EC2 Flashcards
What is the primary purpose of On-Demand Capacity Reservations in Amazon EC2?
A) To provide billing discounts similar to Savings Plans
B) To reserve compute capacity in a specific Availability Zone for any duration
C) To automatically scale EC2 instances
D) To offer free EC2 instances for a trial period
Answer: B) To reserve compute capacity in a specific Availability Zone for any duration
How do On-Demand Capacity Reservations differ from Savings Plans or Regional Reserved Instances?
A) They require a one-year minimum commitment.
B) They offer greater billing discounts.
C) They allow you to reserve capacity independently from billing discounts.
D) They are not available for EC2 instances.
Answer: C) They allow you to reserve capacity independently from billing discounts.
When does billing start for an On-Demand Capacity Reservation?
A) After a one-year commitment period
B) As soon as the capacity is provisioned and the reservation enters the active state
C) Only when the reserved capacity is fully utilized
D) When the Capacity Reservation is cancelled
Answer: B) As soon as the capacity is provisioned and the reservation enters the active state
Which of the following is true about the commitment required for creating On-Demand Capacity Reservations?
A) A minimum of a three-year term commitment is required.
B) No term commitment is required; reservations can be made at any time.
C) Only available with a one-year term commitment.
D) Commitment varies based on the Availability Zone.
Answer: B) No term commitment is required; reservations can be made at any time.
What happens when you no longer need an On-Demand Capacity Reservation?
A) The reservation automatically renews for the same duration.
B) Billing continues until the end of the reserved period.
C) You must continue to pay for the reservation until the next billing cycle.
D) Cancel the Capacity Reservation to stop incurring charges.
Answer: D) Cancel the Capacity Reservation to stop incurring charges.
Category: CSAA – Design Cost-Optimized Architectures
A multinational corporate and investment bank is regularly processing steady workloads of accruals, loan interests, and other critical financial calculations every night from 10 PM to 3 AM on their on-premises data center for their corporate clients. Once the process is done, the results are then uploaded to the Oracle General Ledger which means that the processing should not be delayed or interrupted. The CTO has decided to move its IT infrastructure to AWS to save costs. The company needs to reserve compute capacity in a specific Availability Zone to properly run their workloads.
As the Senior Solutions Architect, how can you implement a cost-effective architecture in AWS for their financial system?
Use Dedicated Hosts which provide a physical host that is fully dedicated to running your instances, and bring your existing per-socket, per-core, or per-VM software licenses to reduce costs.
Use On-Demand Capacity Reservations, which provide compute capacity that is always available on the specified recurring schedule.
Use Regional Reserved Instances to reserve capacity on a specific Availability Zone and lower down the operating cost through its billing discounts.
Use On-Demand EC2 instances which allows you to pay for the instances that you launch and use by the second.
Reserve compute capacity in a specific Availability Zone to avoid any interruption.
Use On-Demand Capacity Reservations, which provide compute capacity that is always available on the specified recurring schedule.
When you create a Capacity Reservation, you specify:
– The Availability Zone in which to reserve the capacity
– The number of instances for which to reserve capacity
– The instance attributes, including the instance type, tenancy, and platform/OS
A payment processing company plans to migrate its on-premises application to an Amazon EC2 instance. An IPv6 CIDR block is attached to the company’s Amazon VPC. Strict security policy mandates that the production VPC must only allow outbound communication over IPv6 between the instance and the internet but should prevent the internet from initiating an inbound IPv6 connection. The new architecture should also allow traffic flow inspection and traffic filtering.
What should a solutions architect do to meet these requirements?
Launch the EC2 instance to a private subnet and attach an Egress-Only Internet Gateway to the VPC to allow outbound IPv6 communication to the internet. Use AWS Network Firewall to set up the required rules for traffic inspection and traffic filtering.
Launch the EC2 instance to a public subnet and attach an Internet Gateway to the VPC to allow outbound IPv6 communication to the internet. Use Traffic Mirroring to set up the required rules for traffic inspection and traffic filtering.
