For IndividualsFor Educators
ExpertMinds LogoExpertMinds
ExpertMinds

Ace your certifications with Practice Exams and AI assistance.

  • Browse Exams
  • For Educators
  • Blog
  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Support
  • AWS SAA Exam Prep
  • PMI PMP Exam Prep
  • CPA Exam Prep
  • GCP PCA Exam Prep

© 2026 TinyHive Labs. Company number 16262776.

    PracticeAWS Solutions Architect Associate (SAA-C03)AWS SAA-C03 Practice Exam 2Question 19
    Hard1 markMultiple Choice
    Domain 1.1: Secure AccessDomain 1SecurityIAM

    AWS SAA-C03 · Question 19 · Domain 1.1: Secure Access

    A company wants to ensure that developers can only launch EC2 instances of type 't3.micro' in their development AWS account. How can this be enforced?

    Answer options:

    A.

    Use AWS Config to automatically terminate non-t3.micro instances.

    B.

    Attach an IAM policy with a condition restricting ec2:InstanceType.

    C.

    Create an SCP in AWS Organizations to limit instance types.

    D.

    Use AWS Systems Manager to restrict instance launches.

    How to approach this question

    Look for IAM condition keys.

    Full Answer

    B.Attach an IAM policy with a condition restricting ec2:InstanceType.✓ Correct
    IAM policies can include condition blocks. The `ec2:InstanceType` condition key can be used to restrict which instance types a user can launch.

    Common mistakes

    Choosing SCPs, which are usually too broad for user-specific restrictions.
    Question 18All questionsQuestion 20

    Practice the full AWS SAA-C03 Practice Exam 2

    65 questions · hints · full answers · grading

    Sign up freeTake the exam

    More questions from this exam

    Q01A company wants to ensure that no AWS resources can be created in the ap-northeast-1 region acros...EasyQ02A web application runs on Amazon EC2 instances behind an Application Load Balancer (ALB). The com...EasyQ03A company is storing highly sensitive data in an Amazon S3 bucket. The security team requires tha...MediumQ04An application running on an EC2 instance needs to access an Amazon DynamoDB table in a different...HardQ05A company needs to store database credentials securely. The credentials must be automatically rot...Medium
    View all 65 questions →