June 2024 AWS Video Questions Flashcards

1
Q

Which AWS service will host a MariaDB database with the least amount of operational overhead?

A

Amazon RDS

Amazon RDS supports hosting relational databases, including MariaDB. Migrating data from one MariaDB instance to another would involve minimal operational overhead compared to other options.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which AWS Cloud design principle is a company using when it implements AWS CloudTrail?

A

Accountability and Traceability

Accountability and Traceability means being able to track and monitor actions within your AWS environment. CloudTrail provides this by logging API calls, allowing you to see who did what and when.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which AWS service continuously monitors accounts, workloads, and S3 buckets for malicious activity?

A

Amazon GuardDuty

Amazon GuardDuty is specifically designed for continuous threat detection across AWS accounts, workloads, and data stores like S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What task should a company perform to become more responsive to customer inquiries according to the AWS Cloud Adoption Framework?

A

Realign teams to focus on products and value streams.

Realigning teams to focus on products and value streams aligns with the CAF’s emphasis on customer-centricity.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which configuration change will right-size Amazon EC2 instances with the least operational overhead?

A

Change the size and type of the instance based on utilization.

Right-sizing means choosing the most cost-effective instance type and size to match your workload’s actual resource needs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which AWS service supports user sign-up functionality and authentication to applications?

A

Amazon Cognito

Amazon Cognito provides user sign-up and authentication for mobile and web applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which benefit of the AWS Cloud helps achieve lower usage costs because of aggregate use?

A

Economies of Scale

Economies of Scale refer to the cost advantages a business gains due to its size and operational efficiency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which task is the responsibility of the customer according to the AWS Shared Responsibility Model?

A

Creating and managing IAM users and permissions.

Managing IAM users and permissions falls under the customer’s security responsibility.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which service should a company use to manage Cloud resources using Infrastructure as Code (IaC) templates?

A

AWS Service Catalog

AWS Service Catalog lets organizations create and manage catalogs of IT services, defined using IaC templates.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which AWS service should be used to monitor the CPU utilization of EC2 instances?

A

Amazon CloudWatch

Amazon CloudWatch is designed for monitoring and observability, including collecting metrics like CPU utilization.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which AWS service or principle should a company use to estimate the cost for running its infrastructure in the cloud?

A

AWS Pricing Calculator

The AWS Pricing Calculator is used to estimate the cost of running services in AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which AWS service allows ISVs to deliver and share custom Amazon Machine Images (AMIs)?

A

AWS Marketplace

AWS Marketplace allows ISVs to list and sell their software, including AMIs, to a wide audience.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which component must be attached to a VPC to enable inbound internet access?

A

Internet gateway

An Internet gateway is the component that connects your VPC to the public internet.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which AWS service supports a company’s ability to create and treat infrastructure as code?

A

AWS CloudFormation

AWS CloudFormation is the primary service for defining and managing infrastructure as code in AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which AWS service is designed for high throughput and low latency for applications with a high volume of requests?

A

Amazon DynamoDB

Amazon DynamoDB is a NoSQL database designed for high throughput and low latency.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which AWS security service offers proactive detection of compromised instances or accounts?

A

Amazon GuardDuty

Amazon GuardDuty is a threat detection service that monitors for suspicious activity in AWS accounts and workloads.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which AWS support plan provides the full set of Trusted Advisor checks at the lowest cost?

A

Business support

Business support is the most cost-effective plan offering the full set of Trusted Advisor checks.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which AWS purchase option will optimize costs for a company planning a partial migration to serverless architecture?

A

Compute Savings Plans

Compute Savings Plans provide discounts for committing to a consistent level of compute usage for one or three years.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What are two benefits of building a mobile app in the Cloud?

A

Increased speed for trying out new projects and Flexibility to scale up in minutes as the application becomes popular.

AWS allows for rapid provisioning of resources and enables rapid scaling of resources to meet changing demand.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which feature of Amazon S3 can a company use to meet WORM compliance requirements?

A

S3 Object Lock

S3 Object Lock is specifically designed to enforce WORM policies on objects in S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is S3 Object Lock designed for?

A

S3 Object Lock is specifically designed to enforce WORM policies on objects in S3, ensuring data immutability and compliance with regulations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What does versioning in S3 do?

A

Versioning helps keep multiple versions of an object but doesn’t prevent deletion or modification of those versions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What do bucket policies control in S3?

A

Bucket policies control access to S3 buckets and objects but don’t inherently enforce WORM.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What does MFA Delete add to S3?

A

MFA Delete adds an extra layer of security for deleting objects but doesn’t prevent modification or guarantee immutability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which EC2 purchase option is most cost-effective for batch workloads that can handle interruptions?

A

Spot Instances are the most cost-effective option (up to 90% discount) when you can tolerate interruptions.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

What is the benefit of Reserved Instances?

A

Reserved Instances provide discounts but require a one- or three-year commitment, not ideal for temporary workloads.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

What do Dedicated Instances offer?

A

Dedicated Instances offer the highest level of isolation but are more expensive than Reserved Instances and not necessary if workloads can tolerate interruptions.

28
Q

What is the most flexible but expensive EC2 option?

A

On-Demand Instances provide the most flexibility but are the most expensive option.

29
Q

What is the best solution for a highly available PostgreSQL database in RDS?

A

Amazon RDS Multi-AZ deployment creates a standby replica in a different Availability Zone, providing high availability and fault tolerance.

