Aws Practice 6 Flashcards
You are evaluating AWS services that can assist with creating scalable application environments. Which of the statements below best describes the Elastic Load Balancer service?
Helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application
A highly available and scalable Domain Name System (DNS) service
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
A network service that provides an alternative to using the Internet to connect customers’ on-premise sites to AWS
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
Which AWS Glacier data access option retrieves data from an archive in 1-5 minutes?
Accelerated
Express
Expedited
Standard
Expedited
Expedited retrievals allow you to quickly access your data when occasional urgent requests for a subset of archives are required. For all but the largest archives (250 MB+), data accessed using Expedited retrievals are typically made available within 1–5 minutes.
You need to connect your company’s on-premise network into AWS and would like to establish an AWS managed VPN service. Which of the following configuration items needs to be setup on the Amazon VPC side of the connection?
A Network Address Translation device
A Firewall
A Customer Gateway
A Virtual Private Gateway
A Virtual Private Gateway
Which of the following are NOT features of AWS IAM? (Select TWO.)
Shared access to your AWS account
Logon using local user accounts
Charged for what you use
Identity federation
PCI DSS compliance
Logon using local user accounts
Charged for what you use
You cannot use IAM to create local user accounts on any system. You are also not charged for what you use, IAM is free to use
What is the most efficient way to establish network connectivity from on-premises to multiple VPCs in different AWS Regions?
Use AWS Direct Connect
Use AWS VPN
Use AWS Client VPN
Use an AWS Transit Gateway
Use an AWS Transit Gateway
AWS Transit Gateway is a service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway.
A web application running on AWS has been received malicious requests from the same set of IP addresses.
Which AWS service can help secure the application and block the malicious traffic?
AWS IAM
AWS WAF
Amazon GuardDuty
Amazon SNS
AWS WAF
The AWS Web Application Firewall (WAF) is used to protect web applications or APIs against common web exploits. Rules can be created that block traffic based on source IP address.
To reduce cost, which of the following services support reservations? (Select TWO.)
Amazon ElastiCache
AWS Elastic Beanstalk
Amazon CloudFormation
Amazon RedShift
Amazon S3
Amazon ElastiCache
Amazon RedShift
Amazon ElastiCache and Amazon Redshift both support reserved nodes. Reservations can be used to gain a large discount from the on-demand rate in exchange for the commitment to a contract for 1 or 3 years.
Which of the authentication options below can be used to authenticate using AWS APIs? (Select TWO.)
Server passwords
Security groups
Key pairs
Access keys
Server certificates
Access keys
Server certificates
Access keys are long-term credentials for an IAM user or the AWS account root user. You can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK).
Which feature of Amazon S3 enables you to create rules to control the transfer of objects between different storage classes?
Versioning
Bucket policies
Lifecycle management
Object sharing
Lifecycle management
To manage your objects so that they are stored cost effectively throughout their lifecycle, configure their Amazon S3 Lifecycle. An S3 Lifecycle configuration is a set of rules that define actions that Amazon S3 applies to a group of objects. There are two types of actions:
Transition actions—Define when objects transition to another storage class. For example, you might choose to transition objects to the S3 Standard-IA storage class 30 days after you created them, or archive objects to the S3 Glacier storage class one year after creating them.
Expiration actions—Define when objects expire. Amazon S3 deletes expired objects on your behalf. The lifecycle expiration costs depend on when you choose to expire objects.
Which AWS service or feature helps restrict the AWS service, resources, and individual API actions the users and roles in each member account can access?
AWS Shield
AWS Organizations
Amazon Cognito
AWS Firewall Manager
AWS Organizations
AWS Organizations offers the following policy types:
Service control policies (SCPs) offer central control over the maximum available permissions for all of the accounts in your organization.
Tag policies help you standardize tags across resources in your organization’s accounts.
Under the AWS shared responsibility model, which of the following are customer responsibilities? (Select TWO.)
Setting up server-side encryption on an Amazon S3 bucket
Network and firewall configurations
Physical security of data center facilities
Amazon RDS instance patching
Compute capacity availability
Setting up server-side encryption on an Amazon S3 bucket
Network and firewall configurations
As a customer on AWS you take responsibility for encrypting data. This includes encrypting data at rest and data in transit. Another security responsibility the customer owns is setting network and firewall configurations. For instance, you must configure Network ACLs and Security Groups, and any operating system-level firewalls on your EC2 instances.
Your manager has asked you to explain the benefits of using IAM groups. Which of the below statements are valid benefits? (Select TWO.)
You can restrict access to the subnets in your VPC
Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users
Provide the ability to create custom permission policies
Enables you to attach IAM permission policies to more than one user at a time
Provide the ability to nest groups to create an organizational hierarchy
Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users
Enables you to attach IAM permission policies to more than one user at a time
Which of the following are examples of horizontal scaling? (Select TWO.)
Add more CPU/RAM to existing instances as demand increases
Automatic scaling using services such as AWS Auto Scaling
Requires a restart to scale up or down
Scalability is limited by maximum instance size
Add more instances as demand increases
Automatic scaling using services such as AWS Auto Scaling
Add more instances as demand increases
With horizontal scaling you add more instances to a fleet of instances to service demand as it increases. This can be achieved automatically by using AWS Auto Scaling to add instances in response to CloudWatch performance metrics.
With vertical scaling you are adding CPU, RAM or storage to an existing instance. This may involve modifying the instance type which typically requires a restart. With vertical scaling on AWS scalability is limited by the maximum instance size.
A Cloud Practitioner is creating the business process workflows associated with an order fulfilment system. Which AWS service can assist with coordinating tasks across distributed application components?
AWS STS
Amazon SQS
Amazon SWF
Amazon SNS
Amazon Simple Workflow Service
Amazon Simple Workflow Service (SWF) is a web service that makes it easy to coordinate work across distributed application components. SWF enables applications for a range of use cases, including media processing, web application back-ends, business process workflows, and analytics pipelines, to be designed as a coordination of tasks.
The AWS Cost Management tools give users the ability to do which of the following? (Select TWO.)
Create budgets and receive notifications if current or forecasted usage exceeds the budgets
Break down AWS costs by day, service, and linked AWS account
Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective
Terminate any AWS resource automatically if budget thresholds are exceeded
Move data stored in Amazon S3 to a more cost-effective storage class
Create budgets and receive notifications if current or forecasted usage exceeds the budgets
Break down AWS costs by day, service, and linked AWS account
AWS has a set of solutions to help you with cost management and optimization. This includes services, tools, and resources to organize and track cost and usage data, enhance control through consolidated billing and access permission, enable better planning through budgeting and forecasts, and further lower cost with resources and pricing optimizations.
However, these tools do not terminate all resources, manipulate resources, or make changes to pricing models. It is however possible to terminate some resources using AWS Budgets Actions.
