A company wants to control access to its AWS resources by using identities and groups that are defined in its existing Microsoft Active Directory.
What must the company create in its AWS account to map permissions for AWS services to Active Directory user attributes?

• A.AWS IAM groups
• B.AWS IAM users
• C.AWS IAM roles
• D.AWS IAM access keys

Comment: *

Name: *

Email: *

Verification: *

A windows machine in one VPC needs to join the AD domain in another VPC. VPC Peering has been established. But the domain join is not working. What is the other step that needs to be followed to ensure that the AD domain join can work as intended
Please select:

• A.Change the VPC peering connection to a VPN connection
• B.Change the VPC peering connection to a Direct Connect connection
• C.Ensure the security groups for the AD hosted subnet has the right rule for relevant subnets
• D.Ensure that the AD is placed in a public subnet

Comment: *

Name: *

Email: *

Verification: *

Your company hosts a large section of EC2 instances in IAM. There are strict security rules governing the EC2 Instances. During a potential security breach , you need to ensure quick investigation of the underlying EC2 Instance. Which of the following service can help you quickly provision a test environment to look into the breached instance.
Please select:

• A.IAM Cloudwatch
• B.IAM Cloudformation
• C.IAM Cloudtrail
• D.IAM Config

Comment: *

Name: *

Email: *

Verification: *

You need to have a requirement to store objects in an S3 bucket with a key that is automatically managed and rotated. Which of the following can be used for this purpose?
Please select:

• A.AWS KMS
• B.AWS S3 Server side encryption
• C.AWS Customer Keys
• D.AWS Cloud HSM

Comment: *

Name: *

Email: *

Verification: *

You have just developed a new mobile application that handles analytics workloads on large scale datasets that are stored on Amazon Redshift. Consequently, the application needs to access Amazon Redshift tables. Which of the belov methods would be the best both practically and security-wise, to access the tables? Choose the correct answer from the options below Please select:

• A.Create an IAM user and generate encryption keys for that user. Create a policy for Redshift read-only access. Embed th keys in the application.
• B.Create an HSM client certificate in Redshift and authenticate using this certificate.
• C.Create a Redshift read-only access policy in IAM and embed those credentials in the application.
• D.Use roles that allow a web identity federated user to assume a role that allows access to the Redshift table by providing temporary credentials.

Comment: *

Name: *

Email: *

Verification: *