WorksheetsAWS developer associate
Total questions: 65
Worksheet time: 33mins
Which of the following is not an IAM best practice?
Delete user accounts not in use
Attach policies to individual users
Manage permissions by adding users to groups
Enable MFA on user accounts
By default a new user in IAM has permisiions to log in to the AWS Console.
TRUE
FALSE
An EC2 Instance hosts a Java based application that accesses a DynamoDB table. This EC2 Instance is currently serving production users. Which of the following is a secure way for the EC2 Instance to access the DynamoDB table?
UseIAM Roles with permissions to interact with DynamoDB and assign it to the EC2Instance
UseKMS Keys with the right permissions to interact with DynamoDB and assign it to the EC2 Instance.
UseIAM Access Keys with the right permissions to interact with DynamoDB and assign it to the EC2 Instance.
UseIAM Access Groups with the right permissions to interact with DynamoDB and assign it to the EC2 Instance.
A corporation uses an AWS application to offer content to its subscribers worldwide. Numerous Amazon EC2 instances are deployed on a private subnet behind an Application Load Balancer for the application (ALB). The chief information officer (CIO) wishes to limit access to some nations due to a recent change in copyright regulations.
Which course of action will satisfy these criteria?
Modify the ALB security group to deny incoming traffic from blocked countries.
Modify the security group for EC2 instances to deny incoming traffic from blocked countries.
Use Amazon CloudFront to serve the application and deny access to blocked countries.
Use ALB listener rules to return access denied responses to incoming traffic from blocked countries.
An EC2 Instance setup in AWS will host an application which will make API calls to the Simple Storage Service. What is an ideal way for the application to access the Simple Storage Service?
Pass API credentials to the instance using instance user data.
Store API credentials as an object in a separate Amazon S3 bucket.
Embed the API credentials into your application.
Create and Assign an IAM role to the EC2 Instance.
A business uses an Amazon RDS for PostgreSQL database instance to manage a fleet of web servers. Following a normal compliance review, the corporation establishes a standard requiring all production databases to have a recovery point objective (RPO) of less than one second.
Which solution satisfies these criteria?
Enable a Multi-AZ deployment for the DB instance.
Enable auto scaling for the DB instance in one Availability Zone
Configure the DB instance in one Availability Zone, and create multiple read replicas in a separate Availability Zone.
Configure the DB instance in one Availability Zone, and configure AWS Database Migration Service (AWS DMS) change data capture (CDC) tasks.
