Exam 4 Flashcards
Which AWS Service offers volume discounts based on usage?
Amazon S3
What is the AWS Support feature that allows customers to manage support cases programmatically?
AWS Support API
Which AWS Service can perform health checks on Amazon EC2 instances?
Amazon Route 53
Which of the below options is a best practice for making your application on AWS highly available?
Deploy the application to at least two Availability Zones
An organization has a legacy application designed using monolithic-based architecture. Which AWS Service can be used to decouple the components of the application?
Amazon SQS
A company is planning to use Amazon S3 and Amazon CloudFront to distribute its video courses globally. What tool can the company use to estimate the costs of these services?
AWS Pricing Calculator
Which of the following are advantages of using AWS as a cloud computing provider? (Choose TWO)
Eliminates the need to guess on infrastructure capacity needs
Enables customers to trade their capital expenses for operational expenses
You are running a financial services web application on AWS. The application uses a MySQL database to store the data. Which of the following AWS services would improve the performance of your application by allowing you to retrieve information from fast in-memory caches?
Amazon ElastiCache
A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS Service should the company use for this purpose?
*
Amazon Cognito
What features does AWS offer to help protect your data in the Cloud? (Choose TWO)
Data encryption
Access control
How does AWS notify customers about security and privacy events pertaining to AWS services?
Using Security Bulletins
Which of the below options is true of Amazon Cloud Directory?
Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions
Which of the following is a type of MFA device that customers can use to protect their AWS resources?
U2F Security Key
A key practice when designing solutions on AWS is to minimize dependencies between components so that the failure of a single component does not impact other components. What is this practice called?
Loosely coupling
Which of the following are true regarding the languages that are supported on AWS Lambda? (Choose TWO)
Lambda can support any programming language using an API
Lambda natively supports a number of programming languages such as Node.js, Python, and Java
Which of the following are types of AWS Identity and Access Management (IAM) identities? (Choose TWO)
IAM Users
IAM Roles
A company is migrating a web application to AWS. The application’s compute capacity is continually utilized throughout the year. Which of the below options offer the company the most cost-effective solution? (Choose TWO)
*
Savings Plans
Reserved Instances
A company’s AWS workflow requires that it periodically perform large-scale image and video processing jobs. The customer is seeking to minimize cost and has stated that the amount of time it takes to process these jobs is not critical, but that cost minimization is the most important factor in designing the solution. Which EC2 instance class is best suited for this processing?
EC2 Spot Instances
Which of the following services can be used to monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront?
AWS WAF
One of the major advantages of using AWS is cost savings. What does AWS provide to reduce the cost of running Amazon EC2 instances?
*
Per-second instance billing
Which AWS service or feature is used to manage the keys used to encrypt customer data?
AWS KMS
A company is seeking to better secure its AWS account from unauthorized access. Which of the below options can the customer use to achieve this goal?
*
Require Multi-Factor Authentication (MFA) for all IAM User access
Which of the following AWS offerings are serverless services? (Choose TWO)
AWS Lambda
Amazon DynamoDB
Which IAM entity can best be used to grant temporary access to your AWS resources?
IAM Roles
Which of the following approaches will help you eliminate human error and automate the process of creating and updating your AWS environment?
Use code to provision and operate your AWS infrastructure
Availability Zones within a Region are connected over low-latency links. Which of the following is a benefit of these links?
Make synchronous replication of your data possible
Which of the following will help AWS customers save on costs when migrating their workloads to AWS?
Use existing third-party software licenses on AWS
A user has opened a “Production System Down” support case to get help from AWS Support after a production system disruption. What is the expected response time for this type of support case?
*
One hour
There is a requirement to grant a DevOps team full administrative access to all resources in an AWS account. Who can grant them these permissions?
AWS account owner
When granting permissions to applications running on Amazon EC2 instances, which of the following is considered best practice?
Use temporary security credentials (IAM roles) instead of long-term access keys
A company wants to grant a new employee long-term access to manage Amazon DynamoDB databases. Which of the following is a recommended best-practice when granting these permissions?
Create an IAM user and attach a policy with Amazon DynamoDB access permissions
Which features are included in the AWS Business Support Plan? (Choose TWO)
Access to the Infrastructure Event Management (IEM) feature for additional fee
24x7 access to customer service
Which of the following factors should be considered when determining the region in which AWS Resources will be deployed? (Choose TWO)
Data sovereignty
Cost
You have just hired a skilled sys-admin to join your team. As usual, you have created a new IAM user for him to interact with AWS services. On his first day, you ask him to create snapshots of all existing Amazon EBS volumes and save them in a new Amazon S3 bucket. However, the new member reports back that he is unable to create neither EBS snapshots nor S3 buckets. What might prevent him from doing this simple task?
