Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

1_AWS Certified Associate - UPDATED VERSION - MAIN Concepts > Quiz Challenge 2 > Flashcards

Quiz Challenge 2 Flashcards

1
Q

Although your application customarily runs at 30% usage, you have identified a recurring usage spike (>90%) between 8pm and midnight daily. What is the most cost-effective way to scale your application to meet this increased need?

A

Use scheduled scaling to boost your capacity at fixed intervals.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

You have been asked to identify a service on AWS that is a durable object storage. Which of the services below meets this definition?

A

S3 - Simple Storage Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

You have been asked to decouple an application by utilizing SQS. The application dictates that messages on the queue CAN be delivered more than once, but must be delivered in the order they have arrived while reducing the number of empty responses. Which of the following options are most suitable?

A

Configure a FIFO SQS queue and enable long polling

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

You are building a NAT Instance in an m3.medium using the AWS Linux2 distro with amazon-linux-extras installed. Which of the following do you need to set

A

Ensure that “Source/Destination Checks” is disabled on the NAT instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

You need to add a route to your routing table that will allow connections to the internet from your subnet. Which of the following routes should you add?

A

Destination: 0.0.0.0/0 –> Target: your Internet gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

You are reviewing Change Control requests, and you note that there is a change designed to reduce costs by updating the Amazon SQS “WaitTimeSeconds” attribute. What does this mean?

A

When the consumer instance polls for new work, the SQS service will allow it to wait a certain time for one or more messages to be available before closing the connection.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

You are reviewing Change Control requests and you note that there is a proposed change designed to reduce errors due to SQS Eventual Consistency by updating the “DelaySeconds” attribute. What does this mean?

A

When a new message is added to the SQS queue, it will be hidden from consumer instances for a fixed period.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What data formats are used to create CloudFormation templates?

A

JSON and YAML

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

AWS intends to shut down your spot instance; which of these scenarios is possible?

A
  1. AWS sends a notification of termination and you receive it 120 seconds before the intended forced shutdown.
  2. AWS sends a notification of termination and you receive it 120 seconds before the forced shutdown, but the defined duration period (also known as Spot blocks) hasn’t ended yet.
  3. AWS sends a notification of termination, but you do not receive it within the 120 seconds and the instance is shutdown.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

To save money, you quickly stored some data in one of the attached volumes of an EC2 instance and stopped it for the weekend. When you returned on Monday and restarted your instance, you discovered that your data was gone. Why might that be?

A
  1. The volume was ephemeral, block-level storage.
  2. Data on an instance store volume is lost if an instance is stopped.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

You have launched a NAT instance into a public subnet, and you have configured all relevant security groups, network ACLs, and routing policies to allow this NAT to function. However, EC2 instances in the private subnet still cannot communicate out to the internet. What troubleshooting steps should you take to resolve this issue?

A

Disable the Source/Destination Check on your NAT instance.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

You’ve been commissioned to develop a high-availability application with a stateless web tier. Identify the most cost-effective means of reaching this end.

A
  1. Use an Elastic Load Balancer, a multi-AZ deployment of an Auto-Scaling group of EC2 Spot instances (primary) running in tandem with an Auto-Scaling group of EC2 On-Demand instances (secondary), and DynamoDB.
  2. With proper scripting and scaling policies, running EC2 On-Demand instances behind the Spot instances will deliver the most cost-effective solution because On-Demand instances will only spin up if the Spot instances are not available.
  3. DynamoDB lends itself to supporting stateless web/app installations better than RDS .
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

You manage a Ruby on Rails messaging application that lives on a cluster of EC2 instances. Your website occasionally experiences brief, strong, and entirely unpredictable spikes in traffic that overwhelm your EC2 instances’ resources and freeze the application. As a result, you’re losing recently submitted messages from end-users. You use Auto Scaling to deploy additional resources to handle the load during spikes, but the new instances don’t spin-up fast enough to prevent the existing application servers from freezing. Which of the following will provide the most cost-effective solution in preventing the loss of recently submitted messages?

A

Use Amazon SQS to decouple the application components and keep the messages in queue until the extra Auto-Scaling instances are available.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

You work for a busy real estate company, and you need to protect your data stored on S3 from accidental deletion. Which of the following actions might you take to achieve this?

A
  1. Enable versioning on the bucket.
  2. If a file is accidentally deleted, delete the delete marker.
  3. Configure MFA-protected API access.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

You have created a VPC that contains two EC2 instances in different availability zones. Both are running web servers, hosting the same content. These web servers will be accessible via the internet. Which of the following DNS configurations could you consider?

