Revision Material
Which of the following AWS Identity and Access Management best practice helps protect an
AWS account?
Use the AWS account root user for long-term identity management operations
Disable the AWS root user account once IAM admin user has been created
Use AWS Multi-Factor Authentication(MFA) to protect the AWS account root user
Generate access keys for long-term use for every IAM user in the AWS account - ANS ✔✔Use
AWS Multi-Factor Authentication(MFA) to protect the AWS account root user
A company wants to build and replicate its AWS infrastructure in multiple AWS Regions. Which
AWS service provides the capability for the customer to use templates to describe and then
automatically provision the infrastructure?
AWS Management Console
AWS Config
AWS CloudFormation
AWS Systems Manager - ANS ✔✔AWS CloudFormation
Under the Shared Responsibility Model, which of the following are responsibilities of AWS?
Designing for disaster recovery
, Updating guest operating systems
Provisioning new services
Securing physical infrastructure - ANS ✔✔Securing physical infrastructure
A user wants the ability to easily scale compute resources in and out, while only paying for the
resources used. Which AWS Cloud architecture principle is this?
Elasticity
Fault tolerance
Durability
High availability - ANS ✔✔Elasticity
A company needs to view a graphical description of its AWS expenses and service usage over
time. What AWS service will provide this information?
AWS CloudTrail
Amazon CloudWatch
AWS Cost Explorer
AWS Budgets - ANS ✔✔AWS Cost Explorer
A user has petabytes of data to migrate to AWS. Which service is MOST cost-effective and
FASTER than transferring data over the internet?
Amazon S3
AWS Batch
AWS Snowball
AWS VPN - ANS ✔✔AWS Snowball