Security and Compliance — page 8
A company wants to use AWS for running SAP workloads with dedicated hardware and specific licensing compliance. Which EC2 feature supports this?
Which AWS service automatically discovers, classifies, and monitors sensitive data like PII stored across your AWS environment?
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi- AZ architectures?
A company runs many Amazon EC2 instances in its VP
A company runs an on-premises contact center for customers. The company needs to migrate to a cloud- based solution that can deliver artificial intelligence features to improve user experience. Which AWS service will meet these requirements?
An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost-effective manner. Which AWS Cloud features will help the company meet this requirement? (Choose two.)
Which AWS service can create a private network connection from on premises to the AWS Cloud?
Under the AWS shared responsibility model, which of the following is a responsibility of the customer?
Which AWS service integrates with other AWS services to provide the ability to encrypt data at rest?
Which of the following is a customer responsibility according to the AWS shared responsibility model?
An administrator observed that multiple AWS resources were deleted yesterday. Which AWS service will help identify the cause and determine which user deleted the resources?
To assist companies with Payment Card Industry Data Security Standard (PCI DSS) compliance in the cloud, AWS provides:
In which situations should a company create an IAM user instead of an IAM role?
A company needs stateless network filtering for its VP
A company wants a fully managed service that centralizes and automates data protection across AWS services and hybrid workloads. Which AWS service will meet these requirements?
A company has multiple AWS accounts. The company needs to receive a consolidated bill from AWS and must centrally manage security and compliance. Which AWS service or feature should the company use to meet these requirements?
Which AWS offering can analyze a company’s AWS environment to discover security vulnerabilities on Amazon EC2 instances?
A company wants to test a new application. Which AWS principle will help the company test the application?
A company wants to consolidate its call centers to improve the customer voice and chat experience with call center agents. Which AWS service or tool will meet these requirements?
A company wants to run its application on Amazon EC2 instances. The company needs to keep the application on- premises to meet a compliance requirement. Which AWS offering will meet these requirements?
A company wants to connect its supported AWS services and VPCs. The company does not want to expose its internal traffic to the public internet. Which AWS service will meet these requirements?
Which AWS service can manage permissions for AWS resources by using policies?
A company needs to run some of its workload in the AWS Cloud. The company needs to keep some of the workload in its own on-site data center due to compliance reasons. Which AWS service will meet these requirements?
A company has a client that uses an Amazon RDS database. The client requests Information about operating system-level upgrades on the AWS resources that host the RDS database. The company employs a third-party provider to monitor the RDS database. Who is responsible for upgrading the operating systems for Amazon RDS under the AWS shared responsibility model? Options:
A company notices suspicious network activity against an application that is running on a fleet of Amazon EC2 instances. The suspicious activity is coming from a single IP address. Which AWS service should the company use to block access from this IP address?
Which task can an IAM user perform without AWS account root user credentials?
Which AWS service provides this functionality?
Which scenarios represent the concept of elasticity on AWS? (Select TWO.)
Which of the following options are related to the reliability of AWS?
A customer is deploying a new application and needs to choose an AWS Region. Which of the following factors could influence the customer's decision?
What can assist in evaluating an application for migration to the cloud?
The principle “design for failure and nothing will fail” is very important when designing your AWS Cloud architecture. Which of the following would help adhere to this principle?
Jessica is managing an e-commerce web application in AWS. The application is hosted on six EC2 instances. One day, three of the instances crashed; but none of her customers were affected. What has Jessica done correctly in this scenario?
Which of the below is a best-practice when building applications on AWS?
What are the benefits of using an AWS-managed service?
Why would an organization decide to use AWS over an on-premises data center?
What is the framework created by AWS Professional Services that helps organizations design a road map to successful cloud adoption?
As part of the AWS Migration Acceleration Program (MAP), what does AWS provide to accelerate Enterprise adoption of AWS?
Which of the following are advantages of using AWS as a cloud computing provider?
Why are Serverless Architectures more economical than Server-based Architectures?
Which scenarios represent the concept of elasticity on AWS?
Which AWS service provides a central location to track the progress of application migrations across multiple AWS migration tools?
You have noticed that several critical Amazon EC2 instances have been terminated. Which of the following AWS services would help you determine who took this action?
Which statement is true regarding the AWS Shared Responsibility Model?
An organization has a large number of technical employees who operate their AWS Cloud infrastructure. What does AWS provide to help organize them into teams and then assign the appropriate permissions for each team?
What does the "Principle of Least Privilege" refer to?
Hundreds of thousands of DDoS attacks are recorded every month worldwide. What service does AWS provide to help protect AWS Customers from these attacks?
Which of the following services allows customers to manage their agreements with AWS?
Which of the following are examples of AWS-managed services, where AWS is responsible for the operational and maintenance burdens of running the service?
Which of the following must an IAM user provide to interact with AWS services using the AWS Command Line Interface (AWS CLI)?
Which of the following are examples of AWS shared controls?
Under the shared responsibility model, which of the following is the responsibility of AWS?
