An organization has created an application which is hosted on the AWS EC2 instance. The application stores images to S3 when the end user uploads to it. The organization does not want to store the AWS secure credentials required to access the S3 inside the instance. Which of the below mentioned options is a possible solution to avoid any security threat?

• A.Use the IAM based single sign between the AWS resources and the organization application.
• B.Use the IAM role and assign it to the instance.
• C.Since the application is hosted on EC2, it does not need credentials to access S3.
• D.Use the X.509 certificates instead of the access and the secret access keys.

Comment: *

Name: *

Email: *

Verification: *

A solutions architect is migrating a document management workload to AWS The workload keeps 7 TiB of contract documents on a snared storage file system and tracks them on an external database Most of the documents are stored and retrieved eventually for reference m the future The application cannot De modified during the migration, and the storage solution must be highly available.
Documents are retrieved and stored by web servers that run on Amazon EC2 instances In an Auto Scaling group The Auto Scaling group can have up to 12 instances. Which solution meets these requirements MOST cost-effectively?

• A.Create an Amazon Elastic File System (Amazon EFS) file system that uses the EFS Standard-Infrequent Access (EFS Standard-lA) storage class. Mount the file system to the EC2 instances in the Auto Scaling group
• B.Provision an enhanced networking optimized EC2 instance to serve as a shared NFS storage system.
• C.Create an Amazon S3 bucket that uses the S3 Standard-infrequent Access (S3 Standard-lA) storage class Mount the S3 bucket to the EC2 instances in the Auto Scaling group
• D.Create an SFTP server endpoint by using AWS Transfer for SFTP and an Amazon S3 bucket Configure the EC2 instances m the Auto Scaling group to connect to the SFTP server

Comment: *

Name: *

Email: *

Verification: *

How do you protect your data in transit?

Comment: *

Name: *

Email: *

Verification: *

A company wants to minimize cost by moving infrequently accessed audit archives to low-cost storage.
Which AWS service should the company use for this storage?

• A.Amazon S3 Glacier
• B.AWS Snowball
• C.AWS Backup
• D.AWS Storage Gateway

Comment: *

Name: *

Email: *

Verification: *

Which features can be used to restrict access to data in S3? Choose 2 answers

• A.Set an S3 ACL on the bucket or the object.
• B.Create a CloudFront distribution for the bucket.
• C.Set an S3 bucket policy.
• D.Enable IAM Identity Federation
• E.Use S3 Virtual Hosting

Comment: *

Name: *

Email: *

Verification: *