Revision 2

Question 1

Six Pillars of the Well Architected Framework

Answer 1

-Operational Excellence
-Security
-Reliability
-Performance Efficiency
-Cost Optimization
-Sustainability

Question 2

Security Design principles in services

Answer 2

-Identity and Access Management
IAM / AWS-STS / MFA Token / AWS Organization
-Detective Controls
Config / Cloud Trail / CloudWatch
-Infrastructure Protection
-Data protection
-Incident Response

-Infrastructure Protection

Question 3

Operational excellence design principles as Services

Answer 3

-Prepare
CloudFormation / Config
-Operate
CloudFormation / Config / CloudTrail / CloudWatch / Xray
-Evolve
CloudFormation / CICD services - Code…

Question 4

Connect on-prem to AWS over the public internet, connection encrypted

Answer 4

Site to Site VPN

Question 5

Cloud best practices design principles

Answer 5

-Scalability
-Disposable resources
-Automation
-Loose coupling
-Services not servers

Question 6

Most secure way to expose a service to 1000s of VPC

Answer 6

Private Link

Question 7

Reliability services

Answer 7

-Foundations
IAM / VPC / Service Limits “Quotas” / Trusted Advisor
-Change Management
-Failure Management

Question 8

Performance Efficiency Design Principles

Answer 8

-Democratize advanced technologies
-Go global in minutes
-Use serverless architecture
-Experiment more often

Question 9

Connect computer to EC2 over a private IP

Answer 9

AWS Client VPN
-using Open VPN
-over public internet
-could use the site to site to speak to on-prem

Question 10

Trace HTTP requests

Answer 10

AWS X-RAY

Question 11

VPC Endpoint for S3 and Dynamo DB

Answer 11

VPC Endpoint Gateway

Question 12

Operational Excellence Design Principles

Answer 12

-Perform operations as code - (Cloud Formation)
-Annotate documentation
-Make frequent, small, reversible changes
-Refine operation procedures frequently
-Anticipate failure

Question 13

Reliability Design Principles

Answer 13

-Test recovery procedures
-Automatically recover from failure
-Scale horizontally to increase availability
-Stop guessing capacity
-Manage change in automation

Question 14

VPC Enpoint to connect to the rest of AWS Sercvices

Answer 14

VPC Endpoint Interface

Question 15

Cost Optimization Services

Answer 15

-Expenditure Awareness
-Cost-Effective Resources
-Matching supply and demand
-Optimizing overtime

Question 16

Allows to connect to AWS Services using a private network. instead of www

Answer 16

VPC Endpoints
-enhanced security
-lower latency

Question 17

Cost Optimization Design Principles

Answer 17

-Adopt a consumption model
-Measure overall efficiency
-Stop spending on data centre operations
-Analyze and attribute expenditure
-Use managed and application-level services to reduce the cost of ownership

Question 18

Necessary for a Private Link

Answer 18

-Service: Network Load Balancer
-Consumer: Elastic Network Interface

Question 19

Necessary for a site to site VPN

Answer 19

On-prem: Customer Gateway
AWS: Virtual Private Gateway

Question 20

Use with
-A transit gateway when you have multiple VPCs in the same Region
-A virtual private gateway

Answer 20

AWS Direct Connect Gateway

Question 21

Physical connection between on-prem and AWS over the private network , private,secure, fast,

Answer 21

Direct Connect DX

Question 22

Performance Eficiency Services

Answer 22

-Selection
-Review
-Monitoring
-Tradeoffs

Question 23

Security Design Principles

Answer 23

-Strong identity foundation
-Enable traceability
-Apply security at all levels
-Automate security best practices
-Protect data in transit and at rest
-Keep people away from data
-Prepare for security events

Question 24

Well Architected Framework Genera Guiding Principles

Answer 24

-Stop guessing capacity needs
-Test systems at production scale
- Automate to make architectural experimentation easier
-Allow for evolutionary architectures
-Design based on changing requirements
-Drive architectures using data
-Improve through game days
-stress system

Question 25

Sustainability Design Principle

Answer 25

-Understand your impact
-Establish sustainability goals
-Anticipate and adop new, more efficient hardware and software