Practice Exam B Flashcards
Which AWS service makes it easy to deploy, manage, and scale containerized applications using Kubernetes on AWS
Amazon EKS.
You work for a web application development company and have been asked to design an infrastructure solution which can be repeatedly created using scripted templates to create individual sandbox environments for your developers to use. Some infrastructure components will include the setup and configuration of a VPC, EC2 Instances, S3 buckets etc. Which AWS service enables you to design an infrastructure template that can be deployed to create repeatable infrastructure for your developers to use as a sandbox environment?
AWS CloudFormation.
Which IAM feature enables you to grant secure access to other AWS accounts?
IAM Roles.
Which configuration feature of the AWS Auto Scaling service enables you to define a maximum number of EC2 Instances that can be launched in your fleet?
Auto Scaling Group.
Which AWS Service can be used to analyze IoT telemetry data in real-time as it is streamed into your data storage services on AWS?
AWS Kinesis.
Which of the following is true with regards to the benefits of purchasing a convertible EC2 Reserved Instance?
(Choose 2 answers)
- To benefit from better pricing, you can exchange a No Upfront Convertible Reserved Instance for an All Upfront or Partial Upfront Convertible Reserved Instance.
- You can exchange one or more Convertible Reserved Instances with a different configuration, including instance family, operating system, and tenancy.
Which AWS S3 service can be used to help prevent accidental deletion of objects?
Versioning.
Your CEO recently heard that a competitor who migrated to AWS suffered from an attack. The competitors’ AWS Account was used to mine cryptocurrency for an illegal concern. Which AWS security services offer threat detection capabilities using machine learning and behavior models to help detect such malicious activity?
AWS Guard Duty.
Which AWS service uses machine-learning to classify sensitive information stored in your Amazon S3 buckets and monitor access patterns for anomalies that indicate risks or suspicious behavior, such as large quantities of source code being downloaded?
AWS Macie.
Which AWS service is more cost-effective if you need to host static website content for an upcoming product launch?
Amazon S3.
Which AWS support plans are suitable if you require telephone technical support? (Choose 2 Answers)
- Business
- Enterprise
You have been asked to design and deploy docker style containerized applications on the AWS platform. As part of the requirement, you have been asked to suggest a solution that will not require granular infrastructure management such as choosing server types or deciding when to scale your clusters. Which AWS Elastic Container Service (ECS) modes will enable you to focus on the application packaging rather and worry about provisioning, patching, and scaling of servers?
AWS Fargate.
Your finance team would like to be alerted when the cost of using a new AWS test/dev account is about to reach the approved budget for an upcoming project. Which AWS tool can you use to help you achieve this need?
AWS Budgets.
Which of the following six advantages of cloud computing enables you to achieve massive savings by avoiding hidden costs when compared to an on-premise infrastructure design?
Stop spending money running and maintaining data centers.
Which of the following determines the price of S3?
(Choose 3 answers).
- Amount of Storage.
- Data Transfer Out.
- Storage Class.
As part of designing for the Well-Architected Framework, you should enable traceability in order to meet best practices for the Security Pillar. Which of the following AWS tools can help you achieve this?
AWS CloudTrail.
Which AWS service allows you to register any application resources, such as databases, queues, microservices, and other cloud resources, with custom names, that allows your applications to easily query the registry for the location of such resources?
CloudMap.
As part of implementing change management, which AWS service can be used to assess, audit, and evaluate change configurations of your AWS resources, enabling you to identify if a change was the cause of an incident?
AWS Config.
Which AWS service enables you to set custom cost and usage budgets to manage your AWS spend more easily?
AWS Budgets.
Where can AWS customers to list their Reserved Instances for sale, if they signed up for a 1 or 3-year contract but now no longer need the instance?
Reversed Instance Marketplace.
You are planning on developing a website in multiple languages such that you have one fleet of EC2 Instances which serves the English version of your site and another fleet that serves the Spanish version of your site. For each language version, you will be configuring URLs with different paths such that the English version of your site will contain /en/ in the path, and the Spanish version will contain /es/.
Which type of Load Balancer would you use to route traffic to ensure users connect to the site in their desired language?
Application Load Balancer.
You wish to automatically start your fleet of servers used to an Accounting application every morning at 6 am and then shut down the servers at night at 6 pm. This will help reduce overall costs. You plan to use Cloud Events and create cron/scheduled job for this. Which AWS service can enable you to run a node.js code to perform the actual start and stop request, triggered from the scheduled CloudWatch Events Rule?
AWS Lambda.
Which AWS Report gives enables you to view line items for each unique combination of AWS product, usage type, and operation that your AWS account uses?
AWS Cost and Usage Report.
Which AWS Service can be used to automatically select and deploy operating system software patches automatically across large groups of instances?
AWS System Manager Patch Manager.
Which S3 storage class would you recommend for hosting data that is quickly accessible but infrequently accessed and can also be re-created if required hence offers even cheaper storage costs?
S3 One Zone IA.
Which AWS services enable you to perform security assessment against your EC2 instance using pre-defined rules mapped to security best practices, thus enabling you to perform common checks such as access to your EC2 instances from the internet, remote root login being enabled, or vulnerable software versions installed?
AWS Inspector.