Batch #3 Flashcards
Which type of security control can be used to deny network access from a specific IP address?
Network ACL
What does an organization need to do in Amazon IAM to enable user access to services being launched in new region?
Nothing, IAM is global
Which AWS service allows you to automate the evaluation of recorded configurations against desired configuration?
AWS Config
Which AWS service lets you add user sign up, sign-in and access control to web and mobile apps?
AWS Cognito
What are two components of Amazon S3
Buckets (the folders) and Objects (files you upload)
Which type of AWS Storage Gateway can be used to backup data with popular backup software?
Gateway Virtual Tap Library
To reduce the price of your Amazon EC2 instances, which term lengths are available for reserved instances? (
1 or 3 years
Which Amazon EC2 pricing model should be used to comply with per-core software license requirements?
Dedicated Hosts
Which team is available to support AWS customers on an Enterprise support plan with account issues?
AWS Concierge
What is the most cost-effective Amazon S3 storage tier for data that is not often accessed but requires high availability
Amazon S3 Standard-IA; S3 Standard-IA is for data that is accessed less frequently, but requires rapid access when needed. S3 Standard-IA offers the high durability, high throughput, and low latency of S3 Standard with 99.9% availability
Which AWS service should be used to create a billing alarm?
AWS CloudWatch
Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceed a certain threshold?
AWS Budgets
What billing timeframes are available for Amazon EC2 on-demand instances?
Per hour or per second; With EC2 you are billed either by the second, for some Linux instances, or by the hour for all other instance types.
Which service can be added to a database to provide improved performance for some requests?
Amazon Elasticache
Which feature of AWS IAM enables you to identify unnecessary permissions that have been assigned to users?
Access Advisor
In addition to DNS services, what other services does Amazon Route 53 provide?
Domain Registration, Traffic Flow
Which AWS support plan provides email only support by Cloud Support Associates?
Developer provides email support by the Cloud Support Associates team whereas Business and Enterprise provide email, 24×7 phone and chat access to Cloud Support Engineers. Basic does not provide email support at all.
What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container Service (ECS)?
Amazon Elastic Container Registry (ECR) is a fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.
Amazon ECR is integrated with Amazon Elastic Container Service (ECS). Amazon ECR eliminates the need to operate your own container repositories or worry about scaling the underlying infrastructure.
Which type of storage stores objects comprised of key, value pairs?
Amazon S3
How can a company connect from their on-premises network to VPCs in multiple regions using private connections?
You can use an AWS Direct Connect gateway to connect your AWS Direct Connect connection over a private virtual interface to one or more VPCs in your account that are located in the same or different Regions
Which service can you use to monitor, store and access log files generated by EC2 instances and on-premises servers?
AWS CloudWatch Logs
A company needs protection from distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events.
Which AWS managed service will meet these requirements?
AWS Shield Advanced
Assuming you have configured them correctly, which AWS services can scale automatically without intervention?
AWS S3 and DynamoDB
Which AWS security service provides a firewall at the subnet level within a VPC?
Network Access Control List; A Network ACL is a firewall that is associated with a subnet within your VPC. It is used to filter the network traffic that enters and exits the subnet.
Which AWS service can be used to prepare and load data for analytics using an extract, transform and load (ETL) process?
AWS Glue
Which support plan is the lowest cost option that allows unlimited cases to be open?
Developer
Which AWS service lets connected devices easily and securely interact with cloud applications and other devices?
AWS IoT Core
Which AWS service enables developers and data scientists to build, train, and deploy machine learning models?
Amazon SageMaker
Which DynamoDB feature provides in-memory acceleration to tables that result in significant performance improvements?
Amazon DynamoDB Accelerator (DAX)
