1. You work at a company that makes use of AWS(Amazon Web Service) resources. One of the key security policies is to ensure that all data is encrypted both at rest and in transit. Which of the following is not a right implementation which aligns to this policy?

A) Using 53 Server Side Encryption (SSE) to store the information
B) Enabling Proxy Protocol
C) Enable SSL termination on the ELB
D) Enabling sticky sessions on your load balancer



2. Which of the following are true with regard to Ops works stack Instances? Choose 3 answers from the options given below?

A) A stacks instances can be a combination of both Linux and Windows based operating systems
B) You can use instances running on your own hardware.
C) You can start and stop instances manually.
D) You can use EC2 Instances that were created out side the boundary of Ops work.



3. Your firm has uploaded a large amount of aerial image data to 53. In the past, in your onpremises environment, you used a dedicated group of servers to process this data and used Rabbit MQ - An open source messaging system to get job Information to the servers. Once processed the data would go to tape and be shipped offsite. Your manager told you to stay with the current design, and leverage AWS(Amazon Web Service) archival storage and messaging services to minimize cost. Which is correct?

A) Change the storage class of the 53 objects to Reduced Redundancy Storage. Setup AutoScaled workers triggered by queue depth that use spot instances to process messages in SQS. Once data is processed. change the storage class of the 53 objects to Glacier.
B) Use SQS for passing job messages. Use Cloud Watch alarms to terminate EC2 worker instances when they . become Idle. Once data is processed, change the storage class of the S3 objects to Reduced Redundancy Storage.
C) Setup Auto-Scaled workers triggered by queue depth that use spot instances to process messages in SQS. Once data is processed, change the storage class of the 53 objects to Glacier
D) Use SNS to pass job messages use Cloud Watch alarms to terminate spot worker instances when they become idle. Once data is processed. change the storage class of the S3 object to Glacier.



4. Your finance supervisor has set a budget of 2000 USD for the resources in AWS. Which of the following is the simplest way to ensure that you know when this threshold is being reached?

A) Use SQS queues to notify you when you reach the threshold value
B) Use Cloud watch events to notify you when you reach the threshold value
C) Use Cloud watch logs to notify you when you reach the threshold value
D) Use the Cloud watch billing alarm to notify you when you reach the threshold value



5. Your CTO is very worried about the security of your AWS(Amazon Web Service) account. How best can you prevent hackers from completely hijacking your account?

A) Use short but complex password on the root account and any administrators.
B) Don't write down or remember the root account password after creating the AWS(Amazon Web Service) account
C) Use MFA on all users and accounts, especially on the root account
D) Use AWS(Amazon Web Service) PAM Geo-Lock and disallow anyone from logging in except for in your city.