Quiz
AWS Sysops AA - ver 5
This quiz has a time limit, so it opens in the usual player.
Questions in this quiz (60)
1A user has created a subnet in VPC and launched an EC2 instance within it. The user has not selected the option to
assign the IP address while launching the instance. The user has 3 elastic IPs and is trying to assign one of the Elastic
IPs to the VPC instance from the console. The console does not show any instance in the IP assignment screen. What
is a possible reason that the instance is unavailable in the assigned IP console?- AThe IP address may be attached to one of the instances
- BThe IP address belongs to a different zone than the subnet zone
- CThe user has not created an internet gateway
- DThe IP addresses belong to EC2 Classic; so they cannot be assigned to VPC
2A sys admin has enabled a log on ELB. Which of the below mentioned activities are not captured by the log?
- AResponse processing time
- BFront end processing time
- CBackend processing time
- DRequest processing time
3A user has setup a CloudWatch alarm on the EC2 instance for CPU utilization. The user has setup to receive a notification
on email when the CPU utilization is higher than 60%. The user is running a virus scan on the same instance at a particular
time. The user wants to avoid receiving an email at this time. What should the user do?- ARemove the alarm
- BDisable the alarm for a while using CLI
- CModify the CPU utilization by removing the email alert
- DDisable the alarm for a while using the console
4A user has setup a custom application which generates a number in decimals. The user wants to track that number and
setup the alarm whenever the number is above a certain limit. The application is sending the data to CloudWatch at
regular intervals for this purpose. Which of the below mentioned statements is not true with respect to the above scenario?- AThe user can get the aggregate data of the numbers generated over a minute and send it to CloudWatch
- BThe user has to supply the timezone with each data point
- CCloudWatch will not truncate the number until it has an exponent larger than 126 (i.e. 1 x 10^126)
- DThe user can create a file in the JSON format with the metric name and value and supply it to CloudWatch
5An organization has setup Auto Scaling with ELB. Due to some manual error, one of the instances got rebooted. Thus, it
failed the Auto Scaling health check. Auto Scaling has marked it for replacement. How can the system admin ensure that
the instance does not get terminated?- AUpdate the Auto Scaling group to ignore the instance reboot event
- BIt is not possible to change the status once it is marked for replacement
- CManually add that instance to the Auto Scaling group after reboot to avoid replacement
- DChange the health of the instance to healthy using the Auto Scaling commands
6A user has launched two EBS backed EC2 instances in the US-East-1a region. The user wants to change the zone of
one of the instances. How can the user change it?- AThe zone can only be modified using the AWS CLI
- BIt is not possible to change the zone of an instance after it is launched
- CStop one of the instances and change the availability zone
- DFrom the AWS EC2 console, select the Actions - > Change zones and specify the new zone
7A user is using a small MySQL RDS DB. The user is experiencing high latency due to the Multi AZ feature. Which of the
below mentioned options may not help the user in this situation?- ASchedule the automated back up in non-working hours
- BUse a large or higher size instance
- CUse PIOPS
- DTake a snapshot from standby Replica
8A user has setup an EBS backed instance and attached 2 EBS volumes to it. The user has setup a CloudWatch alarm
on each volume for the disk data. The user has stopped the EC2 instance and detached the EBS volumes. What will be
the status of the alarms on the EBS volume?- AOK
- BInsufficient Data
- CAlarm
- DThe EBS cannot be detached until all the alarms are removed
9A user has enabled termination protection on an EC2 instance. The user has also set Instance initiated shutdown
behaviour to terminate. When the user shuts down the instance from the OS, what will happen?- AThe OS will shutdown but the instance will not be terminated due to protection
- BIt will terminate the instance
- CIt will not allow the user to shutdown the instance from the OS
- DIt is not possible to set the termination protection when an Instance initiated shutdown is set to Terminate
10An AWS root account owner is trying to create a policy to access RDS. Which of the below mentioned statements is true
with respect to the above information?- ACreate a policy which allows the users to access RDS and apply it to the RDS instances
- BThe user cannot access the RDS database if he is not assigned the correct IAM policy
- CThe root account owner should create a policy for the IAM user and give him access to the RDS services
- DThe policy should be created for the user and provide access for RDS
11A user has a weighing plant. The user measures the weight of some goods every 5 minutes and sends data to AWS
CloudWatch for monitoring and tracking. Which of the below mentioned parameters is mandatory for the user to include
in the request list?- AValue
- BNamespace
- CMetric Name
- DTimezone
12A user has configured ELB with Auto Scaling. The user suspended the Auto Scaling terminate process only for a while.
