Practice Exams Questions Flashcards by Alexander Wilson

What are the different gateway types suported by AWS Storage Gateway Service?

Tape Gateway, File Gateway, and Block Gateway

How well did you know this?

Not at all

Perfectly

Which AWS service helps with global application availability and performance using the AWS global network?

Global Accelerator

How well did you know this?

Not at all

Perfectly

Which AWS service can be used to store, manage, and deploy docker container images?

Amazon Elastic Container Registry (ECR)

How well did you know this?

Not at all

Perfectly

An org must use a hardware device for data encryption ops in the cloud. Which service to use?

AWS CloudHSM

How well did you know this?

Not at all

Perfectly

Secure Shell Access to EC2 instances without opening new ports or using public IP addresses?

Systems Manager Session Manager

wtf.

How well did you know this?

Not at all

Perfectly

Is server side encryption Customer or AWS respsonsibility? (Shared Responsibility Model)

Customer

How well did you know this?

Not at all

Perfectly

Shared Respsonsibility: Security and Compliance

Does AWS need to manage physical locations and infrastructure?

Yes

How well did you know this?

Not at all

Perfectly

is the service ‘AWS service quotas’ a part of the well-architected framework pillar?

Yes

This is a way of configuring limits for services from a single point.

How well did you know this?

Not at all

Perfectly

is AWS Trusted Advisor part of the well-architected framework pillar?

yes

How well did you know this?

Not at all

Perfectly

For windows based systesms, there is an AWS offering that gives a flexible, fully managed, scalable FS. What is it called?

FSx for Windows File Server

How well did you know this?

Not at all

Perfectly

Who is responsible for encrypting data in Amazon RDS? (Shared Respsonsibility Model)

The Customer

How well did you know this?

Not at all

Perfectly

Is it recommended to enable MFA for root?

Yes

How well did you know this?

Not at all

Perfectly

Are the root user access credentials the email address and password used to create the AWS account?

Yes

How well did you know this?

Not at all

Perfectly

Does the root account get IAM policies applied to it?

NO; root user accesses / permissions cannot be restricted.

How well did you know this?

Not at all

Perfectly

What is AWS partner network for?

identify the right services to build solutions on the AWS cloud.

How well did you know this?

Not at all

Perfectly

What is AWS service catalog?

allows orgs to create and manage catalogs of IT services that are approved for use on AWS. These services can include anything from virtual machine images, servers, software, and databases.

How well did you know this?

Not at all

Perfectly

How many AZ’s does a VPC span?

All the AZ’s in the region

How well did you know this?

Not at all

Perfectly

How many AZ’s does a VPC subnet span?

Only a single AZ in a given region.

How well did you know this?

Not at all

Perfectly

How many cases can be open under the developer support plan?

Only One Contact, but they may have Unlimited cases open

How well did you know this?

Not at all

Perfectly

Access Key and Secret Access are tied to which AWS Identity and access management entitY?

IAM user;

Access keys are not applied to roles, groups, or AWS Policies.

How well did you know this?

Not at all

Perfectly

Can cloudwatch and SNS be used together to notify staff about CPU utilization on a fleet of EC2 instances?

Yes.

How well did you know this?

Not at all

Perfectly

Most cost-effective support plan to get 24/7 phone based technical support?

Business

How well did you know this?

Not at all

Perfectly

What services does AWS Compute Optimizer evaluate?

It helps you identify the optimal resource configs for:
EC2 Instances
EC2 Auto Scaling Groups
EBS Volumes
Lambda Functions

How well did you know this?

Not at all

Perfectly

Elasticity, Availability, and Scalability are described in AWS Well-Architected Framework.

False

How well did you know this?

Not at all

Perfectly

Tool for reviewing your workloads against best practices for cost optimization, security, and performance improvement, then obtain ADVICE to architect them better.

Trusted Advisor

IAM and Cloudfront are global in scope.

True

AWS S3 is global in scope.

False; This is a shitty trick question beause S3 is in the global namespace, but the individual buckets are regional.

What is the primary benefit of deploying RDS in a Multi-AZ config?

It enhances Database Availability.

Name the policy that describes prohibited uses of amazons services.

Acceptable Use Policy

With Elastic Beanstalk, can you deploy code to AWS and have it handle the deployment on it's own, while still having access to the underlying OS for further enhancements?

Yes. works with: Java .Net PHP Node.js Python Ruby Go Docker Uses servers like: Apache Nginx Passenger IIS

Name 3 Services that can help to prevent a DDOS attack

1. Shield 2. WAF 3. Cloudfront with Route 53

What is Athena?

Interactive query service that lets you analyze data in S3 using standard SQL. It's serverless too, so there is no infra, and you just pay for the queries you run.

Is inbound and outbound data charged for moving data between regions?

No, only outbound data is charged.

Explain the difference between a secutiry group and a NACL.

A secutiry group acts as a firewall at the instance level, where a NACL acts as a firewall at the subnet level.

Provide two options for connecting on-prem networks with AWS Cloud.

Direct Connect and AWS VPN

Can you use internet gateway to connect on-prem network with AWS Cloud?

What is Amazon EMR?

Used for big data platform . Great for processing huge data using open source tools like HADOOP, or spark on AWS. Used to be called Elastic Map Reduce

Which Support package includes concierge support team, as well as a response time of about one hour if systems go down

Enterprise.

Which support plan gives access to a technical account manager?

Enterprise.

What does AWS inspector do?

It's an automated security assessment service that checks apps for: - exposure - vulnerabilities - deviations from best practices

AWS Managed RDS Instances are optimized for what?

One of the following: - Memory - Performance - I/O This means that the AWS managed versions are more performant than customer managed DB's.

