A customer wants to track access to their Amazon Simple Storage Service (S3) buckets and also use this
information for their internal security and access audits. Which of the following will meet the Customer
requirement?

A customer is running a multi-tier web application farm in a virtual private cloud (VPC) that is not connected to
their corporate network. They are connecting to the VPC over the Internet to manage all of their Amazon EC2
instances running in both the public and private subnets. They have only authorized the bastion-security-group
with Microsoft Remote Desktop Protocol (RDP) access to the application instance security groups, but the
company wants to further limit administrative access to all of the instances in the VPC. Which of the following
Bastion deployment scenarios will meet this requirement?

Which of the following approaches provides the lowest cost for Amazon Elastic Block Store snapshots while
giving you the ability to fully restore data?

A customer has a single 3-TB volume on-premises that is used to hold a large repository of images and print
layout files. This repository is growing at 500 GB a year and must be presented as a single logical volume. The
customer is becoming increasingly constrained with their local storage capacity and wants an off-site backup of
this data, while maintaining low-latency access to their frequently accessed data. Which AWS Storage Gateway
configuration meets the customer requirements?

You are designing a web application that stores static assets in an Amazon Simple Storage Service (S3)
bucket. You expect this bucket to immediately receive over 150 PUT requests per second. What should you do
to ensure optimal performance?

Which of the following services natively encrypts data at rest within an AWS region? Choose 2 answers

You have a content management system running on an Amazon EC2 instance that is approaching 100% CPU
utilization. Which option will reduce load on the Amazon EC2 instance?

You have a load balancer configured for VPC, and all back-end Amazon EC2 instances are in service.
However, your web browser times out when connecting to the load balancer’s DNS name. Which options are
probable causes of this behavior? Choose 2 answers

A company is deploying a two-tier, highly available web application to AWS. Which service provides durable
storage for static content while utilizing lower Overall CPU resources for the web tier?

A company has an AWS account that contains three VPCs (Dev, Test, and Prod) in the same region. Test is
peered to both Prod and Dev. All VPCs have non-overlapping CIDR blocks. The company wants to push minor
code releases from Dev to Prod to speed up time to market. Which of the following options helps the companyaccomplish this?