What will happen to the availability zone rebalancing process (AZRebalance) during this period?- AAuto Scaling will not launch or terminate any instances
- BAuto Scaling will allow the instances to grow more than the maximum size
- CAuto Scaling will keep launching instances till the maximum instance size
- DIt is not possible to suspend the terminate process while keeping the launch active
13A user is trying to create a PIOPS EBS volume with 8 GB size and 200 IOPS. Will AWS create the volume?
- AYes, since the ratio between EBS and IOPS is less than 30
- BNo, since the PIOPS and EBS size ratio is less than 30
- CNo, the EBS size is less than 10 GB
- DYes, since PIOPS is higher than 100
14An AWS account wants to be part of the consolidated billing of his organization's payee account. How can the owner of that account achieve this?
- AThe payee account has to request AWS support to link the other accounts with his account
- BThe owner of the linked account should add the payee account to his master account list from the billing console
- CThe payee account will send a request to the linked account to be a part of consolidated billing
- DThe owner of the linked account requests the payee account to add his account to consolidated billing
15A user is planning to scale up an application by 8 AM and scale down by 7 PM daily using Auto Scaling. What should the user do in this case?
- ASetup the scaling policy to scale up and down based on the CloudWatch alarms
- BThe user should increase the desired capacity at 8 AM and decrease it by 7 PM manually
- CThe user should setup a batch process which launches the EC2 instance at a specific time
- DSetup scheduled actions to scale up or down at a specific time
16A user has moved an object to Glacier using the life cycle rules. The user requests to restore the archive after 6 months.
When the restore request is completed the user accesses that archive. Which of the below mentioned statements is not
true in this condition?- AThe archive will be available as an object for the duration specified by the user during the restoration request
- BThe restored object's storage class will be RRS
- CThe user can modify the restoration period only by issuing a new restore request with the updated period
- DThe user needs to pay storage for both RRS (restored) and Glacier (Archive) Rates
17A user has created a public subnet with VPC and launched an EC2 instance within it. The user is trying to delete the
subnet. What will happen in this scenario?- AIt will delete the subnet and make the EC2 instance as a part of the default subnet
- BIt will not allow the user to delete the subnet until the instances are terminated
- CIt will delete the subnet as well as terminate the instances
- DThe subnet can never be deleted independently, but the user has to delete the VPC first
18A user has created a VPC with public and private subnets using the VPC wizard. Which of the below mentioned
statements is not true in this scenario?- AThe VPC will create a routing instance and attach it with a public subnet
- BThe VPC will create two subnets
- CThe VPC will create one internet gateway and attach it to VPC
- DThe VPC will launch one NAT instance with an elastic IP
19A user has created a VPC with CIDR 20.0.0.0/16 using the wizard. The user has created public and VPN only subnets
along with hardware VPN access to connect to the user's data centre. The user has not yet launched any instance as
well as modified or deleted any setup. He wants to delete this VPC from the console. Will the console allow the user to
delete the VPC?- AYes, the console will delete all the setups and also delete the virtual private gateway
- BNo, the console will ask the user to manually detach the virtual private gateway first and then allow deleting the VPC
- CYes, the console will delete all the setups and detach the virtual private gateway
- DNo, since the NAT instance is running
20A user has launched an EC2 Windows instance from an instance store backed AMI. The user wants to convert the AMI to an EBS backed AMI. How can the user convert it?
