Security and Compliance — page 5
A company needs to apply security rules to specific Amazon EC2 instances. Which AWS service or feature provides this functionality?
A company is using Amazon EC2 instances. Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
Where can AWS users review answers to frequently asked questions about security in the AWS Cloud?
A company wants to design a reliable web application that is hosted on Amazon EC2. Which approach will achieve this goal?
Which AWS service should a company use to provision, manage, and deploy SSL/TLS certificates?
A company provides Amazon Workspaces to its remote employees. The company wants to prevent employees from using their virtual desktops to visit specific websites that are known to be malicious. Which AWS service should the company use to meet this requirement?
A company wants to build an application that uses AWS Lambda to run Python code. Under the AWS shared responsibility model, which tasks will be the company's responsibility? (Choose two.)
Which AWS services or resources can a company use directly on its on-premises servers? (Choose two.)
Which AWS service provides recommendations to help users optimize costs and follow AWS best practices?
Which AWS service provides a cloud-based contact center that scales to support a business of any size?
A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS). Where can the company find this documentation?
A company wants to protect resources that the company hosts on AWS, including Application Load Balancers and Amazon CloudFront distributions. The company wants an AWS service that can provide near real-time visibility into attacks on the company's resources. The service must also have a dedicated AWS team to assist with distributed denial of service (DDoS) attacks. Which AWS service will meet these requirements?
Which AWS service supports the analysis, investigation, and identification of the root cause of security events and suspicious activities in an AWS account?
Which AWS service keeps track of SSL/TLS certificates, creates new certificates, and processes renewals?
A company is using AWS Lambda. Which task is the company’s responsibility, according to the AWS shared responsibility model?
A company wants to run its applications in the AWS Cloud. The company does not have enough staff to maintain and protect its critical business applications. Which AWS service should the company use to perform these tasks?
A company wants to use machine learning to identify suspicious activities in its AWS account. Which AWS service provides this functionality?
Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday?
A company is configuring its AWS Cloud environment. The company's administrators need to group users together and apply permissions to the group. Which AWS service or feature can the company use to meet these requirements?
Which AWS service should a company use to check for IAM access keys that have not been rotated recently?
A user wants to identify any security group that is allowing unrestricted incoming SSH traffic. Which AWS service can be used to accomplish this goal?
Which task requires the use of AWS account root user credentials?
According to the AWS shared responsibility model which of the following are AWS responsibilities? (Choose two.)
A company needs to receive notification when a deployed workload is using more than a certain percentage of a service quota. Which AWS service should the company use to meet this requirement?
A company wants to continuously monitor its AWS accounts and workloads for malicious activity. The company also wants to receive detailed security findings for visibility and remediation. Which AWS service should the company use to meet these requirements?
A developer needs to debug and troubleshoot an application that is experiencing runtime errors. The application is running on microservices architecture on AWS. Which AWS service should the developer use to troubleshoot the application?
Which of the following promotes AWS Cloud architectural best practices for designing and operating reliable, secure, efficient, and cost-effective systems?
Which AWS service aggregates organizes and prioritizes security alerts and findings from multiple AWS services?
Which of the following are user authentication services managed by AWS? (Choose two.)
Which AWS service gives users the ability to download compliance reports from third party auditors?
Which AWS service has unlimited free use?
A cloud practitioner wants a repeatable way to deploy identical AWS resources by using infrastructure templates. Which AWS service will meet these requirements?
Which tasks are responsibilities of the customer, according to the AWS shared responsibility model? (Choose two.)
A company is planning to configure multi-factor authentication (MFA) for a business application. The company needs to use text messages to distribute one-time passwords to its customers worldwide. Which AWS service should the company use to meet this requirement?
Which task is the responsibility of the customer, according to the AWS shared responsibility model?
A company wants to deploy a highly available third-party firewall appliance. Which AWS service or resource will support this task?
Which of the following are customer responsibilities under the AWS shared responsibility model? (Choose two.)
Which AWS services and features are provided to all customers at no charge? (Choose two.)
A company needs to configure rules to identify threats and protect applications from malicious network access. Which AWS service should the company use to meet these requirements?
A newly created IAM user has no IAM policy attached. What will happen when the user logs in and attempts to view the AWS resources in the account?
How can an AWS user conduct security assessments of Amazon EC2 instances, NAT gateways, and Elastic Load Balancers in a way that is approved by AWS?
An auditor needs to find out whether a specific AWS service is compliant with specific compliance frameworks. Which AWS service will provide this information?
A company's information security manager is supervising a move to AWS and wants to ensure that AWS best practices are followed. The manager has concerns about the potential misuse of AWS account root user credentials. Which of the following is an AWS best practice for using the AWS account root user credentials?
A company wants to rotate, manage, and retrieve credentials that are used to access databases in the company's AWS account. Which AWS service can the company use to meet these requirements?
Which AWS service gives users the ability to provision a dedicated and private network connection from their internal network to AWS?
Which AWS service or feature can a company use to apply security rules to a subnet for Amazon EC2 instances?
A developer needs to use a standardized template to create copies of a company's AWS architecture for development, test, and production environments. Which AWS service should the developer use to meet this requirement?
A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way. What can the company do to meet this requirement?
A company wants a service that will discover the company's sensitive data on AWS and identity potential exposure of the data. Which AWS service will meet these requirements in the LEAST amount of time?
A company has an application that uses AWS services. During scaling events, the company wants to keep application usage within AWS service quotas. Which AWS services or tools can report on the quotas so that the company can improve the reliability of the application? (Choose two.)
A company needs to identify its underutilized Amazon Elastic Block Store (Amazon EBS) volumes. Which AWS service should the company use to meet this requirement?
A company has deployed its publicly accessible application in two different AWS Regions. The company has designated one Region as primary and the other Region as secondary for disaster recovery purposes. Which AWS service or resource can automatically divert all incoming application requests to the secondary Region?
A company is designing an identity access management solution for an application. The company wants users to be able to use their social media, email, or online shopping accounts to access the application. Which AWS service provides this functionality?
Which AWS service gives users the ability to combine existing accounts into a centrally managed hierarchy?
Which AWS service or feature offers HTTP attack protection to users running public-facing web applications?
A company wants to troubleshoot and debug a serverless application that is deployed in the AWS Cloud. Which AWS service should the company use to achieve this goal?
A company needs to connect multiple VPCs and on-premises networks through a single network connection to the AWS Cloud. Which solution meets this requirement?
A company needs to continuously monitor its environment to analyze network and account activity and identify potential security threats. Which AWS service should the company use to meet these requirements?
A cloud practitioner needs to apply security rules to a subnet for Amazon EC2 instances. Which AWS service or feature can the cloud practitioner use to meet this requirement?
