Which aws p - Study guides, Class notes & Summaries

Which AWS service would you use to support an audit of Application Programming Interface (API) calls made to your account? 1. AWS Config 2. AWS Trusted Advisor 3. AWS Cloud Trail 4. AWS Lambda : 3 <strong>C.</strong><br>AWS Cloud Trail is a web service that records API calls made on your account and delivers log files to your Amazon Simple Storage Service (Amazon S3) bucket. Which of the following is the fundamental resource managed by AWS Key Management Service ...

A media company is evaluating the possibility of moving its IT infrastructure to the AWS Cloud. The company needs at least 10 terabytes of storage with the maximum possible I/O performance for processing certain files which are mostly large videos. The company also needs close to 450 terabytes of very durable storage for storing media content and almost double of it, i.e. 900 terabytes for archival of legacy data. As a Solutions Architect, which set of services will you recommend to mee...

A company wants to grant access to an Amazon S3 bucket to users in its own AWS account as well as to users in another AWS account. Which of the following options can be used to meet this requirement? : Use a bucket policy to grant permission to users in its account as well as to users in another account A Big Data analytics company writes data and log files in Amazon S3 buckets. The company now wants to stream the existing data files as well as any ongoing file updates from Amazon S3...

A company has an application that runs on Amazon EC2 instances and uses an Amazon Aurora database. The EC2 instances connect to the database by using user names and passwords that are stored locally in a file. The company wants to minimize the operational overhead of credential management.What should a solutions architect do to accomplish this goal? : Use AWS Secrets Manager. Turn on automatic rotation. AWS Secrets Manager is a secrets management service that helps you protect access ...

SSE stands for Server Side Encryption and ___ has 3 options for SSE : Simple Storage Service (S3) ___ provides the information required to launch an instance : Amazon Machine Image (AMI) ___ are region specific, if you need to use an AMI in another region you can copy an AMI into the destination region via Copy AMI : Amazon Machine Image (AMI) You can create an ___ from an existing EC2 instance that's either running or stopped 2 | P a g e : Amazon Machine Image (AMI) Community ___ ar...

An AWS Organization has an OU with multiple member accounts in it. The company needs to restrict the ability to launch only specific Amazon EC2 instance types. How can this policy be applied across the accounts with the least effort? : Create an SCP with a deny rule that denies all but the specific instance types A company hosts a multiplayer game on AWS. The application uses Amazon EC2 instances in a single Availability Zone and users connect over Layer 4. Solutions Architect has been...

Lateral movement protection is made possible by which of the following? : Synchronized Security Which 2 of these are features of the Xstream achitecture? : TLS 1.3 Decryption und Deep packet inspection Which feature of the Sophjos Firewall helps prevent a computer infected by a trojan from transmitting personal information out of theri network? : Advanced Threat Protection Which feature of the Sophos firewall identifies unknown applications? : Synchronized App Controll What cloud platf...

Lateral movement protection is made possible by which of the following? : Synchronized Security Which 2 of these are features of the Xstream achitecture? : TLS 1.3 Decryption und Deep packet inspection Which feature of the Sophjos Firewall helps prevent a computer infected by a trojan from transmitting personal information out of theri network? : Advanced Threat Protection Which feature of the Sophos firewall identifies unknown applications? : Synchronized App Controll What cloud platf...

As a Solutions Architect, you would like to completely secure the communications between your Amazon CloudFront distribution and your Amazon S3 bucket which contains the static files for your website. Users should only be able to access the Amazon S3 bucket through Amazon CloudFront and not directly. What do you recommend? : Create an origin access identity (OAI) and update the Amazon S3 Bucket Policy A digital media streaming company wants to use Amazon CloudFront to distribute its ...

You have been notified in GuardDuty that one of your AWS Credentials has been compromised. You immediately rotated your exposed AWS Credentials. Then, you started to review CloudTrail logs for unauthorized activities, and you still find new logs showing that those credentials are still being used. What can you do to resolve this? : Invalidate the temporary credentials by attaching an explicit Deny policy to the affected IAM Principal You have been notified that one of your EC2 instance...