After a particularly high bill, an organization wants to review the use of AWS services.
What AWS service will allow the SysOps Administrator to quickly view this information to shared it, and will also forest expenses for the billing period?

• A.AWS Cost Explorer
• B.Amazon QuickSight
• C.AWS Cost and Usage Report
• D.AWS Trusted Advisor

Comment: *

Name: *

Email: *

Verification: *

You have a business-to-business web application running in a VPC consisting of an Elastic Load Balancer
(ELB), web servers, application servers and a database. Your web application should only accept traffic from
pre-defined customer IP addresses.
Which two options meet this security requirement? (Choose two.)

• A.Configure ELB security groups to allow traffic from your customers' IPs and deny all outbound traffic
• B.Configure a VPC NACL to allow web traffic from your customers' IPs and deny all outbound traffic
• C.Configure your web servers to filter traffic based on the ELB's "X-forwarded-for" header
• D.Configure web server VPC security groups to allow traffic from your customers' IPs

Comment: *

Name: *

Email: *

Verification: *

How can software determine the public and private IP addresses of the Amazon EC2 instance that it is running on?

• A.Query the appropriate Amazon CloudWatch metric.
• B.Query the local instance metadata.
• C.Query the local instance userdata.
• D.Use ipconfig or ifconfig command.

Comment: *

Name: *

Email: *

Verification: *

An organization has applied the below mentioned policy on an IAM group which has selected the IAM users.
What entitlements do the IAM users avail with this policy?

• A.The policy is not created correctly. It will throw an error for wrong resource name
• B.The policy is for the group. Thus, the IAM user cannot have any entitlement to this
• C.It allows full access to all AWS services for the IAM users who are a part of this group
• D.If this policy is applied to the EC2 resource, the users of the group will have full access to the EC2
  Resources

Correct Answer: C

AWS Identity and Access Management is a web service which allows organizations to manage users and user
permissions for various AWS services. The IAM group allows the organization to specify permissions for a
collection of users. With the below mentioned policy, it will allow the group full access (Admin to all AWS
services).

Comment: *

Name: *

Email: *

Verification: *

A user is observing the EC2 CPU utilization metric on CloudWatch.
The user has observed some interesting patterns while filtering over the 1 week period for a particular hour.
The user wants to zoom that data point to a more granular period.
How can the user do that easily with CloudWatch?

• A.The user can zoom a particular period by specifying the aggregation data for that period
• B.The user can zoom a particular period by specifying the period in the Time Range
• C.The user can zoom a particular period by selecting that period with the mouse and then releasing the mouse
• D.The user can zoom a particular period by double clicking on that period with the mouse

Comment: *

Name: *

Email: *

Verification: *