This comprehensive exam preparation course will help you master all the topics covered in the certification exam. Practice with real-world scenarios and detailed explanations to build your confidence.
Estimated prep time75-85 hours of focused study to cover all material
A bank runs a Lambda function inside a VPC that must call Amazon KMS to decrypt data, but the security team forbids the function's traffic to KMS from traversing a NAT gateway or the public internet. Which solution meets this requirement?
Question 02
A bank must ensure that a new S3 bucket used for internal backups can never be made public, regardless of any bucket policy or ACL a developer later applies, and the guarantee must survive future policy edits. Which setting provides this at the bucket?
Question 03
A bank runs a media site serving large files from an S3 origin to a global audience, where the monthly bill is dominated by S3 data-transfer-out because every viewer reads directly from the bucket and many request the same popular files repeatedly. The bank wants to reduce origin egress cost while improving delivery. What should be recommended?