Linnux academy questions Flashcards
Which of the following can be used to protect your environment from DDos Attacks (Pick 3)
A. Cloudfront
B.Trusted Advisor
C.AWS Shield
D.AWS ELB
A. Cloudfront
C. AWS Shield
D. AWS ELB
Your company needs to host a database in their AWS environment but needs to have control over patching. Which is the best choice?
A. EC2 Instance
B. AWS RDS database
C. Oracle database
A. EC2 Instance
If you take a snapshot of an EC2 instance and use the snapshot to create a new EC2 instance what is this called?
A. EC2 Snapshot
B. EBS Snapshot
C. AMI
C. an AMI
Which option allows AWS RDS to failover to a secondary database in case of primary database failure
A. Standby
B. Multi-AZ
C. Read replicas
B. Multi - AZ
In AWS Shared Responsibility Model, which if the following is not your responsibility as a customer? A. Encrpyting Data B. Managing Security groups C. Decommissioning your data D. Patching your Instances
C. Decommissioning your data
What is the best solution to provide secure access to an S3 bucket not using the internet?
A. Use a VPN connection
C. Use a VPC endpoint to access S3
D. Use an internet gateway
C. Use a VPC endpoint to access S3
Can you encrpyt metadata in S3?
C. Yes, if you put the metadata in a DynamoDB table and enable encrpytion during creation
D. Yes all data in S3 can be encrpyted
C. Yes if you put metadata in a dynamoDB table with S3.
You receive an alert about an issue between an application and the database servers. What should you check to ensure communication is working? A. Security group rules B. NACL rules C. AWS IAM roles D. AWS KMS
C. AWS IAM Roles
they control access at the instance level
Which of the following options are best practices for permissions in your AWS environment? (Pick 2)
A. use the principle of least privilege
B. Rotate , remove and update credentials on regular schedule
C. Use IAM users instead of groups
A. Use the principle of least privilege
B. Rotate, remove and update credentials on regular schedule
You need to find out which user was responsible for terminating several EC2 instances. Where would you look?
A. Cloudwatch
B. Cloudtrail logs
B. Cloudtrail Logs
Which service allows you to build Infrastructure as Code?
A. Cloudformation
B. Config
Cloudformation
Which Service gives you full administrative privilege of underlying v infrastructure ?
A. EC2
B. S3
C. Lambda
A. EC2
Which choice allows you to carve out a portion of the AWS cloud?
A. Autoscaling Group
B. VPC
C. Security Groups
A. VPC
Which options allow RDS to offer high availability of databases (Pick 2)
A. Multi Region
B. Multi-AZ
C.Read Replicas
B. Multi AZ
C. Read Replicas
Which service provides fully managed NoSQL Database
A. DynamoDB
B. RDS
C.MySQL
A. DynamoDB