A company is deploying an Amazon EC2-based application. The application will include a custom health-checking component that produces health status data in JSON format. A Security Engineer must implement a secure solution to monitor application availability in near-real time by analyzing the hearth status data.
Which approach should the Security Engineer use?

• A.Generate events from the health-checking component and send them to Amazon CloudWatch Events.
  Include the status data as event payloads. Use CloudWatch Events rules to invoke an IAM Lambda function that analyzes the data.
• B.Write the status data directly to a public Amazon S3 bucket from the health-checking component Configure S3 events to invoke an IAM Lambda function that analyzes the data
• C.Use Amazon CloudWatch monitoring to capture Amazon EC2 and networking metrics Visualize metrics using Amazon CloudWatch dashboards.
• D.Run the Amazon Kinesis Agent to write the status data to Amazon Kinesis Data Firehose Store the streaming data from Kinesis Data Firehose in Amazon Redshift. (hen run a script on the pool data and analyze the data in Amazon Redshift

Comment: *

Name: *

Email: *

Verification: *

Which of the following is used as a secure way to log into an EC2 Linux Instance?
Please select:

• A.1AM User name and password
• B.Key pairs
• C.AWS Access keys
• D.AWS SDK keys

Comment: *

Name: *

Email: *

Verification: *

An organization must establish the ability to delete an AWS KMS Customer Master Key (CMK) within a 24-hour timeframe to keep it from being used for encrypt or decrypt operations Which of tne following actions will address this requirement?

• A.Use the KMS import key functionality to execute a delete key operation
• B.Manually rotate a key within KMS to create a new CMK immediately
• C.Change the KMS CMK alias to immediately prevent any services from using the CMK.
• D.Use the schedule key deletion function within KMS to specify the minimum wait period for deletion

Comment: *

Name: *

Email: *

Verification: *

To meet regulatory requirements, a Security Engineer needs to implement an IAM policy that restricts the use of AWS services to the us-east-1 Region.
What policy should the Engineer implement?

• A.Option B
• B.Option A
• C.Option C
• D.Option D

Comment: *

Name: *

Email: *

Verification: *

A developer signed in to a new account within an AWS Organization organizational unit (OU) containing multiple accounts. Access to the Amazon $3 service is restricted with the following SCP.

How can the security engineer provide the developer with Amazon $3 access without affecting other account?

• A.Create a new OU without applying the SCP restricting $3 access. Move the developer account to this new OU.
• B.Add an IAM policy for the developer, which grants $3 access.
• C.Move the SCP to the root OU of organization to remove the restriction to access Amazon $3.
• D.Add an allow list for the developer account for the $3 service.

Comment: *

Name: *

Email: *

Verification: *