AWS customers are welcome to carry out security assessments or penetration tests against their AWS infrastructure without prior approval for 8 services.

Ref: https://aws.amazon.com/security/penetration-testing/

Keywords are uninterrupted and cost effective.

Spot instances can be interrupted while reserved instances are NOT cheap.

Hence A is correct.

A) ASGs don't span across Regions.

B) ASGs can add or remove instances based on Demand and the configuration of a target group. Hence B is correct.

C) Here's a tip with regard to static content.

If AWS asks about static content, they are most likely referring to a static site which can be hosted in S3.

D) ASGs don't distribute traffic that will be done with a ELB/ALB.

A. Shared responsibility security model --> NOT related with cost.

B. Single tenancy --> Related more with on premises infrastructure.

C. Elastic computing --> Capacity to increase/decrease capacity with investment = 0, so this is related to cost.

D. Encryption --> Is to protect data, NOT necessary to cost.

--> C is correct.

A is wrong as 0.0.0.0/0 is NOT a port but IP Address range.

C is wrong as IAM is NOT about inbound rules.

D is wrong as AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources.

Answer is therefore B.

Answer should be C as you select the region from the management console and start deployment.

A. [Wrong] - No need to contact any one or to sign anything when creating resources in another region.

B. [Wrong] - You cannot move Availability Zones.

C. [Correct] - You just create resources in another region.

D. [Wrong] - There is no such thing like download management console.

The answer is A.

B is a region.

D says a SINGLE source of power vs a REDUNDANT source of power.

AWS Certificate Manager is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.

SSL/TLS certificates are used to secure network communications and establish the identity of websites over the Internet as well as resources on private networks.

AWS Certificate Manager removes the time-consuming manual process of purchasing, uploading, and renewing SSL/TLS certificates. So cannot be D.

Service limits is about resource quantity so B is wrong.

GuardDuty is about threat protection so E is wrong.

=> Can only be A and C.

B is correct because of flexibility.

The question mentions "flexible start and end times" but did not mention either "interruptible" or "non-interruptible" workloads.

If the workload is interruptible, the most cost-effective will be using Spot Instance.

If the workload is non-interruptible, the most cost-effective will be using On-demand Instance.

Answer "B" is correct.

Run on two Availability Zones -> this is for High Availability.

Using another AWS Region -> for the disaster recovery.

D is also a good option but it is more than what the customer wants & costs significantly more. So D is NOT correct here.