HNF Problem Questions 3 Flashcards

1
Q

Which service is good for running compute workloads for people who don’t have technical expertise with AWS?

  • -ECS
  • -EC2
  • -LightSail
  • -Lambda
A

LightSail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is AWS Step Function

A

AWS Step Functions is a serverless function orchestrator that makes it easy to sequence AWS Lambda functions and multiple AWS services into business-critical applications. Through its visual interface, you can create and run a series of checkpointed and event-driven workflows that maintain the application state.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How do you increase the capacity of a RDS database?

  • -scaling horizontally, by adding instances
  • -scaling horizontally, by adding RCUs/WCUs
  • -scaling vertically, by changing the instance type
  • -scaling vertically by adding CPUs
A

–scaling vertically, by changing the instance type

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which S3 storage class is best for data with unpredictable access patterns?

  • -S3 standard
  • -S3 Glacier
  • -S3 intelligent tiering
  • -S3 standard-infrequent access
A

S3 intelligent tiering

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which service provides guidance for remediation when AWS is experiencing events that may impact you?

  • -Trusted Advisor
  • -Inspector
  • -AWS Personal Health Dashboard
  • -Cloud Compliance
A

–AWS Personal Health Dashboard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

what is Amazon AppStream

A

Amazon AppStream 2.0 is a fully managed non-persistent application and desktop streaming service. You centrally manage your desktop applications on AppStream 2.0 and securely deliver them to any computer. You can easily scale to any number of users across the globe without acquiring, provisioning, and operating hardware or infrastructure.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

How can fault tolerance be added to an Amazon RDS database?

  • -using read replicas
  • -using multi-AZ
  • -using Global Replicas
  • -using EBS snapshots
A

using multi-AZ

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which services have a Global scope?

  • -CloudFront, Route53, VPC
  • -CloudFront, Route53, CloudWatch
  • -Lambda, CloudFront, Route53
  • -IAM, CloudFront, Route53
A

–IAM, CloudFront, Route53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which AMI can be used to mount the EFS file system?

  • -Microsoft Windows Server 2019 with Containers
  • -Microsoft Windows Server 2016 Core
  • -Amazon Linux 2 AMI
  • -all of the above
A

Amazon Linux 2 AMI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which storage classes are available for the EFS?

  • -Standard, Provisioned Thoughput
  • -Standard, Deep Archive
  • -standard, Infrequent Access Storage
  • -Standard, One-Zone IA
A

–standard, Infrequent Access Storage

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is AWS Data Pipeline

A

it is a web service that makes it easy to schedule regular data movement and data processing activates in the AWS cloud

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A company needs a network connection to the AWS cloud with predictable performance. What should they use?

  • -AWS managed VPN
  • -AWS Direct Connect
  • -VPN Cloudhub
  • -VPC Peering
A

–AWS Direct Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What is Amazon Lumberyard

A

Amazon Lumberyard is a freeware cross-platform game engine developed by Amazon and based on CryEngine (initially released in 2002), which was licensed from Crytek in 2015.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Your company has a data sotre application that requires access to a NoSQL database. Which AWS database offering would meet this requirement?

  • -DynamoDB
  • -Redshift
  • -Aurora
  • -EBS
A

DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the following compute resources are resources are serrverless?

  • -EMR
  • -Lambda
  • -Fargate
  • -EC2
  • -ECS
A
  • -Lambda

- -Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which of the following are use cases of the Route53 service
choose 2

  • -provides infrastructure security optimization recommendations
  • -manages global application traffic through a variety of routing types
  • -DNS configuration and management
  • -detects configuration and management
  • -point-to-point connectivity between an on-premises data center and AWS
A

–manages global application traffic through a variety of routing types

–DNS configuration and management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which services can scale horizontally

  • DynamoDB, EC2 Auto Scaling, S3
  • DynamoDB, EFS, EC2
  • EC2 Auto Scaling, S3, NAT instance
A

-DynamoDB, EC2 Auto Scaling, S3

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What does AWS Cost Explorer provide to help manage your AWS spend

