1. Where can you find account activity information on API calls performed via the AWS Management Console or the AWS CLI?

A) Amazon CloudWatch Logs
B) Amazon S3 server access logs
C) AWS CloudTrail logs
D) Amazon CloudFront access logs



2. Your company is interested in moving to the cloud. You want to explore the various options for cloud based storage. What are the benefits for your company for moving to cloud based storage? (select 2)(Select 2answers)

A) You company can accelerate innovation while reducing cost and reduce capital expenditures.
B) Your company no longer need legacy storage expertise.
C) You still need to plan and reserve storage capacity.
D) You need to continue to patch and upgrade storage in the cloud.



3. You are responsible for designing cloud storage solution. You want to use Amazon S3 storage service to store data that is infrequently accessed but needs to be immediately available when needed. Which Amazon S3 storage class should you choose?

A) S3 Glacier Flexible Retrieval
B) S3 Standard-IA
C) S3 Glacier Deep Archive
D) S3 Standard



4. As a Cloud Developer, you are responsible for cost optimization of your cloud storage architecture. How can you reduce storage costs when storing a large number of objects in a versioning-enabled bucket?

A) You should make sure all your object versions use the S3 Standard storage class.
B) You should manually move your objects to a lower cost storage class occasionally.
C) You should implement Amazon S3 cross-region replication.
D) You should configure lifecycle policy to move noncurrent versions of objects to a lower cost storage class.



5. Your company has defined a number of Amazon EC2 instances recently. As a Security Engineer, you want to know if any of the security groups allow unrestricted access to a resource. Which option best meets this requirement?

A) You should use Amazon Inspector to inspect all the security groups.
B) You should use AWS Trusted Advisor to see which security groups have compromised access.
C) You should use AWS CLI to query the security groups and then filter for the rules that have unrestricted access.
D) You should use AWS Config to see which security groups have compromised access.