Practice test 5

Question 1

What is CloudHSM ?

Answer 1

Cloud Hardware Security Module

Question 2

What happens if you loose the keys of the CloudHSM and have no copies ?

Answer 2

They will be lost permanently

Question 3

By default, How are CloudTrail event log files encrypted ?

Answer 3

Using Amazon S3 server side encryption

Question 4

How many days minimum objects need to be stored in S3 standard before they can transition to infrequent access ?

Answer 4

30 days

Question 5

Can CNAME records be created for your zone apex ?

Answer 5

No. For example, if you register the DNS name tutorialsdojo.com, the zone apex is tutorialsdojo.com. You can’t create a CNAME record directly for tutorialsdojo.com, but you can create an alias record for tutorialsdojo.com that routes traffic to.

Question 6

What is EFA ?

Answer 6

Elastic Fabric Adapter

Question 7

Is EFA supported by Windows ?

Answer 7

No

Question 8

What is ENA ?
What network speeds supports ?

Answer 8

Elastic Network Adapter.
100Gbps

Question 9

Use AWS Storage Gateway with a Volume Gateway when the device is …

Answer 9

iSCSI

Question 10

Use AWS Storage Gateway with a File Gateway when the protocol is …

Answer 10

NFS or SMB

Question 11

HDD or SDD. Cannot be used as a bootable volume

Answer 11

HDD

Question 12

What is AWS System manager run command

Answer 12

Allows you to execute a command remotely and securely. But this is not a good answer in the exam because it “requires a lot of effort”

Question 13

EC2 Instance states

Answer 13

Pending

InService

Terminating

Terminated

Question 14

EC2 instances life cycle hooks

Answer 14

Pending:Wait

Pending:Proceed

Terminating:Wait

Terminating:Proceed

Question 15

What happens when you have a single Aurora instance and there is a system failure ?

Answer 15

Aurora will attempt to create a new DB instance in the same AZ as the original instance

Question 16

Can you store passwords in CloudHSM ?

Answer 16

No. Only keys.

Question 17

Difference between KMS…

• Customer Managed Keys
• AWS Managed Keys
• AWS owned keys

Answer 17

• Customer managed keys. Created by they user. The Customer has more control.
• AWS managed keys. Created by AWS. Customer has less control.
• AWS Owned keys. Created Used by AWS

Question 18

Real time is

Answer 18

Kinesis

Question 19

Can you use tags combined with policies ?

Answer 19

Yes, it allows you to provide differentiated access depending on how the resource is tagged.

Question 20

Can you create a VPC Peering connection between regions ?

Answer 20

Yes

Question 21

Can you access VPC end points from another region?

Answer 21

Not by default. You need to create a VPC peering connection to enable cross region connection.