Incorrect Questions PT2 Flashcards
Incorrect Practice Questions for the 2nd practice test from Udemy
NACLs traffic rules and restrictuions are applied to what?
Security Groups
What lever are Security Group restrictions applied to?
Instance Level
Amazon Infrastructure component which is used to cache content locally using Amazon CloudFront
Edge Locations
If you want to migrate on-premise tape backup solutions to the AWS Storage Gateway Platform, which protocol can help you mount the virtual tapes for your backup application?
iSCSI
Name all OSI model layers
- Physical
- Data
- Network
- Transport
- Session
- Presentation
- Application
Which layer of the OSI model do Application Load Balancers distribute traffic on. (name the number)
7 (Application Layer)
Name 3 features of DynamoDB
- Runs Exclusively on Solid State Drives
- Synchronously replicates data across 3 facilities within a Region
- Offers seamless scaling with no downtime
If you accidentally give your access key ID and secret access key to an unauthorized person, what can you do to protect your account?
Make Inactive using the IAM console
What is the standard pricing model for Amazon S3?
- Data transfer out
- Storage per GB
- Number of Requests
What are Key Pairs in AWS?
Public key to encrypt the password and private key to decrypt it.
Are Key Pairs unique to the region you have created them in?
Yes
Amazon WorkSpaces
A Managed, secure, cloud desktop service. Provisions either Windows or Linux desktops. Pay either monthly or hourly.
Name 4 core services offered by Amazon Route53
- Traffic Management
- Availability Monitoring
- Domain Registration
- DNS Management
AWS Inspector
An agent you install on your EC2 Instance and run analysis to identify vulnerabilities
In order to meet compliance for data residency laws, Amazon never replicates data stored in S3 automatically across…
Regions
What Route53 feature can you use to test your web application’s availability and reachability?
Health Checks
What is the maximum number of IOPS you can get with an SSD (GP2) EBS Volume?
10,000 IOPS
AWS WAF
AWS Web Application Firewall
*Used to prevent potential exploits at the application (7) layer.
You have an IAM user account. What is the link you can use to access your AWS Management Console?
https://AWSAccountID.signin.aws.amazon.com/console
Total Cost of Ownership Calculator
Use to compare the cost of running your applications in an on-premise or colocation environment to AWS.
Which of the following are components that determine the cost of your RDS Database Instance?
Additional Storage
Number of Requests
Hours of use
AWS Simple Monthly Calculator
Helps users work out and estimate their monthly costs for AWS Workloads.
Are you allowed to run penetration testing against your AWS workloads?
Yes, as long as you inform AWS when you plan to run the test, and you run it against your own workloads.
What are the six benefits of working in the cloud?
- Trade capital expense for variable expense.
- Benefit from massive economies of scale.
- Stop guessing capacity.
- Increase speed and agility.
- Stop spending money running and maintaining data centers.
- Go global in minutes.
Direct Connect
- Provides 1 Gbps and 10 Gbps connections.
* Can use instead of VPN over internet to Amazon VPC, avoiding VPN hardware and lower transfer rates.
You need to compare the cost of purchasing a new on premises NAS server with that of deploying an EFS volume in the cloud and hosting your servers in AWS. Which tool can you use to perform this comparison?
Total Cost of Ownership
You want to create an IAM policy to enable users to access Amazon S3 bucket, but restrict that access from the corporate IP Address, so that only users in the office can connect to the bucket. How should you configure the policy?
Specify a Condition element to restrict access from a specific IP address
Which two file formats are used when creating CloudFormation templates?
JSON & YAML
You have created a user with full access to Amazon S3. You need to list the available buckets from the EC2 Server and create additional buckets using the command line interface. However, when you log in to the EC2 server, you are not able to list your existing buckets. What do you need to do to enable full S3 access from EC2 Instance?
Use AWS Configure and provide your Access Key ID and Secret Access Key which will be used to enable your access to Amazon S3, and thus list or create buckets as required.
Consolidated Billing
Enables you to link your accounts and take advantage of volume price discounts.
Your organization has multiple AWS accounts for different purposes, such as Test & Dev, Production and Back Office. Each Account has it’s own set of services and incurs charges. Which AWS service can you use to take advantage of volume discounts by clubbing your accounts together?
Consolidated Billing
True for False, S3 can be used to host a dynamic website, like one that runs on a LAMP stack.
False. You can host static websites on S3, but are not able to host any dynamic sites designed with server side scripting.
You wish to purchase a fleet of spot instances to perform certain tasks. What is the price you pay per hour for your spot instances?
Spot Price. Even though you bid on a particular price, known as a bid price, you will actually pay the spot price. If the spot price rises above your bid price, then you will lose the instance.
True or False, Amazon RDS offers free backup to the size of your database.
True, Amazon RDS offers free backup up to the size of your database.
You want to identify when members of your custom group in AWS last logged in. Where can you get this information?
In the IAM Console, click the Users section and find this under the ‘Last activity’ column
