Your team is designing a web application. The users for this web application would need to sign in via an external ID provider such asfacebook or Google. Which of the following AWS service would you use for authentication?
Please select:

• A.AWS Cognito
• B.AWS SAML
• C.AWS IAM
• D.AWS Config

Comment: *

Name: *

Email: *

Verification: *

A company hosts critical data in an S3 bucket. Even though they have assigned the appropriate permissions to the bucket, they are still worried about data deletion. What measures can be taken to restrict the risk of data deletion on the bucket. Choose 2 answers from the options given below Please select:

• A.Enable versioning on the S3 bucket
• B.Enable data at rest for the objects in the bucket
• C.Enable MFA Delete in the bucket policy
• D.Enable data in transit for the objects in the bucket

Comment: *

Name: *

Email: *

Verification: *

The Security Engineer is managing a traditional three-tier web application that is running on Amazon EC2 instances. The application has become the target of increasing numbers of malicious attacks from the Internet.
What steps should the Security Engineer take to check for known vulnerabilities and limit the attack surface?
(Choose two.)

• A.Use Elastic Load Balancing to offload Secure Sockets Layer encryption.
• B.Review the application security groups to ensure that only the necessary ports are open.
• C.Use IAM Key Management Services to encrypt all the traffic between the client and application servers.
• D.Use Amazon Inspector to periodically scan the backend instances.
• E.Use IAM Certificate Manager to encrypt all traffic between the client and application servers.

Comment: *

Name: *

Email: *

Verification: *

You have just received an email from AWS Support stating that your AWS account might have been compromised. Which of the following steps would you look to carry out immediately. Choose 3 answers from the options below.
Please select:

• A.Change the root account password.
• B.Rotate all 1AM access keys
• C.Keep all resources running to avoid disruption
• D.Change the password for all 1AM users.

Comment: *

Name: *

Email: *

Verification: *

You need to ensure that objects in an S3 bucket are available in another region. This is because of the criticality of the data that is hosted in the S3 bucket. How can you achieve this in the easiest way possible?
Please select:

• A.Enable cross region replication for the bucket
• B.Write a script to copy the objects to another bucket in the destination region
• C.Create an S3 snapshot in the destination region
• D.Enable versioning which will copy the objects to the destination region

Comment: *

Name: *

Email: *

Verification: *