1. You need to have a cloud security device which would allow to generate encryption keys based on FIPS 140-2 Level 3. select Which of the following can be used for this purpose. ?

A) AWS Customer Keys
B) AWS Cloud HSM
C) AWS KMS
D) AWS managed keys



2. You are designing a custom IAM policy that would allow uses to list buckets in S3 only if they are MFA authenticated. Which of the following would best match this requirement?

A) { 'Version': '2012-10-17', 'Statement': { 'Effect': 'Allow', 'Action': [ 's3:ListAllMyBuckets', 's3:GetBucketLocation' ], 'Resource': 'Resource': 'arn:aws:s3:::*', 'Condition': { 'Bool': {'aws:MultiFactorAuthPresent':false} } } }
B) { 'Version': '2012-10-17', 'Statement': { 'Effect': 'Allow', 'Action': [ 's3:ListAllMyBuckets', 's3:GetBucketLocation' ], 'Resource': 'Resource': 'arn:aws:s3:::*', 'Condition': { 'aws:MultiFactorAuthPresent':false } } }
C) { 'Version': '2012-10-17', 'Statement': { 'Effect': 'Allow', 'Action': [ 's3:ListAllMyBuckets', 's3:GetBucketLocation' ], 'Resource': 'Resource': 'arn:aws:s3:::*', 'Condition': { 'aws:MultiFactorAuthPresent':true } } }
D) { 'Version': '2012-10-17', 'Statement': { 'Effect': 'Allow', 'Action': [ 's3:ListAllMyBuckets', 's3:GetBucketLocation' ], 'Resource': 'Resource': 'arn:aws:s3:::*', 'Condition': { 'Bool': {'aws:MultiFactorAuthPresent': true} } } }



3. You want to track access requests for a particular S3 bucket. How can you achieve this in the easiest possible way?

A) Enable Cloudwatch metrics for the bucket
B) Enable AWS(Amazon Web Service) Config for the S3 bucket
C) Enable server access logging for the bucket
D) Enable Cloudwatch logs for the bucket



4. You are planning to use AWS(Amazon Web Service) Config to check the configuration of the resources in your AWS(Amazon Web Service) account. You are planning on using an existing IAM role and using it for the AWS(Amazon Web Service) Config resource. Which of the following is required to ensure the AWS(Amazon Web Service) config service can work as required?

A) Ensure that there is a grant policy in place for the AWS(Amazon Web Service) Config service within the role
B) Ensure that there is a trust policy in place for the AWS(Amazon Web Service) Config service within the role
C) Ensure that there is a user policy in place for the AWS(Amazon Web Service) Config service within the role
D) Ensure that there is a group policy in place for the AWS(Amazon Web Service) Config service within the role



5. You are trying to use the Systems Manager to patch a set of EC2 systems. Some of the systems are not getting covered in the patching process. Which of the following can be used to troubleshoot the issue? Choose 3 answers from the options given below. Please select:(Select 3answers)

A) Check to see If the AM user has the right permissions for EC2
B) Check to see if the right role has been assigned to the EC2 Instances
C) Ensure that agent is running on the Instances.
D) Check the Instance status by using the Health API.