65 Items Mock Test Flashcards
You have a mission-critical application that must be globally available at all times. If this is the case, which of the below deployment mechanisms would you employ?
Deployment to multiple edge locations
Deployment to Multiple Regions
Deployment to multiple Availability Zones
Deployment to multiple Data Centers
Deployment to Multiple Regions
Regions represent different geographic locations and are best to host your application across multiple regions for disaster recovery.
Which of the following can be used to protect against DDoS attacks. (Choose 2)
AWS Shield
AWS Shield Advanced
AWS EC2
AWS ELB
AWS Shield, AWS Shield Advanced
AWS Shield - All AWS customers benefit from the automatic protections of AWS Shield Standard, at no additional charge. AWS Shield Standard defends against most common, frequently occurring network and transport layer DDoS attacks that target your web site or applications
AWS Shield Advanced - For higher levels of protection against attacks targeting your web applications running on Amazon EC2, Elastic Load Balancing (ELB), CloudFront, and Route-53 resources, you can subscribe to AWS Shield Advanced. AWS Shield Advanced provides expanded DDoS attack protection for these resources.
Which of the following are the right principles when designing cloud-based systems? (Choose 2)
Build loosely-coupled components
Assume everything will fail
Build Tightly-coupled components
Use as many services as possible
Build loosely-coupled components, Assume everything will fail
Always build components that are loosely coupled. This is so that even if one component does fail, the entire system does not fail.
Also if you build with the assumption that everything will fail, then you will ensure that the right measures are taken to build a highly available and fault-tolerant system.
A company does not want to manage their database. Which of the following services is a fully managed NoSQL database provided by AWS.
AWS RDS
DynamoDB
Oracle RDS
Elastic Map Reduce
DynamoDB
Which AWS service allows for distribution of incoming application traffic across multiple EC2 instances?
AWS EC2
AWS ELB
AWS Autoscaling
AWS Inspector
AWS ELB
Elastic Load Balancing distributes incoming application traffic across multiple EC2 instances, in multiple Availability Zones. This increases the fault tolerance of your applications.
Which of the following concepts is used when you want to manage the bills for multiple accounts under one master account?
Combined Billing
Consolidated billing
Cost Explorer
IAM
Consolidated billing
You can use the consolidated billing feature in AWS Organizations to consolidate payment for multiple AWS accounts or multiple AISPL accounts. With consolidated billing, you can see a combined view of AWS charges incurred by all of your accounts. You also can get a cost report for each member account that is associated with your master account. Consolidated billing is offered at no additional charge
Which of the following is the amount of storage that can be stored in the Simple Storage service?
1 TB
Virtually unlimited storage
5 TB
1 PB
Virtually unlimited storage
Amazon S3 provides a simple web service interface that you can use to store and retrieve any amount of data, at any time, from anywhere on the web. The total volume of data and the number of objects you can store are unlimited. Individual Amazon S3 objects can range in size from a minimum of 0 bytes to a maximum of 5 terabytes.
What AWS tool lets you to view and analyze your costs and usage?
Cost Allocation Tags
Cost Explorer
AWS Consolidated billing
Payment History
Cost Explorer
Cost Explorer is a free tool that you can use to view your costs. You can view your costs as either a cash-based view (costs are recorded when cash is received or paid) with unblended costs or as an accrual-based view (costs are recorded when income is earned or costs are incurred). You can view data for up to the last 12 months, forecast how much you are likely to spend for the next three months, and get recommendations for what Reserved Instances to purchase
Incorrect. A Cost Allocation tag is a label that you or AWS assigns to an AWS resource to help track AWS costs.
Incorrect. AWS Consolidated Billing is for managing the billing from multiple AWS accounts.
Incorrect. Payment history just allows you to view your previous payments made to AWS
What is the service provided by AWS that lets you host Domain Name systems?
VPC
Route 53
Direct Connect
VPN
Route 53
Amazon Route 53 provides highly available and scalable Domain Name System (DNS), domain name registration, and health-checking web services. It is designed to give developers and businesses an extremely reliable and cost effective way to route end users to Internet applications by translating names like-example.com-into the numeric IP addresses, such as-192.0.2.1, that computers use to connect to each other.
What service helps you to aggregate logs from your EC2 instance?
SQS
Cloudwatch Logs
S3
Cloudtrail
Cloudwatch Logs
You can use Amazon CloudWatch Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, and other sources. You can then retrieve the associated log data from CloudWatch Logs
Incorrect. SQS is the AWS managed message queuing service
Incorrect. S3 is the AWS object storage service.
Incorrect. AWS Cloudtrail is for tracking user activity and API usage.
Which of the following is a serverless compute offering from AWS?
AWS EC2
AWS Lambda
AWS SNS
AWS SQS
AWS Lambda
AWS Lambda is a compute service that lets you run code without provisioning or managing servers. AWS Lambda executes your code only when needed and scales automatically, from a few requests per day to thousands per second.
What does Amazon EC2 provide?
*A platform to run code (Java, PHP, Python), paying on an hourly basis.
*Virtual servers in the Cloud.
*Computer Clusters in the Cloud.
*Physical servers, remotely managed by the customer
Virtual servers in the Cloud.
Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides re-sizeable compute capacity in the cloud. It is designed to make web-scale-cloud computing-easier for developers.
Amazon EC2’s simple web service interface allows you to obtain and configure capacity with minimal friction. It provides you with complete control of your computing resources and lets you run on Amazon’s proven computing environment. Amazon EC2 reduces the time required to obtain and boot new server instances to minutes, allowing you to quickly scale capacity, both up and down, as your computing requirements change.
Which of the following storage mechanisms can be used to store messages effectively which can be used across distributed systems.
