SCS-C02 中文考古題練習

Q1. 某企業需要一套鑑識日誌(forensic logging)解決方案,用於數百個以 Docker 為基礎、執行於 Amazon EC2 的應用程式。此方案必須即時分析日誌、提供訊息重播(message replay),並保存日誌。應採用哪些 Amazon Web Services 服務來滿足這些需求?(選兩項)

A business requires a forensic logging solution for hundreds of Docker-based apps running on Amazon EC2. The solution must analyze logs in real time, provide message replay, and persist logs. Which Amazon Web Offerings (IAM) services should be employed to satisfy these requirements? (Select TWO)

Q2. 某公司使用 AWS Lambda、Amazon S3、Amazon Simple Notification Service (Amazon SNS) 與 Amazon DynamoDB 開發了一個應用程式。一個外部應用程式會將物件放入該公司的 S3 儲存貯體(bucket),並以日期與時間為物件加上標籤。一個 Lambda 函式會依日期與時間標籤定期從公司的 S3 儲存貯體拉取資料,並將特定值寫入 DynamoDB 資料表以供後續處理。這些資料包含個人可識別資訊(PII)。公司必須從 S3 儲存貯體與 DynamoDB 資料表移除超過 30 天的資料。哪個解決方案能以最高的營運效率滿足此需求?

A company developed an application by using AWS Lambda, Amazon S3, Amazon Simple Notification Service (Amazon SNS), and Amazon DynamoDB. An external application puts objects into the company's S3 bucket and tags the objects with date and time. A Lambda function periodically pulls data from the company's S3 bucket based on date and time tags and inserts specific values into a DynamoDB table for further processing. The data includes personally identifiable information (Pll). The company must remove data that is older than 30 days from the S3 bucket and the DynamoDB table. Which solution will meet this requirement with the MOST operational efficiency?

Q3. 某公司在 Amazon S3 上託管一個靜態網站。公司已設定一個 Amazon CloudFront 發佈(distribution)來提供網站內容,並將一個 AWS WAF web ACL 關聯至該 CloudFront 發佈。此 web ACL 確保請求來自美國,以符合法規限制。公司擔心 S3 URL 可能仍可被直接存取,使請求得以繞過 CloudFront 發佈。公司應採取哪組步驟來移除對 S3 URL 的直接存取?(選兩項)

A company is hosting a static website on Amazon S3 The company has configured an Amazon CloudFront distribution to serve the website contents. The company has associated an IAM WAF web ACL with the CloudFront distribution. The Web ACL ensures that requests originate from the United States to address compliance restrictions. THE company is worried that the S3 URL might still be accessible directly and that requests can bypass the CloudFront distribution. Which combination of steps should the company take to remove direct access to the S3 URL? (Select TWO)