PAS-C01 Migration Practice Question
Exhibit
{
"Version": "2012-10-17",
"Statement": [
{
"Effect": "Allow",
"Action": [
"dms:CreateReplicationTask",
"dms:StartReplicationTask",
"dms:DescribeReplicationTasks",
"dms:StopReplicationTask"
],
"Resource": "*"
}
]
}Refer to the exhibit. An administrator is setting up an AWS DMS task to migrate an SAP database. They receive an error that they are not authorized to perform the operation. Which statement is true about the IAM policy?
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The policy is missing the dms:CreateEndpoint and dms:DescribeEndpoints actions
The error 'not authorized' indicates the IAM policy lacks necessary permissions for the DMS task. The missing actions are dms:CreateEndpoint and dms:DescribeEndpoints, which are required to create and describe endpoints during the migration. Option B is correct because the policy explicitly denies these actions (or does not include them). Option A is incorrect because the policy does not allow all DMS actions; it is missing these two. Option C is incorrect because the error is not related to dms:CreateReplicationTask. Option D is incorrect because using a wildcard for Resource is not the cause; the issue is the missing actions, not the resource scope.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The policy allows all DMS actions
Why it's wrong here
The policy only allows specific DMS actions.
- ✓
The policy is missing the dms:CreateEndpoint and dms:DescribeEndpoints actions
Why this is correct
DMS needs these permissions to create and manage endpoints.
- ✗
The policy is missing the dms:CreateReplicationTask action
Why it's wrong here
The policy includes CreateReplicationTask.
- ✗
The policy should specify an ARN instead of a wildcard for Resource
Why it's wrong here
Wildcard is acceptable for DMS permissions.
Go deeper
Related to this question
About these practice questions
This PAS-C01 question is part of Courseiva's 1,616-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This PAS-C01 practice question is part of Courseiva's free Amazon Web Services certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the PAS-C01 exam.