SCS-C01 Free Practice Test

- (Exam Topic 2)
You have an S3 bucket hosted in AWS. This is used to host promotional videos uploaded by yourself. You need to provide access to users for a limited duration of time. How can this be achieved?
Please select:

1. A. Use versioning and enable a timestamp for each version
2. B. Use Pre-signed URL's
3. C. Use IAM Roles with a timestamp to limit the access
4. D. Use IAM policies with a timestamp to limit the access

Correct Answer: B
The AWS Documentation mentions the following
All objects by default are private. Only the object owner has permission to access these objects. However, the object owner can optionally share objects with others by creating a pre-signed URL using their own security credentials, to grant time-limited permission to download the objects.
Option A is invalid because this can be used to prevent accidental deletion of objects Option C is invalid because timestamps are not possible for Roles
Option D is invalid because policies is not the right way to limit access based on time For more information on pre-signed URL's, please visit the URL: https://docs.aws.ama2on.com/AmazonS3/latest/dev/ShareObiectPreSisnedURL.html
The correct answer is: Use Pre-signed URL's Submit your Feedback/Queries to our Experts

- (Exam Topic 3)
A company is planning on extending their on-premise AWS Infrastructure to the AWS Cloud. They need to have a solution that would give core benefits of traffic encryption and ensure latency is kept to a minimum. Which of the following would help fulfil this requirement? Choose 2 answers from the options given below
Please select:

1. A. AWS VPN
2. B. AWS VPC Peering
3. C. AWS NAT gateways
4. D. AWS Direct Connect

Correct Answer: AD
The AWS Document mention the following which supports the requirement C:\Users\wk\Desktop\mudassar\Untitled.jpg

Option B is invalid because VPC peering is only used for connection between VPCs and cannot be used to connect On-premise infrastructure to the AWS Cloud.
Option C is invalid because NAT gateways is used to connect instances in a private subnet to the internet For more information on VPN Connections, please visit the following url
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuideA/pn-connections.html
The correct answers are: AWS VPN, AWS Direct Connect Submit your Feedback/Queries to our Experts

- (Exam Topic 3)
A website currently runs on Amazon EC2, wan mostly statics content on the site. Recently the site was subjected to a DDoS attack a security engineer was (asked was redesigning the edge security to help
Mitigate this risk in the future.
What are some ways the engineer could achieve this (Select THREE)?

1. A. Use AWS X-Ray to inspect the trafc going to the EC2 instances.
2. B. Move the static content to Amazon S3, and front this with an Amazon Cloud Front distribution.
3. C. Change the security group conguration to block the source of the attack trafc
4. D. Use AWS WAF security rules to inspect the inbound trafc.
5. E. Use Amazon Inspector assessment templates to inspect the inbound traffic.
6. F. Use Amazon Route 53 to distribute trafc.

Correct Answer: BDF

- (Exam Topic 1)
A Security Engineer has launched multiple Amazon EC2 instances from a private AMI using an AWS CloudFormation template. The Engineer notices instances terminating right after they are launched.
What could be causing these terminations?

1. A. The IAM user launching those instances is missing ec2:Runinstances permission.
2. B. The AMI used as encrypted and the IAM does not have the required AWS KMS permissions.
3. C. The instance profile used with the EC2 instances in unable to query instance metadata.
4. D. AWS currently does not have sufficient capacity in the Region.

Correct Answer: C

- (Exam Topic 3)
Your company has a hybrid environment, with on-premise servers and servers hosted in the AWS cloud. They are planning to use the Systems Manager for patching servers. Which of the following is a pre-requisite for this to work;
Please select:

1. A. Ensure that the on-premise servers are running on Hyper-V.
2. B. Ensure that an IAM service role is created
3. C. Ensure that an IAM User is created
4. D. Ensure that an IAM Group is created for the on-premise servers

Correct Answer: B
You need to ensure that an IAM service role is created for allowing the on-premise servers to communicate with the AWS Systems Manager.
Option A is incorrect since it is not necessary that servers should only be running Hyper-V Options C and D are incorrect since it is not necessary that IAM users and groups are created For more information on the Systems Manager role please refer to the below URL: com/systems-rnanaeer/latest/usereuide/sysman-!
The correct answer is: Ensure that an IAM service role is created Submit your Feedback/Queries to our Experts