There is a non-explicit deny to all new users
You decide to buy a reserved instance for a term of one year. Which option provides the largest total discount?
All up-front reservation
A customer is seeking to store objects in their AWS environment and to make those objects downloadable over the internet. Which AWS Service can be used to accomplish this?
Amazon S3
Which of the following are examples of AWS-managed databases? (Choose TWO)
*
Amazon Neptune
Amazon RDS for MySQL
Which AWS Group assists customers in achieving their desired business outcomes?
AWS Professional Services
Which AWS Service provides integration with Chef to automate the configuration of EC2 instances?
AWS OpsWorks
Which AWS service enables you to quickly purchase and deploy SSL/TLS certificates?
AWS ACM
According to best practices, which of the below options is best suited for processing a large number of binary files?
Running EC2 instances in parallel
A company is developing an application that will leverage facial recognition to automate photo tagging. Which AWS Service should the company use for facial recognition?
Amazon Rekognition
A company is using EC2 Instances to run their e-commerce site on the AWS platform. If the site becomes unavailable, the company will lose a significant amount of money for each minute the site is unavailable. Which design principle should the company use to minimize the risk of an outage?
Fault Tolerance
Which of the following is NOT a factor when estimating the costs of Amazon EC2? (Choose TWO)
Number of security groups
Number of Hosted Zones
Which of the following can be used to enable the Virtual Multi-Factor Authentication? (Choose TWO)
AWS Identity and Access Management (IAM)
*
AWS CLI
A company is seeking to deploy an existing .NET application onto AWS as quickly as possible. Which AWS Service should the customer use to achieve this goal?
AWS Elastic Beanstalk
A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly?
AWS Application Load Balancer (ALB)
(Correct)
An external auditor is requesting a log of all accesses to the AWS resources in the company’s account. Which of the following services will provide the auditor with the requested information?
AWS CloudTrail
Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects?
AWS CloudFormation
A customer is planning to migrate their Microsoft SQL Server databases to AWS. Which AWS Services can the customer use to run their Microsoft SQL Server database on AWS? (Choose TWO)
*
Amazon RDS
Amazon Elastic Compute Cloud
Your company requires a response time of less than 15 minutes from support interactions about their business-critical systems that are hosted on AWS if those systems go down. Which AWS Support Plan should this company use?
AWS Enterprise Support
The TCO gap between AWS infrastructure and traditional infrastructure has widened over the recent years. Which of the following could be the reason for that?
AWS continues to lower the cost of cloud computing for its customers
Which AWS Service allows customers to download AWS SOC & PCI reports?
AWS Artifact
Which of the following is true regarding the AWS availability zones and edge locations?
*
An AWS Availability Zone is an isolated location within an AWS Region, however edge locations are located in multiple cities worldwide
(Correct)
Which of the following should be taken into account when performing a TCO analysis regarding the costs of running an application on AWS VS on-premises? (Choose TWO)
Cooling and power consumption
Labor and IT costs
(Correct)
Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)? (Choose TWO)
AWS SDKs
AWS CLI
Which AWS Service helps enterprises extend their on-premises storage to AWS in a cost-effective manner?
*
AWS Storage Gateway
An AWS customer has used one Amazon Linux instance for 2 hours, 5 minutes and 9 seconds, and one CentOS instance for 4 hours, 23 minutes and 7 seconds. How much time will the customer be billed for?
2 hours, 5 minutes and 9 seconds for the Linux instance and 5 hours for the CentOS instance
What are the advantages of using Auto Scaling Groups for EC2 instances?
Auto Scaling Groups scales EC2 instances in multiple Availability Zones to increase application availability and fault tolerance
Which of the following Amazon RDS features facilitates offloading of database read activity?
Read Replicas
(Correct)
What are the capabilities of AWS X-Ray? (Choose TWO)
Helps improve application performance
Facilitates tracking of user requests to identify application issues
What should you do if you see resources, which you don’t remember creating, in the AWS Management Console? (Choose TWO)
Open an investigation and delete any potentially compromised IAM users
Change your AWS root account password and the passwords of any IAM users
A company is building an online cloud storage platform. They need a storage service that can scale capacity automatically, while minimizing cost. Which AWS storage service should the company use to meet these requirements?
Amazon Simple Storage Service
Which AWS Service offers an NFS file system that can be mounted concurrently from multiple EC2 instances?
Amazon Elastic File System
Which of the following are examples of the customer’s responsibility to implement “security IN the cloud”? (Choose TWO)
*
File system encryption
Building a schema for an application