A company is using AWS Lambda functions to build an application. Which tasks are the company's responsibility, according to the AWS shared responsibility model? (Choose two.)
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
A system administrator wants to allow IT department users to access the AWS CLI. What is the MINIMUM credential that is required to achieve this goal?
Which AWS service should a cloud engineer use to view API calls to AWS services?
According to the AWS shared responsibility model, which task is the responsibility of the customer?
Which actions represent best practices for using AWS IAM? (Choose two.)
Which of the following is a benefit of using an AWS managed service?
Which AWS services or features can control VPC traffic? (Choose two.)
In which of the following AWS services should database credentials be stored for maximum security?
Which of the following is entirely the responsibility of AWS, according to the AWS snared responsibility model?
A company needs to create and manage a portfolio of IT workloads that the company approves for use on AWS. Which AWS service provides this functionality?
A user needs a dedicated private connection between a colocation facility and a VPC. Which AWS service or feature should the user choose?
A company runs an ecommerce website that is hosted on AWS. External auditors have requested proof that the AWS services that the company uses are compliant with the Payment Card Industry Data Security Standard (PCI DSS). Which AWS service will provide this information?
A developer is writing a program that must switch between multiple IAM roles. Which AWS services or features can the program use to meet this requirement? (Choose two.)
Which AWS service can a company use to control permissions to AWS services in the cloud?
Which AWS service is used to temporarily provide federated security credentials to access AWS resources?
An online retail company recently deployed a production web application. The system administrator needs to block common attack patterns such as SQL injection and cross-site scripting. Which AWS service should the administrator use to address these concerns?
In the AWS shared responsibility model, which tasks are the responsibility of AWS? (Choose two.)
A company has set up a VPC in its AWS account and has created a subnet in the VPC. The company wants to make the subnet public. Which AWS features should the company use to meet this requirement? (Choose two.)
A company's user base needs to remotely access virtual desktop computers from the internet. Which AWS service provides this functionality?
Which AWS service or feature is associated with a subnet in a VPC and is used to control inbound and outbound traffic?
Which AWS service can defend against DDoS attacks?
A company needs a history report about how its Amazon EC2 instances were modified last month. Which AWS service can be used to meet this requirement?
Which AWS service can a company use to rotate, manage, and retrieve database credentials?
A company wants to store data with high availability, encrypt the data at rest, and have direct access to the data over the internet. Which AWS service will meet these requirements MOST cost-effectively?
What are characteristics of Availability Zones? (Choose two.)
What is an AWS responsibility under the AWS shared responsibility model?
Which AWS services support a hybrid compute architectural model? (Choose two.)
Which AWS services allow users to monitor and retain records of account activities that include governance, compliance, and auditing? (Choose two.)
Which AWS service provides protection against DDoS attacks for applications that run in the AWS Cloud?
Which AWS service is always available free of charge to users?
Which credential allows programmatic access to AWS resources for use from toe AWS CLI or the AWS API?
A company wants to launch its web application in a second AWS Region. The company needs to determine which services must be regionally configured for this launch. Which AWS services can be configured at the Region level? (Choose two.)
A company wants to implement controls (guardrails) in a newly created AWS Control Tower landing zone. Which AWS services or features can the company use to create and define these controls (guardrails)? (Choose two.)
Which AWS service or feature is used to troubleshoot network connectivity issues between Amazon EC2 instances?
A company is building an application on AWS The application needs to comply with credit card regulatory requirements. The company needs proof that the AWS services and deployment are in compliance. Which actions should the company take to meet these requirements? (Choose two.)
A company deployed an Amazon EC2 instance last week A developer realizes that the EC2 instance is no longer running. The developer reviews a list of provisioned EC2 instances, and the EC2 instance is no longer on the list. What can the developer do to generate a recent history of the EC2 instance?
Which aspect of security is the customer’s responsibility, according to the AWS shared responsibility model?
Which AWS Cloud design principle does a company follow by using AWS CloudTrail?
A company needs network access to be restricted to an Amazon EC2 instance for certain ports. Which AWS services or features will support this requirement? (Choose two.)
A company needs to track the relationships among AWS resources. The company also needs to review resource dependencies before the company makes any changes to the resources. Which AWS service can the company use to meet these requirements?
A company is running its application in the AWS Cloud and wants to protect against a DDoS attack. The company’s security team wants near real- time visibility into DDoS attacks. Which AWS service or traffic filter will meet these requirements with the MOST features for DDoS protection?
Which combination of AWS services or features can a company use to encrypt data in transit and data at rest? (Choose two.)
Which AWS feature grants temporary access to specific AWS resources?
A company wants to move petabytes of historical data into the AWS Cloud. The company needs to transfer the data from a remote location that does not have reliable network services. Which AWS service will meet these requirements?
A company needs to manage multiple logins across AWS accounts within the same organization in AWS Organizations. Which AWS service should the company use to meet this requirement?
A company wants to access a report about the estimated environmental impact of the company's AWS usage. Which AWS service or feature should the company use to meet this requirement?
A company stores data in an Amazon S3 bucket The company must control who has permission to read, write, or delete objects that the company stores in the S3 bucket. Which AWS features will meet these requirements? (Choose two.)
According to the AWS shared responsibility model, who is responsible for the virtualization layer down to the physical security of the facilities in which AWS services operate?
Which AWS services or features can a company use to connect the network of its on-premises data center to AWS? (Choose two.)
A company wants high levels of detection and near-real-time (NRT) mitigation against large and sophisticated distributed denial of service (DDoS) attacks on applications running on AWS. Which AWS service should the company use?
A company is moving to the AWS Cloud to reduce operational overhead for its application infrastructure. Which IT operation will the company still be responsible for after the migration to AWS?
Which task must a user perform by using the AWS account root user credentials?
Which AWS service or feature offers security for a VPC by acting as a firewall to control traffic in and out of subnets?
Which AWS service or feature enables users to encrypt data at rest in Amazon S3?
A developer wants to use an Amazon S3 bucket to store application logs that contain sensitive data. Which AWS service or feature should the developer use to restrict read and write access to the S3 bucket?
A company wants to use an Amazon EC2 instance that has a pre-installed third-party firewall. Which AWS service or feature can provide this solution?
What does “security of the cloud” refer to in the AWS shared responsibility model?
A company wants to push VPC Flow Logs to an Amazon S3 bucket. Which action is the company’s responsibility?
A company needs to apply security rules to specific Amazon EC2 instances. Which AWS service or feature provides this functionality?
Which AWS service can a company use to find security and compliance reports, including International Organization for Standardization (ISO) reports?
An auditor is preparing for an annual security audit. The auditor requests certification details for a company’s AWS hosted resources across multiple Availability Zones in the us-east-1 Region. How should the company respond to the auditor’s request?
Which controls are the responsibility of both AWS and AWS customers, according to the AWS shared responsibility model? (Choose two.)
