- (Exam Topic 2)
Which of the following is an advantage of AWS Cloud computing?

1. A. Trade security for elasticity
2. B. Trade operational excellence for agility
3. C. Trade fixed expenses for variable expenses
4. D. Trade elasticity for performance.

Correct Answer: C

- (Exam Topic 2)
What should a user do if the user loses an IAM secret access key?

1. A. Retrieve the secret access key by using the IAM console.
2. B. Create a new user with a new access key and a new secret access key.
3. C. Rotate the secret access key.
4. D. Request a new secret access key from AWS Support.

Correct Answer: C

- (Exam Topic 3)
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access. What should the company use to access instances remotely instead of opening inbound SSH ports and
managing SSH keys?

1. A. EC2 key pairs
2. B. AWS Systems Manager Session ManagerC AWS Identity and Access Management (1AM)
3. C. Network ACLs

Correct Answer: B
AWS Systems Manager Session Manager is a new interactive shell and CLI that helps to provide secure, access-controlled, and audited Windows and Linux EC2 instance management. Session Manager removes the need to open inbound ports, manage SSH keys, or use bastion hosts.
https://docs.aws.amazon.com/systems-manager/latest/userguide/session-manager.html

- (Exam Topic 2)
Which AWS service provides managed DDoS protection?

1. A. AWS Firewall Manager
2. B. AWS Shield
3. C. Amazon GuardDuty
4. D. Amazon Inspector

Correct Answer: B

- (Exam Topic 1)
A company is moving its virtual machines (VMs) from an on-premises environment to the AWS Cloud. The company plans to deploy Amazon EC2 instances. Which cloud computing model will the company use in this scenario?

1. A. Platform as a service (PaaS)
2. B. Infrastructure as a service (laaS)
3. C. Function as a service (FaaS)
4. D. Software as a service (SaaS)

Correct Answer: B