Your company is developing a critical web application in AWS, and the security of the application is a top priority. Which of the following AWS services will provide infrastructure security optimization recommendations?
In the AWS Shared responsibility Model, which of the following are the responsibility of the customer?
According to the AWS shared responsibility model who is responsible for configuration management?
Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer?
Which AWS services can be used to gather information about AWS account activity?
Which of the following will enhance the security of access to the AWS Management Console?
What credential components are required to gain programmatic access to an AWS account?
Which of the following security measures protect access to an AWS account?
How can a customer increase security to AWS account logons?
AWS supports which of the following methods to add security to Identity and Access Management (IAM) users?
Which of the following security-related services does AWS offer?
Which of the following services have Distributed Denial of Service (DDoS) mitigation features?
Under the shared responsibility model which of the following areas are the customer's responsibility?
A company has moved to AWS recently. Which of the following AWS Services will help ensure that they have the proper security settings?
What is the AWS feature that provides an additional level of security above the default authentication mechanism of usernames and passwords?
According to the AWS Acceptable Use Policy, which of the following statements is true regarding penetration testing of EC2 instances?
According to the AWS Shared responsibility model, which of the following are the responsibility of the customer?
Which of the following is equivalent to a username and password and is used to authenticate your programmatic access to AWS services and APIs?
What is the AWS service that enables you to manage all of your AWS accounts from a single master account?
Which of the following services can help protect your web applications from SQL injection and other vulnerabilities in your application code?
Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS?
What are the default security credentials that are required to access the AWS management console for an IAM user account?
Which of the following aspects of security are managed by AWS?
What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment?
Which of the following services will help businesses ensure compliance in AWS?
Which of the following AWS security features is associated with an EC2 instance and functions to filter incoming traffic requests?
Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities?
An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products?
What is the AWS service that performs automated network assessments of Amazon EC2 instances to check for vulnerabilities?
Under the Shared Responsibility Model, which of the following controls do customers fully inherit from AWS?
Which of the following can help protect your EC2 instances from DDoS attacks?
Which of the following is used to control network traffic in AWS?
A developer needs to set up an SSL security certificate for a client's eCommerce website in order to use the HTTPS protocol. Which of the following AWS services can be used to deploy the required SSL server certificates?
Which AWS Service is used to manage user permissions?
A company needs to track resource changes using the API call history. Which AWS service can help the company achieve this goal?
What is the AWS' recommendation regarding access keys?
What is the AWS IAM feature that provides an additional layer of security on top of username and password authentication?
A company has discovered that multiple S3 buckets were deleted, but it is unclear who performed these actions. Which AWS service can be used to identify who deleted the buckets?
Which of the following AWS services can help you perform security analysis and regulatory compliance auditing?
When running a workload in AWS, the customer is NOT responsible for:
Which AWS service or feature is used to manage the keys used to encrypt customer data?
Which AWS Service allows customers to download AWS SOC & PCI reports?
What features does AWS offer to help protect your data in the Cloud?
Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)?
Which of the following are types of AWS Identity and Access Management (IAM) identities?
How does AWS notify customers about security and privacy events pertaining to AWS services?
Which IAM entity can best be used to grant temporary access to your AWS resources?
A company is seeking to better secure its AWS account from unauthorized access. Which of the below options can the customer use to achieve this goal?
Which of the following are examples of the customer's responsibility to implement security IN the cloud?
Which of the following is a type of MFA device that customers can use to protect their AWS resources?
You have just hired a skilled sys-admin to join your team. As usual, you have created a new IAM user for him to interact with AWS services. On his first day, you ask him to create snapshots of all existing Amazon EBS volumes and save them in a new Amazon S3 bucket. However, the new member reports back that he is unable to create neither EBS snapshots nor S3 buckets. What might prevent him from doing this simple task?
An external auditor is requesting a log of all accesses to the AWS resources in the company's account. Which of the following services will provide the auditor with the requested information?
Which AWS service allows a company to connect their AWS resources with an on-premises Microsoft Active Directory, enabling users to sign in with their existing corporate credentials?
Which AWS service enables you to quickly purchase and deploy SSL/TLS certificates?
A company wants to grant a new employee long-term access to manage Amazon DynamoDB databases. Which of the following is a recommended best-practice when granting these permissions?
When granting permissions to applications running on Amazon EC2 instances, which of the following is considered best practice?
Which of the following can be used to enable the Virtual Multi-Factor Authentication?
What should you do if you see resources, which you don't remember creating, in the AWS Management Console?
A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS service should the company use for this purpose?
Which of the following strategies helps protect your AWS root account?
You have just set up your AWS environment and have created six IAM user accounts for the DevOps team. What is the AWS recommendation when granting permissions to these IAM accounts?
Which of the following services provide real-time auditing for compliance and vulnerabilities?
What best describes penetration testing?
Which of the following can help secure your sensitive data in Amazon S3?
Which of the following services gives you access to all AWS auditor-issued reports and certifications?
For compliance and regulatory purposes, a government agency requires that their applications must run on hardware that is dedicated to them only. How can you meet this requirement?