Which tasks are the responsibility of the customer, according to the AWS shared responsibility model? (Choose two.)
A developer who has no AWS Cloud experience wants to use AWS technology to build a web application. Which AWS service should the developer use to start building the application?
A company wants to have one AWS account for the entire company and individual accounts for each department. Which AWS service should the company use to aggregate and manage all accounts?
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports. Which AWS service will meet this requirement?
Which of the following are benefits of VPC endpoints? (Choose two.)
Which AWS service should be used when a company needs to provide its remote employees with virtual desktops?
A company has set up a VPC on AWS. The company needs a dedicated connection between the VPC and the company’s on-premises network. Which action should the company take to meet this requirement?
A company is running an application on AWS. The company wants to identify and prevent the accidental download of malware. Which AWS service or feature will meet these requirements?
A company needs to apply security rules to a subnet for Amazon EC2 instances. Which AWS service or feature provides this functionality?
Which task can a company perform by using security groups in the AWS Cloud?
A company wants to automatically set up and govern a multi-account AWS environment. Which AWS service provides this functionality?
A global company wants to use a managed security service for protection from SQL injection attacks. The service also must provide detailed logging information about access to the company’s ecommerce applications. Which AWS service will meet these requirements?
Which scenarios represent the concept of elasticity on AWS? (Choose two.)
A company needs to control inbound and outbound traffic for an Amazon EC2 instance. Which AWS service or feature can the company associate with the EC2 instance to meet this requirement?
A company has an environment that includes Amazon EC2 instances, Amazon Lightsail, and on-premises servers. The company wants to automate the security updates for its operating systems and applications. Which solution will meet these requirements with the LEAST operational effort?
Which AWS service is deployed to VPCs and provides protection from common network threats?
Which AWS service provides encryption at rest for Amazon RDS and for Amazon Elastic Block Store (Amazon EBS) volumes?
Which AWS service or tool provides on-demand access to AWS security and compliance reports and AWS online agreements?
A company wants to access a report about the estimated environmental impact of the company's AWS usage. Which AWS service or feature should the company use to meet this requirement?
Which AWS features will meet these requirements? (Select TWO.)
A cloud engineer needs to download AWS security and compliance documents for an upcoming audit. Which AWS service can provide the documents? Passing Certification Exams Made Easy visit - https://www.2PassEasy.com Welcome to download the Newest 2passeasy AWS-Certified-Cloud-Practitioner dumps https://www.2passeasy.com/dumps/AWS-Certified-Cloud-Practitioner/ (370 New Questions)
What are some advantages of using Amazon EC2 instances lo host applications in the AWS Cloud instead of on premises? (Select TWO.)
Which AWS services and features are provided to all customers at no charge? (Select TWO.)
A company has an environment that includes Amazon EC2 instances, Amazon Lightsail, and on-premises servers. The company wants to automate the security updates for its operating systems and applications. Which solution will meet these requirements with the LEAST operational effort?
Which of the following is entirely the responsibility of AWS, according to the AWS shared responsibility model? Passing Certification Exams Made Easy visit - https://www.2PassEasy.com Welcome to download the Newest 2passeasy AWS-Certified-Cloud-Practitioner dumps https://www.2passeasy.com/dumps/AWS-Certified-Cloud-Practitioner/ (370 New Questions)
A company is running an application on AWS. The company wants to identify and prevent the accidental Which AWS service or feature will meet these requirements?
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. According to the AWS shared responsibility model, which task is the responsibility of the customer?
A company moves a workload to AWS to run on Amazon EC2 instances. The company needs to run the workload in the most cost-effective way. What can the company do to meet this requirement?
Which aspect of security is the customer's responsibility, according to the AWS shared responsibility model?
A company has an AWS-hosted website located behind an Application Load Balancer. The company wants to safeguard the website from SQL injection or cross- site scripting. Which AWS service should the company use?
A company is hosting a web application on Amazon EC2 instances. The company wants to implement custom conditions to filter and control inbound web traffic. Which AWS service will meet these requirements?
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion. Which AWS service should the developer use to meet these requirements?
To install a PCI-compliant workload on AWS, which of the following tasks is required?
According to the AWS shared responsibility model, who is responsible for managing IAM user access and secret keys?
Which security-related duty is AWS accountable for under the AWS shared responsibility model?
Who is responsible for configuration management under the AWS shared responsibility model?
Which of the following is a suggestion made by an AWS Trusted Advisor? (Select two.)
Who is accountable for security and compliance under the AWS shared responsibility model?
What is the customer's responsibility while using Amazon RDS?
Which of the following operational controls do users completely inherit from AWS as part of the AWS shared responsibility model?
What is the customer's obligation while using an AWS managed service under the AWS shared responsibility model?
Which AWS service can identify the person who made the API request when an Amazon EC2 instance is terminated?
Which of the following is an example of security in the AWS Cloud under the AWS shared responsibility model?
Permissions for which of the following are managed by service control policies (SCPs)?
Which of the following AWS services should a client utilize to audit the change management of AWS resources?
Which of the following is a shared control between a client and AWS under the shared responsibility model?
Which duty is the customer's responsibility while managing AWS Lambda functions under the AWS shared responsibility model?
Which of the following is not a duty of the client under the AWS shared responsibility model? (Select two.)
What attributes of an AWS account can AWS Trusted Advisor monitor and advise on? (Select two.)
Which feature enables Amazon EC2 instances to be more elastic in response to changing workload demand?
How should an Amazon EC2 instance be granted access to an Amazon S3 bucket in accordance with security best practices?
Which of the following is included in the AWS Trusted Advisor checks? (Select two.)
What is AWS accountable for under the AWS shared responsibility model?
Which of the following tasks may be used to improve Amazon EC2 costs? (Select two.)
Which of the following is a customer duty under the AWS shared responsibility model?
Which of the following is the customer's obligation under the AWS shared responsibility model?
Which scenarios should a user report to the AWS Abuse team? (Select two.)
Which AWS serverless platform services are included?
According to the AWS shared responsibility model, which of the following is the customer's obligation?
Which of the following is the customer's obligation under the shared responsibility model?
Which of the following are customer duties under the AWS shared responsibility model? (Select two.)
Which of the following tasks is the AWS customer's duty under the shared responsibility model? (Select two.)
Before transferring an environment to the AWS Cloud, a cloud practitioner must receive AWS compliance reports. How are these reports produced?
Which of the following actions is the customer's responsibility under the AWS shared responsibility model? (Select two.)
What may be associated to an Amazon EC2 instance through AWS Identity and Access Management (IAM) to initiate service requests?
Which of the following is a duty of AWS under the AWS shared responsibility model?
A copy of the AWS SOC 2 report is required during a compliance review by one of the auditors. Which service should this request be sent through?
