AWS Certified Cloud Practitioner practice questions, page 35 of 40, with answer review and explanations.
Question 171
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2 instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege. Which AWS service or feature should the company use to enforce this principle?
Security groups
AWS Shield
AWS Global Accelerator
AWS Direct Connect gateway
Question 172
A company's web application requires AWS credentials and authorizations to use an AWS service. Which IAM entity should the company use as best practice?
IAM role
IAM user
IAM group
IAM multi-factor authentication (MFA)
Question 173
A company is creating a document that defines the operating system patch routine for all the company's systems. Which AWS resources should the company include in this document? (Choose two.)
Amazon EC2 instances
AWS Lambda functions
AWS Fargate tasks
Amazon RDS instances
Amazon Elastic Container Service (Amazon ECS) instances
Question 174
Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?
Security groups
Amazon Route 53
AWS Direct Connect
Amazon VPC
Question 175
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The company also wants general architectural guidance as teams build and test new applications. Which AWS Support plan will meet these requirements at the LOWEST cost?