What can you use to assign permissions directly to an IAM user?
Which of the following would you use to manage your encryption keys in the AWS Cloud?
A company has infrastructure hosted in an on-premises data center. They currently have an operations team that takes care of identity management. If they decide to migrate to the AWS cloud, which of the following services would help them perform the same role in AWS?
Where can AWS account owners get a list of all users in their account, including the status of their AWS credentials?
Which of the following services enables you to easily generate and use your own encryption keys in the AWS Cloud?
Which of the following resources can an AWS customer use to learn more about prohibited uses of the services offered by AWS?
Which of the following is the responsibility of AWS according to the AWS Shared Responsibility Model?
Which of the following services enables you to generate and use your own encryption keys on dedicated hardware in the AWS Cloud?
Who is responsible for scaling a DynamoDB database in the AWS Shared Responsibility Model?
Which feature enables users to sign into their AWS accounts with their existing corporate credentials?
According to the AWS shared responsibility model, what are the controls that customers fully inherit from AWS?
What is the main benefit of attaching security groups to an Amazon RDS instance?
You have been tasked with auditing the security of your VPC. As part of this process, you need to start by analyzing what inbound and outbound traffic is allowed on your EC2 instances. What two parts of the VPC do you need to check to accomplish this task?
Which statement is true in relation to security in AWS?
What are the main differences between an IAM user and an IAM role in AWS?
What does Amazon GuardDuty do to protect AWS accounts and workloads?
Which of the following requires an access key ID and a secret access key to get long-lived programmatic access to AWS resources?
Which of the following AWS services integrates with AWS Shield and AWS Web Application Firewall (AWS WAF) to protect against network and application layer DDoS attacks?
Which of the following services is used when encrypting EBS volumes?
The AWS account administrator of your company has been fired. With the permissions granted to him as an administrator, he was able to create multiple IAM user accounts and access keys. Additionally, you are not sure whether he has access to the AWS root account or not. What should you do immediately to protect your AWS infrastructure?
A financial services company decides to migrate one of its applications to AWS. The application deals with sensitive data, such as credit card information, and must run on a PCI-compliant environment. Which of the following is the company's responsibility when building a PCI-compliant environment in AWS?
According to the AWS shared responsibility model what is the sole responsibility of AWS?
Under the AWS shared responsibility model, which of the following activities are the customer's responsibility?
Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS?
Which of the following can a customer use to enable single sign-on (SSO) to the AWS Management Console?
Which of the following benefits does the AWS Compliance program provide to AWS customers?
Under the shared responsibility model, which of the following tasks are the responsibility of the customer?
What function do security groups serve related Amazon Elastic Compute Cloud (Amazon EC2) instance security?
Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud?
What tasks should a customer perform when that customer suspects an AWS account has been compromised?
Which of the following is AWS's responsibility under the AWS shared responsibility model?
Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud (Amazon EC2) instance is terminated?
Where can a customer find information about prohibited actions on AWS infrastructure?
Which of the following are recommended practices for managing IAM users?
Which of the following are components of Amazon VPC?
Which AWS service will provide a way to generate encryption keys that can be used to encrypt data?
Under the AWS shared responsibility model, the customer manages which of the following?
Which actions represent best practices for using AWS IAM?
Which tasks are the customer's responsibility in the AWS shared responsibility model?
A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS?
Which AWS service provides on-demand access to AWS security and compliance documentation?
A user needs to generate a report that outlines the status of key security checks in an AWS account. The report must include the status of Amazon S3 bucket permissions, whether multi-factor authentication is enabled for the AWS account root user, if any security groups are configured to allow unrestricted access. Where can all this information be found in one location?
Under the AWS shared responsibility model, which of the following are customer responsibilities?
Under the AWS shared responsibility model, what are the customer's responsibilities?
Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long-term credentials?
Which of the following tasks can only be performed after signing in with AWS account root user credentials?
During a compliance review, an auditor requests AWS compliance documentation such as SOC 2 reports. Which AWS service provides on-demand access to these documents?
A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed?
A web developer is concerned that a DDoS attack could target an application. Which AWS services or features can help protect against such an attack?
A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege?
A company needs to continuously assess its AWS environment against compliance frameworks such as PCI DSS and GDPR and automatically collect evidence for audits. Which AWS service should they use?
Which AWS service helps simplify audit preparation by automatically collecting and organizing evidence from AWS usage and activity into assessment reports?
What should you do in order to keep the data on EBS volumes safe?
The identification process of an online financial services company requires that new users must complete an online interview with their security team. The completed recorded interviews are only required in the event of a legal issue or a regulatory compliance breach. What is the most cost-effective service to store the recorded videos?
Which service provides DNS in the AWS cloud?
Which of the following can be described as a global content delivery network (CDN) service?
What is the AWS service that enables AWS architects to manage infrastructure as code?
What does the AWS Health Dashboard provide?
You have deployed your application on multiple Amazon EC2 instances. Your customers complain that sometimes they can't reach your application. Which AWS service allows you to monitor the performance of your EC2 instances to assist in troubleshooting these issues?
