Storage Security & Resiliency

Question 1

You need to ensure specific AWS resources are affected by an AWS backup policy. What should you do?

Tag the resources to be backed up

Create a resource group for the items to be backed up

Install the AWS backup agent on each EC2 instance

Create a backup group for the items to be backed up

Answer 1

Tag the resources to be backed up

Question 2

Which configuration item defines the backup frequency and retention?

CloudFormation stack

RBAC policy

Backup plan

Backup vault

Answer 2

Backup plan

Question 3

You are using the AWS Backup console. You need to restore a backup. Where should you click?

RBAC

Protected resources

Backup plan

Backup vaults

Answer 3

Protected resources

Question 4

Which of the following is correct when setting this S3 block public access policy?
Block public access to buckets and objects granted through new access control lists (ACLs)

New buckets and objects are affected

Existing buckets and objects are affected

Existing buckets and objects are not affected

New buckets and objects are not affected

Answer 4

New buckets and objects are affected

Existing buckets and objects are not affected

Question 5

What is the default S3 bucket encryption setting?

SHA-256

AWS-KMS

None

AES-256

Answer 5

None

Question 6

You are enabling AES-256 encryption for an S3 bucket. Which statement is correct?

Only folders will be encrypted

Existing S3 objects will be encrypted

A custom key must be specified

Existing S3 objects will not be encrypted

Answer 6

Existing S3 objects will not be encrypted

Question 7

You need to encrypt an S3 bucket folder. Which AWS CLI command should you use?

aws encrypt

aws s3 cp

aws s3 aes256

aws s3 encrypt

Answer 7

aws s3 cp

Question 8

Which PowerShell cmdlet is used to enable bucket encryption?

Enable-S3BucketEncryption

Set-S3BucketEncrypytion

Encrypt-S3BucketEncryption

Add-S3BucketEncryption

Answer 8

Set-S3BucketEncrypytion

Question 9

Which of the following is the best reason to enable S3 bucket versioning?

Accidental object deletion

Encryption of data at rest

Auditing

Regulatory compliance

Answer 9

Accidental object deletion

Question 10

What must be configured before S3 bucket cross-region replication can be enabled?

Versioning

Vault

Encryption

Auditing

Answer 10

Versioning

Question 11

What is a benefit of using CloudFront?

MFA

Reduced network latency

Encryption of data at rest

Increased network latency

Answer 11

Reduced network latency

Question 12

Which of the following are valid CloudFront distribution types?

Web

REST

JSON

RTMP

Answer 12

Web

RTMP