Your application stores sensitive information on an EBS volume attached to your EC2 instance.
How can you protect your information? Choose two answers from the options given below

• A.Unmount the EBS volume, take a snapshot and encrypt the snapshot. Re-mount the Amazon EBS volume
• B.It is not possible to encrypt an EBS volume, you must use a lifecycle policy to transfer data to S3 for encryption.
• C.Copy the unencrypted snapshot and check the box to encrypt the new snapshot. Volumes restored from this encrypted snapshot will also be encrypted.
• D.Create and mount a new, encrypted Amazon EBS volume. Move the data to the new volume. Delete the old Amazon EBS volume.

Comment: *

Name: *

Email: *

Verification: *

When Ansible's connection state is set to `remote', what method of communication does Ansible utilize to run commands on the remote target host?

• A.SSH
• B.RSH
• C.PSExec
• D.API call to Ansible client on host

Comment: *

Name: *

Email: *

Verification: *

What is the scope of an EC2 security group?

• A.VPC
• B.Placement Group
• C.Availability Zone
• D.Region

Comment: *

Name: *

Email: *

Verification: *

A Security team is concerned that a Developer can unintentionally attach an Elastic IP address to an Amazon EC2 instance in production. No Developer should be allowed to attach an Elastic IP address to an instance. The Security team must be notified if any production server has an Elastic IP address at any time.
How can this task be automated?

• A.Ensure that all IAM groups are associated with Developers do not have associate-address permissions. Create a scheduled AWS Lambda function to check whether an Elastic IP address is associated with any instance tagged as production, and alert the Security team if an instance has an Elastic IP address associated with it.
• B.Attach an IAM policy to the Developer's IAM group to deny associate-address permissions.
  Create a custom AWS Config rule to check whether an Elastic IP address is associated with any instance tagged as production, and alert the Security team.
• C.Create an AWS Config rule to check that all production instances have the EC2 IAM roles that include deny associate-address permissions. Verify whether there is an Elastic IP address associated with any instance, and alert the Security team if an instance has an Elastic IP address associated with it.
• D.Use Amazon Athena to query AWS CloudTrail logs to check for any associate-address attempts.
  Create an AWS Lambda function to dissociate the Elastic IP address from the instance, and alert the Security team.

Comment: *

Name: *

Email: *

Verification: *