AWS Practice Exam 6 Flashcards
Which of the following are examples of horizontal scaling? (Select TWO.)
Add more CPU/RAM to existing instances as demand increases
Automatic scaling using services such as AWS Auto Scaling
Requires a restart to scale up or down
Scalability is limited by maximum instance size
Add more instances as demand increases
Automatic scaling using services such as AWS Auto Scaling
Add more instances as demand increases
With horizontal scaling you add more instances to a fleet of instances to service demand as it increases. This can be achieved automatically by using AWS Auto Scaling to add instances in response to CloudWatch performance metrics.
With vertical scaling you are adding CPU, RAM or storage to an existing instance. This may involve modifying the instance type which typically requires a restart. With vertical scaling on AWS scalability is limited by the maximum instance size.
According to the AWS Well-Architected Framework, what change management steps should be taken to achieve reliability in the AWS Cloud? (Select TWO.)
Use Amazon GuardDuty to record API activity to an S3 bucket
Use AWS CloudTrail to record AWS API calls into an auditable log file
Use service limits to prevent users from creating or making changes to AWS resources
Use AWS Certificate Manager to create a catalog of approved services
Use AWS Config to generate an inventory of AWS resources
Use AWS CloudTrail to record AWS API calls into an auditable log file
Use AWS Config to generate an inventory of AWS resources
AWS Config can be used to track the configuration state of your resources and how the state has changed over time. With CloudTrail you can audit who made what API calls on what resources at what time. This can help with identifying changes that cause reliability issues.
The AWS Cost Management tools give users the ability to do which of the following? (Select TWO.)
Create budgets and receive notifications if current or forecasted usage exceeds the budgets
Break down AWS costs by day, service, and linked AWS account
Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective
Terminate any AWS resource automatically if budget thresholds are exceeded
Move data stored in Amazon S3 to a more cost-effective storage class
Create budgets and receive notifications if current or forecasted usage exceeds the budgets
Break down AWS costs by day, service, and linked AWS account
AWS has a set of solutions to help you with cost management and optimization. This includes services, tools, and resources to organize and track cost and usage data, enhance control through consolidated billing and access permission, enable better planning through budgeting and forecasts, and further lower cost with resources and pricing optimizations.
However, these tools do not terminate all resources, manipulate resources, or make changes to pricing models. It is however possible to terminate some resources using AWS Budgets Actions.
A web application running on AWS has been received malicious requests from the same set of IP addresses.
Which AWS service can help secure the application and block the malicious traffic?
AWS IAM
AWS WAF
Amazon GuardDuty
Amazon SNS
AWS WAF
The AWS Web Application Firewall (WAF) is used to protect web applications or APIs against common web exploits. Rules can be created that block traffic based on source IP address.
Under the AWS shared responsibility model, which of the following are customer responsibilities? (Select TWO.)
Setting up server-side encryption on an Amazon S3 bucket
Network and firewall configurations
Physical security of data center facilities
Amazon RDS instance patching
Compute capacity availability
Setting up server-side encryption on an Amazon S3 bucket
Network and firewall configurations
As a customer on AWS you take responsibility for encrypting data. This includes encrypting data at rest and data in transit. Another security responsibility the customer owns is setting network and firewall configurations. For instance, you must configure Network ACLs and Security Groups, and any operating system-level firewalls on your EC2 instances.
What methods are available for scaling an Amazon RDS database? (Select TWO.)
You can scale up automatically using AWS Auto Scaling
You can scale out by implementing Elastic Load Balancing
You can scale up by moving to a larger instance size
You can scale out automatically with EC2 Auto Scaling
You can scale up by increasing storage capacity
You can scale up by moving to a larger instance size
You can scale up by increasing storage capacity
To handle a higher load in your database, you can vertically scale up your master database with a simple push of a button. There are currently over 18 instance sizes that you can choose from when resizing your RDS MySQL, PostgreSQL, MariaDB, Oracle, or Microsoft SQL Server instance.
For Amazon Aurora, you have 5 memory-optimized instance sizes to choose from. The wide selection of instance types allows you to choose the best resource and cost for your database server.
In addition to scaling your master database vertically, you can also improve the performance of a read-heavy database by using read replicas to horizontally scale your database. RDS MySQL, PostgreSQL, and MariaDB can have up to 5 read replicas, and Amazon Aurora can have up to 15 read replicas
Which feature of Amazon S3 enables you to create rules to control the transfer of objects between different storage classes?
Versioning
Bucket policies
Lifecycle management
Object sharing
Lifecycle management
To manage your objects so that they are stored cost effectively throughout their lifecycle, configure their Amazon S3 Lifecycle. An S3 Lifecycle configuration is a set of rules that define actions that Amazon S3 applies to a group of objects. There are two types of actions:
Transition actions—Define when objects transition to another storage class. For example, you might choose to transition objects to the S3 Standard-IA storage class 30 days after you created them, or archive objects to the S3 Glacier storage class one year after creating them.
Expiration actions—Define when objects expire. Amazon S3 deletes expired objects on your behalf. The lifecycle expiration costs depend on when you choose to expire objects.
What is the easiest way to store a backup of an EBS volume on Amazon S3?
Write a custom script to copy the data into a bucket
Use S3 lifecycle actions to backup the volume
Create a snapshot of the volume
Use Amazon Kinesis to process the data and store the results in S3
Create a snapshot of the volume
You can back up the data on your Amazon EBS volumes to Amazon S3 by taking point-in-time snapshots. Snapshots are incremental backups, which means that only the blocks on the device that have changed after your most recent snapshot are saved.
Which AWS technology can be referred to as a “virtual hard disk in the cloud”?
Amazon EFS Filesystem
Amazon S3 Bucket
Amazon ENI
Amazon EBS volume
Amazon EBS volume
An Amazon Elastic Block Store (EBS) volume is often described as a “virtual hard disk in the cloud”. EBS volumes are block-level storage volumes that are attached to EC2 instances much as you would attach a virtual hard disk to a virtual machine in a virtual infrastructure.
Which AWS Glacier data access option retrieves data from an archive in 1-5 minutes?
Accelerated
Express
Expedited
Standard
Expedited
Expedited retrievals allow you to quickly access your data when occasional urgent requests for a subset of archives are required. For all but the largest archives (250 MB+), data accessed using Expedited retrievals are typically made available within 1–5 minutes.
You are evaluating AWS services that can assist with creating scalable application environments. Which of the statements below best describes the Elastic Load Balancer service?
Helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application
A highly available and scalable Domain Name System (DNS) service
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
A network service that provides an alternative to using the Internet to connect customers’ on-premise sites to AWS
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
What is the most efficient way to establish network connectivity from on-premises to multiple VPCs in different AWS Regions?
Use AWS Direct Connect
Use AWS VPN
Use AWS Client VPN
Use an AWS Transit Gateway
Use an AWS Transit Gateway
AWS Transit Gateway is a service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway.
Your manager has asked you to explain the benefits of using IAM groups. Which of the below statements are valid benefits? (Select TWO.)
You can restrict access to the subnets in your VPC
Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users
Provide the ability to create custom permission policies
Enables you to attach IAM permission policies to more than one user at a time
Provide the ability to nest groups to create an organizational hierarchy
Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users
Enables you to attach IAM permission policies to more than one user at a time
Which service allows you to monitor and troubleshoot systems using system and application log files generated by those systems?
CloudTrail Logs
CloudWatch Metrics
CloudTrail Metrics
CloudWatch Logs
CloudWatch Logs
You need to connect your company’s on-premise network into AWS and would like to establish an AWS managed VPN service. Which of the following configuration items needs to be setup on the Amazon VPC side of the connection?
A Network Address Translation device
A Firewall
A Customer Gateway
A Virtual Private Gateway
A Virtual Private Gateway
