A company is building software on AWS that requires access to various AWS services. Which configuration
should be used to ensure mat AWS credentials (i.e., Access Key ID/Secret Access Key combination) are not
compromised?

A company is deploying a new two-tier web application in AWS. The company has limited staff and requires
high availability, and the application requires complex queries and table joins. Which configuration provides the
solution for the company’s requirements?

Which of the following statements are true about Amazon Route 53 resource records? Choose 2 answers

You manually launch a NAT AMI in a public subnet. The network is properly configured. Security groups and
network access control lists are property configured. Instances in a private subnet can access the NAT. The
NAT can access the Internet. However, private instances cannot access the Internet. What additional step is
required to allow access from the private instances?

You are building an automated transcription service in which Amazon EC2 worker instances process an
uploaded audio file and generate a text file. You must store both of these files in the same durable storage until
the text file is retrieved. You do not know what the storage capacity requirements are. Which storage option is
both cost-efficient and scalable?

When will you incur costs with an Elastic IP address (EIP)?

A company is preparing to give AWS Management Console access to developers Company policy mandates
identity federation and role-based access control. Roles are currently assigned using groups in the corporate
Active Directory. What combination of the following will give developers access to the AWS console? (Select 2)
Choose 2 answers

Which set of Amazon S3 features helps to prevent and recover from accidental data loss?

Which of the following are true regarding AWS CloudTrail? Choose 3 answers

A company has a workflow that sends video files from their on-premise system to AWS for transcoding. They
use EC2 worker instances that pull transcoding jobs from SQS. Why is SQS an appropriate service for this
scenario?