1. Your company is running multiple EC2 instances on a single AWS account. To better understand expenses, you want to categorize resources by team: development, testing, security and production. What should you do?

A) You should organize resources into separate AWS accounts.
B) You should organize resources into separate subnets.
C) You should use descriptive instance names.
D) You should apply tags.



2. In your company, one of the key data compliance rules is that every data element which falls under Personally Identifiable Information (PII) must be encrypted and masked in storage. You need to design a solution for securing this PII information for large batches of CSV files created on a monthly basis. Which design meets your requirements?

A) You should use Amazon S3 with encryption enabled to store the sensitive customer data, then use Amazon Macie to scan the data in the S3 bucket and CloudTrail logs. Use Amazon Macie to validate the data against data compliance rules. Use Amazon CloudWatch Events to trigger alerts.
B) You should use Amazon S3 with encryption enabled to store the sensitive customer data, use AWS Lambda to scan the data in the Amazon S3 bucket and CloudTrail logs to validate against data compliance rules. Use SNS to send alerts.
C) You should use Amazon DynamoDB with encryption enabled to store the sensitive customer data, use AWS Lambda to scan the data in the DynamoDB table and CloudTrail logs and validate against data compliance rules. Use SNS to send alerts.
D) You should use Amazon DynamoDB with encryption enabled to store the sensitive customer data, and use Amazon Macie to scan the data against compliance rules. Use Amazon CloudWatch Events to trigger alerts.



3. Select the true statement about AWS account root user credentials.

A) Root user credentials should be used for temporary access to your account.
B) Root user credentials provide unrestricted access to your AWS account resources.
C) Root user credentials provide root-level access to your Amazon EC2 instances.
D) Root user credentials should be used for everyday access.



4. As a Network Engineer, you need to attach an Internet Gateway to your AWS infrastructure. At what level should you do this?

A) At the subnet level.
B) At the VPC level.
C) At the AWS Region level.
D) At the Availability Zone level.



5. Which AWS service automatically handles capacity provisioning, load balancing, automatic scaling, and application health monitoring of compute instances running your Python application?

A) Amazon Elastic Compute Cloud (EC2)
B) AWS Lambda
C) AWS Elastic Beanstalk
D) Amazon Relational Database Service (RDS)