1. You are responsible to deploying a critical application onto AWS. Part of the requirements for this application is to ensure that the controls set for this application met PCI compliance. Also there is a need to monitor web application logs to identify any malicious activity. Which of the following services can be used to fulfill this requirement. Choose 2 answers from the options given below Please select:(Select 2answers)

A) Amazon VPC Flow Logs
B) Amazon Cloud trail
C) AWS Configure
D) Amazon Cloud watch Logs



2. A user has enabled versioning on an S3 bucket. The user is using server side encryption for data at Rest. If the user is supplying his own keys for encryption SSE-C., which of the below mentioned statements is true?

A) The user should use the same encryption key for all versions of the same object
B) The SSE-C does not work when versioning is enabled
C) AWS S3 does not allow the user to upload his own keys for server side encryption
D) It is possible to have different encryption keys for different versions of the same object



3. You need to ensure that the cloud trail logs which are being delivered in your AWS(Amazon Web Service) account is encrypted. How can this be achieved in the easiest way possible?

A) Don't do anything since Cloud Trail logs are automatically encrypted.
B) Enable KMS encryption for the logs which are sent to Cloud watch
C) Enable S3-KMS for the underlying bucket which receives the log files
D) Enable S3-SSE for the underlying bucket which receives the log files



4. A company wants to use Cloudtrail for logging all API activity. They want to segregate the logging of data events and management events. How can this be achieved? Choose 2 answers from the options given below(Select 2answers)

A) Create one Cloudtrail log group for data events
B) Create one trail that logs data events to an S3 bucket
C) Create another trail that logs management events to another S3 bucket
D) Create another Cloudtrail log group for management events



5. You are hosting a web site via website hosting on an S3 bucket http://demo.s3-website-us-east-1.amazonaws.com. You have some web pages that use Javascript that access resources in another bucket which has web site hosting also enabled. But when users access the web pages , they are getting a blocked Javascript error.How can you rectify this?

A) Enable CORS for the bucket
B) Enable CRR for the bucket (Incorrect)
C) Enable MFA for the bucket
D) Enable versioning for the bucket