A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goals?
What is the AWS service that provides a virtual network dedicated to your AWS account?
You are working on two projects that require completely different network configurations. Which AWS service or feature will allow you to isolate resources and network configurations?
In your on-premises environment, you can create as many virtual servers as you need from a single template. What can you use to perform the same in AWS?
What are the AWS services/features that can help you maintain a highly available and fault-tolerant architecture in AWS?
What is the AWS service/feature that takes advantage of Amazon CloudFront's globally distributed edge locations to transfer files to S3 with higher upload speeds?
Which AWS services can be used to improve the performance of a global application and reduce latency for its users?
A company is developing a new application using a microservices framework. The new application is having performance and latency issues. Which AWS Service should be used to troubleshoot these issues?
What are the connectivity options that can be used to build hybrid cloud architectures?
A customer spent a lot of time configuring a newly deployed Amazon EC2 instance. After the workload increases, the customer decides to provision another EC2 instance with an identical configuration. How can the customer achieve this?
What is the connectivity option that uses Internet Protocol Security (IPSec) to establish encrypted connectivity between an on-premises network and the AWS Cloud?
Which AWS Service can be used to register a new domain name?
App development companies move their business to AWS to reduce time-to-market and improve customer satisfaction, what are the AWS automation tools that help them deploy their applications faster?
A company has hundreds of VPCs in multiple AWS Regions worldwide. What service does AWS offer to simplify the connection management among the VPCs?
Which AWS service provides the ability to automate the configuration, management, and patching of EC2 instances at scale?
Which of the following services can be used to monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront?
Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects?
What are some key benefits of using AWS CloudFormation?
Which AWS service can be used to automate the configuration and management of EC2 instances?
A media company has an application that requires the transfer of large data sets to and from AWS every day. This data is business critical and should be transferred over a consistent connection. Which AWS service should the company use?
What is the main benefit of the AWS Storage Gateway service?
Which AWS service collects metrics from running EC2 instances?
Your web application currently faces performance issues and suffers from long load times. Which of the following AWS services could help fix these issues and improve performance?
Which of the following AWS services would help you migrate on-premise databases to AWS?
Which of the following services allows you to install and run custom relational database software?
For some services, AWS automatically replicates data across multiple Availability Zones to provide fault tolerance in the event of a server failure or Availability Zone outage. Which services automatically replicate data across Availability Zones?
Which AWS service allows you to build a data warehouse in the cloud?
Which of the following services is an AWS repository management system that allows for storing, versioning, and managing your application code?
A company wants to use Amazon Elastic Container Service (Amazon ECS) to run its containerized applications. For compliance reasons, the company wants to retain complete visibility and control over the underlying server cluster. Which Amazon ECS launch type will satisfy these requirements?
A company is running a large web application that needs to always be available. The application tends to slow down when CPU usage is greater than 60%. How can they track when CPU usage goes above 60% for any of the EC2 instances in their account?
Which AWS services allow companies to connect an Amazon VPC to an on-premises data center?
Which AWS service or feature can be used to monitor CPU usage?
A company has deployed several relational databases on Amazon EC2 instances. Every month the database software vendor releases new security patches that need to be applied to the databases. What is the MOST efficient way to apply the security patches?
Which of the following are main components of the AWS global infrastructure?
Which AWS hybrid storage service enables on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?
Which services manage and automate application deployments on AWS?
Which services use AWS edge locations?
Which service would you use to send alerts based on Amazon CloudWatch alarms?
Which AWS services provide a user with connectivity between the AWS Cloud and on-premises resources?
Which AWS services can be used to provide network connectivity between an on-premises network and a VPC?
Which of the following are AWS compute services?
Which components are required to build a successful site-to-site VPN connection on AWS?
Which AWS managed services can be used to extend an on-premises data center to the AWS network?
Which AWS services offer compute capabilities?
Which AWS service enables applications to respond to state changes in AWS resources by routing events to targets such as Lambda functions, SQS queues, or SNS topics?
Which AWS service allows you to define backup policies, schedule backups, and monitor backup activity across your AWS resources from a single console?
A company wants to allow employees to securely access internal web applications from personal unmanaged devices without installing any software on those devices. Which AWS service meets this requirement?
A company needs to track and manage its Microsoft and Oracle software licenses as it migrates workloads to AWS. Which AWS service helps manage software license compliance?
A company runs containerised applications on Amazon ECS and needs a fully managed registry to store, manage, and deploy Docker container images. Which AWS service should they use?
How does AWS Trusted Advisor provide guidance to users of the AWS Cloud?
Where should a company go to search software listings from independent software vendors to find, test, buy, and deploy software that runs on AWS?
A global company with a large number of AWS accounts is seeking a way in which they can centrally manage billing and security policies across all accounts. Which AWS Service will assist them in meeting these goals?
Which statement is correct with regards to AWS service limits?
A company uses AWS Organizations to manage all of its AWS accounts. Which of the following allows the company to restrict what services and actions are allowed in each individual account?
