Back to AWS Server Migration Service

Pre-requisites and Setup

5 minutes 5 Questions

Before using AWS Server Migration Service, there are important pre-requisites and setup steps to complete. First, gather on-premises virtualization environment details like vCenter Server or Hyper-V credentials, IP addresses, and identifiers. Next, decide on a chosen region for the target AWS accou…

Test mode:
Start practice test
AWS Certified Solutions Architect - Pre-requisites and Setup Example Questions

Test your knowledge of Pre-requisites and Setup

Question 1

The company's architect is designing a system using AWS tools. What service should they use to set up a VPC within AWS?

Correct Answer: Amazon VPC

Amazon VPC (Virtual Private Cloud) is the correct service for setting up and managing virtual networks in AWS. Other services like Elastic Beanstalk, EC2, S3, RDS and Lambda have different functionalities and are not specifically designed for creating or managing VPCs.

Question 2

You have set up a VPC with an Internet Gateway, and all instances have Elastic IP addresses associated. Security Groups and NACLs are allowing all necessary traffic, but the instances still cannot access the internet. What is missing?

Correct Answer: Configure routing tables with a rule for internet traffic.

The instances must have a route to the internet in the routing table to access it. By configuring the routing tables with a rule for internet traffic (0.0.0.0/0) pointing to the Internet Gateway, instances can access the internet.

Question 3

Your company uses AWS Organizations and has AWS IAM Identity Center integrated with your corporate identity provider. A new full-time employee needs access to multiple AWS accounts to work on AWS services. What is the best practice for granting the employee the necessary permissions?

Correct Answer: Provision the employee in the corporate identity provider and assign least-privilege permission sets via AWS IAM Identity Center (AWS SSO), so they access AWS accounts using SSO and receive temporary credentials.

For human users, AWS best practice is to use centralized identity and federation instead of creating long-lived IAM users. By onboarding the employee through your corporate identity provider and granting access with AWS IAM Identity Center permission sets, the user signs in with SSO and receives short-lived, least-privilege credentials to the required AWS accounts. This approach simplifies lifecycle management (joiner/mover/leaver), enforces MFA and centralized policies, improves auditability, and avoids sharing accounts or using static access keys.

More Pre-requisites and Setup questions
15 questions (total)
Start 15 question test