Amazon CLF-C01 Quiz 208 Topic 6 Questions 1036-1040

Question: 1

The AWS 1AM best practice for granting least privilege is to.

Aapply an 1AM policy to an IAN1 group and limit the size of the group.

Brequire multi-factor authentication (MFA) for all 1AM users

Crequire each 1AM user who has different permissions to have multiple passwords.

Dapply an 1AM policy only to IAM users who require it

Show Answer

Question: 2

A company needs a storage solution that

* Is low-cost.

* Is for infrequently accessed data.

* Quickly accesses data when required.

* Does not require data lo be resilient

Which Amazon S3 storage option should the company use?

AS3 Standard-Infrequent Access (S3 Standard-IA)

BS3 Standard

CS3 One Zone-Infrequent Access (S3 One Zone-IA)

DS3 Glacier

Show Answer

Question: 3

Which AWS service can be used to retrieve compliance reports on demand?

AAWS Secrets Manager

BAWS Artifact

CAWS Security Hub

DAWS Certificate Manager

Show Answer

Question: 4

Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?

ACreating versions of Lambda functions

BMaintaining server and operating systems

CScaling Lambda resources according to demand

DUpdating the Lambda runtime environment

Show Answer

Question: 5

The AWS global infrastructure consists of Regions, Availability Zones and what else?

AVPCs

BData centers

CDark fiber network links

DEdge locations

Show Answer

The AWS 1AM best practice for granting least privilege is to.