1. A Devops team is currently looking at the security aspect of their CI/CD pipeline. They are making use of AWS(Amazon Web Service) resources for their infrastructure. They want to ensure that the EC2 Instances don't have any high security vulnerabilities. They want to ensure a complete DevSecOps process. How can this be achieved?

A) Use AWS(Amazon Web Service) Trusted Advisor API's in the pipeline for the EC2 Instances
B) Use AWS(Amazon Web Service) Config to check the state of the EC2 instance for any sort of security issues.
C) Use AWS(Amazon Web Service) Inspector API's in the pipeline for the EC2 Instances
D) Use AWS(Amazon Web Service) Security Groups to ensure no vulnerabilities are present



2. A company is planning to run a number of Admin related scripts using the AWS(Amazon Web Service) Lambda service. There is a need to understand if there are any errors encountered when the script run. How can this be accomplished in the most effective manner?

A) Use Cloud trail to monitor for errors
B) Use the AWS(Amazon Web Service) Inspector service to monitor for errors
C) Use the AWS(Amazon Web Service) Config service to monitor for errors
D) Use Cloud watch metrics and logs to watch for errors



3. Your company has a hybrid environment , with on-premise servers and servers hosted in the AWS(Amazon Web Service) cloud. They are planning to use the Systems Manager for patching servers. Which of the following is a pre-requisite for this to work?

A) Ensure that the on-premise servers are running on Hyper-V.
B) Ensure that an IAM User is created
C) Ensure that an IAM Group is created for the on-premise servers
D) Ensure that an IAM service role is created



4. Your company has an external web site. This web site needs to access the objects in an S3 bucket. Which of the following would allow the web site to access the objects in the most secure manner?

A) Use the aws:sites key in the condition clause for the bucket policy
B) Grant a role that can be assumed by the web site
C) Grant public access for the bucket via the bucket policy
D) Use the aws:Referer key in the condition clause for the bucket policy



5. You need to inspect the running processes on an EC2 Instance that may have a security issue. How can you achieve this in the easiest way possible. Also you need to ensure that the process does not interfere with the continuous running of the instance. Please select:

A) Use the SSM Run command to send the list of running processes information to an S3 bucket.
B) Use AWS(Amazon Web Service) Configure to see the changed process information on the server
C) Use AWS(Amazon Web Service) Cloud watch to record the processes running on the server
D) Use AWS(Amazon Web Service) Cloud trail to record the processes running on the server to an S3 bucket