An organization (Account ID 123412341234. has attached the below mentioned IAM policy to a user. What
does this policy statement entitle the user to perform?

A user has created an application which will be hosted on EC2. The application makes calls to DynamoDB to
fetch certain data. The application is using the DynamoDB SDK to connect with from the EC2 instance. Which
of the below mentioned statements is true with respect to the best practice for security in this scenario?

A user has created a VPC with public and private subnets. The VPC has CIDR 20.0.0.0/16. The private subnet
uses CIDR 20.0.1.0/24 and the public subnet uses CIDR 20.0.0.0/24. The user is planning to host a web server
in the public subnet (port 80. and a DB server in the private subnet (port 3306). The user is configuring a
security group of the NAT instance. Which of the below mentioned entries is not required for the NAT security
group?

A user has configured ELB with SSL using a security policy for secure negotiation between the client and load
balancer. The ELB security policy supports various ciphers. Which of the below mentioned options helps
identify the matching cipher at the client side to the ELB cipher list when client is requesting ELB DNS over
SSL?

A user has created a VPC with a public subnet. The user has terminated all the instances which are part of the
subnet. Which of the below mentioned statements is true with respect to this scenario?

A user has created an Auto Scaling group using CLI. The user wants to enable CloudWatch detailed
monitoring for that group. How can the user configure this?

A user runs the command “dd if=/dev/zero of=/dev/xvdfbs=1M” on a fresh blank EBS volume attached to a
Linux instance. Which of the below mentioned activities is the user performing with the command given above?

A user has launched an EC2 instance store backed instance in the US-East-1a zone. The user created AMI #1
and copied it to the Europe region. After that, the user made a few updates to the application running in the
US-East-1a zone. The user makes an AMI#2 after the changes. If the user launches a new instance in Europe
from the AMI #1 copy, which of the below mentioned statements is true?

A user has configured an ELB to distribute the traffic among multiple instances. The user instances are facingsome issues due to the back-end servers. Which of the below mentioned CloudWatch metrics helps the user
understand the issue with the instances?

A user has granted read/write permission of his S3 bucket using ACL. Which of the below mentioned options is
a valid ID to grant permission to other AWS accounts (grantee. using ACL?