Which services allow the customer to retain full administrative privileges of the underlying EC2 instances? (Choose two.)

What are characteristics of Amazon S3? (Choose two.)

A user has created an application which will be hosted on EC2. The application makes calls to DynamoDB to fetch certain
data. The application is using the DynamoDB SDK to connect with from the EC2 instance. Which of the below mentioned
statements is true with respect to the best practice for security in this scenario?

A user has two EC2 instances running in two separate regions. The user is running an internal memory management
tool, which captures the data and sends it to CloudWatch in US East, using a CLI with the same namespace and metric.
Which of the below mentioned options is true with respect to the above statement?

A user has created a VPC with CIDR 20.0.0.0/16. The user has created one subnet with CIDR 20.0.0.0/16 in this VPC.
The user is trying to create another subnet with the same VPC for CIDR 20.0.0.1/24. What will happen in this scenario?

A user has created a VPC with the public and private subnets using the VPC wizard. The VPC has CIDR 20.0.0.0/16.
The public subnet uses CIDR 20.0.1.0/24. The user is planning to host a web server in the public subnet (port 80) and a
DB server in the private subnet (port 3306). The user is configuring a security group for the public subnet (WebSecGrp)
and the private subnet (DBSecGrp). Which of the below mentioned entries is required in the web server security group
(WebSecGrp)?

A sysadmin has created the below mentioned policy on an S3 bucket named cloudacademy. What does this policy define?
“Statement”: [{
“Sid”: “Stmt1388811069831”,
“Effect”: “Allow”,
“Principal”: { “AWS”: “*”},
“Action”: [ “s3:GetObjectAcl”, “s3:ListBucket”],
“Resource”: [ “arn:aws:s3:::cloudacademy]
}]

A user has configured an EC2 instance in the US-East-1a zone. The user has enabled detailed monitoring of the instance.
The user is trying to get the data from CloudWatch using a CLI. Which of the below mentioned CloudWatch endpoint
URLs should the user use?

A user runs the command “dd if=/dev/zero of=/dev/xvdfbs=1M” on a fresh blank EBS volume attached to a Linux instance.
Which of the below mentioned activities is the user performing with the command given above?

A user is observing the EC2 CPU utilization metric on CloudWatch. The user has observed some interesting patterns
while filtering over the 1 week period for a particular hour. The user wants to zoom that data point to a more granular
period. How can the user do that easily with CloudWatch?