You have a vendor that needs access to an AWS resource. You create an AWS user account. You want to restrict access to the resource using a policy for just that user over a brief period. Which of the following would be an ideal policy to use?
Please select:

• A.An AWS Managed Policy
• B.An Inline Policy
• C.A Bucket Policy
• D.A bucket ACL

Comment: *

Name: *

Email: *

Verification: *

A company's security engineer has been tasked with restricting a contractor's IAM account access to the company's Amazon EC2 console without providing access to any other IAM services The contractors IAM account must not be able to gain access to any other IAM service, even it the IAM account rs assigned additional permissions based on IAM group membership What should the security engineer do to meet these requirements''

• A.Create an IAM permissions boundary policy that allows Amazon EC2 access Associate the contractor's IAM account with the IAM permissions boundary policy
• B.Create an IAM group with an attached policy that allows for Amazon EC2 access Associate the contractor's IAM account with the IAM group
• C.Create an mime IAM user policy that allows for Amazon EC2 access for the contractor's IAM user
• D.Create a IAM role that allows for EC2 and explicitly denies all other services Instruct the contractor to always assume this role

Comment: *

Name: *

Email: *

Verification: *

Your IT Security team has identified a number of vulnerabilities across critical EC2 Instances in the company's AWS Account. Which would be the easiest way to ensure these vulnerabilities are remediated?
Please select:

• A.Create AWS Lambda functions to download the updates and patch the servers.
• B.Use AWS CLI commands to download the updates and patch the servers.
• C.Use AWS inspector to patch the servers
• D.Use AWS Systems Manager to patch the servers

Comment: *

Name: *

Email: *

Verification: *

Your application currently use IAM Cognito for authenticating users. Your application consists of different types of users. Some users are only allowed read access to the application and others are given contributor access. How wou you manage the access effectively?
Please select:

• A.Create different cognito endpoints, one for the readers and the other for the contributors.
• B.Create different cognito groups, one for the readers and the other for the contributors.
• C.You need to manage this within the application itself
• D.This needs to be managed via Web security tokens

Comment: *

Name: *

Email: *

Verification: *

Your company has defined privileged users for their AWS Account. These users are administrators for key resources defined in the company. There is now a mandate to enhance the security authentication for these users. How can this be accomplished?
Please select:

• A.Enable MFA for these user accounts
• B.Enable versioning for these user accounts
• C.Enable accidental deletion for these user accounts
• D.Disable root access for the users

Comment: *

Name: *

Email: *

Verification: *