Launch the EC2 instance to a private subnet and attach AWS PrivateLink interface endpoint to the VPC to control outbound IPv6 communication to the internet. Use Amazon GuardDuty to set up the required rules for traffic inspection and traffic filtering.
Launch the EC2 instance to a private subnet and attach a NAT Gateway to the VPC to allow outbound IPv6 communication to the internet. Use AWS Firewall Manager to set up the required rules for traffic inspection and traffic filtering.
Launch the EC2 instance to a private subnet and attach an Egress-Only Internet Gateway to the VPC to allow outbound IPv6 communication to the internet. Use AWS Network Firewall to set up the required rules for traffic inspection and traffic filtering.
What is the main function of an egress-only internet gateway in a VPC?
A) To allow inbound IPv6 communication from the internet to instances.
B) To enable both inbound and outbound IPv6 communication.
C) To allow outbound IPv6 communication from instances to the internet, blocking inbound initiation.
D) To convert IPv6 addresses into private IPv4 addresses.
Answer: C) To allow outbound IPv6 communication from instances to the internet, blocking inbound initiation.
Why would you use an egress-only internet gateway for your VPC instances?
A) To make your instances publicly accessible over IPv6.
B) To allow your instances outbound internet access while preventing unsolicited inbound communication.
C) To enable unrestricted inbound and outbound internet access for your instances.
D) To provide a static IPv6 address for your instances.
Answer: B) To allow your instances outbound internet access while preventing unsolicited inbound communication.
What is the purpose of a subnet within a VPC?
A) To provide a backup for instances in case of failure.
B) To group instances based on their IPv6 addresses.
C) To range IP addresses for launching AWS resources.
D) To automatically scale the resources based on demand.
Answer: C) To range IP addresses for launching AWS resources.
How does the AWS Network Firewall protect your VPCs?
A) By providing a physical firewall device for each VPC.
B) By enabling automatic scaling and management of network traffic protection.
C) By encrypting all data within the VPC.
D) By assigning unique IPv6 addresses to each instance.
Answer: B) By enabling automatic scaling and management of network traffic protection.
What capability does AWS Network Firewall’s stateful inspection feature offer?
A) It changes the state of your instances based on traffic flow.
B) It allows all traffic through without any checks.
C) It incorporates context from traffic flows to enforce policies.
D) It provides a static IP address for each instance in the VPC.
Answer: C) It incorporates context from traffic flows to enforce policies.
How can AWS Network Firewall’s intrusion prevention system (IPS) protect your network?
A) By providing a VPN tunnel for secure communications.
B) By identifying and blocking vulnerability exploits with signature-based detection.
C) By converting IPv6 addresses to private IPv4 addresses.
D) By broadcasting your VPC’s IP address range to the internet.
Answer: B) By identifying and blocking vulnerability exploits with signature-based detection.
A company has a cloud architecture that is composed of Linux and Windows EC2 instances that process high volumes of financial data 24 hours a day, 7 days a week. To ensure high availability of the systems, the Solutions Architect needs to create a solution that allows them to monitor the memory and disk utilization metrics of all the instances.
Which of the following is the most suitable monitoring solution to implement?
Use Amazon Inspector and install the Inspector agent to all EC2 instances.
Enable the Enhanced Monitoring option in EC2 and install CloudWatch agent to all the EC2 instances to be able to view the memory and disk utilization in the CloudWatch dashboard.
Install the CloudWatch agent to all the EC2 instances that gather the memory and disk utilization data. View the custom metrics in the Amazon CloudWatch console.
Use the default CloudWatch configuration to EC2 instances where the memory and disk utilization metrics are already available. Install the AWS Systems Manager (SSM) Agent to all the EC2 instances.
Install the CloudWatch agent to all the EC2 instances that gather the memory and disk utilization data. View the custom metrics in the Amazon CloudWatch console.
A company developed a meal planning application that provides meal recommendations for the week as well as the food consumption of the users. The application resides on an EC2 instance which requires access to various AWS services for its day-to-day operations.
Which of the following is the best way to allow the EC2 instance to access the S3 bucket and other AWS services?
