A SysOps Administrator working on an Amazon EC2 instance has misconfigured the clock by one hour. The EC2 instance is sending data to Amazon CloudWatch through the CloudWatch agent. The timestamps on the logs are 45 minutes in the future.
What will be the result of this configuration?

• A.The Amazon CloudWatch agent will agent check the Network Time Protocol (NTP) server, and the agent will not send the data because it is more than 30 minutes in the future.
• B.Amazon CloudWatch will not capture the data because it is in the future.
• C.Amazon CloudWatch will accept the custom metric data and record it.
• D.The Amazon CloudWatch agent will check the Network Time Protocol (NTP) server before sending the data, and the agent will correct the time.

Comment: *

Name: *

Email: *

Verification: *

A company is using AWS Organizations to manage all their accounts. The Chief Technology Officer wants to prevent certain services from being used within production accounts until the services have been internally certified. They are willing to allow developers to experiment with these uncertified services in development accounts but need a way to ensure that these services are not used within production accounts.
Which option ensures that services are not allowed within the production accounts, yet are allowed in separate development accounts within the LEAST administrative overhead?

• A.Use Amazon CloudWatch to report on the use of non-certified services within any account, triggering an AWS Lambda function to terminate only those non-certified services when found in a production account.
• B.Apply service control policies to the AWS Organizational Unit (OU) containing the production accounts to whitelist certified services. Apply a less restrictive policy to the OUs containing the development accounts.
• C.Use AWS Config to shut down non-compliant services found within the production accounts on a periodic basis, while allowing these same services to run in the development accounts.
• D.Use IAM policies applied to the combination of user and account to prevent developers from using these services within the production accounts. Allow the services to run in development accounts.

Comment: *

Name: *

Email: *

Verification: *

What does Amazon SES stand for?

• A.Simple Elastic Server
• B.Software Email Solution
• C.Software Enabled Server
• D.Simple Email Service

Comment: *

Name: *

Email: *

Verification: *

Which of the following statements about this S3 bucket policy is true?

• A.Denies the server with the IP address 192.166 100.0 full access to the "mybucket" bucket
• B.Denies the server with the IP address 192.166 100.188 full access to the "mybucket bucket
• C.Grants all the servers within the 192 168 100 0/24 subnet full access to the "mybucket" bucket
• D.Grants all the servers within the 192 168 100 188/32 subnet full access to the "mybucket" bucket

Comment: *

Name: *

Email: *

Verification: *

An application running on Amazon EC2 needs login credentials to access a database. The login credentials are stored in AWS Systems Manager Parameter Store as secure string parameters.
What is the MOST secure way to grant the application access to the credentials?

• A.Create an IAM EC2 role for the EC2 instances and grant the role permission to read the Systems Manager parameters
• B.Create an IAM policy for the application and grant the policy permission to read the Systems Manager parameters
• C.Create an IAM group for the application and grant the group permissions to read the Systems Manager parameters
• D.Create an IAM user for the application and grant the user permission to read the Systems Manager parameters

Comment: *

Name: *

Email: *

Verification: *