According to the AWS shared responsibility model, which of the following is exclusively the responsibility of AWS?
Which of the following tasks is the customer's duty under the shared responsibility model? (Select two.)
Which of the following are AWS obligations, according to the AWS shared responsibility model? (Select two.)
Which AWS shared responsibility controls are shared? (Select two.)
Which functionality may be utilized to prevent inadvertent overwrites or deletions of Amazon S3 buckets?
Amazon DynamoDB is used by a business in its AWS Cloud architecture. Which of the following is a duty of the organization, according to the AWS shared responsibility model? (Select two.)
Which of the following areas is the customer's duty under the shared responsibility model? (Select two.)
What are the customer's duties under the AWS shared responsibility model? (Select two.)
Which tasks need the root user credentials for an AWS account? (Select two.)
Which solution enables users in various AWS Regions to have the FASTEST application response times for frequently requested data?
An Elastic Load Balancer, numerous Amazon EC2 instances, and Amazon RDS are used to run a web application on AWS. Which security measures are AWS's responsibility? (Select two.)
When utilizing the AWS Command Line Interface (AWS CLI), which of the following Identity and Access Management (IAM) entities is connected with an access key ID and secret access key?
What is AWS's sole obligation under the AWS shared responsibility model?
Which AWS service is responsible for monitoring the health of your applications automatically?
Seasonal sales surges occur many times a year for an online retailer, most notably during the holidays. At other times of year, demand is lower. The corporation has difficulty forecasting the seasonal increase in infrastructure demand. Which benefits of migrating to the AWS Cloud would be the most beneficial to the business? (Select two.)
Which AWS service enables customers to view AWS compliance control reports on-demand and self- service?
What may aid in the evaluation of a cloud-based application? (Select two.)
A company's on-premises servers and the AWS Cloud need a dedicated network connection. Which Amazon Web Services (AWS) service should be used?
How can a client anticipate future expenses associated with the operation of a new web application?
Which AWS service must be enabled in order for the AWS Management Console to monitor all user account changes?
A business needs to guarantee that users of the AWS Management Console adhere to password complexity guidelines. How can a business customize the difficulty of its passwords?
Which AWS service would determine if a security group has granted unlimited access to a resource?
According to the AWS shared responsibility model, what is one of the customer's responsibilities?
Which features are available to users while use AWS KMS?
On Amazon EC2 instances, a business has installed various relational databases. Each month, the database software manufacturer publishes new security updates for databases that must be deployed. Which method is the MOST EFFECTIVE for applying security patches?
What does it mean to provide AWS IAM users the fewest possible privileges?
Which of the following may be used to restrict certain users' access to Amazon Simple Storage Service (Amazon S3) buckets?
Which AWS service enables a business to identify and reroute customers to other servers in the event of a website server outage?
A corporation is required by law to track and assess configuration changes to AWS resources, as well as to conduct corrective steps. Which Amazon Web Services (AWS) service should the business use?
Which AWS shared responsibility model duties are the customer's responsibility? (Select two.)
What storage capabilities does Amazon S3 Intelligent-Tiering provide?
A business wishes to transfer its apps to an AWS VPC. These apps will need access to resources located on-premises. Which combination of activities will allow the business to achieve this objective? (Select two.)
What is the most effective approach to link an on-premises network to numerous VPCs located in separate AWS Regions?
Which AWS service does Chef and Puppet utilize to automate configuration management?
SQL injection attacks are being launched against an application from a variety of external locations. Which AWS service or functionality can assist in automating response to these attacks?
Where should a business go to locate, test, purchase, and deploy software that works on AWS?
Which duty is the customer's responsibility under the AWS shared responsibility model?
How can a user safeguard against AWS service outages in the event of a widespread natural disaster?
A company's managed IAM policy does not allow users the rights essential to do needed activities. How is this situation to be resolved?
A business wishes to strengthen its security and audit posture by restricting incoming access to Amazon EC2. What should the organization use instead of opening incoming SSH ports and handling SSH keys to remotely access instances?
Which tasks need access to the root user of the AWS account? (Select two.)
Users of Amazon Route 53 are able to:
Which service's primary objective is to manage software versions?
Which AWS solution enables rapid setup and management of a new multi-account AWS environment?
Which operation needs the usage of the root account user credentials for the AWS account?
Which AWS situations exemplify the idea of elasticity? (Select two.)
A corporation want to connect to AWS from a distant office through a private, low-latency connection. Which strategy is advised for meeting these requirements?
Which service should a client utilize to integrate and manage several Amazon Web Services accounts centrally?
A business must track and anticipate AWS expenditures and use. Additionally, the organization must configure event-driven alert alerts that are triggered when expenditure limitations are exceeded. Which Amazon Web Services (AWS) offering or technology should the business employ to achieve these requirements?
How might an AWS client implement common access restrictions to a big group of users easily?
Which AWS services are available for application deployment? (Select two.)
Which responsibility do customers bear while using Amazon EC2? (Select two.)
A business is consolidating many apps into a single Amazon Web Services (AWS) account. The organization wishes to keep track of the AWS Cloud fees paid by individual applications. What can the business do to ensure compliance with this requirement?
Which AWS function will assist users in determining the CPU capacity of an application running on an Amazon EC2 instance?
How can AWS Trusted Advisor assist AWS Cloud users? (Select two.)
A business is now undergoing a security examination. The audit includes a security and compliance review of the company's AWS infrastructure and services. The auditor must identify and download AWS security and compliance materials. The System and Organization Control (SOC) reports are one of these documents. Which AWS service or collection of services is capable of providing these documents?
A business wishes to deliver managed Windows virtual desktops and programs through secure network connections to its distant workers. Which AWS services does the business have access to in order to achieve these requirements? (Select two.)
Which of the following is an AWS shared responsibility?
A user must locate, categorize, and safeguard sensitive data stored in Amazon S3 automatically. Which AWS service satisfies these criteria?
On an Amazon EC2 instance, a business hosts an application. Several AWS resources, including Amazon S3 and Amazon DynamoDB, are required by the EC2 instance. What is the MOST OPTIMAL way to delegate permissions?
Under the AWS shared responsibility paradigm, the following parties are responsible for the security and patching of the guest operating system:
Which of the following is a method for enhancing AWS security? (Select two.)
A business has specified the Amazon Web Services (AWS) resources it requires for a new application. The business must determine the expenses associated with operating the application on AWS. What actions should the business take to comply with this stipulation?
A corporation is developing an application that must distribute photos and videos internationally with the least amount of delay possible. Which strategy may the business take to do this in the most cost-effective manner?
Which AWS service enables the generation of warnings based on a monthly bill estimate?
Which resource is the MOST EFFECTIVE for keeping current on AWS security announcements?