- AAttach an EBS volume to the instance and unbundle all the AMI bundled data inside the EBS
- BA Windows based instance store backed AMI cannot be converted to an EBS backed AMI
- CIt is not possible to convert an instance store backed AMI to an EBS backed AMI
- DAttach an EBS volume and use the copy command to copy all the ephermal content to the EBS Volume
21A user has created an Auto Scaling group using CLI. The user wants to enable CloudWatch detailed monitoring for that
group. How can the user configure this?- AWhen the user sets an alarm on the Auto Scaling group, it automatically enables detail monitoring
- BBy default detailed monitoring is enabled for Auto Scaling
- CAuto Scaling does not support detailed monitoring
- DEnable detail monitoring from the AWS console
22A user has created a VPC with the public subnet. The user has created a security group for that VPC. Which of the below
mentioned statements is true when a security group is created?- AIt can connect to the AWS services, such as S3 and RDS by default
- BIt will have all the inbound traffic by default
- CIt will have all the outbound traffic by default
- DIt will by default allow traffic to the internet gateway
23You have a web-style application with a stateless but CPU and memory-intensive web tier running on a cc2 8xlarge EC2
instance inside of a VPC. The instance when under load is having problems returning requests within the SLA as defined
by your business The application maintains its state in a DynamoDB table, but the data tier is properly provisioned and
responses are consistently fast. How can you best resolve the issue of the application responses not meeting your SLA?- AAdd another cc2 8xlarge application instance, and put both behind an Elastic Load Balancer
- BMove the cc2 8xlarge to the same Availability Zone as the DynamoDB table
- CCache the database responses in ElastiCache for more rapid access
- DMove the database from DynamoDB to RDS MySQL in scale-out read-replica configuration
24You have been asked to automate many routine systems administrator backup and recovery activities. Your current plan
is to leverage AWS-managed solutions as much as possible and automate the rest with the AWS CLI and scripts. Which
task would be best accomplished with a script?- ACreating daily EBS snapshots with a monthly rotation of snapshots
- BCreating daily ROS snapshots with a monthly rotation of snapshots
- CAutomatically detect and stop unused or underutilized EC2 instances
- DAutomatically add Auto Scaled EC2 instances to an Amazon Elastic Load Balancer
25You are currently hosting multiple applications in a VPC and have logged numerous port scans coming in from a specific
IP address block. Your security team has requested that all access from the offending IP address block be denied tor the
next 24 hours. Which of the following is the best method to quickly and temporarily deny access from the specified IP
address block?- ACreate an AD policy to modify Windows Firewall settings on all hosts in the VPC to deny access from the IP address block
- BModify the Network ACLs associated with all public subnets in the VPC to deny access from the IP address block
- CAdd a rule to all of the VPC 5 Security Groups to deny access from the IP address block
- DModify the Windows Firewall settings on all Amazon Machine Images (AMIs) that your organization uses in that VPC to deny access from the IP address block
26You have identified network throughput as a bottleneck on your m1.small EC2 instance when uploading data Into Amazon
S3 In the same region. How do you remedy this situation?- AAdd an additional ENI
- BChange to a larger Instance
- CUse DirectConnect between EC2 and S3
- DUse EBS PIOPS on the local volume
27If you want to launch Amazon Elastic Compute Cloud (EC2) Instances and assign each Instance a predetermined private IP address you should:
- AAssign a group or sequential Elastic IP address to the instances.
- BLaunch the instances in a Placement Group.
- CLaunch the instances in the Amazon virtual Private Cloud (VPC).
- DUse standard EC2 instances since each instance gets a private Domain Name Service (DNS) already.
- ELaunch the Instance from a private Amazon Machine image (Mil).
28When attached to an Amazon VPC which two components provide connectivity with external networks? (Choose two.)
- AElastic IPS (EIP)
- BNAT Gateway (NAT)
- CInternet Gateway {IGW)
- DVirtual Private Gateway (VGW)
29A user is launching an EC2 instance in the US East region. Which of the below mentioned options is recommended by
AWS with respect to the selection of the availability zone?- AAlways select the US-East-1-a zone for HA
- BDo not select the AZ; instead let AWS select the AZ
- CThe user can never select the availability zone while launching an instance
- DAlways select the AZ while launching an instance
30A customer has an online store that uses the cookie-based sessions to track logged-in customers. It is deployed on AWS using ELB and autoscaling. When the load increases, Auto scaling automatically launches new web servers, but the load on the web servers do not decrease. This causes the customers a poor experience. What could be causing the issue ?
- AELB DNS records Time to Live is set too high
- BELB is configured to send requests with previously established sessions
- CWebsite uses CloudFront which is keeping sessions alive
- DNew Instances are not being added to the ELB during the Auto Scaling cool down period
31A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. The ELB security policy supports various ciphers. Which of the below mentioned options helps identify the matching cipher at the client side to the ELB cipher list when client is requesting ELB DNS over SSL
- ACipher Protocol
- BClient Configuration Preference
- CServer Order Preference
- DLoad Balancer Preference
32A user has configured an HTTPS listener on an ELB. The user has not configured any security policy which can help to negotiate SSL between the client and ELB. What will ELB do in this scenario?