  • -consolidated billing
  • -cost comparisons between AWS Cloud environments and on-premise environments
  • -highly accurate cost forecasts for up to 12 months ahead
  • -accurate estimates of AWS service cost based on you expected usage
A

–highly accurate cost forecasts for up to 12 months ahead

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A company needs to orchestrate several batch processes on AWS. Which serverless service an assist

  • -SWF
  • SQS
  • -EventBridge
  • -Step Function
A

–Step Function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is AWS Resource Groups

A

If you work with multiple resources in multiple environments, you can use Resource Groups to manage all the resources in each environment as a group rather than move from one AWS service to another for each task.

With Resource Groups tool you can create a custom console that organizes and consolidates information based on your project and the resources that you use.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

According to the AWS Shared Responsibility model, who is responsible for configuring serverside encryption for S3?

A

AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

You managed a blog on AWS that has different environments: development, testing, and production. What can you use to create a custom console for each environment to view and manage you resources easily?

  • -Placement Groups
  • -Tag Editor
  • -Resource Groups
  • -Management Console
A

Resource Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

what is an NAT Gateway

A

NAT gateway resources are part of Virtual Network NAT and provide outbound Internet connectivity for one or more subnets of a virtual network. The subnet of the virtual network states which NAT gateway will be used. NAT provides source network address translation (SNAT) for a subnet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which storage service is used by EC2 instances for the root volume?

  • -S3
  • -EFS
  • -EBS
  • -Storage Gateway
A

EBS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

WIth VPC you pay for

  • -Internet Gateway
  • -Route Table
  • -Security Group
  • -VPN Connection
A

–VPN Connection

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is AWS DataSync?

A

AWS DataSync is an online data transfer service that simplifies, automates, and accelerates moving data between on-premises storage systems and AWS Storage services, as well as between AWS Storage services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

A developer is planning to build a two-tier web application that has a MySQL database layer. Which of the following AWS database services would provide automated backups for the applications?

  • -Aurora
  • -DocumentDB
  • -DynamoDB
  • -a MySQL database installed on and EC2 instance
A

Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

A company needs to migrate several TB of data from an on-premises NAS device to Amazon FSx. Which service can the company use to migrate the data over a VPN connection?

  • -DMS
  • -Snowball Edge
  • -DataSync
  • -S3 Transfer Acceleration
A

–DataSync

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Which type of ELB can direct traffic based on the domain name?

  • -classic load balancer
  • -network load balancer
  • -application load balancer
  • -EC2 load balancer
A

application load balancer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

How can an organization enable microsecond latency for a DynamoDB database?

  • -using Amazon ElasticCache
  • -using DynamoDB Auto Scaling
  • -using Read Replicas
  • -using DynamoDB Accelerator (DAX)
A

–using DynamoDB Accelerator (DAX)

it is an in-memory cache that increases performance of DynamoDB database

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Which AWS database service offers seamless horizontal scaling?

  • -RDS
  • Redshift
  • -DynamoDB
  • -database on Amazon EC2
A

–DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What type of template is used by EC2 Auto Scaling to define instance family, AMI key pair, and security groups?

  • -Scaling Plan
  • -Launch Configuration
  • -Scaling Policy
  • -Auto Scaling Group
A

–Launch Configuration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

With default settings, what will happen to a root EBS volume when the EC2 instance is terminated?

  • -it will be deleted
  • -it will be retained
  • -a snapshot will be retained
  • -an AMI will be created
A

it will be deleted

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

5 Server-less Services

A
Lambda
Fargate
SNS
SQS
DynamoDB
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Which type of public IP address is relained when the instance is stopped?

  • -Public IP address
  • -Private IP address
  • -Elastic IP address
  • -Local IP address
A

–Elastic IP address

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Free services

A
VPC
Elastic Beanstalk
CloudFormation
IAM
Auto Scaling
consolidated billing
37
Q

In Route53, what is the name for the configuration item that holds a collection of records belonging to a domain?