Which of the following operations can be done only after logging in using the root user credentials for your AWS account? (Select two.)
Which AWS services aid in application performance optimization by lowering latency associated with global content access? (Select two.)
Which techniques are available for deriving AWS charges by department? (Select two.)
Which AWS services enable users to link their AWS Cloud resources to their on-premises resources? (Select two.)
How can a client strengthen the security of their Amazon Web Services (AWS) account logons? (Select two.)
A big firm often has a single Amazon Web Services (AWS) account. What are the benefits of repurposing a single AWS account to create additional AWS accounts? (Select two.)
Which AWS IAM feature is used to link numerous users with a set of permissions?
Which AWS service enables application decoupling?
A previously utilized Amazon EC2 instance for development is no longer available and does not display in the AWS Management Console. Which AWS service should be utilized to discover what activity resulted in the inaccessibility of this EC2 instance?
What does AWS's obligation under the shared responsibility paradigm entail?
A business wishes to grant access to Amazon RDS to one of its workers. Additionally, the corporation wishes to confine contact to the AWS CLI and AWS software development kits (SDKs). Which combination of measures should the business do in order to satisfy these needs while adhering to the concept of least privilege? (Select two.)
Which acts exemplify excellent practices for AWS IAM use? (Select two.)
Which actions should a user take if he or she detects a hacked AWS account? (Make a selection of at least two.)
Which job, in accordance with the AWS shared responsibility model, is AWS's duty for workloads operating on Amazon EC2?
Which tool may be used to track planned AWS infrastructure changes?
Which of the following are AWS security recommended practices for managing an AWS account's root user using AWS Identity and Access Management (IAM)? (Choose\stwo.)
A business has a concentrated group of users with significant file storage needs that outstrip the available capacity on-premises. The organization wishes to expand its file storage capacities for this group while maintaining the performance advantages associated with local content sharing. Which AWS option is the MOST OPERATIONALLY EFFECTIVE in this scenario?
Which service allows consumers to audit AWS API calls?
Which AWS service would be utilized to manage AWS access across numerous accounts in a centralized fashion?
Which Amazon Web Offerings (AWS) services provide computational capabilities? (Select two.)
What is the greatest place for a user to get information and reports on AWS compliance?
A business wishes to be alerted when its AWS Cloud expenses or usage surpass certain limits. Which Amazon Web Services (AWS) offering will meet these requirements?
A business needs to monitor changes to AWS resource configurations for compliance purposes. Which Amazon Web Services functionality may be utilized to fulfill this requirement?
A customer requests advise on potential cost reductions associated with the migration from on- premises to AWS. Which tool is most appropriate in this situation?
Which of the following is a recommended method for setting IAM user policies?
A business has chosen to shift its production workloads to the Amazon Web Services (AWS) Cloud. Which activities may assist in lowering operating expenses associated with the migration? (Select two.)
Which of the following procedures should a client perform while doing penetration testing on Amazon Web Services (AWS)?
Which service would be responsible for network connection in a hybrid design that incorporates Amazon Web Services?
Which Amazon Web Services (AWS) service can be used to monitor illegal API calls?
An ecommerce firm predicts a significant rise in online traffic in the run-up to two very popular shopping holidays. Which AWS service or functionality enables dynamic resource adjustment in response to this change in demand?
Customer duties under the AWS shared responsibility model include which of the following?
Which AWS service should a business use to check the compliance of AWS resource settings on a continual basis?
A business operates a website that is hosted on AWS and is protected by an Application Load Balancer. The business wishes to protect its website against SQL injection and cross-site scripting. Which Amazon Web Services (AWS) service should the business use?
A huge corporation has recruited a developer who requires AWS credentials. Which security best practices should be adhered to? (Select two.)
A business has a 500 TB image repository that has to be moved to Amazon Web Services (AWS) for processing. Which AWS service is the most cost-effective way to import this data?
What is the function of a VPC's internet gateway?
Which AWS IAM feature enables developers to use the AWS CLI to access AWS services?
Which of the following describes the root user of an AWS account?
The AWS IAM recommended practice for providing the fewest possible privileges is as follows:
To prevent fraudulent compute activity, a user need a simple method to detect whether any Amazon EC2 instances have unlimited access to their ports. Which Amazon Web Services (AWS) offering will meet this requirement?
A business is relocating and need an encrypted connection to AWS. Which AWS service will assist you in fulfilling this requirement?
Which of the following is not a recommended approach for IAM user management? (Select two.)
Which Amazon Web Services feature assists in identifying harmful or illegal activity in AWS accounts and workloads?
Which AWS service enables you to get AWS security and compliance information on-demand?
Which AWS hybrid storage offering allows users to effortlessly integrate on-premises applications with AWS Cloud storage?
Which VPC component adds an additional layer of protection to the subnet?
Which AWS service or functionality involves the implementation of an internet service provider (ISP) and a colocation facility?
A business must monitor its AWS accounts and determine when an API request is performed against its AWS resources. Which AWS product or service is most appropriate for meeting these requirements?
Which AWS service allows clients to audit and monitor AWS resource changes?
Which AWS service or feature gives information about planned events that are now occurring or may occur in the near future and may impact an AWS account?
Which AWS service or feature can help to improve network security by restricting requests for a web application hosted on AWS from a certain network? (Select two.)
Which components are necessary to configure an AWS site-to-site VPN connection successfully? (Select two.)
A business need security against increased distributed denial of service (DDoS) assaults on its website, as well as help from AWS professionals in the case of such an attack. Which AWS managed service will satisfy these criteria?
A Cloud Practitioner requires a dedicated link between AWS resources and an on-premises system that is constant and devoted. Which AWS service satisfies this criterion?
Which AWS service or functionality allows customers to encrypt data stored in Amazon S3 during the storage process?
AWS provides which of the following security-related services? (Select two.)
Each department inside a business has its own distinct Amazon Web Services account and payment mechanism. The new leadership of the corporation wants to centralize control and consolidate payments. How may this be accomplished via the use of AWS services or features?
Which actions can an IAM user accomplish if they have been given all available AWS Identity and Access Management (IAM) permissions? (Select two.)
What components of a credential are necessary to get programmatic access to an Amazon Web Services account? (Select two.)
A business need safe access to an Amazon S3 bucket from an Amazon EC2 instance without requiring internet connectivity. What strategy should the business use to reach this objective?
A business needs to verify that two Amazon EC2 instances are located in different data centers with the lowest possible communication delay between them. How is the business going to achieve this requirement?
Which AWS services are responsible for managing and automating application deployments? (Select two.)
Which of the following may be used to track down an Amazon EC2 instance's stopper?
A business uses an Amazon S3 bucket to store photographs for a public-facing website that is visited by millions of visitors worldwide. Which AWS service will deliver this material with the least amount of lag possible?