- ABy default ELB will select the first version of the security policy
- BBy default ELB will select the latest version of the policy
- CELB creation will fail without a security policy
- DIt is not required to have a security policy since SSL is already installed
33A user has configured ELB with SSL using a security policy for secure negotiation between the client and load balancer. Which of the below mentioned security policies is supported by ELB?
- ADynamic Security Policy
- BAll the other options
- CPredefined Security Policy
- DDefault Security Policy
34A user has configured ELB with a TCP listener at ELB as well as on the back-end instances. The user wants to enable a proxy protocol to capture the source and destination IP information in the header. Which of the below mentioned statements helps the user understand a proxy protocol with TCP configuration?
- AIf the end user is requesting behind a proxy server then the user should not enable a proxy protocol on ELB
- BELB does not support a proxy protocol when it is listening on both the load balancer and the back-end instances
- CWhether the end user is requesting from a proxy server or directly, it does not make a difference for the proxy protocol
- DIf the end user is requesting behind the proxy then the user should add the “isproxy” flag to the ELB Configuration
35A sys admin is using server side encryption with AWS S3. Which of the below mentioned statements helps the user understand the S3 encryption functionality?
- AThe server side encryption with the user supplied key works when versioning is enabled
- BThe user can use the AWS console, SDK and APIs to encrypt or decrypt the content for server side encryption with the user supplied key
- CThe user must send an AES-128 encrypted key
- DThe user can upload his own encryption key to the S3 console
36An organization has created 10 IAM users. The organization wants each of the IAM users to have access to a separate DynamoDB table. All the users are added to the same group and the organization wants to setup a group level policy for this. How can the organization achieve this?
- ADefine the group policy and add a condition which allows the access based on the IAM name
- BCreate a DynamoDB table with the same name as the IAM user name and define the policy rule which grants access based on the DynamoDB ARN using a variable
- CCreate a separate DynamoDB database for each user and configure a policy in the group based on the DB variable
- DIt is not possible to have a group level policy which allows different IAM users to different DynamoDB Tables
37A storage admin wants to encrypt all the objects stored in S3 using server side encryption. The user does not want to use the AES 256 encryption key provided by S3. How can the user achieve this?
- AThe admin should upload his secret key to the AWS console and let S3 decrypt the objects
- BThe admin should use CLI or API to upload the encryption key to the S3 bucket. When making a call to the S3 API mention the encryption key URL in each request
- CS3 does not support client supplied encryption keys for server side encryption
- DThe admin should send the keys and encryption algorithm with each API call
38A user has enabled versioning on an S3 bucket. The user is using server side encryption for data at Rest. If the user is supplying his own keys for encryption (SSE-C), which of the below mentioned statements is true?
- AThe user should use the same encryption key for all versions of the same object
- BIt is possible to have different encryption keys for different versions of the same object
- CAWS S3 does not allow the user to upload his own keys for server side encryption
- DThe SSE-C does not work when versioning is enabled
39A user has created a VPC with public and private subnets using the VPC wizard. The VPC has CIDR 20.0.0.0/16. The private subnet uses CIDR 20.0.0.0/24. The NAT instance ID is i-a12345. Which of the below mentioned entries are required in the main route table attached with the private subnet to allow instances to connect with the internet?
- ADestination: 0.0.0.0/0 and Target: i-a12345
- BDestination: 20.0.0.0/0 and Target: 80
- CDestination: 20.0.0.0/0 and Target: i-a12345
- DDestination: 20.0.0.0/24 and Target: i-a12345
40A user is having data generated randomly based on a certain event. The user wants to upload that data to CloudWatch.
It may happen that event may not have data generated for some period due to andomness. Which of the below mentioned
options is a recommended option for this case?- AFor the period when there is no data, the user should not send the data at all
- BFor the period when there is no data the user should send a blank value
- CFor the period when there is no data the user should send the value as 0
- DThe user must upload the data to CloudWatch as having no data for some period will cause an error at CloudWatch monitoring
41Your EC2-Based Multi-tier application includes a monitoring instance that periodically makes application-level read only requests of various application components and if any of those fail more than three times 30 seconds calls CloudWatch lo fire an alarm, and the alarm notifies your operations team by email and SMS of a possible application health problem.
However, you also need to watch the watcher-the monitoring instance itself-and be notified if it becomes unhealthy.
