A company uses Amazon RDS to host its application database.
According to the AWS shared responsibility model, which task is AWS responsible for when securing this database?
Answer : A
Which AWS service supports the deployment and management of applications in the AWS Cloud?
Answer : D
AWS Elastic Beanstalk is a managed service that facilitates the deployment and management of applications in the AWS Cloud. It supports multiple programming languages and frameworks, allowing users to deploy web applications without managing the underlying infrastructure. Elastic Beanstalk automatically handles deployment, capacity provisioning, load balancing, and auto-scaling. The other services listed, like CodeGuru, Fargate, and CodeCommit, do not provide full application deployment and management capabilities.
A company is preparing for an audit and wants documentation that AWS complies with the Payment Card Industry Data Security Standard (PCI DSS).
Where can the company find this documentation?
Answer : A
AWS Artifact Overview:
AWS Artifact is a service that provides on-demand access to AWS compliance documentation and agreements.
It includes reports such as PCI DSS, SOC, and ISO certifications.
How AWS Artifact Meets the Requirement:
The PCI DSS compliance documentation can be downloaded directly from the Artifact console.
Artifact helps customers demonstrate compliance to auditors by providing official certifications and attestations.
Why Other Options Are Incorrect:
B . AWS Organizations:Used for managing accounts, not compliance reports.
C . AWS Trusted Advisor:Offers best practice checks but does not provide compliance documentation.
D . AWS Support Center:Provides customer support and ticket management but not compliance documentation.
AWS Artifact Documentation
A company wants to protect data stored in Amazon S3 from accidental deletion.
According to the AWS shared responsibility model, which task is the company's responsibility?
Answer : D
Comprehensive and Detailed Explanation From AWS Cloud Documentation:
Enabling S3 Versioning is the customer action that protects Amazon S3 objects from many accidental deletions and overwrites. Versioning keeps multiple variants of an object in the same bucket. When a user deletes a versioned object without specifying a version ID, Amazon S3 normally adds a delete marker instead of permanently removing all prior versions, allowing an earlier version to be recovered. It also preserves prior versions when an object is overwritten. Because the customer chooses the bucket configuration and enables versioning, option D is correct under the shared responsibility model. AWS is responsible for operating and patching the underlying S3 service, maintaining the physical storage infrastructure, and providing the designed durability of the service, so options A, B, and C are not customer tasks. Versioning should still be combined with appropriate IAM permissions, lifecycle rules, backups or replication where required, and possibly S3 Object Lock or MFA Delete for stronger protection. The central exam point is that AWS operates S3, while the customer configures data-protection features for the customer's buckets and objects.
A company is reviewing its operating policies.
Which policy complies with guidance in the security pillar of the AWS Well-Architected Framework?
Answer : D
Applying security requirements at all layers of a process is a policy that complies with guidance in the security pillar of the AWS Well-Architected Framework. The security pillar of the AWS Well-Architected Framework provides best practices for securing the user's data and systems in the AWS Cloud. One of the design principles of the security pillar is to apply security at all layers, which means that the user should implement defense-in-depth strategies and avoid relying on a single security mechanism. For example, the user should use multiple security controls, such as encryption, firewalls, identity and access management, and logging and monitoring, to protect their data and resources at different layers.
A company wants to migrate critical on-premises production systems to Amazon EC2 instances. The production instances will be used for at least 3 years. The company wants a pricing option that will minimize cost.
Which solution will meet these requirements?
Answer : B
Reserved Instances (RIs)offer a significant discount (up to 75%) compared to On-Demand pricing in exchange for committing to use AWS for a period of 1 or 3 years. This pricing model is ideal for applications with predictable usage patterns or long-term commitments, such as critical production systems that will be running for at least 3 years.
A . On-Demand Instances: Incorrect, as they provide flexibility without commitment but are more expensive over the long term.
C . Spot Instances: Incorrect, as they offer the lowest cost for non-critical, interruptible workloads but are not suitable for critical production systems due to their potential for sudden termination.
D . AWS Free Tier: Incorrect, as it provides limited free usage for certain AWS services for a short period (typically one year) and is not intended for long-term production workloads.
AWS Cloud Reference:
Amazon EC2 Reserved Instances
Which AWS service can a company use to visually design and build serverless applications?
Answer : C
AWS Application Composer is a service that allows users to visually design and build serverless applications. Users can drag and drop components, such as AWS Lambda functions, Amazon API Gateway endpoints, Amazon DynamoDB tables, and Amazon S3 buckets, to create aserverless application architecture. Users can also configure the properties, permissions, and dependencies of each component, and deploy the application to their AWS account with a few clicks. AWS Application Composer simplifies the design and configuration of serverless applications, and reduces the need to write code or use AWS CloudFormation templates.Reference:AWS Application Composer,AWS releases Application Composer to make serverless 'easier' but initial scope is limited