Extra Exam 6 Flashcards
As part of a flexible pricing model, AWS offers two types of Savings Plans. Which of the following are the Savings Plans from AWS?
Compute Savings Plans, Storage Savings Plans
Instance Saving Plans, Storage Savings Plans
Compute Savings Plans, EC2 Instance Savings Plans
Compute Savings Plans, EC2 Savings Plans
What services/tools offers a user-friendly graphical user interface to manage AWS Snowball devices without a need for command-line interface or REST APIs?
AppStream 2.0
AWS Transfer Family
AWS OpsHub
AWS OpsWorks
AWS OpsHub
AWS Support offers five support plans for its customers. Which of the following features are covered as part of the AWS Basic Support Plan?
One-on-one responses to account and billing questions
Use-case guidance
Service health checks
Client-side diagnostic tools
One-on-one responses to account and billing questions
Service health checks
Which AWS service allows you to connect any number of IoT devices to the cloud without requiring you to provision or manage servers?
IoT Core
IoT Gateaway
IoT Core
A supply chain company is looking for a database that provides a centrally verifiable history of all changes made to data residing in it. This functionality is critical for the product and needs to be available off the shelf without the need for any customizations.
Which of the following databases is the right choice for this use case?
QLDB
Which of the following statements are correct regarding Amazon API Gateway?
API Gateway can call a Lambda function to create the front door of a serverless application
API Gateway can be configured to send data directly to Amazon Kinesis Data Stream
If an API response is served by cached data, it is not yet considered an API call for billing purposes
API Gateway doesnot yet support API result caching
API Gateway creates RESTful APIs, Storage Gateway creates WebSocket APIs
API Gateway can call a Lambda function to create the front door of a serverless application
API Gateway can be configured to send data directly to Amazon Kinesis Data Stream
An e-commerce company has its on-premises data storage on an NFS file system that is accessed in parallel by multiple applications. The company is looking at moving the applications and data stores to AWS Cloud.
Which storage service should the company use to move their files to AWS Cloud seamlessly if the application is hosted on Amazon Elastic Compute Cloud (Amazon EC2) instances?
Elastic File System (EFS)
Which of the following AWS services are offered free of cost?
EC2 Spot Instances
ASG
Elastic Beanstalk
CloudWatch facilitated detailed monitoring of EC2 instances
An Elastic IP address, which is chargeable as long as it is associated with an EC2 instance
ASG and Beanstalk
Which of the following is the least effort way to encrypt data for AWS services only in your AWS account using AWS Key Management Service (KMS)?
Use KMS APIs to encrypt data within your application by using the Encryption SDK
Use AWS owned CMK in the service you wish to use encryption
Create your own customer managed keys (CMKs) in KMS
Use AWS managed master keys that are automatically created in your account for each service
Use AWS managed master keys that are automatically created in your account for each service
Which of the following statements are correct regarding the health monitoring and reporting capabilities supported by AWS Elastic Beanstalk? (2)
AWS Elastic Beanstalk provides only basic health reporting system; Combined with Elastic Load Balancing (ELB), they provide advanced health check features
With basic health reporting, the AWS Elastic Beanstalk service does not publish any metrics to Amazon CloudWatch
In a single instance environment, AWS Elastic Beanstalk determines the instance’s health by monitoring the Elastic Load Balancing (ELB) health settings
The AWS Elastic Beanstalk health monitoring can determine that the environment’s Auto Scaling group is available and has a minimum of at least one instance
With basic health reporting, the AWS Elastic Beanstalk service does not publish any metrics to Amazon CloudWatch
The AWS Elastic Beanstalk health monitoring can determine that the environment’s Auto Scaling group is available and has a minimum of at least one instance
Name 3 data sources are used by Amazon Detective to analyze events and identify potential security issues?
CloudTrail logs, VPC Flow Logs, and GuardDuty findings
CodePipeline uses ___________ _______ to detect changes in __________ repositories used as a source for a pipeline
CloudWatch Events; CodeCommit
Which feature/functionality will help you organize your AWS resources, manage and automate tasks on large numbers of resources at a time?
Organizations
Resource Groups
Tags
WorkSpaces
Resource groups – multiple tags create resource groups!
Which of the following AWS services can be used to continuously monitor both malicious activities as well as unauthorized behavior to protect your AWS accounts and workloads?
GuardDuty
Inspector
Detective
Security Hub
GuardDuty
As a Cloud Practitioner, which of the following 2 credentials would you recommend for signing in to the AWS Management Console to meet security best practices?
Access Key ID
IAM Username and password
Secret Access Key
X.509 certificate
Multi Factor authentication
IAM Username and password
Multi Factor authentication