Which of the following Is a simple way to achieve that goal?- ARun another monitoring instance that pings the monitoring instance and fires a could watch alarm mat notifies your operations teamshould the primary monitoring instance become unhealthy.
- BSet a Cloud Watch alarm based on EC2 system and instance status checks and have the alarm notify your operations team of anydetected problem with the monitoring instance.
- CSet a Cloud Watch alarm based on the CPU utilization of the monitoring instance and nave the alarm notify your operations team if C r the CPU usage exceeds 50% few more than one minute: then have your monitoring application go into a CPU-bound loop should itDetect any application problems.
- DHave the monitoring instances post messages to an SOS queue and then dequeue those messages on another instance should D c-the queue cease to have new messages, the second instance should first terminate the original monitoring instance start anotherbackup monitoring instance and assume (he role of the previous monitoring instance and beginning adding messages to the SOSqueue.
42A user is collecting 1000 records per second. The user wants to send the data to CloudWatch using the custom
namespace. Which of the below mentioned options is recommended for this activity?- AAggregate the data with statistics, such as Min, max, Average, Sum and Sample data and send the data to CloudWatch
- BSend all the data values to CloudWatch in a single command by separating them with a comma. CloudWatch will parse automatically.
- CCreate one csv file of all the data and send a single file to CloudWatch.
- DIt is not possible to send all the data in one call. Thus, it should be sent one by one. CloudWatch will aggregate the data automatically.
43You are managing the AWS account of a big organization.
The organization has more than 1000+ employees and they want to provide access to the various services to most of the employees.
Which of the below mentioned options is the best possible solution in this case?- AThe user should create a separate IAM user for each employee and provide access to them as per the policy
- BThe user should create an IAM role and attach STS with the role. The user should attach that role to the EC2 instance and setup AWS authentication on that server
- CThe user should create IAM groups as per the organization's departments and add each user
to the group for better access control - DAttach an IAM role with the organization's authentication service to authorize each user for
various AWS services
44A user has launched an EC2 instance.
The user is planning to setup the CloudWatch alarm.
Which of the below mentioned actions is not supported by the CloudWatch alarm?- ANotify the Auto Scaling launch config to scale up
- BSend an SMS using SNS
- CNotify the Auto Scaling group to scale down
- DStop the EC2 instance
45A user is planning to setup notifications on the RDS DB for a snapshot.
Which of the below mentioned event categories is not supported by RDS for this snapshot source type?- ABackup
- BCreation
- CDeletion
- DRestoration
46A user has created a subnet with VPC and launched an EC2 instance in that subnet with only default settings.
Which of the below mentioned options is ready to use on the EC2 instance as soon as it is launched?- AElastic IP
- BPrivate IP
- CPublic IP
- DInternet gateway
47A user is planning to use AWS Cloud formation for his automatic deployment requirements.
Which of the below mentioned components are required as a part of the template?- AParameters
- BOutputs
- CTemplate version
- DResources
48A user has setup a billing alarm using CloudWatch for $200.
The usage of AWS exceeded $200 after some days.
The user wants to increase the limit from $200 to $400.
What should the user do?- ACreate a new alarm of $400 and link it with the first alarm
- BIt is not possible to modify the alarm once it has crossed the usage limit
- CUpdate the alarm to set the limit at $400 instead of $200
- DCreate a new alarm for the additional $200 amount
49A user has configured CloudWatch monitoring on an EBS backed EC2 instance.
If the user has not attached any additional device, which of the below mentioned metrics will always show a 0 value?- ADiskReadBytes
- BNetworkIn
- CNetworkOut
- DCPUUtilization
50A sys admin is trying to understand the Auto Scaling activities.
Which of the below mentioned processes is not performed by Auto Scaling?- AReboot Instance
- BSchedule Actions
- CReplace Unhealthy
- DAvailability Zone Balancing
51A user has launched an EBS backed EC2 instance. The user has rebooted the instance.
Which of the below mentioned statements is not true with respect to the reboot action?- AThe private and public address remains the same
- BThe Elastic IP remains associated with the instance
- CThe volume is preserved
- DThe instance runs on a new host computer
52What is a Placement Group?
- AA collection of Auto Scaling groups in the same Region
- BFeature that enables EC2 instances to interact with each other via nigh bandwidth, low latency connections
- CA collection of Elastic Load Balancers in the same Region or Avai lability Zone
- DA collection of authorized Cloud Front edge locations for a distribution
53You are running your production database in MySQL on an independent EBS volume and you are fast approaching an average IOPS of 3000 IOPS. You have decided to migrate your database to an EBS volume with provisioned IOPS. Your key users only use the database between 9am - 6pm so you can afford to have some down time out of hours, but not during the working day. Which is the best option below to achieve this migration.
