Application developers are reporting Access Denied errors when trying to list the contents of an Amazon S3 bucket by using the IAM user "arn:aws:iam::111111111111:user/application". The following S3 bucket policy is in use:

How should a SysOps Administrator modify the S3 bucket policy to fix the issue?

• A.Change the "Action" from "s3:List*" to "s3:ListBucket"
• B.Change the "Effect" from "Allow" to "Deny"
• C.Change the "Principal" from "arn:aws:iam::111111111111:user/application" to
  "arn:aws:iam::111111111111: role/application"
• D.Change the "Resource" from "arn:aws:s3:::bucketname/*" to "arn:aws:s3:::bucketname"

Comment: *

Name: *

Email: *

Verification: *

A company has configured a library of IAM roles that grant access to various AWS resources. Each employee has an AWS IAM user, some of which have the permission to launch Amazon EC2 instances. The SysOps Administrator has attached the following policy to those users:

What would be the result of this policy?

• A.EC2 instances that are launched by these users have full AWS permissions.
• B.Users are able to switch only to a role name that begins with "InfraTeam" followed by any other combination of characters.
• C."InfraTeam" role is being passed to a user who has full EC2 access.
• D.Users with the role of InfraTeamLinux are able to launch an EC2 instance and attach that role to it.

Comment: *

Name: *

Email: *

Verification: *

A user has created a VPC with CIDR 20.0.0.0/16 using the wizard.
The user has created a public subnet CIDR (20.0.0.0/24. and VPN only subnets CIDR (20.0.1.0/24. along with the VPN gateway (vgw-12345. to connect to the user's data centre.
Which of the below mentioned options is a valid entry for the main route table in this scenario?

• A.Destination: 20.0.0.0/24 and Target: vgw-12345
• B.Destination: 20.0.0.0/16 and Target: ALL
• C.Destination: 20.0.1.0/16 and Target: vgw-12345
• D.Destination: 0.0.0.0/0 and Target: vgw-12345

Comment: *

Name: *

Email: *

Verification: *

Is it possible to access S3 objects from the Internet?

• A.Yes, but it has to pass through EC2.
• B.Yes, it is possible if proper public readable accesses and ACLs are set.
• C.No, there is no way to access any S3 objects from the Internet.
• D.No, only a general overview of S3 objects can be read from the Internet.

Comment: *

Name: *

Email: *

Verification: *

A user has setup an EBS backed instance and a CloudWatch alarm when the CPU utilization is more than
6 5%. The user has setup the alarm to watch it for 5 periods of 5 minutes each. The CPU utilization is 60%
between 9 AM to 6 PM. The user has stopped the EC2 instance for 15 minutes between 11 AM to 11:15
AM. What will be the status of the alarm at 11:30 AM?

• A.Error
• B.Alarm
• C.OK
• D.Insufficient Data

Comment: *

Name: *

Email: *

Verification: *