How would a system administrator add an additional layer of login security to a user's AWS Management Console?

• Use Amazon Cloud Directory

• Audit AWS Identity and Access Management (IAM) roles

• Enable multi-factor authentication

• Enable AWS CloudTrail

Which is the MOST cost-effective storage option for a service that provides offsite backups for different devices and has to support millions of customers, in which the images will be retrieved infrequently but must be available for retrieval immediately

• Amazon S3 Standard-Infrequent Access

• Amazon Glacier with expedited retrievals

• Amazon S3 Standard

• Amazon EFS

A solution needs to encrypt data in Amazon S3, and the encryption keys must be generated and managed on premises (because of some regulations from the client). Which solution should we use to meet the security requirements?

• SSE-S3: Server-side encryption with Amazon-managed master key

• SSE-C: Server-side encryption with customer-provided encryption keys

• SSE-KMS: Server-side encryption with AWS KMS managed keys

• It's not possible

Why is AWS more economical than traditional data centers for applications with varying compute workloads?

• Amazon EC2 costs are billed on a monthly basis

• Users retain full administrative access to their Amazon EC2 instances

• Amazon EC2 instances can be launched on demand when needed

• Users can permanently run enough instances to handle peak workloads

Which AWS networking service enables a company to create a virtual network within AWS?

• Amazon Virtual Private Cloud (Amazon VPC)

• AWS Direct Connect

• Transit Gateway

• NAT Gateway

Which of the following describes a security best practice that can be implemented by using AWS Identity and Access Management (IAM)?

• Turn off AWS Management Console for all users

• Generate secret keys for every IAM user

• Grant permissions to users who are required to perform a specific task only

• Store AWS credentials within Amazon EC2 instances

What is the term for a physically distinct group of data centers in a region?

• Data Center

• Region

• Edge Location

• Availability Zone

What acts as an additional layer of security at the subnet level in an Amazon VPC

• Network ACLs

• Security Groups

• Bucket Policies

• IAM

Which of the following set of credentials are used to access AWS programmatically?

• Password

• Security Key

• Access Key

• Username

Which of the following sections in a policy specifies the entities to whom access to a resource is granted or denied

• User

• Conditions

• Resources

• Principal