Media storage devices used to store customer data are classified by AWS as Critical and treated accordingly, as high impact, throughout their life-cycles.

AWS has exacting standards on how to install, service, and eventually destroy the devices when they are no longer useful.

When a storage device has reached the end of its useful life, AWS decommissions media using techniques detailed in NIST 800-88.

Media that stored customer data is not removed from AWS control until it has been securely decommissioned.

Reference:

https://aws.amazon.com/compliance/data-center/controls/

D isn't correct. AWS compliance is for the infrastructure. It does not automatically mean that your workload running on it meets particular compliance requirements.

C, stop guessing capacity is one of the principles of AWS Cloud!

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment.

Elastic Beanstalk: "service for deploying and scaling web applications and services" - Yes

CodeCommit: "fully-managed source control service that hosts secure Git-based repositories" - No

Data Pipeline: "web service that helps you reliably process and move data between different AWS compute and storage services, as well as on-premises data sources" - No

CloudFormation: "common language for you to model and provision AWS and third party application resources in your cloud environment" - Resources for apps - Yes

Config: "service that enables you to assess, audit, and evaluate the configurations of your AWS resources" - No

The TCO Calculator provides directional guidance on possible realized savings when deploying AWS.

This tool is built on an underlying calculation model, that generates a fair assessment of value that a customer may achieve given the data provided by the user.

Reference:

https://aws.amazon.com/tco-calculator/

Correct answers should be A and B. Answer B basically serves the purpose for A.

Reference:

https://aws.amazon.com/premiumsupport/knowledge-center/potential-account-compromise/

B is correct. Ensuring an application remains available even if one resource fails means introducing redundancy.

Anytime you read about "availability" in a question, the first thing to look for in your answer should be related to "failure" and vice versa.

Ref: https://aws.amazon.com/blogs/startups/high-availability-for-mere-mortals/

AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.

AWS Shield provides always-on detection and automatic inline mitigations that minimize application downtime and latency, so there is no need to engage AWS Support to benefit from DDoS protection.

There are two tiers of AWS Shield - Standard and Advanced.

Reference:

https://aws.amazon.com/shield/

Correct answer to monitor EC2 CPU usage is CloudWatch.

From CloudWatch dashboard you can immediately see the resource usage for all EC2 instances.

=> B