A __________ is the concept of allowing (or disallowing) an entity such as a user, group, or role some type of access to one or more resources.

• A.permission
• B.AWS Account
• C.resource
• D.user

Comment: *

Name: *

Email: *

Verification: *

Your company runs an application that generates several thousand 1-GB reports a month.
Approximately 10% of these reports will be accessed once during the first 30 days and must be Available on demand. After 30 days, reports are no longer accessed as a part of normal business processes but must be retained for compliance reasons. Which architecture would meet these requirements with the lowest cost?

• A.Upload the reports to Amazon S3 standard- infrequent access storage class. When reports are requests, copy them to Amazon S3 standard storage class for access. Delete the copied reports after they have been viewed.
• B.Upload the reports to Amazon S3 Standard storage class. Set a lifecycle configuration on the bucket to transition the reports to Amazon Glacier after 30 days
• C.Upload the report s to Amazon S3 standard- infrequent Access storage class. Set a lifecycle configuration on the bucket to transition the reports to Amazon Glacier after 30 days
• D.Upload the reports to Amazon Glacier. When reports are requests, copy them to Amazon S3 standard storage class for access. Delete the copied reports after they have been viewed

Comment: *

Name: *

Email: *

Verification: *

An enterprise wants to use a third-party SaaS application. The SaaS application needs to have access to issue several API commands to discover Amazon EC2 resources running within the enterprise's account The enterprise has internal security policies that require any outside access to their environment must conform to the principles of least privilege and there must be controls in place to ensure that the credentials used by the SaaS vendor cannot be used by any other third party. Which of the following would meet all of these conditions?

• A.Create an IAM user within the enterprise account assign a user policy to the IAM user that allows only the actions required by the SaaS application create a new access and secret key for the user and provide these credentials to the SaaS provider.
• B.Create an IAM role for cross-account access allows the SaaS provider's account to assume the role and assign it a policy that allows only the actions required by the SaaS application.
• C.From the AWS Management Console, navigate to the Security Credentials page and retrieve the access and secret key for your account.
• D.Create an IAM role for EC2 instances, assign it a policy mat allows only the actions required tor the Saas application to work, provide the role ARM to the SaaS provider to use when launching their application instances.

Comment: *

Name: *

Email: *

Verification: *

A company recently signed a contract with an AWS Managed Service Provider (MSP) Partner for help with an application migration initiative. A solutions architect needs to share an Amazon Machine Image (AMI) from an existing AWS account with the MSP Partner's AWS account. The AMI is backed by Amazon Elastic Block Store (Amazon EBS) and uses a customer managed customer master key (CMK) to encrypt EBS volume snapshots.
What is the MOST secure way for the solutions architect to share the AMI with the MSP Partner's AWS account?

• A.Make the encrypted AMI and snapshots publicly available. Modify the CMK's key policy to allow the MSP Partner's AWS account to use the key
• B.Modify the launchPermission property of the AMI. Share the AMI with the MSP Partner's AWS account only. Modify the CMK's key policy to allow the MSP Partner's AWS account to use the key.
• C.Export the AMI from the source account to an Amazon S3 bucket in the MSP Partner's AWS account.
  Encrypt the S3 bucket with a CMK that is owned by the MSP Partner Copy and launch the AMI in the MSP Partner's AWS account.
• D.Modify the launchPermission property of the AMI Share the AMI with the MSP Partner's AWS account only. Modify the CMK's key policy to trust a new CMK that is owned by the MSP Partner for encryption.

Comment: *

Name: *

Email: *

Verification: *

Which AWS instance address has the following characteristics? :"If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance."

• A.Both A and B
• B.None of these
• C.VPC Addresses
• D.EC2 Addresses

Comment: *

Name: *

Email: *

Verification: *