A
  1. Set up an Application Load Balancer and place your instances behind this ELB.
  2. Configure a Route 53 Alias record to point to the resource of the Application Load Balancer.
  3. Assign each EC2 instance with an Elastic IP Address.
  4. Configure a Route 53 “A” multi-value record with both EIP’s and health checks.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

You are a student currently learning about the different AWS services. Your employer asks you to tell him a bit about Amazon’s Glacier service. Which of the following best describes the use cases for Glacier?

A

Infrequently accessed data and data archives.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You have been engaged by a company to design and lead the migration to an AWS environment. An argument has broken out about how to meet future Backup & Archive requirements and how to transition. The Security Manager and CTO are concerned about backup continuity and the ability to continue to access old tape archives. The Senior engineer is adamant that there is no way to retain the old backup solution in the AWS environment, and that they will lose access to all the current archives. What information can you share that will satisfy both parties in a cost-effective manner?

A
  1. Suggest that during transition, a second AWS Tape Gateway (VTL) solution could be commissioned in the customer’s new VPC and integrated with existing VTS.
  2. At the same time, the existing Enterprise Backup Solution could be used to perform tape-to-tape copies to migrate the Archives from tape to VTL/VTS virtual tape.
  3. Meet with both parties and brief them on the AWS Tape Gateway (VTL) solution.
  4. Explain that it can initially be installed in the on-premises environment utilizing the existing enterprise backup product to start the transition without losing access to the existing backups and archives.
  5. Over the duration of the migration, most (if not all) the backup cycles will be replaced by the new VTL & VTS tapes.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which of the following services should you provision in multiple availability zones in order to achieve high availability?

A
  1. RDS and EC2 - S3, SQS & DynamoDB are already built in a fault tolerant fashion, you do not need to provision these services across multiple availability zones.
  2. Therefore the correct answers are RDS and EC2
19
Q

You are reviewing Change Control requests, and you note that there is a change designed to reduce wasted CPU cycles by increasing the value of your Amazon SQS “VisibilityTimeout” attribute. What does this mean?

A

When a consumer instance retrieves a message, that message will be hidden from other consumer instances for a fixed period.

20
Q

With EBS, I can ____.

A
  1. Create an encrypted volume from a snapshot of another encrypted volume.
  2. Create an encrypted snapshot from an unencrypted snapshot by creating an encrypted copy of the unencrypted snapshot.
21
Q

By default, all EC2 instances are monitored by CloudWatch. Using the default settings, how many minutes elapse between when metrics are sent to CloudWatch? Using the detailed option, how many minutes would elapse between metrics being sent to CloudWatch?

A
  1. 5 minutes, 1 minute - Using the default settings metrics are sent every 5 minutes to CloudWatch.
  2. Using the detailed settings, metrics are then sent every 1 minute.
22
Q

You are a solutions architect working for a cosmetics company. Your company has a busy Magento online store that consists of a two-tier architecture. The web servers are on EC2 instances deployed across multiple AZs, and the database is on a Multi-AZ RDS MySQL database instance. Your store is having a Black Friday sale in five days, and having reviewed the performance for the last sale you expect the site to start running very slowly during the peak load. You investigate and you determine that the database was struggling to keep up with the number of reads that the store was generating. Which solution would you implement to improve the application read performance the most?

A

Add an RDS Read Replica in each AZ.

23
Q

Amazon ElastiCache can fulfill a number of roles. Choose the operations from the following list which can be implemented using ElastiCache for Redis.

A

Pub/Sub In-Memory Data Store Sorted Sets

24
Q

You have been asked to deploy an application on a small number of EC2 instances. The application must be placed across multiple Availability Zones and should also minimize the chance of underlying hardware failure. Which of the following options would provide this solution?

A

Deploy the EC2 Servers in a Spread Placement Group.

25
Q

Amazon SQS keeps track of all tasks and events in an application.

A

FALSE

Amazon SWF (not Amazon SQS) keeps track of all tasks and events in an application. Amazon SQS requires you to implement your own application-level tracking, especially if your application uses multiple queues.

26
Q

Select all the true statements on S3 URL styles:

A
  1. Path-Style URLs (such as https://s3.Region.amazonaws.com/bucket-name/key name) are supported by AWS.
  2. Virtual-host-style URLs (such as: https://bucket-name.s3.Region.amazonaws.com/key name) are supported by AWS.
27
Q

You need to store some easily re-creatable objects on S3. With rapid access times and cost-effectiveness in mind, which S3 storage class should you consider?

A

S3 One Zone-IA - S3 One Zone-IA is for data that is accessed less frequently, but requires rapid access when needed.

28
Q

You have been engaged by a company to design and lead a migration to an AWS environment. The team is concerned about the capabilities of the new environment, especially when it comes to high availability and cost-effectiveness. The design calls for about 20 instances (c3.2xlarge) pulling jobs/messages from SQS. Network traffic per instance is estimated to be around 500 Mbps at the beginning and end of each job. Which configuration should you plan on deploying?

