The correct choices are AWS Identity and Access Management (AWS IAM) and Amazon CloudFront. These two services provide global scope and are not tied to a single AWS Region.

AWS Identity and Access Management (AWS IAM) is global because identities, groups, roles and policies are defined at the account level and they apply across all Regions in the account. IAM lets you centrally manage authentication and authorization for services regardless of the Region where resources run.

Amazon CloudFront is global because distributions are configured at the account level and they use a worldwide network of edge locations so a single distribution can serve content to users around the world.

Amazon Simple Storage Service (Amazon S3) is regional because each bucket is created in a specific Region and the stored data resides in that Region even though bucket names use a global namespace.

Amazon Relational Database Service (Amazon RDS) is regional because database instances, snapshots and related resources are created and managed within chosen Regions and Availability Zones.

Amazon Elastic Compute Cloud (Amazon EC2) is regional because instances, AMIs and networking resources are scoped to particular Regions and Availability Zones and operate within those regional boundaries.

Full AWS Practitioner Certification Question