Which of the following is NOT a factor when estimating the costs of Amazon EC2?
Which of the following has the greatest impact on cost?
Which of the following strategies help analyze costs in AWS?
Which of the following will affect how much you are charged for storing objects in S3?
Which of the following makes it easier for you to categorize, manage and filter your resources?
Which methods can be used to identify AWS costs by departments?
Which AWS offering enables customers to find, buy, and immediately start using software solutions in their AWS environment?
The AWS Trusted Advisor checks include recommendations regarding which of the following?
AWS Trusted Advisor provides recommendations on which of the following?
Which of the following are benefits of using AWS Trusted Advisor?
Which AWS service analyzes the configuration and utilization metrics of Amazon EC2 instances and provides recommendations for optimal instance types?
A company wants to automatically detect unusual spending patterns in their AWS account and receive alerts when anomalies are found. Which AWS service uses machine learning to monitor costs and detect anomalies?
Which AWS service provides a central location to view and manage the default limits on AWS resources for an account and request increases when needed?
A company is approaching the maximum number of Amazon VPCs allowed in a Region and needs to request an increase. Which AWS service should they use?
Which of the following AWS services can be used to connect a company’s on-premises environment to a VPC without using the public internet?
You want to monitor the CPU utilization of an EC2 resource in AWS. Which of the below services can help in this regard?
Which of the following strategies can be used to control access to your Amazon EC2 instances?
A company has a DevOps team in its organizational structure. They are looking forward to moving to the AWS Cloud. They are wondering if there is an AWS service that can help them manage the infrastructure as code. Which of the following would you suggest for them?
A company is planning to develop a microservices application consisting of hundreds of services. They decide to host the application on the AWS Cloud. Since there are a large number of services produced by the application, it needs a powerful tool for analyzing and debugging. Which of the following services can meet this requirement?
An organization has 500 employees. The organization wants to set up AWS access for each department. Which of the below mentioned options is a possible solution?
Which of the following can be used as an additional layer of security, using a username and password when logging into the AWS Console?
You are planning to host a large eCommerce application on the AWS Cloud. One of your major concerns is Internet attacks, such as DDoS attacks. Which of the following services can help mitigate this concern? (Choose 2 answers)
Which of the following is your responsibility when creating Amazon VPC security groups? (Select all that apply)
What does the AWS Snowball provide?
The principle "design for failure and nothing will fail" is very important when designing your AWS Cloud architecture. Which of the following would help in doing so? (Select all that apply)
Which of the following services has been described as a global content delivery network (CDN) service?
Your web application is generating digital policy files for verifying users. Once the files are verified, they may not be required in the future unless there are some compliance issues. If you want to save them in a cost effective way, what is the best possible solution?
A company moved to AWS recently. They have a lot of concerns about their security. Which of the following would help them ensure that the right security settings are put in place? (Select all that apply)
Derek is running a web application and is noticing that he is paying for way more server capacity than required. What AWS feature should Derek set up and configure to ensure that this application is automatically adding/removing server capacity to keep in line with the required demand?
According to the AWS Acceptable Use Policy, penetration testing of EC2 instances:
What best describes the "Principle of Least Privilege"?
You are facing performance issues with your under development application built using microservices architecture. Which of the following services would help you analyze these issues?
You noticed that several critical Amazon Elastic Compute Cloud (Amazon EC2) instances have been terminated. Which of the following AWS services would help you determine who took this action?
In AWS, which security aspects are the customer's responsibility? (Choose three)
Which of the following services allows you to manage your agreements with AWS?
According to AWS, what is the benefit of Elasticity?
What best describes the "Principle of Least Privilege"? Choose the correct answer from the options given below.
A web administrator maintains several public and private web-based resources for an organisation. Which service can they use to keep track of the expiry dates of SSL/TLS certificates as well as updating and renewal?
Which of the following services can be used as an application firewall in AWS?
Which of the following AWS services can be used to retrieve configuration changes made to AWS resources causing operational issues?
An organization runs several EC2 instances inside a VPC using three subnets, one for Development, one for Test, and one for Production. The Security team has some concerns about the VPC configuration. It requires restricting communication across the EC2 instances using Security Groups. Which of the following options is true for Security Groups related to the scenario?
Your company wants to move an existing Oracle database to the AWS Cloud. Which of the following services can help facilitate this move?
Which of the following services allows you to analyze EC2 Instances against predefined security templates to check for vulnerabilities?
Which of the following can be used to protect against DDoS attacks? Choose 2 answers from the options given below.
In the shared responsibility model for infrastructure services, such as Amazon Elastic Compute Cloud, which of the below two are customers responsibility? (Select two)
Which of the below-listed services is a region-based AWS service?
A large IT company is looking to enable its large user base to remotely access Linux desktops from any location. Which service can be used for this purpose?
Users in the Developer Team need to deploy a multi-tier web application. Which service can be used to create a customized portfolio that will help users for quick deployment?
Which credential components are required to gain programmatic access to an AWS account? (Select TWO.)
Which AWS service should be used to implement encryption in transit?
