- (Exam Topic 1)
A recent audit found that most resources belonging to the development team were in violation of patch compliance standards The resources were properly tagged Which service should be used to quickly remediate the issue and bring the resources back into compliance?

1. A. AWS Config
2. B. Amazon Inspector
3. C. AWS Trusted Advisor
4. D. AWS Systems Manager

Correct Answer: D

- (Exam Topic 1)
A company's SysOps administrator needs to change the AWS Support plan for one of the company's AWS accounts. The account has multi-factor authentication (MFA) activated, and the MFA device is lost.
What should the SysOps administrator do to sign in?

1. A. Sign in as a root user by using email and phone verificatio
2. B. Set up a new MFA devic
3. C. Change the root user password.
4. D. Sign in as an 1AM user with administrator permission
5. E. Resynchronize the MFA token by using the 1AM console.
6. F. Sign in as an 1AM user with administrator permission
7. G. Reset the MFA device for the root user by adding a new device.
8. H. Use the forgot-password process to verify the email addres
9. I. Set up a new password and MFA device.

Correct Answer: A

- (Exam Topic 1)
A SysOps administrator applies the following policy to an AWS CloudFormation stack:

What is the result of this policy?

1. A. Users that assume an IAM role with a logical ID that begins with "Production" are prevented from running the update-stack command.
2. B. Users can update all resources in the stack except for resources that have a logical ID that begins with "Production".
3. C. Users can update all resources in the stack except for resources that have an attribute that begins with "Production".
4. D. Users in an IAM group with a logical ID that begins with "Production" are prevented from running the update-stack command.

Correct Answer: B

- (Exam Topic 1)
A company has attached the following policy to an IAM user:


Which of the following actions are allowed for the IAM user?

1. A. Amazon RDS DescribeDBInstances action in the us-east-1 Region
2. B. Amazon S3 Putobject operation in a bucket named testbucket
3. C. Amazon EC2 Describe Instances action in the us-east-1 Region
4. D. Amazon EC2 AttachNetworkinterf ace action in the eu-west-1 Region

Correct Answer: C

- (Exam Topic 1)
A company is using an AWS KMS customer master key (CMK) with imported key material The company references the CMK by its alias in the Java application to encrypt data The CMK must be rotated every 6 months
What is the process to rotate the key?

1. A. Enable automatic key rotation for the CMK and specify a period of 6 months
2. B. Create a new CMK with new imported material, and update the key alias to point to the new CMK.
3. C. Delete the current key material, and import new material into the existing CMK
4. D. Import a copy of the existing key material into a new CMK as a backup, and set the rotation schedule for 6 months

Correct Answer: B