Store the API credentials in the EC2 instance.
Store the API credentials in a bastion host.
Add the API Credentials in the Security Group and assign it to the EC2 instance.
Create a role in IAM and assign it to the EC2 instance.
Create a role in IAM and assign it to the EC2 instance.
A company needs to deploy at least 2 EC2 instances to support the normal workloads of its application and automatically scale up to 6 EC2 instances to handle the peak load. The architecture must be highly available and fault-tolerant as it is processing mission-critical workloads.
As the Solutions Architect of the company, what should you do to meet the above requirement?
Create an Auto Scaling group of EC2 instances and set the minimum capacity to 4 and the maximum capacity to 6. Deploy 2 instances in Availability Zone A and another 2 instances in Availability Zone B.
Create an Auto Scaling group of EC2 instances and set the minimum capacity to 2 and the maximum capacity to 4. Deploy 2 instances in Availability Zone A and 2 instances in Availability Zone B.
Create an Auto Scaling group of EC2 instances and set the minimum capacity to 2 and the maximum capacity to 6. Use 2 Availability Zones and deploy 1 instance for each AZ.
Create an Auto Scaling group of EC2 instances and set the minimum capacity to 2 and the maximum capacity to 6. Deploy 4 instances in Availability Zone A.
Create an Auto Scaling group of EC2 instances and set the minimum capacity to 4 and the maximum capacity to 6. Deploy 2 instances in Availability Zone A and another 2 instances in Availability Zone B.
The media company that you are working for has a video transcoding application running on Amazon EC2. Each EC2 instance polls a queue to find out which video should be transcoded, and then runs a transcoding process. If this process is interrupted, the video will be transcoded by another instance based on the queuing system. This application has a large backlog of videos which need to be transcoded. Your manager would like to reduce this backlog by adding more EC2 instances, however, these instances are only needed until the backlog is reduced.
In this scenario, which type of Amazon EC2 instance is the most cost-effective type to use?
Dedicated instances
On-demand instances
Reserved instances
Spot instances
Spot instances
The company that you are working for has a highly available architecture consisting of an elastic load balancer and several EC2 instances configured with auto-scaling in three Availability Zones. You want to monitor your EC2 instances based on a particular metric, which is not readily available in CloudWatch.
Which of the following is a custom metric in CloudWatch which you have to manually set up?
Network packets out of an EC2 instance
Memory Utilization of an EC2 instance
Disk Reads activity of an EC2 instance
CPU Utilization of an EC2 instance
Memory Utilization of an EC2 instance
You are automating the creation of EC2 instances in your VPC. Hence, you wrote a python script to trigger the Amazon EC2 API to request 50 EC2 instances in a single Availability Zone. However, you noticed that after 20 successful requests, subsequent requests failed.
What could be a reason for this issue and how would you resolve it?
There is a vCPU-based On-Demand Instance limit per region which is why subsequent requests failed. Just submit the limit increase form to AWS and retry the failed requests once approved.
By default, AWS allows you to provision a maximum of 20 instances per region. Select a different region and retry the failed request.
By default, AWS allows you to provision a maximum of 20 instances per Availability Zone. Select a different Availability Zone and retry the failed request.
There was an issue with the Amazon EC2 API. Just resend the requests and these will be provisioned successfully.
There is a vCPU-based On-Demand Instance limit per region which is why subsequent requests failed. Just submit the limit increase form to AWS and retry the failed requests once approved.
EC2 Instance Types - General Purpose
- Great for?
- Balance between?
- Great for a diversity of workloads such as web servers or code repositories
- Balance between: Compute, Memory, and Networking
EC2 Instance Types - Compute Optimized
- Great for?
- Balance between?
- Great for compute-intensive tasks that require high performance processors:
High performance web servers, high performance computing (HPC), scientific modeling and machine learning
Cluster Placement Group
Use Case:
Details:
Use Case: Low network latency, high network throughput.
Details: Instances packed close together in a single Availability Zone. Ideal for HPC applications and tightly-coupled node-to-node communication.