Which tasks are the customer's responsibility according to the AWS shared responsibility model? (Select TWO.)
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Select TWO.)
Which AWS service should a user use to change an AWS account root user password?
Which AWS service or feature gives users the ability to access AWS resources from any location by using an encrypted connection?
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Select TWO.)
A company needs to use an AWS service to invoke an AWS Lambda function when an Amazon EC2 instance enters the stopping state. Which AWS service will meet this requirement?
Which AWS service provides encryption of data at rest for Amazon Elastic Block Store (Amazon EBS)?
Which AWS service shows whether an Amazon EC2 instance has failed status checks?
A company needs to establish a dedicated network connection from on premises to AWS. The connection must provide consistent, low-latency network performance. Which AWS service should the company use to meet this requirement?
Treating infrastructure as code in the AWS Cloud allows users to __________________________.
A company is building an application in the AWS Cloud. The company wants to use temporary credentials for the application to access other AWS resources. Which AWS service will meet these requirements?
A company has many developers who need programmatic access to AWS services. The company must provide the access in compliance with AWS security best practices. Which solution will meet these requirements?
A company needs to receive rightsizing recommendations that help identify cost-saving opportunities for Amazon EC2 instances. Which AWS service or tool will provide these recommendations?
Which of the following Amazon EC2 instance purchasing options can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses?
Which service provides an event history of an AWS account’s activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services, which can also be used as an evidence source for AWS Audit Manager?
Which of the following can you use to resolve the connection between your on-premises VPN and your Amazon VPC (Amazon Virtual Private Cloud)? (Select TWO.)
Which of the below statements are true with regards to Amazon S3 security and access management? Choose 2.
You are a database administrator at a startup that recently migrated its customer data to Amazon RDS for MySQL. Your team wants to focus on application development and reduce the time spent on infrastructure maintenance. Which of the following tasks is handled entirely by AWS as part of the shared responsibility model for Amazon RDS?
When provisioning a security certificate from AWS Certificate Manager (ACM), which of the following statements is true? Choose TWO.
A video streaming company hosts its customer and content metadata in an Amazon Aurora database within a VPC. To secure this database, the company wants to allow traffic only from its corporate office IP range and block all other access, ensuring that connections are statefully tracked and filtered. Which AWS feature should the company use to apply this kind of network-level restriction directly to the Aurora instance?
A popular online shopping website collects personal information such as customer names, addresses, and phone numbers during the checkout process. This information is stored in an Amazon S3 bucket and will later be used by the company's machine learning team to generate personalized product recommendations. To comply with data privacy laws and ensure sensitive customer information is identified and protected, which AWS service should the company use?
An administrator would like VPCs in three different AWS accounts to access on-premise resources via a VPN connection terminating on a Transit Gateway. Each of the VPCs is in distinct AWS regions. How can this be achieved?
In the AWS Shared Responsibility Model, what is AWS responsible for?
What is a primary advantage of AWS’s global infrastructure?
Which of the following services are primarily used for deploying and operating applications in the AWS Cloud? (Select TWO.)
Which AWS service aids in identifying potential security issues and vulnerabilities in your AWS environment?
Which services help in enhancing security and compliance in the AWS environment? (Select TWO.)
What is a key principle of AWS Identity and Access Management (IAM)?
In the AWS Shared Responsibility Model, which of the following are responsibilities of the customer? (Select TWO.)
Which AWS feature allows you to control traffic to and from an Amazon EC2 instance?
Which AWS service is primarily aimed at helping you understand your current IT environment and plan your AWS migration?
What is a feature of AWS IAM Identity Center that enhances security and simplifies access management?
You need to set up user authentication for a mobile app. Which AWS service would you use for this purpose?
What feature does an AWS Network Load Balancer (NLB) offer that a Classic Load Balancer (CLB) does not?
Which of the following are identity management options provided by AWS? (Select Two)
Which feature of AWS's global infrastructure reduces latency, lowers costs, and improves performance for a global user base?
Which AWS responsibility ensures the physical security of the infrastructure hosting your workloads?
Which steps should be taken to ensure long-term security for Amazon CloudWatch Logs? (Select Two)
How do AWS Wavelength Zones enhance the user experience for 5G applications?
Which AWS service is most appropriate for creating and managing cost-effective, policy-driven backups that meet security and compliance requirements?
For which scenario would you use AWS CloudHSM over AWS Key Management Service (KMS)?
What is a primary advantage of using AWS CloudFormation for managing infrastructure as code?
Which two features are provided by AWS managed database services that reduce administrative tasks? (Select Two)
What is an important consideration when applying the principle of least privilege to IAM policies?
What is the primary method for human users to authenticate to the AWS Management Console?
Which multi-account governance service enables policy management across all AWS accounts in your organization and helps enforce compliance?
Which task is the customer's responsibility when using Amazon EC2?
Which action is a shared responsibility between AWS and the customer under the AWS Shared Responsibility Model?
Which AWS service allows you to manage permissions for users to ensure the principle of least privilege?
