Section 16.5 - 18.5

Question 1

According to the Shared Responsibility Model, who is responsible for Patch Management?

Answer 1

Both AWS and the customer

Question 2

What service is managed by AWS and is used to manage encryption keys?

Answer 2

KMS

Question 3

Which AWS service lets you quickly find the root of potential security issues to take faster actions?

Answer 3

AWS Detective

Question 4

A company would like to automate security on EC2 instances to assess security and vulnerabilities in these instances. Which AWS service should it use?

Answer 4

AWS Inspector

Question 5

Amazon Lex is for _______ whereas Amazon Connect is for _______

Answer 5

Lex is for automatic speech recognition (ASR) whereas Amazon Connect is for contact centers

Question 6

What is Amazon Comprehend used for?

Answer 6

Natural Language Processing (NLP)

Question 7

What is AWS’s document search service?

Answer 7

Amazon Kendra

Question 8

What is Amazons machine learning service used to build personalized recommendations?

Answer 8

Amazon Personalize

Question 9

What Amazon service detects text and data in documents?

Answer 9

Textract

Question 10

This amazon service is machine learning for every developer and data scientist

Answer 10

SageMaker

Question 11

What is AWS Organizations?

Answer 11

AWS Organizations is a service that allows you to manage multiple AWS accounts with a master account

Question 12

Billing is consolidated in AWS Organizations, but you also benefits from:

Answer 12

Pricing. There’s more discounts from aggregated usage.

Question 13

For reserved instances in AWS Organizations, if one account is not using a given reserved instance…

Answer 13

It is available to all other accounts in the organization.

Question 14

What does AWS Organizations offer to aid account creation?

Answer 14

An API to automate account creation

Question 15

You want to restrict account privileges using AWS Organizations, how would you do this?

Answer 15

Use the Service Control Policies (SCP) to restrict account privilege

Question 16

What is the purpose of Service Control Policies (SCP)?

Answer 16

To restrict access to certain services

Question 17

Name the 6 types of storage classes in S3

Answer 17

Standard
Infrequent Access
One-zone Infrequent Access

Intelligent Tiering
Glacier
Glacier Deep Archive

Question 18

Which resource would you use to organize resources (say your instances in EC2) and sort them into resource groups?

Answer 18

The tag editor (also known as resource groups)

Question 19

Which AWS tool provides the most comprehensive AWS cost report?

Answer 19

AWS Cost & Usage Report

Question 20

Which AWS tool allows you to forecast your bill up to 12 months ahead?

Answer 20

Cost Explorer

Question 21

This tool uses machine learning to detect unusual spending, such as one-time cost spikes or continuous cost increases

Answer 21

AWS Cost Anomaly Detection

Question 22

You would like to automatically set up and govern a secure multi-account AWS environment with best practices for your organization. Which AWS tool can you use?

Answer 22

Control Tower

Question 23

For AWS Support plans, what is the most cost-effective option to have 24x7 phone, email, and chat support?

Answer 23

Business

Question 24

A company is not sure whether or not it is cost-effective to migrate to the AWS Cloud. Which service can help the executive board make a decision?

Answer 24

AWS Pricing Calculator