Question 3 of 19
Single answer"Effect":"Deny", "Action":"ec2:*" "Resource":"*", "Condition":{ "BoolIfExists":{ "aws:MultiFactorAuthPresent":false After implementing the policy, the administrator receives reports that users are unable to perform Amazon EC2 commands using the AWS CLi. What should the administrator do to resolve this problem while still enforcing multi-factor authentication?
AChange the value of aws:MultiFactorAuthPresent to true.
✓BInstruct users to run the aws sts get-session-token CLI command and pass the multi-factor authentication -- serial-number and -token-codle parameters. Use these resulting values to make APl/CLI calls.
CImplement federated API/CLI access using SAML 2.0, then configure the identity provider to enforce multi- factor authentication. assume-role CLl command and pass --serial-number and --token-code parameters. Store the resulting values in environment variables. Add sts:AssumeRole to NotAction in the policy.
✓
Correct Answer: B
Instruct users to run the aws sts get-session-token CLI command and pass the multi-factor authentication -- serial-number and -token-codle parameters. Use these resulting values to make APl/CLI calls.
▥
Explanation
The correct answer is highlighted above. Review the wording carefully, then use the next question to continue building your understanding of AWS certification topics.