1. You have been asked by your team leader to strengthen the security in your environment. You want to optimize your AWS infrastructure, improve security and performance, reduce costs, and monitor service quotas. You also need to make sure that your Amazon S3 bucket permissions do not have open access. Which service should you use?

A) AWS CloudTrail
B) Amazon CloudWatch
C) Amazon S3 ACL
D) AWS Trusted Advisor



2. As a Data Engineer, you need to design an archive data storage solution using Amazon S3. Which storage class should you choose to store archived data? (select 2)(Select 2answers)

A) S3 Standard-IA
B) S3 Intelligent Tiering
C) S3 Standard
D) S3 Glacier Deep Archive
E) S3 Glacier Flexible Retrieval


3. As a Data Engineer, you need to create a cost-effective data pipeline solution that ingests unstructured data from various sources and stores it for downstream analytics applications and machine learning. The solution should include a data store where the processed data is highly available for at least one year, so that data scientists can run analytics and machine learning workloads on the most recent data. For compliance reasons, the solution should include both processed and raw data. The raw data doesn't need to be accessed regularly, but should be accessible within 24 hours. What solution should you choose?

A) You should use Amazon S3 Standard for all new data. Use Amazon S3 Glacier Deep Archive for all processed data.
B) You should use Amazon Elastic File System (EFS) for the processed data that is within one year of processing. After one year, use Amazon S3 Standard for the processed data. Use Amazon S3 Glacier Deep Archive for all raw data.
C) You should use Amazon S3 Standard for the processed data that is within one year of processing. After one year, use Amazon S3 Glacier for the processed data. Use Amazon S3 Glacier Deep Archive for all raw data.
D) You should use Amazon S3 Standard for both the raw and processed data. After one year, use Amazon S3 Glacier Deep Archive for the raw data.



4. You have been tasked with creating a strategy to enforce encryption of your data at rest and in transit. Which AWS services can be used to provide data protection at rest and in transit? (select 3)(Select 3answers)

A) AWS Key Management Service (KMS)
B) VPN connectivity
C) Network ACLs
D) AWS Certificate Manager
E) MFA authentication


5. Select all the components that you must consider when storing data in the Amazon S3 bucket. (select 3)(Select 3answers)

A) Requests & data retrievals costs - you pay for requests made against your Amazon S3 bucket and objects.
B) Storage costs - you pay for storing objects in your Amazon S3 bucket.
C) Data transfer - you pay for data transferred between S3 buckets in the same AWS Region.
D) Management & analytics costs - you pay for the storage management features and analytics that are enabled on your accountâ??s bucket (Amazon S3 Inventory, S3 Storage Class Analysis, S3 Storage Lens, and S3 Object Tagging).
E) Data transfer - you pay for data transferred in from the internet.