Which of the following benefits does using AWS Key Management Service (KMS) provide? (Select Two)
According to the AWS Shared Responsibility Model, which type of controls falls under customer responsibility?
Which of the following best describes the customer's responsibility in the AWS Shared Responsibility Model?
When running applications in the AWS Cloud, which common tasks can AWS manage on behalf of their customers? (Select TWO.)
Regarding the AWS Shared Responsibility Model, who is responsible for patching Amazon RDS database instances?
Which AWS service helps discover and identify sensitive data stored on Amazon S3?
Which AWS service can be used to mitigate a Distributed Denial of Service (DDoS) attack?
A company hosts a large amount of data in AWS. The company wants to identify if any of the data should be considered sensitive.Which AWS service will meet the requirement?
Which of the below options are related to the reliability of AWS? (Choose TWO)
What should you do in order to keep the data on EBS volumes safe? (Choose TWO)
Hundreds of thousands of DDoS attacks are recorded every month worldwide. What service does AWS provide to help protect AWS Customers from these attacks? (Choose TWO)
Select TWO examples of the AWS shared controls.
What does the AWS Health Dashboard provide? (Choose TWO)
You have deployed your application on multiple Amazon EC2 instances. Your customers complain that sometimes they can’t reach your application. Which AWS service allows you to monitor the performance of your EC2 instances to assist in troubleshooting these issues?
In the AWS Shared responsibility Model, which of the following are the responsibility of the customer? (Choose TWO)
A company has moved to AWS recently. Which of the following AWS Services will help ensure that they have the proper security settings? (Choose TWO)
The principle “design for failure and nothing will fail” is very important when designing your AWS Cloud architecture. Which of the following would help adhere to this principle? (Choose TWO)
According to the AWS Shared responsibility model, which of the following are the responsibility of the customer? (Choose TWO)
Which of the following is equivalent to a user name and password and is used to authenticate your programmatic access to AWS services and APIs?
Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose TWO)
Which of the following aspects of security are managed by AWS? (Choose TWO)
What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment? (Choose TWO)
What are the AWS services/features that can help you maintain a highly available and fault-tolerant architecture in AWS? (Choose TWO)
What is the AWS service/feature that takes advantage of Amazon CloudFront’s globally distributed edge locations to transfer files to S3 with higher upload speeds?
Which AWS services can be used to improve the performance of a global application and reduce latency for its users? (Choose TWO)
Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities? (Choose TWO)
Under the Shared Responsibility Model, which of the following controls do customers fully inherit from AWS? (Choose TWO)
Which statement is correct with regards to AWS service limits? (Choose TWO)
What are the connectivity options that can be used to build hybrid cloud architectures? (Choose TWO)
Which of the following can help protect your EC2 instances from DDoS attacks? (Choose TWO)
Which of the following is used to control network traffic in AWS? (Choose TWO)
App development companies move their business to AWS to reduce time-to-market and improve customer satisfaction, what are the AWS automation tools that help them deploy their applications faster? (Choose TWO)
A developer needs to set up an SSL security certificate for a client's eCommerce website in order to use the HTTPS protocol. Which of the following AWS services can be used to deploy the required SSL server certificates? (Choose TWO)
What are the benefits of using an AWS-managed service? (Choose TWO)
What is the AWS’ recommendation regarding access keys?
What is the AWS IAM feature that provides an additional layer of security on top of user-name and password authentication?
A company has discovered that multiple S3 buckets were deleted, but it is unclear who deleted the buckets. Which of the following can the company use to determine the identity that deleted the buckets?
Why would an organization decide to use AWS over an on-premises data center? (Choose TWO)
Which of the following AWS services can help you perform security analysis and regulatory compliance auditing? (Choose TWO)
As part of the AWS Migration Acceleration Program (MAP), what does AWS provide to accelerate Enterprise adoption of AWS? (Choose TWO)
When running a workload in AWS, the customer is NOT responsible for: (Select TWO)
What features does AWS offer to help protect your data in the Cloud? (Choose TWO)
Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)? (Choose TWO)
Which of the following are types of AWS Identity and Access Management (IAM) identities? (Choose TWO)
Which of the following are examples of the customer’s responsibility to implement “security IN the cloud”? (Choose TWO)
Which of the following is NOT a factor when estimating the costs of Amazon EC2? (Choose TWO)
An external auditor is requesting a log of all accesses to the AWS resources in the company’s account. Which of the following services will provide the auditor with the requested information?
Which AWS Service provides integration with Chef to automate the configuration of EC2 instances?
An organization has a legacy application designed using monolithic-based architecture. Which AWS Service can be used to decouple the components of the application?
Which of the following can be used to enable the Virtual Multi-Factor Authentication? (Choose TWO)
What should you do if you see resources, which you don’t remember creating, in the AWS Management Console? (Choose TWO)
A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS Service should the company use for this purpose?
Which of the following are advantages of using AWS as a cloud computing provider? (Choose TWO)
What are some key benefits of using AWS CloudFormation? (Choose TWO)
Which of the following has the greatest impact on cost? (Choose TWO)
Which of the following services provide real-time auditing for compliance and vulnerabilities? (Choose TWO)
Which of the following AWS services uses Puppet to automate how EC2 instances are configured?
