1. You have been given a new brief from your supervisor for a client who needs a web application set up on AWS. The most Important requirement is that My SQL must be used as the database, and this database must not be hosted in the public cloud, but rather at the client?s data center due to security risks. Which of the following solutions would be the best to assure that the client?s requirements are met? Choose the correct answer from the options below Please select:

A) Build the application server on a public subnet and the database at the client?s data center. Connect them with a VPN connection which uses IPsec.
B) Build the application server on a public subnet and the database on a private subnet with a NAT Instance between them.
C) Use the public subnet for the application server and use RDS with a storage gateway to access and synchronize the data securely from the local data center
D) Build the application server on a public subnet and build the database in a private subnet with a secure ssh connection to the private subnet from the client?s data center.



2. You have a requirement to serve up private content using the keys available with Cloudfront. How can this be achieved?

A) Add the keys to the S3 bucket
B) Add the keys to the backend distribution.
C) Use AWS(Amazon Web Service) Access keys
D) Create pre-signed URL's



3. Your company currently has a set of EC2 Instances hosted in a VPC. The IT Security department is suspecting a possible DDos attack on the instances. What can you do to zero In on the lP addresses which are receiving a flurry of requests.

A) Use AWS(Amazon Web Service) Cloud trail to get the IP addresses accessing the EC2 Instances
B) Use AWS(Amazon Web Service) Trusted Advisor to get the IP addresses accessing the EC2 Instances
C) Use VPC Flow logs to get the IP addresses accessing the EC2 Instances
D) Use AWS(Amazon Web Service) Config to get the IP addresses accessing the EC2 Instances



4. When you enable automatic key rotation for an existing CMK key where the backing key is managed by AWS, after how long is the key rotated?

A) After 30 days
B) After 128 days
C) After3years
D) After 36Sdays



5. A company is using a Redshift cluster to store their data warehouse. There is a requirement from the Internal IT Security team to ensure that data gets encrypted for the Redshift database. How can this be achieved?

A) Use S3 Encryption
B) Use AWS(Amazon Web Service) KMS Customer Default master key
C) Use SSL/TLS for encrypting the data
D) Encrypt the EBS volumes of the underlying EC2 Instances