An operations team has a standard that states IAM policies should not be applied directly to users. Some new members have not been following this standard. The operation manager needs a way to easily identify the users with attached policies.
What should a solutions architect do to accomplish this?

• A.Run AWS Lambda when a user is modified
• B.Publish IAM user changes lo Amazon SNS
• C.Monitor using AWS CloudTrail
• D.Create an AWS Config rule to run daily

Comment: *

Name: *

Email: *

Verification: *

A company is deploying an application that processes large quantities of data in batches as needed. The company plans to use Amazon EC2 instances for the workload. The network architecture must support a highly scalable solution and prevent groups of nodes from sharing the same underlying hardware.
Which combination of network solutions will meet these requirements? (Select TWO.)

• A.Run the EC2 instances in a cluster placement group.
• B.Place the EC2 instances in an EC2 Auto Scaling group.
• C.Run the EC2 instances in a spread placement group.
• D.Create Capacity Reservations for the EC2 instances to run in a placement group
• E.Run the EC2 instances in a partition placement group.

Comment: *

Name: *

Email: *

Verification: *

Which of the following items are required to allow an application deployed on an EC2 instance to write data to a DynamoDB table? Assume that no security keys are allowed to be stored on the EC2 instance.
(Choose 2 answers)

• A.Create an lAM Role that allows write access to the DynamoDB tab le.
• B.Add an lAM Role to a running EC2 instance.
• C.Create an lAM User that al lows write access to the Dynamo DB tab le.
• D.Add an lAM User to a running EC2 instance.
• E.launch an EC2 Instance with the lAM Role included in the launch configuration.

Comment: *

Name: *

Email: *

Verification: *

Can I encrypt connections between my application and my DB Instance using SSL?

• A.Only in certain regions
• B.Only in VPC
• C.Yes
• D.No

Comment: *

Name: *

Email: *

Verification: *

A company is designing a website that will be hosted on Amazon S3.
How should users be prevented from linking directly to the assets in the S3 bucket?

• A.Create a static website, then update the bucket policy to require users to access the resources with the static website URL.
• B.Create a static website, then configure an Amazon Route 53 record set with an alias pointing to the static website. Provide this URL to users.
• C.Create an Amazon CloudFront distribution with an Origin Access Identity (OAI) and update the bucket policy to grant permission to the OAI only.
• D.Create an Amazon CloudFront distribution with an AWS WAF web ACL that permits access to the origin server through the distribution only.

Comment: *

Name: *

Email: *

Verification: *