You have an S3 bucket hosted in AWS. This is used to host promotional videos uploaded by yourself. You need to provide access to users for a limited duration of time. How can this be achieved?
Please select:

• A.Use versioning and enable a timestamp for each version
• B.Use Pre-signed URL's
• C.Use 1AM Roles with a timestamp to limit the access
• D.Use 1AM policies with a timestamp to limit the access

Comment: *

Name: *

Email: *

Verification: *

You need to ensure that objects in an S3 bucket are available in another region. This is because of the criticality of the data that is hosted in the S3 bucket. How can you achieve this in the easiest way possible?
Please select:

• A.Enable cross region replication for the bucket
• B.Write a script to copy the objects to another bucket in the destination region
• C.Create an S3 snapshot in the destination region
• D.Enable versioning which will copy the objects to the destination region

Comment: *

Name: *

Email: *

Verification: *

A company had one of its Amazon EC2 key pairs compromised. A Security Engineer must identify which current Linux EC2 instances were deployed and used the compromised key pair.
How can this task be accomplished?

• A.Obtain the output from the EC2 instance metadata using: curl http:
  //169.254.169.254/latest/meta-data/public- keys/0/.
• B.Obtain the fingerprint for the key pair from the AWS Management Console, then search for the fingerprint in Amazon CloudWatch Logs using: aws logs filter-log-events.
• C.Obtain the list of instances by directly querying Amazon EC2 using: aws ec2 describe-instances --fi1ters
  "Name=key-name,Values=KEYNAMEHERE".
• D.Obtain the fingerprint for the key pair from the AWS Management Console, then search for the fingerprint in the Amazon Inspector logs.

Comment: *

Name: *

Email: *

Verification: *

Attach the following SCP to the OU that contains this account:
In the Amazon EC2 console, select the Always Encrypt new EBS volumes setting for each AWS Region.

• A.Create a private AMI for the company Configure encryption for the private AMI by selecting the custom AMI in the Amazon EC2 console, the destination AWS Region and the source account s AWS Key Management Service (AWS KMS) master key.
• B.For each finding In the audit report, run the ec2 copy-snapshot command and use the encrypted flag specifying an AWS Key Management Service (AWS KMS) CMK

Comment: *

Name: *

Email: *

Verification: *

Your company has mandated that all calls to the AWS KMS service be recorded. How can this be achieved?
Please select:

• A.Enable logging on the KMS service
• B.Enable a trail in Cloudtrail
• C.Enable Cloudwatch logs
• D.Use Cloudwatch metrics

Comment: *

Name: *

Email: *

Verification: *