SET 3

Which AWS service or feature can be used to restrict the individual API actions that users and roles in each member account can access?

• Amazon Macie

• AWS Organizations

• AWS Shield

• AWS IAM

Which AWS service can be used to track the activity of users on AWS?

• AWS CloudTrail

• AWS Directory Service

• Amazon Inspector

• Amazon CloudWatch

A company needs to optimize costs and resource usage through monitoring of operational health for all resources running on AWS. Which AWS service will meet these requirements?

• AWS Control Tower

• Amazon CloudWatch

• AWS CloudTrail

• AWS Config

A user needs a quick way to determine if any Amazon EC2 instances have ports that allow unrestricted access. Which AWS service will support this requirement?

• VPC Flow Logs

• AWS Shield

• AWS Trusted Advisor

• AWS CloudWatch Logs

A company has a website that delivers static content from an Amazon S3 bucket to users from around the world. Which AWS service will deliver the content with low latency?

• AWS Lambda

• Amazon CloudFront

• AWS Elastic Beanstalk

• AWS Global Accelerator

Which AWS service or component allows inbound traffic from the internet to access a VPC?

• NAT Gateway

• Internet gateway

• VPC Route Table

• Virtual Private Gateway

A company plans to connect their on-premises data center to the AWS Cloud and requires consistent bandwidth and performance. Which AWS service should the company choose?

• AWS VPN

• Amazon ConnectAWS Direct Connect

• AWS Direct Connect

• Amazon CloudFront

A manager is planning to migrate applications to the AWS Cloud and needs to obtain AWS compliance reports. How can these reports be generated?

• Download the reports from AWS Secrets Manager

• Contact the AWS Compliance team

• Create a support ticket with AWS Support

• Download the reports from AWS Artifact.

A company has been using an AWS managed IAM policy for granting permissions to users but needs to add some permissions. How can this be achieved?

• Create a rule in AWS WAF

• Create a custom IAM policy.

• Edit the AWS managed policy

• Create a Service Control Policy.

Which AWS service or feature can be used to capture information about inbound and outbound IP traffic on network interfaces in a VPC?

• Internet gateway

• AWS CloudTrail

• VPC Endpoint

• VPC Flow Logs