Extra Exam 3

Question 1

What are the different gateway types supported by the AWS Storage Gateway service?

Answer 1

Tape Gateway, File Gateway, Volume Gateway

Question 2

A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?

Answer 2

AWS Web Application Firewall (AWS WAF)

Question 3

A company is looking for a guided path to help deploy, configure, and secure its new workloads while ensuring that it is ready for on-going operations in the cloud. Which of the following AWS services/tools can be leveraged for this use case?

Answer 3

Cloud Foundations

Question 4

An organization maintains separate Amazon Virtual Private Clouds (Amazon VPC) for each of its departments. How would this organization connect all of the VPCs?

Answer 4

Transit Gateway

Question 5

AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the following categories?

Answer 5

Cost Optimization and Service Limits

Question 6

Do Auto-scaling groups scale horizontally or vertically?

Answer 6

Horizontally

Question 7

Is access to an EFS file system restricted to a given AZ, region, or VPC?

Answer 7

No, an EC2 instance can access an EFS file system across many AZs, regions, and VPCs

Question 8

A company has a static website hosted on an S3 bucket in an AWS Region in Asia. Now it wants to drive growth globally. How can it improve the global performance of its static website?

Answer 8

Use CloudFront to improve the performance of the website

Question 9

Which of the following AWS services are regional in scope?

IAM
Lambda
CloudFront
Rekognition
AWS Web Application Firewall

Answer 9

Lambda, Rekognition

Question 10

An IT company has deployed a static website on Amazon Simple Storage Service (Amazon S3), but the website is still inaccessible. Suggest a solution.

Answer 10

Fix the bucket policy

Question 11

AWS Identity and Access Management (AWS IAM) policies are written as JSON documents. Which of the following are mandatory elements of an IAM policy?

Answer 11

Effect, Action

Question 12

A leading research firm needs to access information available in old patents and documents (such as PDFs, Text Files, Word documents, etc) present in its huge knowledge base. The firm is looking for a powerful search tool that can dig into these knowledge resources and return the most relevant files/documents. Suggest them a service.

Answer 12

Amazon Kendra

Question 13

Which AWS service will you use to privately connect your virtual private cloud (VPC) to Amazon Simple Storage Service (Amazon S3)?

Answer 13

VPC endpoint

Question 14

An IT company would like to move its IT resources (including any data and applications) from an AWS Region in the US to another AWS Region in Europe. Which of the following represents the correct solution for this use-case?

Answer 14

The company should create new resources in the destination region, then migrate the relevant data and resources into this new region

Question 15

An AWS hardware failure has impacted one of your Amazon Elastic Block Store (Amazon EBS) volumes. Which AWS service will alert you of the affected resources and provide a remedial action?

Answer 15

AWS Health Dashboard - your account health

Question 16

Which of the following Cloud Computing models does the ‘gmail’ service represent?

Answer 16

Software as a service

Question 17

Which of the following is a perspective of the AWS Cloud Adoption Framework (AWS CAF)?

Process
Business
Architecture
Product

Answer 17

Business

Question 18

Which budget types can be created under AWS Budgets (three)?

Answer 18

Usage, Reservation, and Cost

Question 19

Name 2 AWS services that specialize in data migration from on-premises to AWS Cloud?

Answer 19

AWS Snowball, Database Migration Service

Question 20

Which 2 AWS services support High Availability by default?

Answer 20

EFS, DynamoDB

Question 21

For compliance, a company must store multiple copies of data in geographically distant locations. As the company uses S3 as its main storage service, what is the most resource-efficient solution for this case?

Answer 21

AWS Cross-region replication

Question 22

T/F - Regarding Cost Allocation Tags in AWS Billing, for each resource, each tag key must be unique, and each tag key can only have one value

Answer 22

True

Question 23

Which of the following AWS services have data encryption automatically enabled? (Select two)

EFS
S3
EBS
AWS Storage Gateway
Redshift

Answer 23

S3, AWS Storage Gateway

Question 24

Which AWS service can be used for online analytical processing?

Answer 24

Redshift

Question 25

A company wants to identify all EC2 instances that are under-utilized. Which AWS services can be used off-the-shelf without needing any manual configurations to do this?

Answer 25

Cost explorer, Trusted advisor

Question 26

T/F - In Cost Explorer and on cost allocation reports, AWS generated tags and user-defined tags are enabled by default

Answer 26

False, they must be activated separately

Question 27

EBS Snapshots are billed _____________, which means you are billed only for the ________ blocks stored

Answer 27

incrementally; changed

Question 28

T/F - Reading and writing data stored on EFS-IA is free

Answer 28

False, you pay a fee each time

Question 29

The primary benefit of deploying an RDS DB in a Read Replica configuration

Answer 29

It enhances database scalability (availability is NOT the primary benefit)

Question 30

A company wants to receive separate invoices for development and production environments, what’s the best way to do this?

Answer 30

Create separate accounts for dev. and prod.

Question 31

Which AWS service can be used to automate code deployment to EC2 instances, and on-premises instances?

Answer 31

CodeDeploy