In your LAMP application, you have some developers that say they would like access to your logs. However, since you are using an AWS Auto Scaling group, your instances are constantly being re-created. What would you do to make sure that these developers can access these log files? Choose the correct answer from the options below Please select:

• A.Give only the necessary access to the Apache servers so that the developers can gain access to the log files.
• B.Give root access to your Apache servers to the developers.
• C.Give read-only access to your developers to the Apache servers.
• D.Set up a central logging server that you can use to archive your logs; archive these logs to an S3 bucket for developer-access.

Comment: *

Name: *

Email: *

Verification: *

You have a requirement to serve up private content using the keys available with Cloudfront. How can this be achieved?
Please select:

• A.Add the keys to the backend distribution.
• B.Add the keys to the S3 bucket
• C.Create pre-signed URL's
• D.Use AWS Access keys

Comment: *

Name: *

Email: *

Verification: *

A new application will be deployed on EC2 instances in private subnets. The application will transfer sensitive data to and from an S3 bucket. Compliance requirements state that the data must not traverse the public internet. Which solution meets the compliance requirement?
Please select:

• A.Access the S3 bucket through a proxy server
• B.Access the S3 bucket through a NAT gateway.
• C.Access the S3 bucket through a VPC endpoint for S3
• D.Access the S3 bucket through the SSL protected S3 endpoint

Comment: *

Name: *

Email: *

Verification: *

Auditors for a health care company have mandated that all data volumes be encrypted at rest Infrastructure is deployed mainly via AWS CloudFormation however third-party frameworks and manual deployment are required on some legacy systems What is the BEST way to monitor, on a recurring basis, whether all EBS volumes are encrypted?

• A.On a recurring basis, update an IAM user policies to require that EC2 instances are created with an encrypted volume
• B.Configure an AWS Config rule lo run on a recurring basis 'or volume encryption
• C.Set up Amazon Inspector rules tor volume encryption to run on a recurring schedule
• D.Use CloudWatch Logs to determine whether instances were created with an encrypted volume

Comment: *

Name: *

Email: *

Verification: *

A company needs to retain tog data archives for several years to be compliant with regulations. The tog data is no longer used but It must be retained What Is the MOST secure and cost-effective solution to meet these requirements?

• A.Archive the data to Amazon S3 and replicate it to a second bucket in a second AWS Region Choose the S3 Standard-Infrequent Access (S3 Standard-1A) storage class and apply a restrictive bucket policy to deny the s3 DeleteObject API
• B.Archive the data to Amazon S3 and apply a restrictive bucket policy to deny the s3 DeleteOotect API
• C.Migrate the log data to a 16 T8 Amazon Elastic Block Store (Amazon EBS) volume Create a snapshot of the EBS volume
• D.Archive the data to Amazon S3 Glacier and apply a Vault Lock policy

Comment: *

Name: *

Email: *

Verification: *