  • -DNS record
  • -Alias
  • -Hosted zone
  • -Routing Policy
A

–Hosted zone

38
Q

The principle ‘design for failure and o will fail’ is very important when designing your AWS Cloud Architecture. Which of the following would help adhere to this principle
Choose 2

  • -penetration testing
  • -MFA
  • -ELB
  • -Vertical Scaling
  • -AZ
A

–ELB

–AZ

39
Q

Which storage device is physically attached to the EC2 host servers?

  • -EBS volume
  • -AMI
  • -Instance Store volume
  • -Elastic Network Adapter
A

Instance Store volume

40
Q

Key things that an AMI includes

A

–one of more EBS snapshots, or ,for instance-store-backed AMI, a template for the root volume of the instance (for example, an operating system, an application server, and applications)

–Launch permissions that control which AWS accounts can use the AMI to launch instances.

–block device mapping that specifies the volumes to attach to the instance when it’s launched

41
Q

Which service has built-in DDoS protection

  • -Route53
  • -Gateway
  • -CloudFront
  • -Direct Connect
A

–CloudFront

42
Q

Select the services that are server-based
Choose 2

  • -Lambda
  • -Fargate
  • -DynamoDB
  • -RDS
  • -EMR
A

RDS

EMR

43
Q

What is Amazon connect

A

Amazon Connect is an easy to use omnichannel cloud contact center that helps you provide superior customer service at a lower cost.

44
Q

Which IAM entity can be used to delegate permissions?

  • -User
  • -Group
  • -Role
  • -Policy
A

Role

45
Q

Which tool can an IT manager use to forecast cost over the next 3 months?

  • -Organizations
  • -TCO Calculator
  • -Cost Explorer
  • -CloudWatch
A

–Cost Explorer

46
Q

Which of the following statements is true?

  • -CloudFormation uses Elastic Beanstalk to deploy infrastructure Stacks
  • -CloudFormation is used by Elastic Beanstalk to deploy environments
A

–CloudFormation is used by Elastic Beanstalk to deploy environments

47
Q

Which of the following are factors that should be considered for EBS pricing?

  • -the compute time you consume
  • -the number of Snowball storage devices you request
  • -the size of volumes provisioned per moth
  • -the amount of data you have stored in snapshots
  • -the compute capacity you consume
A
  • -the size of volumes provisioned per moth
  • -the amount of data you have stored in snapshots

EBS pricing has two factors

  • volume
  • snapshots
48
Q

AWS Elastic Beanstalk is an example of which cloud computing service model?

  • -on-premises
  • -IaaS
  • -PaaS
  • -Saas
A

PaaS

49
Q

4 Server-based services

A

EC2
RDS
Redshift
EMR

50
Q

RDS is an example of what type of database?

  • -online transaction processing (OLTP)
  • -online analytics processing (OLAP)
  • -no-SQL
  • -data warehouse
A

–online transaction processing (OLTP)

51
Q

An application needs to send SMS text messages to customers to notify them of product updates. Which service can be used?

  • -Step Function
  • -SQS
  • -SNS
  • -Lambda
A

SNS

52
Q

Which of the following is not an AWS reservation model?

  • -Redshift Reserved Nodes
  • -S3 Reserved Capacity
  • -ElastiCache Nodes
  • -DynamoDB Reserved Capacity
A

–S3 Reserved Capacity

53
Q

Allows you to establish a secure and private tunnel from your network or device to the AWS global network

A

VPN

54
Q

What should you do in order to keep the data on EBS volumes safe?
Choose 2

  • -sore a backup daily in an external drives
  • -create EBS snapshot
  • -prevent any unauthorized access to AWS data centers
  • -regularly update firmware on EBS device
  • -ensure that EBS data is encrypted at rest
A

–create EBS snapshot

–ensure that EBS data is encrypted at rest

55
Q

What is the most cost-effective storare tier for data that is not often accessed, will be retained for 7 years, and needs to be retrievable within 24 hours?