Which of the following can help secure your sensitive data in Amazon S3? (Choose TWO)
Which of the following will affect how much you are charged for storing objects in S3? (Choose TWO)
Which of the following would you use to manage your encryption keys in the AWS Cloud? (Choose TWO)
For some services, AWS automatically replicates data across multiple Availability Zones to provide fault tolerance in the event of a server failure or Availability Zone outage. Select TWO services that automatically replicate data across Availability Zones.
How does AWS help customers achieve compliance in the cloud?
According to the AWS shared responsibility model, what are the controls that customers fully inherit from AWS? (Choose TWO)
A company is running a large web application that needs to always be available. The application tends to slow down when CPU usage is greater than 60%. How can they track when CPU usage goes above 60% for any of the EC2 Instances in their account?
What are the main differences between an IAM user and an IAM role in AWS? (Choose TWO)
Which of the following requires an access key ID and a secret access key to get long-lived programmatic access to AWS resources? (Choose TWO)
The AWS account administrator of your company has been fired. With the permissions granted to him as an administrator, he was able to create multiple IAM user accounts and access keys. Additionally, you are not sure whether he has access to the AWS root account or not. What should you do immediately to protect your AWS infrastructure? (Choose TWO)
A financial services company decides to migrate one of its applications to AWS. The application deals with sensitive data, such as credit card information, and must run on a PCI-compliant environment. Which of the following is the company’s responsibility when building a PCI-compliant environment in AWS? (Choose TWO)
Which AWS service allows companies to connect an Amazon VPC to an on-premises data center? (Select TWO)
Which AWS service identifies security groups that allow unrestricted access to a user’s AWS resources?
Which AWS feature will reduce the customer’s total cost of ownership (TCO)?
Under the AWS shared responsibility model, which of the following activities are the customer’s responsibility? (Select TWO)
Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Select TWO)
Which of the following are main components of the AWS global infrastructure? (Select TWO)
Which of the following is the customer’s responsibility under the AWS shared responsibility model?
Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Select TWO)
A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server. When Amazon EC2 instance pricing option will meet these requirements?
Access keys in AWS Identity and Access Management (IM1) are used to:
Which AWS services can be used to gather information about AWS account activity? (Select TWO)
Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Select TWO.)
AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Select TWO.)
A customer is deploying a new application and needs to choose an AWS Region. Which of the following factors could influence the customer's decision? (Select TWO.)
Which of the following security-related services does AWS offer? (Select TWO.)
Which of the following security measures protect access to an AWS account? (Select TWO.)
Which AWS services can be used to gather information about AWS account activity? (Select TWO.)
Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Select TWO.)
Which AWS service or feature will help a company migrate its workloads to AWS without expertise in AWS Cloud computing?
- Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?
- Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
- A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs. Which AWS service or feature meets these requirements?
- Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization?
- A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles. Which AWS service can be used to meet this requirement?
- A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted. Which S3 feature should the company turn on to meet this requirement?
- A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources. Which actions will meet these requirements? (Choose two.)
- A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software. Which AWS service should the company use to meet these requirements?
- Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?
- An online retail company has seasonal sales spikes several times a year, primarily around holidays. Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season. Which advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.)
- A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers. How can the company meet this requirement?
- In which situations should a company create an IAM user instead of an IAM role? (Choose two.)
() An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost-effective manner. Which AWS Cloud features will help the company meet this requirement? (Choose two.)
() A company needs to build an application that uses AWS services. The application will be delivered to residents in European Countries. The company must abide by regional regulatory requirements. Which AWS service or program should the company use to determine which AWS services meet the regional requirements?
() A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud. Which AWS service will meet this requirement?
() A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege. Which AWS service or feature should the company use to enforce this principle?
() A company's web application requires AWS credentials and authorizations to use an AWS service. Which IAM entity should the company use as best practice?
() A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service limits, fault tolerance, and security. Which AWS service can the company use to meet these requirements?
() Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads, and data that is stored in Amazon S3?
() Which of the following are economic advantages of the AWS Cloud? (Choose two.)
() Which controls does the customer fully inherit from AWS in the AWS shared responsibility model?
() Which task is a customer's responsibility, according to the AWS shared responsibility model?
() Which AWS service tracks API calls and user activity?
() Which of the following actions are controlled with AWS Identity and Access Management (IAM)? (Choose two.)
() Which of the following are shared controls that apply to both AWS and the customer, according to the AWS shared responsibility model? (Choose two.)
() What information is found on an AWS Identity and Access Management (IAM) credential report? (Choose two.)
A company needs to set up user authentication for a new application. Users must be able to sign in directly with a user name and password, or through a third-party provider. Which AWS service should the company use to meet these requirements?
Dion Training is a rapidly growing organization and primarily uses AWS for its IT infrastructure. What would be a primary benefit of the company using IAM user groups like "Instructors", "Developers", and "Admins"?