30
Q

What does Amazon RDS Single-AZ deployment lack?

A

Amazon RDS Single-AZ deployment lacks redundancy and is not fault-tolerant.

31
Q

What are Amazon RDS Snapshots used for?

A

Amazon RDS Snapshots are for backup and recovery, not high availability.

32
Q

What is AWS Database Migration Service (DMS) used for?

A

AWS Database Migration Service (DMS) is used for migrating databases, not for highly available deployments.

33
Q

What is the most secure way to store passwords and API keys in AWS?

A

AWS Secrets Manager is designed for storing, managing, and rotating secrets such as passwords and API keys securely.

34
Q

What does Amazon S3 lack for sensitive information?

A

Amazon S3 can store encrypted data but lacks built-in rotation and auditing features for sensitive information.

35
Q

Why shouldn’t AWS CloudFormation parameters be used for sensitive data?

A

AWS CloudFormation parameters should not be used for storing sensitive data as they might be visible in logs or in plain text.

36
Q

What is AWS Storage Gateway used for?

A

AWS Storage Gateway is for connecting on-premises applications to AWS storage.

37
Q

Which statement describes the relationship among AWS Global Network components?

A

There are more Availability Zones than AWS Regions.

38
Q

What are Availability Zones located within?

A

Availability Zones are located within Regions.

39
Q

What is Amazon Route 53?

A

Amazon Route 53 is AWS’s highly available and scalable DNS service.

40
Q

What does Amazon CloudFront do?

A

Amazon CloudFront is a content delivery network (CDN).

41
Q

What does Amazon VPC provide?

A

Amazon VPC provides virtual private networking.

42
Q

What does AWS Direct Connect create?

A

AWS Direct Connect creates a dedicated network connection between your data center and AWS.

43
Q

What feature of AWS Global infrastructure helps with geographic compliance?

A

AWS’s global footprint allows companies to deploy applications in specific geographic areas to comply with data residency regulations.

44
Q

What are the benefits of AWS Cloud for dynamic workloads?

A

Elasticity and Pay-as-you-go resource pricing.

45
Q

What does elasticity in AWS allow?

A

Elasticity allows companies to scale resources up or down rapidly to match dynamic demand.

46
Q

What does pay-as-you-go resource pricing do?

A

Pay-as-you-go resource pricing aligns perfectly with fluctuating workloads, allowing companies to pay only for resources consumed.

47
Q

What is an AWS best practice for operational workloads?

A

Design for automatic failover.

48
Q

What is the AWS pricing calculator used for?

A

The AWS pricing calculator estimates costs for various services before using them.

49
Q

What does AWS Storage Gateway - File Gateway allow?

A

AWS Storage Gateway - File Gateway allows you to access S3 objects using file protocols like NFS.

50
Q

Which services can a user use to change their IAM password?

A

AWS Management Console and AWS Command Line Interface (CLI).

51
Q

What provides a firewall at the subnet level?

A

Network Access Control Lists (NACLs) act as a firewall at the subnet level, controlling traffic entering and leaving a subnet.

52
Q

Which AWS service is used for automated video analysis?

A

Amazon Rekognition is a computer vision service that can analyze videos to identify people and objects.

53
Q

What is the most cost-effective purchasing option for a web server that cannot tolerate interruptions?

A

Reserved Instances - Partial Upfront offer the lowest hourly rate for a one-year commitment.

54
Q

What are best practices for managing IAM users?

A

Create individual IAM users, use groups to assign permissions, and grant least privilege access.

55
Q

What does stopping guessing capacity refer to in cloud computing?

A

Stopping guessing capacity describes the core concept of elasticity, allowing you to adjust resources on demand.

56
Q

How can a company obtain PCI compliance reports?

A

AWS Artifact is where AWS stores compliance reports, including those for PCI DSS.

57
Q

Which AWS service distributes traffic between EC2 instances?

A

Elastic Load Balancing (ELB) distributes traffic across multiple EC2 instances.

58
Q

What are AWS’s responsibilities in the Shared Responsibility Model?

A

Physical security of AWS data centers, patching the underlying hardware of EC2 instances, and maintaining the host operating system.

59
Q

Who manages the encryption of Amazon Aurora databases?

A

The customer is responsible for managing data encryption, including the encryption of database clusters and snapshots.

60
Q

Which AWS security service filters inbound web traffic?

A

AWS WAF (Web Application Firewall) allows you to create rules that filter and control web traffic.

61
Q

What does AWS Direct Connect provide?

A

AWS Direct Connect provides a dedicated, private network connection between your on-premises environment and AWS.

62
Q

Which AWS service should a company use for a dedicated, private network connection?

A

AWS Direct Connect

AWS Direct Connect provides a dedicated, private network connection between your on-premises environment and AWS, offering more consistent bandwidth and lower latency than public internet connections.

63
Q

What is the best EC2 purchase option for a temporary, variable workload that requires continuous availability?

A

On-Demand Instances

On-Demand Instances offer the flexibility to spin up instances as needed without a long-term commitment and guarantee continuous availability.

64
Q

Which AWS service allows employees to connect to managed workstations from personal devices?

A

Amazon WorkSpaces

Amazon WorkSpaces provides cloud-based virtual desktops that employees can access from their personal devices, offering a secure and managed working environment.

65
Q

Which service can be used to perform SQL queries on objects in an S3 bucket?

A

Amazon Athena

Amazon Athena is a serverless query service that allows you to use standard SQL to query data stored in S3.