SAA-C03 Domain 3: Design Secure Architectures

Which service should you use to enforce MFA and least privilege for human access?

Multiple choice — select one answer

Answer choices

  1. a. VPC interface endpoints (AWS PrivateLink)
  2. b. AWS IAM with MFA
  3. c. Amazon GuardDuty
  4. d. Wildcard admin for all users

Architectural breakdown & explanation

IAM policies and MFA protect account access.

Correct answer(s): b. AWS IAM with MFA

Exam domain: Domain 3: Design Secure Architectures (24% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the AWS Certified Solutions Architect – Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.