Exam1-Part4

Question 1

AWS Resource Manager

Answer 1

AWS Resource Manager (AWS RAM) is a service provided by Amazon Web Services (AWS) that enables you to centrally manage and share AWS resources across multiple AWS accounts within an organization

Question 2

A startup is using Amazon RDS to store data from a web application. Most of the time, the application has low user activity but it receives bursts of traffic within seconds whenever there is a new product announcement. The Solutions Architect needs to create a solution that will allow users around the globe to access the data using an API.

Answer 2

Lambda can scale faster than the regular Auto Scaling feature of Amazon EC2, Amazon Elastic Beanstalk, or Amazon ECS

Create an API using Amazon API Gateway and use AWS Lambda to handle the bursts of traffic.

Question 3

AWS Firewall Manager

Answer 3

AWS Firewall Manager is a service provided by Amazon Web Services (AWS) that simplifies the management of firewall rules and security policies across multiple AWS accounts. It allows you to centrally configure and enforce firewall rules, security group rules, and other security policies to ensure consistent protection and compliance across your organization’s AWS infrastructure.

AWS Firewall Manager integrates with AWS Web Application Firewall (WAF) and AWS Shield to provide advanced protection against web-based attacks and Distributed Denial of Service (DDoS) attacks. You can centrally manage WAF rules and Shield protections for your accounts.

Question 4

AWS Shield Advanced

Answer 4

AWS Shield Advanced also gives you 24x7 access to the AWS DDoS Response Team (DRT) and protection against DDoS related spikes in your Amazon Elastic Compute Cloud (EC2), Elastic Load Balancing(ELB), Amazon CloudFront, and Amazon Route 53 charges.

Question 5

securing Redis

Answer 5

Using Redis AUTH command can improve data security by requiring the user to enter a password before they are granted permission to execute Redis commands on a password-protected Redis server.

Authenticate the users using Redis AUTH by creating a new Redis Cluster with both the –transit-encryption-enabled and –auth-token parameters enabled.

Question 6

Remember that Amazon EFS only supports Linux workloads.

Answer 6

Amazon EFS only supports Linux workloads

Question 7

AWS Artifact

Answer 7

AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS’ security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certifications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA).

Question 8

S3 Access Point

Answer 8

An S3 Access Point is a feature of Amazon Simple Storage Service (S3) that simplifies managing access to your S3 buckets and data. It provides a unique hostname that you can use to access specific portions of your S3 buckets using predefined access permissions.

S3 Access Points can be configured to be network isolated, meaning they can only be accessed from within your Amazon Virtual Private Cloud (VPC). This adds an additional layer of security and control by limiting access to specific VPCs.

Question 9

how to apply worm on S3

Answer 9

1. Enable S3 Object Lock
2. Set Bucket Versioning
3. Set Object Lock Configuration
4. Apply Object Lock to Objects

in general, setting versioning and setting object lock helps maintaining WORM

Question 10

standard reserved instances

Answer 10

unsed reserved instances can be sold at the reserved instance marketplace