What is the highest possible discount for spot instances?

90%

Which services support reservations to optimize costs?

- DynamoDB - EC2 Instances - RDS - Elasticache - Redshift

What are advantages of cloud over on site infra?

- Eliminate guessin on infra capacity - Trade capital expense for variable expense

Which support plan provides architectural guidance contextual to your specific use-cases?

Business I assume enterprise does as well. I suppose it was wrong because it wasn't the cheapest option to do so.

How to handle requirements to encrypt data prior to sending it to AWS S3 buckets?

Enable client-side encryption using AWS encryption SDK.

What's a great way to audit AWS ACCOUNT activity?

Cloudtrail gives you information that is happening at the account levle, so admin, and potentially service configs actions and what not

Give two good means of getting assistance for migrating data and applications to cloud.

- AWS professional services - Use the AWS Partner Network to get a custom solution built

For a VPC, can security groups contain DENY rules?

For a VPC, does AWS or the customer manage the NAT gateway?

AWS

HOw can a company have control over creating it's own encryption keys?

Customer Managed CMK

Which support plan gives access to infra event management for an additional fee?

Business

What is something that is a shared responsibility of both the customer AND AWS?

Configuration Management: AWS must maintain the configuration, but the customer is the one who defines it. Therefore it's the responsibility of both parties.

Can you remove an AWS account from an organization if it cannot operate as a stand-alone account?

No. It must be able to function as a stand alone.

Which services does Shield Advanced protect?

- Route 53 - Global Accelerator - EC2 - ELB - Cloudfront

Which service can be used to review HIPAA compliance and governance-related documents?

Arfitact

Which services support VPC endpoint gateway for private connection from a VPC?

- S3 - DynamoDB These are the only two

Which support plan gives access to onlne training with self-paced labs?

Enterprise.

Which support plans give access to guidance, configuration and troubleshooting of AWS Interop with THIRD-PARTY software?

Business and Enterprise.

How many AZs are in a Region?

Two or more.

How many discrete centers are in a given AZ?

One or more.

Which support plas gives access to only 7 core checks from the Trusted Advisor best practice checks?

- Basic - Developer

Change management tooling:

- Cloudtrail - Config - Cloudwatch My understanding of this is that because it will show you which changes have been made, when, and by whom.

This service gives you the ability to produce alerts when reservation utilization falls below a set threshold.

Budgets

At what layer does WAF function?

Layer 7 only (http / https)

EC2 is an Infrastructure as a service?

Yes.

Does AWS cloudtrail logs have encryption enabled by default?

yes.

Does AWS S3 have encryption enabled by default?

no.

Do cloud apps trade variable expense for capital expense?

No, they trade Capital Expense (physica stuff, energy costs) for variable expense (utilization costs)

True or False: A Site-to-Site contains a Customer Gateway, and a Virtual Private Gateway?

True! A site to site vpn has the following: - Virtual Private Gateway - Transit Gateway - Customer Gateway - Customer Gateway Device

What is a powerful search tool from AWS that can provide search multiple scattered and huge repositories of text information for specific terms?

AWS Kendra ML service that can search enormous quantities of text information.

How long for Snowball to move Terabytes of data?

about a week

Which AWS Support plan provides general architecture guidance on how services can be used for various use-cases, workloads, or applications?

Developer

How to receive detailed reports that break down a companies AWS costs by the hour in an S3 Bucket?

AWS Cost and Usage Reports This is the most comprehensive cost and usage data available to the customer.

True or False: EC2 Instances can access files on an EFS file system across many availability zones, regions, and VPC's?

True.

Amazon Rekognition is capable of quickly resizing images

False Rekognition can identify: - objects - people - text - scenes - activities - facial analysis and search

Is AWS WAF a regional scoped service?

NO, it is a global scope.

For collaborative working environments between VPCs, would it be better to use VPC Peering or AWS Transit Gateway?

Transit Gateway This arranges various VPC's on a start topology, so a central hub is respsonible when routing between, so complex VPC relationship management is not needed.

Which AWS support plan guarantees a response time of 15 minutes when business critical systems are down?

Enterprise.

What are the types of Budgets?

Usage Budget Reservation Budget Cost Budget Savings Plan Budget

When an application and it's data needs migrating to regions that are in a different country, how to approach this?

Create resources, migrate data, then applications.

True or false: You must activate AWS Generated Tags and User Defined Tags separately before they can appear in Cost Explorer or a cost allocation report

True

True or False: a tag key must be unique, and each tag key can have only one value

True

Does a Security Group Automatically allow return traffic?

Yes, this is considered stateful

NACL (Network Access Control Lists) automatically allow return traffic?

No, responses to allowed inbound traffic are subjec to outbound rules. Outbound traffic may be denied. This is considered stateless.

Which AWS Services support high availability by default?

- DynamoDB - EFS There could be more, i didn't see a comprehensive list.

Maintaining infrastructure as code is covered under the well-architected framework. Which pillar?

- Operational Excellence

Billing data is stored where always?

US East 1 -- north virginia

How is EFS Chargeed?

You pay a fee when you read or write - Infrequent Access Storage Class

How is EBS Charged?

They are stored incrementally so you are only billed ffor the changed blocks which were stored.

How to connect a VPC direct to S3?

VPC Endpoint Gateway

Trusted advisor provides best practice recommendations for which categories?

Cost Optimization and Service Limits

Which two services would be used to really dial in cost vs utilization (under utilization specifically)?

Trusted Advisor and Cost Explorer

Which two services automatically have data encryption enabled?

Storage Gateway and S3 Glacier

What are the mandatory elements of an IAM Policy?

Effect, Action these are defined in JSON