerdexam
AmazonAmazon

SOA-C02 · Question #136

SOA-C02 Question #136: Real Exam Question with Answer & Explanation

Sign in or unlock SOA-C02 to reveal the answer and full explanation for question #136. The question stem and answer options stay visible for context.

Submitted by omar99· Mar 30, 2026

Question

A company has mandated the use of multi-factor authentication (MFA) for all IAM users, and requires users to make all API calls using the CLI. However. users are not prompted to enter MFA tokens, and are able to run CLI commands without MFA. In an attempt to enforce MFA, the company attached an IAM policy to all users that denies API calls that have not been authenticated with MFA. What additional step must be taken to ensure that API calls are authenticated using MFA?

Options

  • AEnable MFA on IAM roles, and require IAM users to use role credentials to sign API calls.
  • BAsk the IAM users to log into the AWS Management Console with MFA before making API
  • CRestrict the IAM users to use of the console, as MFA is not supported for CLI use.
  • DRequire users to use temporary credentials from the get-session token command to sign API

Unlock SOA-C02 to see the answer

You've previewed enough free SOA-C02 questions. Unlock SOA-C02 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Full SOA-C02 PracticeBrowse All SOA-C02 Questions