Which of the following services has functionality for mitigating Distributed Denial of Service (DDoS) attacks? (Select two.)
Which activity on the AWS Cloud is a customer duty under the AWS shared responsibility model?
Which Amazon Web Services (AWS) offering enables customers to deploy resources in a consistent and repeatable manner?
Which AWS service or feature enables users to effortlessly extend connection across thousands of virtual private clouds (VPCs)?
Which security credentials are needed to use the AWS Command Line Interface (AWS CLI) to execute commands?
Which AWS service makes AWS security and compliance documents available on-demand?
Which AWS service determines security groups that enable a user's AWS resources to be accessed without restriction?
To maximize expenses and resource utilization, a business must monitor the operational health of its whole AWS Cloud computing system. Which AWS service will satisfy these criteria?
What steps should a client take if they fear their AWS account has been compromised? (Select two.)
Which AWS service should a cloud practitioner utilize to determine an AWS account's security vulnerabilities?
How can the AWS Cloud boost user labor productivity after a data center migration?
Which Amazon Web Services service consolidates, organizes, and prioritizes security warnings and results from several Amazon Web Services services?
A user must audit and review the configuration of all AWS resources on a regular basis, detect non- compliant accounts, and be alerted when a resource changes. Which Amazon Web Services (AWS) offering may be utilized to fulfill these requirements?
Which tool is used to anticipate Amazon Web Services (AWS) spending?
To save money, a user must discover unused Amazon Elastic Block Store (Amazon EBS) volumes. Which Amazon Web Services (AWS) service or functionality will satisfy this requirement?
Which Amazon Web Services (AWS) service or functionality can be utilized to protect against SQL injection attacks?
Which approach enables developers to make AWS services available from inside their application code?
A business intends to store confidential data in an Amazon S3 bucket. Which job falls within the purview of AWS?
Which Amazon Web Services (AWS) offering allows customers to replicate resources across AWS Regions?
Which of the following approaches does AWS allow for securing Identity and Access Management (IAM) users? (Select two.)
A user wishes to encrypt data that AWS CloudTrail receives, stores, and manages. Which Amazon Web Services (AWS) offering will give this capability?
According to the AWS shared responsibility model, which of the following is the customer's duty for installing the latest security updates and patches?
Which of the following duties falls within the purview of AWS?
A business must maintain records of any resource modifications made using the AWS Management Console or AWS APIs. Which Amazon Web Services (AWS) offering should the business employ to achieve this requirement?
Which AWS service enables the creation of inbound and outbound network access control lists (ACLs) for the purpose of hardening external connection to Amazon EC2?
What are the recommended practices for IAM when it comes to AWS account root user access keys?
A business wants to store data with high availability, encrypt it at rest, and have direct internet access to it. Which AWS service would best match these objectives in terms of cost?
A business has an AWS environment that comprises of a virtual private cloud (VPC), various subnets, and a large number of Amazon EC2 instances inside the subnets. An engineer want to limit incoming traffic to a single EC2 instance while leaving other EC2 instances unaffected. Which AWS service or functionality should the developer use to accomplish this task?
Which AWS service or feature assists in restricting which AWS services, resources, and particular API activities each member account's users and roles may access?
A business wishes to split its incoming traffic amongst numerous Amazon EC2 instances. Which Amazon Web Services (AWS) service or functionality should be employed to fulfill this requirement?
What are the benefits of adopting the AWS Cloud versus an on-premises solution?
A web developer is apprehensive that a DDoS attack might be launched against his application. Which AWS services or features can assist defend you from a cyber-attack like this? (Select two.)
Which of the following is not an AWS recommended practice for managing the root user of an AWS account?
According to the AWS shared responsibility model, who is responsible for scheduling and conducting backups when using Amazon RDS?
A financial services business want to verify that every activity on its AWS account is tracked in order to comply with regulatory obligations for logging, audits, and governance. Which AWS service satisfies these criteria?
Which auditing procedure is AWS solely responsible for?
Which AWS hybrid storage option allows you to effortlessly integrate on-premises applications with AWS Cloud storage through conventional file-storage protocols?
Unauthorized users are believed to have copied data from an Amazon S3 bucket to their own account. Which AWS service will keep track of the user's actions?
Which of the following is a duty of the client while utilizing Amazon RDS?
Which AWS service enables automated scaling up and down of an application without requiring capacity planning decisions?
Which of the following is a benefit of using Amazon Web Services?
Which of the following services allows you to view AWS compliance reports on-demand?
Which AWS services may be used to link an on-premises network to a VPC? (Select two.)
Which AWS service will enable the generation of encryption keys for use in encrypting data? (Select two.)
Which of the following options enables single sign-on (SSO) to the AWS Console for a customer?
A security officer requests a list of any probable Amazon EC2 security group vulnerabilities. Which Amazon Web Services (AWS) service should the officer use?
A security officer want to allow IPsec communications so that users from on-premises networks may safely connect to AWS. Which Amazon Web Services (AWS) service or functionality should the officer utilize?
In AWS Identity and Access Management (IAM), access keys are used to:
A business need cost-effective storage for static content and an endlessly scalable data storage infrastructure. Which AWS service should the business select?
A business need a firewall to regulate network traffic to and from a single Amazon EC2 instance. This firewall will not regulate network traffic to or from other instances on the same subnet. Which Amazon Web Services (AWS) service or functionality can the business employ to achieve these requirements?
A client is in the process of installing a new application and is required to choose an AWS Region. Which of the following elements could have an effect on the customer's choice? (Select two.)
Which AWS service is responsible for capacity provisioning, load balancing, Auto Scaling, and application health monitoring throughout the deployment process?
Which of the following are AWS-managed user authentication services? (Select two.)
A business makes use of a database that includes a simple sign-up page for creating users and a basic login form for authenticating users and granting them access to the database. The firm want to enable users to save personal information, but user access must be more safe and trustworthy. Which Amazon Web Services (AWS) service or functionality will satisfy these requirements?
AWS-hosted web application was flooded with malicious requests from a repeating group of IP addresses. Which Amazon Web Services (AWS) service can assist in securing the application and blocking malicious traffic?
What role do security groups play in ensuring the security of Amazon Elastic Compute Cloud (Amazon EC2) instances?
Where should users report instances of AWS resources being utilized maliciously?
Which Amazon Web Services (AWS) offering enables customers to track the changes made to a resource over time?
A business is seeking a method for encrypting data stored on Amazon S3. Which AWS managed service can assist with this?
Which Amazon Web Services offering allows customers to access securely to AWS resources through the public internet?
Which Amazon Web Services (AWS) service may be used to monitor resource changes and ensure compliance?
Which of the following is an Amazon Web Services compute service? (Select two.)
How do I go about requesting penetration testing on AWS resources?