    • S3 Standard
  • -S3 Glacier
  • -S3 Standard-Infrequent Access
  • -S3 Glacier Deep Archive
A

–S3 Glacier Deep Archive

56
Q

Why might an organization decide to move an on-premise database to RDS?

  • -to reduce operational overhead
  • -to increase flexibility
  • -to eliminate the need to patch management
  • -to benefit from seamless scalability
A

–to reduce operational overhead

57
Q

How can a company enable elasticity for an application running on EC2?

  • -by using EC2 auto scaling
  • -by using ELB
  • -by configuring multi-AZ
  • -by enabling failover in EC2
A

–by using EC2 auto scaling

58
Q

Which type of ELB routes connections based on IP protocol data a layer 4 only?

  • -Classic Load Balancer
  • -Network Load Balancer
  • -Application Load Balancer
A

–Network Load Balancer

59
Q

What is the scope of an Amazon VPC?

  • -a data center
  • -a region
  • -an AZ
  • -a subnet
A

a region

60
Q

What is S3 Transfer Acceleration

A

Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.

61
Q

Your CTO has asked you to contact AWS support using feature to ask for guidance related to EBS. However, when you open the AWS support center you can’t see a way to contact support via Chat. What should you do?

  • -there is no chat feature in AWS support
  • -at a minimum, upgrade to Business support plan
  • -The chat feature is available for all plans for an additional fee, but you have to request it first.
  • -upgrade from the basic support plan to developer Support
A

at a minimum, upgrade to Business support plan

62
Q

AMI provides that information required to launch ——–?

A

an instance

63
Q

what is an AWS subset?

A

a range of IP addresses within a VPC

64
Q

Which AWS-managed network service can be used to enable Internet connectivity for EC2 instances in private subnets?

  • -NAT instance
  • -NAT Gateway
  • -Internet Gateway
  • -Network ACL
A

–NAT Gateway

it is an AWS service that can be used for enabling instance in private subnets to access the Internet

65
Q

What are AMI used for?

  • -Launching an EC2 instance
  • -taking a backup of an EC2 instance
  • -selecting the instance type
  • -running commands at instance launch time
A

Launching an EC2 instance

66
Q

Which of the following is used to cache data to bring it closer to end users?

  • -CloudFront Edge Location
  • -CloudFront Distribution
  • -CloudFront Origin
  • -CloudFront Bucket
A

–CloudFront Edge Location

67
Q

Which of the following statements in INCORRECT about ELB?

  • -EBL can distribute connections across available zones
  • -ELB can be Internet facing
  • -ELB enables high availability and fault tolerance
  • -ELB can distribute connections across regions
A

–ELB can distribute connections across regions

68
Q

Which type of firewall operates at the instance level?

  • -a security group
  • -a network access control list (NACL)
  • -a route table
  • -a NAT Gateway
A

–a security group

69
Q

You work as an on-premise MySQL DBS. The work of database configuration, backup, patcing, and DR can be time-consuming and repetitive. Your company has decided to migrate to the AWS Cloud. Which of the following can help save time on database maintenance so you can focus on dat architecture and performance?

  • -Redshift
    • CloudWatch
  • -DynamoDB
  • -RDS
A

RDS

70
Q

You web application currently faces performance issues and suffers from long load times. Which of the following AWS service could help fix these issues and improve performance?

  • -Aurora
  • -Opworks
  • -X-ray
  • -Shield
A

X-ray

71
Q

What does ELB use to ensure instances are available?

  • -EC2 Status Checks
  • -CloudWatch Metrics
  • -Scaling Plans
  • -Health Checks
A

–Health Checks

72
Q

What is the AWS service that provides a virtual network dedicated to your AWS account?

  • -Dedicated Hosts
  • -Subnets
  • -VPN
  • -VPC
A

VPC

VPC allows you to carve out a portion of the AWS Cloud that is dedicated to your AWS account

73
Q

Which of the following is a feature of RDS that performs automatic failover when the primary database fails to respond

  • -RDS multi-AZ
  • -RDS Single-AZ
  • -RDS Snapshots
  • -RDS Write Replicas
A

RDS multi-AZ

74
Q

What does ARN stand for?