A
  1. Spread the Instances over multiple AZs to minimize the traffic concentration and maximize fault-tolerance.
  2. Wherever possible, use simple solutions such as spreading the load out rather than expensive high tech solutions.
29
Q

Your Security Manager has hired a security contractor to audit your network and firewall configurations. The consultant doesn’t have access to an AWS account. You need to provide the required access for the auditing tasks, and answer a question about login details for the firewall appliance. Which of the following might you do?

A
  1. Create an IAM User with a policy that can Read Security Group and NACL settings.
  2. Explain that AWS implements network security differently and that there is no such thing as a Firewall appliance.
  3. Security Groups and NACLs are used instead.
30
Q

How long can a message be retained in an SQS Queue?

A

14 days

31
Q

When coding a routine to upload to S3, you have the option of using either single part upload or multipart upload. Identify all the possible reasons below to use Multipart upload.

A
  1. Multipart upload delivers the ability to pause and resume object uploads.
  2. Multipart upload delivers improved throughput Multipart upload delivers quick recovery from network issues Multipart upload delivers the ability to begin an upload before you know the final object size.
32
Q

Following advice from your consultant, you have configured your VPC to use dedicated hosting tenancy. Your VPC has an Amazon EC2 Auto Scaling designed to launch or terminate Amazon EC2 instances on a regular basis, in order to meet workload demands. A subsequent change to your application has rendered the performance gains from dedicated tenancy superfluous, and you would now like to recoup some of these greater costs. How do you revert your instance tenancy attribute of a VPC to default for new launched EC2 instances?​

A

Modify the instance tenancy attribute of your VPC from dedicated to default using the AWS CLI, an AWS SDK, or the Amazon EC2 API.

33
Q

How many internet gateways can I attach to my custom VPC?

A

1

34
Q

Your AWS environment contains several on-demand Amazon EBS-backed EC2 instances dedicated to a project that has just been cancelled. Your supervisor does not want to incur charges for these on-demand instances, but also does not want to lose the data on the root volume just yet because there is a chance the project may be revived in the next few days. What should you do to minimize charges for these instances in the meantime?

A

Stop the instances.

35
Q

You need a storage service that delivers the lowest-latency access to data for a database running on a single EC2 instance. Which of the following AWS storage services is suitable for this use case?

A

Amazon EBS

  1. Amazon EBS is a block level storage service for use with Amazon EC2.
  2. Amazon EBS can deliver performance for workloads that require the lowest-latency access to data from a single EC2 instance.
36
Q

You run an automobile reselling company that has a popular online store on AWS. The application sits behind an Auto Scaling group and requires new instances of the Auto Scaling group to identify their public and private IP addresses. How can you achieve this?

A

Using a Curl or Get Command to get the latest meta-data from http://169.254.169.254/latest/meta-data/

37
Q

Amazon Web Services offers 4 different levels of support. Which of the following are valid support levels?

A

Enterprise Business Developer

38
Q

You are a security architect working for a large antivirus company. The production environment has recently been moved to AWS and is in a public subnet. You are able to view the production environment over HTTP. However, when your customers try to update their virus definition files over a custom port, that port is blocked. You log in to the console and you allow traffic in over the custom port. How long will this take to take effect?

A

Immediately

39
Q

Which native AWS service will act as a file system mounted on an S3 bucket?

A

File Gateway

A file gateway supports a file interface into Amazon Simple Storage Service (Amazon S3) and combines a service and a virtual software appliance

40
Q

DynamoDB has many use cases. Which of the following are legitimate use cases for DynamoDB?

A

Storing JSON Storing the metadata of BLOB data stored in S3 Storing web session data

41
Q

You need to restrict access to an S3 bucket. Which of the following methods can you use to do so?

A

Access Control Lists for S3 (permissions) S3 Bucket policies

42
Q

You are a solutions architect working for an oil and gas company. They are moving their production environment to AWS and need a custom VPC into which to put it. You have been asked to create a public subnet. You create the VPC with a subnet bearing the CIDR address range of 10.0.1.0/24. Which of the following steps should you take to make this subnet public?

A

Attach and Internet Gateway to the VPC Create a route in the route table associated with the subnet allowing a route to the internet gateway

43
Q

Your company likes the idea of storing files on AWS. However, low-latency service of the last few days of files is important to customer service. Which Storage Gateway configuration would you use to achieve both of these ends?

A

File Gateway Volume Gateway-Cached volumes

1_AWS Certified Associate - UPDATED VERSION - MAIN Concepts (51 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions