AWS round 2 revision

Question 1

Ensuring that you have traceability is critical in AWS. Traceability typically falls under what AWS design pillar?

Answer 1

Operational Excellence

Question 2

You need an AWS support plan for your production workloads, but want to keep costs to a minimum. Which of the following plans should you choose?

Answer 2

Developer

Question 3

Which of the following support plans features a < 4-hour response time in the event of an impaired production system?

Answer 3

Developer

Question 4

Which tool can help you to compare the cost of hosting resources in AWS vs the cost of hosting in a traditional data centre?

Answer 4

AWS TCO Calculator

Question 5

Which of the following support plans feature access to AWS support via email only during business hours?

Answer 5

Basic

Question 6

What EC2 pricing model enables bidding at whatever price is desired for instance capacity, thereby making it ideal for flexibility with application start and end times?

Answer 6

Spot

Question 7

Which of the following is generally not billed for on the AWS platform?

Answer 7

Data-in

Question 8

Which of the following AWS Support levels offers 24x7 support via phone or chat?

Answer 8

Business

Question 9

You are an AWS Enterprise customer with questions about billing and your overall AWS account. Which of the following AWS support personnel should you contact?

Answer 9

AWS Concierge

Question 10

What component does the Budgets tool in AWS use for visualization?

Answer 10

Cost Explorer

Question 11

When using the EC2 pay-as-you-go payment option, which of the following pricing schedules applies?

Answer 11

Hourly

Question 12

Which is not a fundamental cost in AWS?

Answer 12

Data transfer in

Question 13

Which of the following acts like built-in firewalls for your virtual servers?

Answer 13

Security Groups

Question 14

Which of the following Compliance certifications attests to the security of the AWS platform regarding credit card transactions?

Answer 14

PCI DSS Level 1

Question 15

Your company has updated its security policies to include cloud workloads as well as those running on-premises. Your manager would like a report of which technologies will require configuration changes. Which of the following will not be included in the report because they are the responsibility of AWS?

Answer 15

Host operating systems

Question 16

Where is the best place to store your Root User Access Key so that you application can use it to make requests to AWS?

Answer 16

Nowhere - you should not use the Root User access keys for this

Question 17

A purchasing department staff member is setup as an AWS user in the company’s procurement AWS account. At each month-end, the staff member needs access to an application running on EC2 in the company’s accounts payable AWS account to reconcile reports. Which of the following provides the most secure and operationally efficient way to give the staff member access to the accounts payable application?

Answer 17

Have the user request temporary security credentials for the application by assuming a role

Question 18

Which of the below are you responsible for when storing data in S3?

Answer 18

Backing up your data

Question 19

You want to streamline access management for your AWS administrators by assigning them a pre-defined set of permissions based on their job role - which of the below is the best way to approach this?

Answer 19

Use IAM Groups

Question 20

Which AWS service performs automated network assessments of Amazon EC2 instances to check for vulnerabilities?

Answer 20

Amazon Inspector

Question 21

Which of the following does AWS perform on its behalf for EBS volumes to make it less prone to failure?

Answer 21

Replication of the volume in the same Availability Zone

Question 22

An ELB instance is configured with the default HealthCheck and Response Timeout intervals as 30 seconds and 5 seconds respectively. How long will it take for an instance within a target group to be labelled as OutOfService, if it goes down a second after the latest HealthCheck?

Answer 22

34 seconds

Question 23

You are the architect of a custom application running inside your corporate data center. The application runs with some unresolved bugs that produce a lot of data inside custom log files generating time-consuming activities to the operation team who is responsible for analyzing them.
You want to move the application to AWS using EC2 instances, and at the same time, take the opportunity for improving logging and monitoring capabilities but without touching the application code.
What AWS service should you use to satisfy the requirement?

Answer 23

AWS CloudWatch Logs

Question 24

Your company is planning to pay for an AWS Support plan. They have the following requirements as far as the support plan goes
24x7 access to Cloud Support Engineers via email, chat & phone
Response time of less than 1 hour for any business critical system faults
Which of the following plans will suffice to keep in mind the above requirement?

Answer 24

Enterprise

Question 25

Which of the below cannot be used to get data from Amazon Glacier?

Answer 25

AWS Console

Question 26

Which of the following can be used to spin up EC2 instances on the AWS Cloud ?

Answer 26

Amazon Machine Image

Question 27

An organization runs several EC2 instances inside a VPC using three subnets, one for Development, one for Test and one for Production. The Security team has some concerns about the VPC configuration and requires to restrict the communication across the EC2 instances using Security Groups. Which of the following options is true for Security Groups?

Answer 27

You can change a Security Group associated to an instance if the instance state is stopped or running.

Question 28

If there is a requirement to host EC2 Instances in the AWS Cloud wherein the utilization is guaranteed to be consistent for a long period of time, which of the following would you utilize to ensure costs are minimized?

Answer 28

Reserved instances

Question 29

Which of the following service is most useful when a Disaster Recovery method is triggered in AWS.

Answer 29

Amazon Route 53

Question 30

As an IT support center team member, you begin receiving calls from users about problems they’re experiencing with your company’s AWS-based point-of-sale system. You want to begin your investigation by checking with AWS for any service alerts they may be communicating. Which AWS tool will you give you the information you seek?

Answer 30

AWS Personal Health Dashboard

Question 31

Your manager approaches you this morning to tell you there has been a surprise audit announced by the internal audit team for all of your company's AWS Accounts. Which service would you use to provide the necessary information to the audit team?

Answer 31

CloudTrail

Question 32

Which of the below terms represents a series of Edge Locations plus information about how you want content managed as part of a CDN?

Answer 32

A Distribution

Question 33

You have been asked to archive some data into Glacier that needs to be encrypted. What is the easiest way to achieve this?

Answer 33

Send the data to Glacier and do nothing more - all data in Glacier is encrypted by default

Question 34

Which of the below allows you to restrict access to individual objects in an S3 bucket?

Answer 34

Access Control Lists

Question 35

Which Elastic Load Balancer type would be best suited to help you host a website?

Answer 35

Application

Question 36

You need to re-create an EBS volume that you have used previously. How might you go about doing that?

Answer 36

Re-create the volume from a snapshot.

Question 37

A software development team needs to create numerous testing environments each day based on multiple concurrent project activities. Provisioning of these environments needs to happen within minutes to ensure that project deadlines are met. The number of environments needed daily varies depending shifting priorities in business requirements. How can the team best achieve the agility they need for creating the testing environments?

Answer 37

Have AWS CloudFormation provision the stacks and resources needed for the testing environments

Question 38

Which of the following tools provides a view of the performance and availability of your AWS services based on your requirements?

Answer 38

AWS Personal Health Dashboard