Question :_____ is the process the AWS identity service (IAM) uses to determine if an incoming request should be denied or allowed, based on the applicable policies.
Explanation: IAM's Policy Evaluation Logic, follows several basic rules to determine if certain request is to be allowed or denied. The evaluation algorithm follows the next steps: 1. By default, all requests are denied, except for those that use the AWS account's root security credentials. 2. Every "allow" policy overrides any default "denies". 3. An explicit "deny" overrides any existing "allows". 4. The order in which the policies are evaluated is not important.
Question : When running multiple Amazon EC instances, you can use ______ to automatically distribute incoming application traffic from Amazon CloudFront edge locations.
Explanation: When running multiple Amazon EC2 instances, you can use Elastic Load Balancing to automatically distribute incoming application traffic from Amazon CloudFront edge locations.
Question : If you didn't set the tenancy of an instance to ______ when you launched it into your VPC, you must stop the running instance, set the tenancy, and relaunch it.
Explanation: Instances that run on a completely separated hardware that is not shared by other EC2 instances are known as Dedicated Instances. Such instances must be launched into a VPC, and their tenancy attribute (dedicated or default) needs to be set at launching time and cannot be altered while the instance is running