Which AWS service enables on-demand compliance report retrieval?
Which network security features does Amazon VPC support? (Select two.)
A network engineer is tasked with the responsibility of establishing a dedicated 10 Gbps network connection between an on-premises system and AWS. Which Amazon Web Services (AWS) function or feature should the engineer utilize?
Which security-related tasks are the customer's responsibility in the AWS Cloud?
Which AWS service can assist a business in determining who removed an Amazon EC2 instance yesterday?
What protection does AWS Shield Standard offer?
By treating infrastructure in the AWS Cloud as code, customers can:
Which of the following allows you to share the cost savings associated with Reserved Instances across several AWS accounts?
Which AWS service or component enables internet-bound traffic to reach a VPC?
Which of the following are customer obligations in the AWS Cloud? (Select two.)
Recently, an online retailer implemented a production web application. The system administrator is responsible for preventing typical attack vectors such as SQL injection and cross-site scripting. Which Amazon Web Services (AWS) service should the administrator utilize to resolve these issues?
Which AWS service is capable of encrypting data in transit?
Which AWS service enables customers to comply with contractual and regulatory data security obligations by using dedicated hardware appliances inside the AWS Cloud?
Which of the following are AWS shared responsibility model customer responsibilities? (Select two.)
Where can I obtain AWS compliance and certification reports?
A user requires an automated security assessment report that identifies unauthorized network access to Amazon EC2 instances and their associated issues. Which AWS service will be responsible for generating this evaluation report?
How can a business separate the expenses of production and non-production workloads on Amazon Web Services (AWS)?
Which security service on AWS detects and categorizes sensitive data or intellectual property automatically?
Which Amazon VPC feature allows users to monitor IP traffic to and from Amazon EC2 instances?
Which AWS service simplifies the process of creating and managing AWS users and groups, as well as providing them with free secure access to AWS resources?
Which step will provide documentation that will assist a business in determining if its usage of the AWS Cloud complies with applicable regulatory standards?
Which AWS services can be used to collect information about the activities of an AWS account? (Select two.)
Utilizing AWS Identity and Access Management (IAM) to restrict access to just the resources necessary to complete a job is referred to as:
Which of the following may be used to restrict access to an Amazon Storage Service (Amazon S3) bucket to specified users?
Which of the following is a shared control mechanism between the client and Amazon Web Services?
What information may users access using AWS Artifact?
What is a job in Amazon Web Services' Identity and Access Management (IAM) system?
Which AWS service offers a self-service site for accessing AWS compliance reports on-demand?
Which AWS service will be responsible for tracking user activities on AWS?
How can AWS customers exchange infrastructure costs for operational costs?
Which of the following are advantages of using Amazon RDS over an on-premises database? (Select two.)
Which service may be used to monitor and get alerts for AWS account root user sign-in events through the AWS Management Console?
Which AWS feature will result in a lower total cost of ownership (TCO) for the customer?
Which login credentials for the AWS Management Console adhere to security best practices? (Select two.)
A business would want to monitor the CPU use of its Amazon EC2 resources. Which Amazon Web Services (AWS) service should the business use?
The compliance officer of a corporation requests access to the AWS Service Organization Control (SOC) reports. Which Amazon Web Services (AWS) service or functionality should the compliance officer use to accomplish this task?
A developer has an AWS account and requires access to the test database of another account. Which Amazon Web Services (AWS) service or capability can the developer use to access the test database?
Which controls does AWS completely transfer to the client under the AWS shared responsibility model?
Which of the following is not a component of AWS's shared responsibility model?
Which AWS Support package includes a comprehensive set of AWS Trusted Advisor audits?
Which Amazon Web Services managed services are available for connecting an on-premises data center to the AWS network? (Select two.)
Which of the following functions as a virtual firewall at the Amazon EC2 instance level, allowing one or more instances to govern their own traffic?
Which AWS service is perpetually free for users?
A database administrator is attempting to track down the individual who erased a vital Amazon Redshift cluster. Which AWS service assists in monitoring and archiving such account activity?
What is the Amazon CloudWatch service?
A business that has just moved to AWS want to provide intelligent threat prevention and continuous monitoring across all of its AWS accounts. Which AWS service should the business employ to accomplish this objective?
Which responsibilities does AWS have under the shared responsibility approach for security and compliance?
Which AWS service or feature can be used to obtain information about the availability of all AWS services?
Which AWS service is used to encrypt Amazon EBS data?
Which of the following advantages are associated with using AWS Trusted Advisor? (Select two.)
Which AWS service enables customers to get on-demand security and compliance reports for AWS infrastructure?
Which managed service provided by AWS is used to host databases?
A business is building an e-commerce website with the purpose of storing and processing credit card data. The organization is in need of information about AWS compliance reports and AWS agreements. Which Amazon Web Services (AWS) offering enables on-demand access to these items?
Which of the following services may be used to prevent network traffic from reaching a particular instance? (Select two.)
Which of the following enables customers to create a dedicated network connection between their internal network and Amazon Web Services?
A Cloud Practitioner must ascertain if any security groups in an Amazon Web Services account have been established to provide unlimited access to certain ports. What is the MOST SIMPLE method to do this?
Which of the following is not an AWS responsibility?
Where can I get AWS compliance documentation, such as a SOC 1 report?
Which of the following is an advantage of the AWS Compliance program for AWS customers? (Select two.)
Which of the following will increase the security of AWS Management Console access? (Select two.)
Which service allows risk audits by monitoring and recording account activities on a continuous basis, including user actions in the AWS Management Console and AWS SDKs?
An application is executed on many Amazon EC2 instances that concurrently access a shared file system. Which Amazon Web Services (AWS) storage service should be used?
A solutions architect must manage a fleet of Amazon EC2 instances to ensure that any instances that fail are replaced. Which Amazon Web Services (AWS) offering should the solutions architect utilize?
The security team of a business mandates that all Amazon EC2 workloads use authorized Amazon Machine Images (AMIs). Which AWS service should the organization utilize to ensure that its EC2 instances are utilizing authorized AMIs?
Which of the following security measures safeguards an AWS account's access? (Select two.)
Which Amazon Web Services (AWS) service would you utilize to receive compliance reports and certificates?
A user needs to prepare a report that summarizes the status of AWS account's major security checks. The report must contain the following: ✑ The status of Amazon S3 bucket permissions. ✑ Whether multi-factor authentication is enabled for the AWS account root user. If any security groups are set to enable unlimited access, this will be shown. Where can I get all of this information in one place?
Which AWS service enables the detection of unintentional data breaches including personally identifiable information (PII) and user credential data?
Which Amazon Web Services offering offers risk audits of an AWS account by monitoring and documenting user activity and source IP addresses?
A business want to develop new application workloads on the AWS Cloud rather than on-premises resources. What costs may be saved by using the AWS Cloud?
