Internal security teams at your customer get requests to enable Amazon S3 access from inside the corporate network. Through your company firewalls, all external traffic must be expressly whitelisted.How is this access going to be granted by your security team?
Response:

• A.Obtain the list of IP prefixes by performing a DNS lookup on Amazon S3 endpoints, and use those prefixes in firewall rules
• B.Obtain the list of IP prefixes from ip-ranges.json, and use those prefixes in firewall rules
• C.Obtain the list of IP prefixes from AWS Forum announcements, and use those prefixes in firewall rules
• D.Connect your data center to a VPC via Direct Connect. Create routes that forward traffic from your data center to an S3 private endpoint

Comment: *

Name: *

Email: *

Verification: *

Which of the following is a security benefit of Amazon VPC endpoints?
Response:

• A.VPC endpoints provide private access to AWS services without instances requiring outbound Internet access.
• B.VPC endpoints allows the private communication between VPCs there by reducing the attack surface
• C.VPC endpoints provide greater availability and reliability than public endpoints, which increases security by limiting access for Distributed Denial of Service (DDoS) and other attacks.
• D.VPC endpoints provide private connectivity there by blocking access to the AWS services and API endpoints over the internet.

Comment: *

Name: *

Email: *

Verification: *

Which of the following assertions about Amazon CloudFront is correct?
Response:

• A.For Real Time Messaging Protocol (RTMP) distributions, you can configure CloudFront to process cookies.
• B.For both HTTP and HTTPS web distributions, you can choose to forward cookies to your origin.
• C.For HTTP web distributions, you cannot forward cookies to your origin.
• D.For HTTPS web distributions, you cannot forward cookies to your origin

Comment: *

Name: *

Email: *

Verification: *

Which statement about VPC endpoints is incorrect?
Response:

• A.Endpoints cannot be extended out of a VPC.
• B.Endpoints cannot be tagged.
• C.An S3 endpoint allows Amazon AMIs to install some software.
• D.Endpoints are transitive for Direct Connect connections.

Comment: *

Name: *

Email: *

Verification: *

You have configured a new Amazon S3 endpoint in your VPC. You have created a public Amazon S3 bucket so that you can test connectivity. You can download objects from your laptop but not from instances in the VPC. Which of the following could NOT be a problem?
Response:

• A.The route to the Amazon S3 prefix list is not in the routing table for the instance's subnet
• B.Domain Name System (DNS) was not enabled for the VPC, so you must enable DNS.
• C.The VPC endpoint security policy is blocking access to specified S3 bucket.
• D.There are not enough free IP addresses in your subnet, so you must choose a larger subnet or remove unused interfaces and IP addresses.

Comment: *

Name: *

Email: *

Verification: *