  • -Amazon Region Number
  • -Amazon Resource Number
  • -Amazon Region Name
  • -Amazon Resource Name
A

-Amazon Resource Name

75
Q

Which statement is NOT true about CloudFront Regional Edge Cache and Edge Locations?

  • -a regional edge cache has a larger cache bandwidth and an edge location
  • -there are more edge locations than regional edge caches
  • -an edge location sits between a CloudFront Distribution and a regional edge cache
  • -a regional edge cache sits between a CloudFront Distribution and an edge location
A

–an edge location sits between a CloudFront Distribution and a regional edge cache

76
Q

Which services does Route53 provide?

  • -Domain registration, DNS, firewall protection
  • -Health checking, DNS, domain registration
  • -Health checking, DNS, IP routing
  • -Domain registration, DNS, content distribution
A

–Health checking, DNS, domain registration

77
Q

Three main categories of AMIs?

A

–community AMIs

–AWS martketplace AMIs

–My AMIs

78
Q

Which of the following will affect how much you are charged for storing objects in S3?
choose 2

  • -creating and deleting S3 buckets
  • -using default encryption for any number of S3 buckets
  • -the storage class used for the objects stored
  • -total size in gigabytes of all objects stored
  • -the number of EBS volumes attached to your instances
A

–the storage class used for the objects stored

–total size in gigabytes of all objects stored

79
Q

What is AWS Tag Editor

A

It is used to add edit or delete tags from AWS resources

80
Q

Config vs CloudTrail

A

–CloudTrail records user API activity on your account and allows you to access information about this activity

–Config records point-in-time configuration details for your AWS resources as Configuration Items (CIs)

–You can use Config to answer ‘what did my AWS resources look like’ at a point in time

–you can use CloudTrail to answer ‘who made an API call to modify this resource’

81
Q

Key points about S3 versioning

A
  • -S3 versioning maintains multiple variants of an object in the same bucket
  • -can be used to preserve, retrieve, and restore every version of every object in an S3 bucket
  • -can be enabled at any time
  • -once enabled can be suspended
82
Q

You need to migrate a large number of on-premises workloads to AWS. Which AWS service is the most appropriate?

  • -AWS Application Discovery Service
  • -AWS Server Migration Service
  • -AWS Database Migration Service
  • -AWS Files Transfer Acceleration
A

AWS Server Migration Service

83
Q

What is the AWS service that enables AWS architects to manage infrastructure as code?

  • -CloudFormation
  • -SES
  • -Config
  • -EMR
A

CloudFormation

84
Q

A company wishes to restrict the applications users can launch to an approved list. Which service should they use?

A

AWS Service Catalog

85
Q

What are placement groups?

A

they are logical groups or clusters of EC2 instances within a single AZ. They are recommended for applications that require low network latency, high network throughput, or both

86
Q

What can you use to assign permissions directly to an IAM user?

  • -IAM Role
  • -IAM Identity
  • -IAM Policy
  • -IAM Group
A

IAM Policy

A policy is an object in AWS that, when associated with an identity or resource, defines their permissions.

87
Q

Glacier vs Glacier Deep Archive

A

In order to keep costs low yet proper for differing retrieval requirements, Amazon S3 Glacier offers three choices for access to archives, from certain minutes to many hours. On the other hand, S3 Glacier Deep Archive offers two access choices varying from 12 to 48 hours.

88
Q

What is AWS Cloud9

A

it is a cloud-based integration development environment (IDE) that lets you write, run, and debug you code with just a browser.

89
Q

How can an application be configured to send a notification to multiple SQS queues?

  • -use a FIFO queue
  • -use a SNS topic
  • -create an AWS Step Function state machine
A

–use a SNS topic

multiple SQS queues can be subscribed to a single SNS topic