ABC has three AWS accounts. They have created separate IAM users within each account.
ABC wants a single IAM login URL such as https://abc.signin.aws.amazon.com/console/ for use by IAM users in all three accounts.
How can this be achieved?

• A.Merge all the accounts with consolidated billing
• B.Create the S3 bucket with an alias name and use the redirect rule to forward requests to various accounts
• C.Create the same account alias with each account ID
• D.It is not possible to have the same IAM account login URL for separate AWS accounts

Comment: *

Name: *

Email: *

Verification: *

A user has provisioned 2000 IOPS to the EBS volume. The application hosted on that EBS is experiencing less IOPS than provisioned. Which of the below mentioned options does not affect the IOPS of the volume?

• A.The application does not have enough IO for the volume
• B.The instance is EBS optimized
• C.The EC2 instance has 10 Gigabit Network connectivity
• D.The volume size is too large

Comment: *

Name: *

Email: *

Verification: *

A user has configured Auto Scaling with the minimum capacity as 2 and the desired capacity as 2. The user is trying to terminate one of the existing instance with the command:
as-terminate-instance-in-auto-scaling-group<Instance ID> --decrement-desired-capacity
What will Auto Scaling do in this scenario?

• A.Terminates the instance and does not launch a new instance
• B.Terminates the instance and updates the desired capacity to 1
• C.Terminates the instance and updates the desired capacity and minimum size to 1
• D.Throws an error

Comment: *

Name: *

Email: *

Verification: *

An organization has setup multiple IAM users. The organization wants that each IAM user accesses the IAM console only within the organization and not from outside. How can it achieve this?

• A.Create an IAM policy with the security group and use that security group for AWS console login
• B.Create an IAM policy with a condition which denies access when the IP address range is not from the organization
• C.Configure the EC2 instance security group which allows traffic only from the organization's IP range
• D.Create an IAM policy with VPC and allow a secure gateway between the organization and AWS Console

Correct Answer: B

AWS Identity and Access Management is a web service which allows organizations tomanage users and user permissions for various AWS services. The user can add conditions as a part of the IAM policies. Thecondition can be set on AWS Tags, Time, and Client IP as well as on many other parameters. If the organization wants the user to access only from a specific IP range, they should set an IAM policy condition which denies access when the IP is not in a certain range. E.g. The sample policy given below denies all traffic when the IP is not in a certain range.

Comment: *

Name: *

Email: *

Verification: *

A user has created a VPC with public and private subnets using the VPC wizard. Which of the below
mentioned statements is not true in this scenario?

• A.The VPC will create one internet gateway and attach it to VPC
• B.The VPC will create two subnets
• C.The VPC will create a routing instance and attach it with a public subnet
• D.The VPC will launch one NAT instance with an elastic IP

Comment: *

Name: *

Email: *

Verification: *