Reference:

https://aws.amazon.com/enterprise/hybrid/

Answer is D. Size limit is for individual item not for the whole s3 capacity, which is unlimited

IAM policies don't have access keys. The only way you will ever get an Access key is to create them from an IAM user.

B & C

Trust Advisor gives security recommendations

Data encryption is often done with help of KMS

But a physical MFA device is not a service it's a product.

And Pen-Testing is the customers business

Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scale a relational database in the cloud.

It provides cost-efficient and resizable capacity while automating time-consuming administration tasks

such as hardware provisioning, database setup, patching and backups.

It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need.

Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources.

It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files, eliminating the need to provision and manage capacity to accommodate growth.

Amazon EFS is designed to provide the throughput, IOPS, and low latency needed for Linux workloads.

Throughput and IOPS scale as a file system grows and can burst to higher throughput levels for short periods of time to support the unpredictable performance needs of file workloads.

For the most demanding workloads, Amazon EFS can support performance over 10 GB/sec and up to 500,000 IOPS.

If you choose B, this means you over provision resources just for peak times which could be a few days a months of a few months a year

while elasticity will ensure you scale up and down

according to the need and workload

and hence avoid over or under provisioning and consequently reduce costs.

D, because once we figure out peak load,

how much it is going to be,

elasticity would come into picture as to how much scaling is required.

B. Key word is Long Term and Low cost which is Glacier

Keyword is “shared”, i.e. for both parties, in the cloud and of the cloud. Answer is B.

AWS do patch management for their infrastructure hosts and customer do patch management for their instances running OS.

If A is answer, it should be VPN Cloud Hub not just VPN.

D is correct because:

Ref: https://aws.amazon.com/getting-started/projects/connect-data-center-to-aws/

"AWS Direct Connect enables you to securely connect your AWS environment to your on-premises data center or office location..."