Amazon Glacier
Amazon SQS
Amazon EBS Volumes
Amazon EBS Snapshots
Amazon SQS
Amazon Simple Queue Service (Amazon SQS) offers a reliable, highly-scalable hosted queue for storing messages as they travel between applications or microservices. It moves data between distributed application components and helps you decouple these components
When working on the costing for on-demand EC2 instances, which of the following attributes determine the cost of the EC2 Instance? (Choose 3)
AMI Type
Location Type
Instance Type
Edge location
The cost of EC2 On-Demand Instances is based on:
Location Type (AWS Local Zone, AWS Region, AWS Wavelength Zone) AMI Type (Private and Public AMIs on specific operating systems) Instance Type (General Purpose, Compute Optimized, Memory Optimized, etc)
Which of the following services helps provide a connection from on-premises infrastructure to resources hosted in the AWS Cloud. (Choose 2)
AWS VPN
AWS Direct Connect
AWS VPC
AWS Subnets
AWS Site-to-Site VPN enables you to securely connect your on-premises network or branch office site to your Amazon Virtual Private Cloud (Amazon VPC). AWS Client VPN enables you to securely connect users to AWS or on-premises networks.
AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.
Incorrect. AWS VPCs and Subnets let you isolate sections of your AWS Cloud environment. But they do not provide a connection to your on-premises infrastructure.
In order to predict the cost of moving resources from on-premise to the cloud, which of the following can be used?
AWS Inspector
AWS Pricing Calculator
AWS WAF
AWS Trusted Advisor
AWS Pricing Calculator
The AWS TCO calculator makes it easy to estimate your savings when comparing the cloud to an on-premises or colocation environment. Use the TCO calculator to get detailed reports and insights into the cost components that make AWS a viable alternative to lower your costs.
There is a requirement to host a set of servers in the Cloud for three months. Which of the following launch types for AWS EC2 instances would be the most cost-effective?
Spot Instances
On-Demand
No Upfront costs Reserved
Partial Upfront costs Reserved
On-Demand Instances
Since the requirement is just three months, the most cost-effective option is to use On-Demand Instances.
Incorrect. Spot instances are cheap, but they are only for applications with flexible start and end times, Applications that are only feasible at very low compute prices, or Users with urgent computing needs for large amounts of additional capacity.
Incorrect. AWS requires a minimum 1-year term, and a successful billing history is needed before you can purchase No Upfront Reserved Instances.
Incorrect. AWS requires a minimum 1-year term on their contracts for reserved instances.
What is a document that provides a formal statement of one or more permissions?
Permission
Policy
Role
Resource
Policy
A policy is a JSON document that specifies what a user can do on AWS. This document consists of
Actions: what actions you will allow. Each AWS service has its own set of actions. Resources: which resources you allow the action on. Effect: what the effect will be when the user requests access—either allow or deny.
A policy is an entity in AWS that, when attached to an identity or resource, defines their permissions. AWS evaluates these policies when a principal, such as a user, makes a request. Permissions in the policies determine whether the request is allowed or denied
You are planning to serve a web application on the AWS Platform by using EC2 Instances. Which of the below principles would you adopt to ensure that even if some of the EC2 Instances crashes , you still have a working application
Using a scalable system
Using a fault-tolerant system
Using an elastic system
Using a regional system
Using a fault-tolerant system
A fault-tolerant system is one that ensures that the entire system works as expected even there are issues.
Which of the following security features is associated with a Subnet in a VPC to protect against Incoming traffic requests.
AWS Inspector
NACL
Subnet Groups
Security Groups
NACL
A-network access control list (ACL)-is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. You might set up network ACLs with rules similar to your security groups in order to add an additional layer of security to your VPC.
AWS provides a storage option known as Amazon S3 Glacier. What is this AWS service designed for? (Select 2)
Infrequently accessed data
Data archives
Cached session data
Active database storage
Infrequently accessed data, Data archives
Amazon Glacier is an extremely low-cost storage service that provides secure, durable, and flexible storage for data backup and archival. So Amazon glacier is used for Infrequently accessed data and Data archives.
What is the concept of an AWS region?
It is a collection of Edge locations
It is a geographical area divided into Availability Zones
It is a collection of Compute capacity
It is the same as an Availability zone
It is a geographical area divided into Availability Zones
A region is a geographical area divided into Availability Zones. Each region contains at least two Availability Zones.
Which one of the following features is normally present in all AWS Support plans?
Access to all features in the Trusted Advisor
24/7 access to Customer Service
A technical Account Manager
A dedicated support person
24/7 access to Customer Service
Which of the following is AWS services allows you to build a data warehouse on the cloud?
AWS Snowball
AWS Redshift
AWS Storage Gateway
AWS EMR
AWS Redshift
Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more. This enables you to use your data to acquire new insights for your business and customers.
Which of the following IAM identities allow an application deployed on an EC2 instance to write data to S3 in a secure manner?
AWS IAM Users
AWS IAM Roles
AWS IAM Groups
AWS IAM Permissions
AWS IAM Roles
An IAM role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it including assigning it to an EC2 instance.
Incorrect. IAM users are for granting AWS access to your users. Not an EC2 instance.
Incorrect. An IAM group is a collection of IAM users.
Incorrect. IAM Permissions are included in a permission policy, which is then assigned to an IAM Role.
When using On-Demand instances in AWS, which of the following statements is false regarding the cost for the Instance? (SELECT TWO)
You pay upfront costs for the instance.
You have to pay the termination fees if you terminate the instance.
No long-term commitments
Pay for compute capacity by the hour or second (minimum of 60 seconds)
You have to pay the termination fees if you terminate the instance.
Truth: You don’t need to pay any termination fees regarding EC2 Instances.
