NEW
Font size
WorksheetsHow are you doing?
Total questions: 10
Worksheet time: 5mins
How would a system administrator add an additional layer of login security to a user's AWS Management Console?
Use Amazon Cloud Directory
Audit AWS Identity and Access Management (IAM) roles
Enable multi-factor authentication
Enable AWS CloudTrail
Which is the MOST cost-effective storage option for a service that provides offsite backups for different devices and has to support millions of customers, in which the images will be retrieved infrequently but must be available for retrieval immediately
Amazon S3 Standard-Infrequent Access
Amazon Glacier with expedited retrievals
Amazon S3 Standard
Amazon EFS
A solution needs to encrypt data in Amazon S3, and the encryption keys must be generated and managed on premises (because of some regulations from the client). Which solution should we use to meet the security requirements?
SSE-S3: Server-side encryption with Amazon-managed master key
SSE-C: Server-side encryption with customer-provided encryption keys
SSE-KMS: Server-side encryption with AWS KMS managed keys
It's not possible
Why is AWS more economical than traditional data centers for applications with varying compute workloads?
Amazon EC2 costs are billed on a monthly basis
Users retain full administrative access to their Amazon EC2 instances
Amazon EC2 instances can be launched on demand when needed
Users can permanently run enough instances to handle peak workloads
Which AWS networking service enables a company to create a virtual network within AWS?
Amazon Virtual Private Cloud (Amazon VPC)
AWS Direct Connect
Transit Gateway
NAT Gateway
Which of the following describes a security best practice that can be implemented by using AWS Identity and Access Management (IAM)?
Turn off AWS Management Console for all users
Generate secret keys for every IAM user
Grant permissions to users who are required to perform a specific task only
Store AWS credentials within Amazon EC2 instances
What is the term for a physically distinct group of data centers in a region?
Data Center
Region
Edge Location
Availability Zone
What acts as an additional layer of security at the subnet level in an Amazon VPC
Network ACLs
Security Groups
Bucket Policies
IAM
Which of the following set of credentials are used to access AWS programmatically?
Password
Security Key
Access Key
Username
Which of the following sections in a policy specifies the entities to whom access to a resource is granted or denied
User
Conditions
Resources
Principal
