1. Your development team wants account-level access to production instances in order to do live debugging of a highly secure environment. Which of the following should you do?

A) Place each developers own public key into a private S3 bucket, use instance profiles and configuration management to create a user account for each developer on all instances, and place the users public keys into the appropriate account.
B) Place the credentials provided by Amazon Elastic Compute Cloud (EC2) into a secure Amazon Sample Storage Service (53) bucket with encryption enabled. Assign AWS(Amazon Web Service) Identity and Access Management (lAM) users to each developer so they can download the credentials file,
C) Place the credentials provided by Amazon EC2 onto an MFA encrypted USB drive, and physically share it with each developer so that the private key never leaves the office.
D) Place an internally created private key into a secure 53 bucket with server-side encryption using customer keys and configuration management, create a service account on all the instances using this private key, and assi1 lAM users to each developer so they can download the file.



2. Which of the following are ways to secure data at rest and in transit in AWS. Choose 3 answers from the options given below ?(Select 3answers)

A) Use server side encryption for 53
B) Use OPS volumes when working with EBS volumes on EC2 Instances
C) Encrypt all EBS volumes attached to EC2 Instances
D) Use SSLIHTTPS when using the Elastic Load Balancer



3. You have a web application hosted on EC2 instances. There are application changes which happen to the web application on a quarterly basis. Which of the following are example of Blue Green deployments which can be applied to the application? Choose 2 answers from the options given below ?(Select 2answers)

A) Deploy the application to an elastic beanstalk environment. Have a secondary elastic beanstalk environment in place with the updated application code. Use the swap URL?S feature to switch onto the new environment.
B) Deploy the application using Ops work stacks. Have a secondary stack for the new application deployment. Use Route53 to switch over to the new stack for the new application update.
C) Deploy the application to an elastic beanstalk environment. Use the Rolling updates feature to perform a Blue Green deployment.
D) Place the EC2 instances behind an ELB. Have a secondary environment with EC2 Instances and ELB in another region. Use Route53 with geo-location to route requests and switch over to the secondary environment.



4. Your company is supporting a number of applications that need to be moved to AWS. Initially the thought it moving these applications to the Elastic beanstalk service. When going to the Elastic beanstalk service . you can see that the underlying platform service Is not an option In the Elastic beanstalk service. Which of the below options can be used to port your application onto Elastic beanstalk

A) Use custom chef recipes to deploy your application in Elastic beanstalk.
B) Use the Ops work service to create a stack. In the stack . create a separate custom layer. Deploy the application to this layer and then attach the layer to Elastic beanstalk
C) Create a docker container for the custom application and then deploy It to Elastic beanstalk
D) Use custom Cloud formation templates to deploy the application into Elastic beanstalk



5. You are working for a startup company that is building an application that receives large amounts of data. Unfortunately, current funding has left the start-up short on cash, cannot afford to purchase thousands of dollars of storage hardware, and has opted to use AWS. Which services would you Implement in order to store a virtually unlimited amount of data without any effort to scale when demand unexpectedly increases? Choose the correct answer from the options below Please select:

A) Amazon Import/Export because Amazon assists in migrating large amounts of data to Amazon S3
B) Amazon Glacier, to keep costs low for storage and scale Infinitely
C) Amazon EC2. because EBS volumes can scale to hold any amount of data and, when used with Auto Scaling. can be designed for fault tolerance and high availability
D) Amazon S3, because it provides unlimited amounts of storage data, scales automatically, is highly available and durable