A company is setting up AWS Identity and Access Management (IAM) on an AWS account.
Which recommendation complies with IAM security best practices?
A. Use the account root user access keys for administrative tasks.
B. Grant broad permissions so that all company employees can access the resources they need.
C. Turn on multi-factor authentication (MFA) for added security during the login process.
D. Avoid rotating credentials to prevent issues in production applications.
#32
(Accuracy: 93% / 10 votes)
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
A. How quickly an Amazon EC2 instance can be restarted
B. The ability to rightsize resources as demand shifts
C. The maximum amount of RAM an Amazon EC2 instance can use
D. The pay-as-you-go billing model
E. How easily resources can be procured when they are needed
#33
(Accuracy: 100% / 6 votes)
A company wants to establish a schedule for rotating database user credentials.
Which AWS service will support this requirement with the LEAST amount of operational overhead?
A. AWS Systems Manager
B. AWS Secrets Manager
C. AWS License Manager
D. AWS Managed Services
#34
(Accuracy: 100% / 4 votes)
Which AWS service is used to provide encryption for Amazon EBS?
A. AWS Certificate Manager
B. AWS Systems Manager
C. AWS KMS
D. AWS Config
#35
(Accuracy: 100% / 3 votes)
A company wants to manage its AWS Cloud resources through a web interface.
Which AWS service will meet this requirement?
A. AWS Management Console
B. AWS CLI
C. AWS SDK
D. AWS Cloud9
#36
(Accuracy: 94% / 7 votes)
Which of the following are advantages of the AWS Cloud? (Choose two.)
A. Trade variable expenses for capital expenses
B. High economies of scale
C. Launch globally in minutes
D. Focus on managing hardware infrastructure
E. Overprovision to ensure capacity
#37
(Accuracy: 100% / 6 votes)
A developer needs to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion.
Which AWS service should the developer use to meet these requirements?
A. AWS Ground Station
B. AWS Shield
C. AWS IoT Device Defender
D. AWS CloudFormation
#38
(Accuracy: 100% / 4 votes)
Which task is the customer’s responsibility, according to the AWS shared responsibility model?
A. Maintain the security of the AWS Cloud.
B. Configure firewalls and networks.
C. Patch the operating system of Amazon RDS instances.
D. Implement physical and environmental controls.
#39
(Accuracy: 100% / 4 votes)
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
A. AWS WAF
B. AWS Global Accelerator
C. AWS Shield
D. AWS Direct Connect
#40
(Accuracy: 100% / 6 votes)
Which of the following is a fully managed MySQL-compatible database?