- AA. Take a snapshot of both the root device volume and the database volume at midday. Once the snapshot is complete, terminate the EC2 instance and the database EBS volume. Restore the root device volume and EC2 instance using Provisioned IOPS SSD drives for both volumes.
- BChoose a suitable time out of hours time. Stop the MySQL service. Take a snapshot of the EBS volume where the MySQL database is running. Detach and then delete the old database volume. Restore the snapshot to a new volume running on magnetic storage.
- CChoose a suitable time out of hours time. Stop the MySQL service. Move the database to S3. Restart the MySQL service, but set the configuration so that it addresses your new bucket S3://mydatabasebucket
- DChoose a suitable time out of hours time. Stop the MySQL service. Take a snapshot of the EBS volume where the MySQL database is running. Detach and then delete the old database volume. Restore the snapshot to a new volume running on provisioned IOPs.
54Your EBS Volume status check is showing a warning. What does this mean?
- AYour volume is degraded or severely degraded.
- BYour volume is stalled or not available.
- CTheir is insufficient data.
- DYour volume is performing as normal, but may need pre-warming.
55Your EBS Volume status check is showing impaired. What does this mean?
- AThe instance status must be impaired. You should stop and start the instance again.
- BThe volume is stalled or not available.
- CTheir is insufficient data.
- DThe volume is degraded or severely degraded.
56You have a web application which is using AutoScaling and Elastic Load Balancing. You want to monitor the application to make sure that it maintains a good customer experience which is defined by how long it takes to load the application for the end user in their browser. What metric in Amazon's CloudWatch can best be used for this?
- ARequestCount reported by the ELB
- BLatency reported by the elastic load balancer (ELB)
- CAggregate CPUUtilization for the web tier
- DAggregate NetworkIn for the web tier
57An organization has created 50 IAM users. The organization wants that each user can change their password but cannot change their access keys. How can the organization achieve this?
- AThe organization has to create a special password policy and attach it to each user
- BThe root account owner has to use CLI which forces each IAM user to change their password on first login
- CBy default each IAM user can modify their passwords
- DRoot account owner can set the policy from the IAM console under the password policy screen
58You are tasked with setting up a Linux bastion host for access to Amazon EC2 instances running in your VPC. Only clients connecting from the corporate external public IP address 72.34.51.100 should have SSH access to the host. Which option will meet the customer requirement?
- ASecurity Group Inbound Rule: Protocol – TCP. Port Range – 22, Source 72.34.51.100/32
- BSecurity Group Inbound Rule: Protocol – UDP, Port Range – 22, Source 72.34.51.100/32
- CNetwork ACL Inbound Rule: Protocol – UDP, Port Range – 22, Source 72.34.51.100/32
- DNetwork ACL Inbound Rule: Protocol – TCP, Port Range-22, Source 72.34.51.100/0
59A user has created a VPC with CIDR 20.0.0.0/24. The user has used all the IPs of CIDR and wants to increase the size of the VPC. The user has two subnets: public (20.0.0.0/25) and private (20.0.0.128/25). How can the user change the size of the VPC?
- AThe user can delete all the instances of the subnet. Change the size of the subnets to 20.0.0.0/32 and 20.0.1.0/32, respectively. Then the user can increase the size of the VPC using CLI
- BIt is not possible to change the size of the VPC once it has been created
- CUser can add a subnet with a higher range so that it will automatically increase the size of the VPC
- DUser can delete the subnets first and then modify the size of the VPC
60Your organization is preparing for a security assessment of your use of AWS. In preparation for this assessment, which two IAM best practices should you consider implementing? Choose 2 answers
- ACreate individual IAM users for everyone in your organization
- BConfigure MFA on the root account and for privileged IAM users
- CAssign IAM users and groups configured with policies granting least privilege access
- DEnsure all users have been assigned and are frequently rotating a password, access ID/secret key, and X.509 certificate
Information
- Description
- Quiz on AWS Sysops AA - ver 5, created by Linh Phan Van on 01/11/2017.
- Author
- Linh Phan Van
- Language
- English
- Views
- 2
- Tags
- Rating
- No ratings yet Rate this quiz