Which AWS services take use of AWS edge locations? (Select two.)
A user must adhere to compliance and software licensing requirements that require a workload to be physically housed on a server. Which Amazon EC2 instance pricing model will satisfy these criteria?
A business wishes to utilize an AWS service to monitor the health of application endpoints and to redirect traffic to healthy regional endpoints in order to increase application availability. Which service will meet these criteria?
Utilizing AWS Config to track, audit, and analyze changes to AWS resources in order to provide traceability is an example of which pillar of the AWS Well-Architected Framework?
An external auditor has demanded that a business produce a list of all IAM users, along with the status of each user's credentials and access keys. What is the MOST SIMPLE method of delivering this information?
Which of the following statements accurately defines a security best practice that may be executed using AWS IAM?
Which AWS service identifies security groups that provide unlimited Internet access to a limited number of ports?
A user is running an application on Amazon Web Services (AWS) and observes that one or more AWS- owned IP addresses are being used in a distributed denial-of-service (DDoS) assault. Whom should the user first contact in this situation?
Which AWS function or service allows for the collection of data about incoming and outgoing traffic in an AWS VPC infrastructure?
Which Amazon Web Services (AWS) service can notify you when personally identifiable information (PII) is stored in an Amazon S3 bucket?
Which AWS service allows customers to monitor for certain words, values, or patterns and configure alerts based on metrics?
What is the AWS customer's share of duty under the AWS shared responsibility model?
Which AWS security service protects applications against distributed denial of service threats by providing continuous detection and automated inline mitigations?
Which of the following enables an application running on an Amazon EC2 instance to write data securely to an Amazon S3 bucket without the need for long-term credentials?
Which AWS service or feature enables the establishment of a dedicated network connection between an organization's on-premises data center and the AWS Cloud?
What type of application could you use if you wanted to install security patches or service packs beyond the patch level from an AMI?
As a SysOps administrator, you need to have a fundamental understanding of the costs associated with your AWS resources. You are tasked with looking at usage reports of all the costs associated with your AWS infrastructure. You also need to review the last thirteen months with the ability to forecast costs for the next three months. What AWS resource could you use to meet this requirement?
You are managing several production EC2 instances that use a public-facing subnet. You have three new employees on the east coast and twelve new employees on the west coast. You need to give all the employees access to your VPC, but each employee will need different forms of access within AWS and user accounts created. What is your most effective solution?
Which of the following technologies should you use for securely connecting remote workers and on-premises networks to your AWS cloud?
Which of these technologies should you use for securely connecting remote workers and on-premises networks to your AWS cloud?
You are a system operator focusing on monitoring a group of servers within the AWS infrastructure and a group of servers that are on-premises. You are tasked with monitoring metrics at the system level for both groups of servers within a universal dashboard. How would you accomplish this task?
Which two statements are correct applications of VPC components?
What concept is related to increasing data retrieval rates by placing viable data into a static memory buffer for future use?
You work for a company that manages cellular phone data. The company has just started migrating their first set of applications to the AWS infrastructure. As the system administrator, you want to make sure the tech team is using AWS best practices as they migrate their credentials into AWS. Which two options will meet these requirements?
Which of these will you use to achieve regulatory compliance on AWS by enforcing encryption for data at rest and in transit?
Your current AWS architecture supports your production workload using both Reserved and On-Demand Instances. You are working on a new project that is going to temporarily increase load production times by 20%. You also need to test your front-end application by enabling TLS 1.2 protocol settings. What type of Amazon EC2 instance should you use to meet this requirement?
You are managing several AWS EC2 instances that you just created. You need to configure an AWS firewall to protect the traffic coming in to the application that has been installed on top of the EC2 instance. You also want to understand the shared responsibility model. What is the name of the AWS-provided firewall, and who is responsible for its setup and configuration?
You need expert guidance on how your company needs to meet security and compliance requirements and implement best practices while making a migration to the AWS Cloud. Which resource would you use to best suit this need?
You want to use an AWS service that allows you to automate evidence collection and perform risk and compliance management. Which of the following services should you use for this scenario?
What Amazon security feature encrypts data at rest using AES-256 and is considered transparent to the end user within the Amazon S3 environment?
Which two tasks can you complete using AWS Artifact?
Your company has several AWS Cloud accounts and VPCs in all of them. You need to integrate several VPCs into a much larger network. Which two connectivity options can you use for this?
You are working with a developer that is migrating into the AWS infrastructure. The on-premises system has several processes that have to be executed manually. The developer wants to use a serverless solution and needs an AWS resource that can manage scripts, packages, and specific app code while being stored in the Amazon S3 environment. What AWS service can meet these requirements?
What is the main reason for using an Elastic IP address associated with your virtual private cloud account?
You need to inventory all the IT assets across your systems as per their usage and analyze infrastructure dependencies and application components. You also need to perform resource grouping into applications. Which of these technologies will you use for this?
What kind of strategy does Amazon offer for situations regarding accidental deletion within Amazon S3?
Which of these elements do you need to access an AWS account programmatically?
You want to implement security measures that automatically enforce security policies across resources and centralize the deployment of baseline security groups for VPC protection. Which of the following AWS services best supports these requirements?
Which Amazon storage option is a good solution if you need storage that offers block-level encryption, high reliability, and is highly available, while using applications that use fine-grained updates to raw unformatted data?
Which AWS service should you use to reduce misreporting and non-compliance risk, save costs on cloud infrastructure, and ensure non-compliant server usage is stopped before it occurs?
You work for a large company that manages electronic patient records. The primary application is configured with a load balancer that is used to evenly distribute the workload between two production EC2 instances. You are tasked with making sure the connection from the client medical facilities and the load balancer is properly secured by using the appropriate SSL security policy. What policy would you choose to accomplish this task?
You are asked to ensure that your company's data storage is in sync with the necessary regulatory compliance requirements. Which AWS service helps you manage the encryption for data at rest on your AWS Cloud?
Which of these statements correctly defines an Availability Zone?
You need to perform modeling and provisioning for cloud resources needed by your applications across several AWS Regions using automation. You also need to be able to perform rollbacks in case of any issues. Which AWS system will you need to use for this?
What does Amazon recommend for protecting data in transit when you have a concern of accidental information disclosure?
You need a way to automate the process of evidence collection so that you can easily assess the effectiveness of controls, including activities, procedures, and policies. Which of the following AWS services should you use for this?
You are learning about encryption options offered by AWS. You have created two EC2 instances. One of the instances is for a file sharing server and the other is for a front-end web server. As it relates to the shared responsibility model and the need for server-side encryption on a file system within an EC2 environment, who is responsible for encrypting data at rest?
Which of the following security events would AWS Trusted Advisor look for within your AWS infrastructure?