AWS 5

An auditor is preparing for an annual security audit. The auditor requests certification details for a company's AWS hosted resources across multiple Availability Zones in the us-east-1 Region. How should the company respond to the auditor's request?

• Open an AWS Support ticket to request that the AWS technical account manager (TAM) respond and help the auditor.

• Open an AWS Support ticket to request that the auditor receive approval to conduct an onsite assessment of the AWS data centers in which the company operates.

• Explain to the auditor that AWS does not need to be audited because the company's application is hosted in multiple Availability Zones.

• Use AWS Artifact to download the applicable report for AWS security controls. Provide the report to the auditor.

A company wants to verify if multi-factor authentication (MFA) is enabled for all users within its AWS accounts. Which AWS service or resource will meet this requirement?

• AWS Cost and Usage Report

• IAM credential reports

• AWS Artifact

• Amazon CloudFront reports

A company is building an application in the AWS Cloud. The company wants to use temporary credentials for the application to access other AWS resources. Which AWS service will meet these requirements?

• AWS Key Management Service (AWS KMS)

• AWS CloudHSM

• Amazon Cognito

• AWS Security Token Service (AWS STS)

Which of the following is an AWS value proposition that describes a user's ability to scale infrastructure based on demand?

• Speed of innovation

• Resource elasticity

• Decoupled architecture

• Global deployment

A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements. Which pillar of the AWS Well-Architected Framework aligns with these requirements?

• Operational Excellence

• Security

• Reliability

• Cost Optimization

A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.
AWS solution should the company use to meet this requirement?

• AWS Config

• AWS software development kits (SDKs)

• AWS Service Catalog

• AWS AppSync

Which AWS service or feature offers HTTP attack protection to users running public-facing web applications?

• Security groups

• Network ACLs

• AWS Shield Standard

• AWS WAF

A company has refined its workload to use specific AWs services to improve efficiency and
reduce cost. Which best practice for cost governance does this example show?

• Resource controls

• Cost allocation
  

• Architecture optimization
  

• Tagging enforcement
  

A cloud practitioner is analyzing Amazon EC2 instance performance and usage to provide recommendations for potential cost savings. Which cloud concept does this analysis demonstrate?

• Auto scaling

• Rightsizing

• Load balancing

• High availability

A company must archive Amazon S3 data that the company's business units no longer need to access. Which S3 storage class will meet this requirement MOST cost-effectively?

• S3 Glacier Instant Retrieval

• S3 Glacier Flexible Retrieval

• S3 Glacier Deep Archive

• S3 One Zone-Infrequent Access (S3 One Zone-IA)