Exam 3 Flashcards
What is the minimum level of AWS support that provides 24x7 access to technical support engineers via phone and chat?
Business Support
Developer is the minimum and right below business, no phone/24/7 support.
A company needs to migrate their website from on-premises to AWS. Security is a major concern for them, so they need to host their website on hardware that is NOT shared with other AWS customers. Which of the following EC2 instance options meets this requirement?
Dedicated instances
TYMO Cloud Corp is looking forward to migrating their entire on-premises data center to AWS. What tool can they use to build a Business Case for moving to the AWS Cloud?
AWS Migration Evaluator
A customer spent a lot of time configuring a newly deployed Amazon EC2 instance. After the workload increases, the customer decides to provision another EC2 instance with an identical configuration. How can the customer achieve this?
By creating an AMI from the old instance and launching a new instance from it
(Correct)
Which statement best describes the concept of an AWS region?
An AWS Region is a geographical location with a collection of Availability Zones
Which of the following are factors in determining the appropriate database technology to use for a specific workload? (Choose TWO)
The nature of the queries
(Correct)
[Control]
The number of reads and writes per second
Which of the following allows you to create new RDS instances? (Choose TWO)
AWS Management Console
AWS CloudFormation
Which of the following AWS services can help you perform security analysis and regulatory compliance auditing? (Choose TWO)
Amazon Inspector
AWS Config
With AWS Config, you can discover existing and deleted AWS resources, determine your overall compliance against rules, and dive into configuration details of a resource at any point in time. These capabilities enable compliance auditing, security analysis, resource change tracking, and troubleshooting.
Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices. This allows you to make security testing a more regular occurrence as part of development and IT operations.
Which of the below are responsibilities of the customer when using Amazon EC2?
Protecting sensitive data
Installing and configuring third-party software
What is the connectivity option that uses Internet Protocol Security (IPSec) to establish encrypted connectivity between an on-premises network and the AWS Cloud?
AWS Site-to-Site VPN
-AWS Site-to-Site VPN utilizes Internet Protocol Security (IPSec) to establish encrypted connectivity between your on-premises network and AWS over the Internet. With AWS Client VPN, your users can access AWS or on-premises resources from any location using a secure TLS connection.
“AWS Direct Connect” is incorrect. AWS Direct Connect does not involve the Internet; instead, it uses dedicated, private network connections between your on-premises network or branch office site and the AWS Cloud. AWS Direct Connect is a network service that provides an alternative to using the Internet to connect customer’s on-premise sites to AWS. Using AWS Direct Connect, data that would have previously been transported over the Internet can now be delivered through a private network connection between AWS and your datacenter or corporate network.
Which of the following can be used to protect data at rest on Amazon S3? (Choose TWO)
Versioning
Permissions
For managed services like Amazon DynamoDB, which of the below is AWS responsible for? (Choose TWO)
Patching the database software
Operating system maintenance
Which AWS service can be used to send promotional text messages (SMS) to more than 200 countries worldwide?
Amazon Simple Notification Service (Amazon SNS)
Which AWS Service provides the current status of all AWS Services in all AWS Regions?
AWS Service Health Dashboard
What is the AWS tool that can help a company visualize their AWS spending in the last few months?
AWS Cost Explorer
A company has hundreds of VPCs in multiple AWS Regions worldwide. What service does AWS offer to simplify the connection management among the VPCs?
AWS Transit Gateway
Which AWS service or feature can be used to call AWS Services from different programming languages?
AWS Software Development Kit
What is the AWS Compute service that executes code only when triggered by events?
*
AWS Lambda
Why does every AWS Region contain multiple Availability Zones?
Multiple Availability Zones allows you to build resilient and highly available architectures
Which support plan includes AWS Support Concierge Service?
Enterprise Support
Why would an organization decide to use AWS over an on-premises data center? (Choose TWO)
Cost Savings
Elastic resources
What is the framework created by AWS Professional Services that helps organizations design a road map to successful cloud adoption?
AWS CAF
Cloud Adoption Framework
A company uses AWS Organizations to manage all of its AWS accounts. Which of the following allows the company to restrict what services and actions are allowed in each individual account?
*
AWS Service Control Policies (SCPs)
What are the benefits of using DynamoDB? (Choose TWO)
Offers extremely low (single-digit millisecond) latency
Automatically scales to meet required throughput capacity
A company plans to migrate a large amount of archived data to AWS. The archived data must be maintained for a period of 5 years and must be retrievable within 5 hours of a request. What is the most cost-effective AWS storage service to use?
Amazon S3 Glacier
AWS recommends some practices to help organizations avoid unexpected charges on their bill. Which of the following is NOT one of these practices?
Deleting unused AutoScaling launch configuration
"Deleting unused AutoScaling launch configuration" will not help, and thus is the correct choice. The AutoScaling launch configuration does not incur any charges. Thus, it will not make any difference whether it is deleted or not. AWS will charge the user once the AWS resource is allocated (even if it is not used). Thus, it is advised that once the user's work is completed they should: 1- Delete all Elastic Load Balancers. 2- Terminate all unused EC2 instances. 3- Delete the attached EBS volumes that they don’t need. 4- Release any unused Elastic IPs.