AWS Final Exam Study

AWS Final Exam Study Choose the incorrect statement Select one: a. The benefit of using an unmanaged service is that you can have more control over how your solution may handle changes in loads b. Managed services require the user to configure them c. Managed services require the user to configure them d. Snapshots cannot be used with RDS DB instances - d. Snapshots cannot be used with RDS DB instances How many security groups can you attach to a single instance in a VPC? Select one: a. None, security groups aren't attached to instances. b. One or more c. two or more d. One e. Three - b. One or more What acts like your own cloud expert in AWS, providing recommendations for greater security based on your existing configurations? Select one: a. Trusted Advisor b. Cloud Config c. ELB d. Config - a. Trusted Advisor In AWS IAM, permissions are defined using Select one: a. Roles b. Security Groups c. Policies d. Unique passwords - c. Policies At what OSI layer does a network load balancer operate? Select one: a. 4 b. 7 c. Both 4 and 7 d. Physical e. TCP - a. 4 Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud (Amazon EC2) instance is terminated? Select one: a. AWS CloudWatch b. AWS CloudConfig c. AWS CloudTrail d. AWS Identity and Access Management (AWS IAM) - c. AWS CloudTrail On which of the following does AWS Trusted Advisor not provide recommendations? Select one: a. Reducing cost b. Improving fault tolerance c. Improving security d. Organizing accounts - d. Organizing accounts What's the most cost-effective way to view and search only the last 60 days of management API events on your AWS account? Select one: a. Use CloudTrail event history. b. Create a trail. c. Stream CloudTrail logs to CloudWatch. d. Use CloudWatch Events. e. Use Config logs - a. Use CloudTrail event history. You want to provide maximum protection against data in your S3 object storage being deleted accidentally. What steps should you take? (Choose two.)