Batch #3 Flashcards

1
Q

Which type of security control can be used to deny network access from a specific IP address?

A

Network ACL

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does an organization need to do in Amazon IAM to enable user access to services being launched in new region?

A

Nothing, IAM is global

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which AWS service allows you to automate the evaluation of recorded configurations against desired configuration?

A

AWS Config

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which AWS service lets you add user sign up, sign-in and access control to web and mobile apps?

A

AWS Cognito

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are two components of Amazon S3

A

Buckets (the folders) and Objects (files you upload)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which type of AWS Storage Gateway can be used to backup data with popular backup software?

A

Gateway Virtual Tap Library

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

To reduce the price of your Amazon EC2 instances, which term lengths are available for reserved instances? (

A

1 or 3 years

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which Amazon EC2 pricing model should be used to comply with per-core software license requirements?

A

Dedicated Hosts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which team is available to support AWS customers on an Enterprise support plan with account issues?

A

AWS Concierge

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the most cost-effective Amazon S3 storage tier for data that is not often accessed but requires high availability

A

Amazon S3 Standard-IA; S3 Standard-IA is for data that is accessed less frequently, but requires rapid access when needed. S3 Standard-IA offers the high durability, high throughput, and low latency of S3 Standard with 99.9% availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which AWS service should be used to create a billing alarm?

A

AWS CloudWatch

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceed a certain threshold?

A

AWS Budgets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What billing timeframes are available for Amazon EC2 on-demand instances?

A

Per hour or per second; With EC2 you are billed either by the second, for some Linux instances, or by the hour for all other instance types.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which service can be added to a database to provide improved performance for some requests?

A

Amazon Elasticache

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which feature of AWS IAM enables you to identify unnecessary permissions that have been assigned to users?

A

Access Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

In addition to DNS services, what other services does Amazon Route 53 provide?

A

Domain Registration, Traffic Flow

17
Q

Which AWS support plan provides email only support by Cloud Support Associates?

A

Developer provides email support by the Cloud Support Associates team whereas Business and Enterprise provide email, 24×7 phone and chat access to Cloud Support Engineers. Basic does not provide email support at all.

18
Q

What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container Service (ECS)?

A

Amazon Elastic Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.

Amazon ECR is integrated with Amazon Elastic Container Service (ECS). Amazon ECR eliminates the need to operate your own container repositories or worry about scaling the underlying infrastructure.

19
Q

Which type of storage stores objects comprised of key, value pairs?

A

Amazon S3

20
Q

How can a company connect from their on-premises network to VPCs in multiple regions using private connections?

A

You can use an AWS Direct Connect gateway to connect your AWS Direct Connect connection over a private virtual interface to one or more VPCs in your account that are located in the same or different Regions

21
Q

Which service can you use to monitor, store and access log files generated by EC2 instances and on-premises servers?

A

AWS CloudWatch Logs

22
Q

A company needs protection from distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events.

Which AWS managed service will meet these requirements?

A

AWS Shield Advanced

23
Q

Assuming you have configured them correctly, which AWS services can scale automatically without intervention?

A

AWS S3 and DynamoDB

24
Q

Which AWS security service provides a firewall at the subnet level within a VPC?

A

Network Access Control List; A Network ACL is a firewall that is associated with a subnet within your VPC. It is used to filter the network traffic that enters and exits the subnet.

25
Q

Which AWS service can be used to prepare and load data for analytics using an extract, transform and load (ETL) process?

A

AWS Glue

26
Q

Which support plan is the lowest cost option that allows unlimited cases to be open?

A

Developer

27
Q

Which AWS service lets connected devices easily and securely interact with cloud applications and other devices?

A

AWS IoT Core

28
Q

Which AWS service enables developers and data scientists to build, train, and deploy machine learning models?

A

Amazon SageMaker

29
Q

Which DynamoDB feature provides in-memory acceleration to tables that result in significant performance improvements?

A

Amazon DynamoDB Accelerator (DAX)