- (Exam Topic 1)
Who can create and manage access keys for an AWS account root user?

1. A. The AWS account owner
2. B. An IAM user that has administrator permissions
3. C. IAM users within a designated group
4. D. An IAM user that has the required role

Correct Answer: A
Anyone who has root user credentials for your AWS account has unrestricted access to all the resources in your account, including billing information. When you create access keys, you create the access key ID and secret access key as a set.

- (Exam Topic 2)
A company wants to push VPC Flow Logs to an Amazon S3 bucket. Which action is the company's responsibility?

1. A. Managing the infrastructure that runs the S3 bucket.
2. B. Managing the data in transit.
3. C. Managing the encryption options on the S3 bucket
4. D. Managing the operating system updates on the S3 bucket

Correct Answer: C

- (Exam Topic 1)
Which task can a company complete by using AWS Organizations?

1. A. Track application deployment statuses globally.
2. B. Remove unused and underutilized AWS resources across all accounts.
3. C. Activate DDoS protection across all accounts.
4. D. Share pre-purchased Amazon EC2 resources across accounts.

Correct Answer: B
Using AWS Organizations, you can programmatically create new AWS accounts and allocate resources, group accounts to organize your workflows, apply policies to accounts or groups for governance, and simplify billing by using a single payment method for all of your accounts.

- (Exam Topic 3)
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?

1. A. AWS Security Hub
2. B. AWS Trusted Advisor
3. C. Amazon EventBridge
4. D. Amazon GuardDuty

Correct Answer: A
Use AWS Security Hub to automate security best practice checks, aggregate security alerts into a single place and format, and understand your overall security posture across all of your AWS accounts.

- (Exam Topic 1)
A company wants to use a template to reliably provision, manage, and update its infrastructure in the AWS Cloud. Which AWS service will meet these requirements?

1. A. AWS Lambda
2. B. AWS CloudFormation
3. C. AWS Fargate
4. D. AWS CodeDeploy

Correct Answer: B