Test 1 Flashcards by Michael Cessaro

You are trying to organize and import (to AWS) gigabytes of data that are currently structured in JSON-like name-value documents. Which AWS service would best fit your needs?

a.Lambda
b.DynamoDB
c.RDS
d.Aurora

b.DynamoDB

How well did you know this?

Not at all

Perfectly

Which statement is true regarding the AWS shared responsibility model?

a.Security of the IaaS Services is the responsibility of AWS.
b.Responsibilities vary depending on the services used.
c.Security of the managed services is the responsibility of the customer.
d.Patching the guest OS is the responsibility of AWS for all services. b.Responsibilities vary depending on the services used.

b.Responsibilities vary depending on the services used.

How well did you know this?

Not at all

Perfectly

You are working on a project that involves creating thumbnails of millions of images; however time is not really an issue and continuous processing is not required. Which type of EC2 buying option would be the most cost-effective?

a.Spot Instances
b.On-Demand Instances
c.Dedicated Instances
d.Reserved Instances

a.Spot Instances

How well did you know this?

Not at all

Perfectly

In order to implement best practices when dealing with “Single Point of Failure,” you should aim to build as much automation as possible in both detecting and reacting to failure. Which of the following AWS services would help you? (Select all that apply)

a. Amazon EC2 Auto-Recovery
b. Amazon Route53
c. Auto Scaling
d. ELB
e. None of the above

a. Amazon EC2 Auto-Recovery
b. Amazon Route53
c. Auto Scaling
d. ELB

How well did you know this?

Not at all

Perfectly

AWS allows us to “Stop guessing about our capacity needs” and “Automate to make architectural experimentation easier.” These principles belong to which of the following?

a.
AWS General Design Principles.
b.
AWS General Efficiency Principles.
c.
AWS General Architecting Principles.
d.
AWS General Optimization Principles.

a.
AWS General Design Principles.

How well did you know this?

Not at all

Perfectly

You have developed a web application that has a “.Net layer” that connects to a MySQL database. Which of the following AWS databases would provide automated backups to your application?

a.
An EC2 instance with Aurora installed.
b.
DynamoDB
c.
An EC2 instance with MySQL installed.
d.
Aurora

d.
Aurora

How well did you know this?

Not at all

Perfectly

You are planning to host a large eCommerce application on the AWS Cloud. One of your major concerns is Internet attacks, such as DDoS attacks. Which of the following services can help mitigate this concern? (Choose 2 answers)

a.
CloudFront
b.
AWS Shield
c.
AWS EC2
d.
AWS Config

a.
CloudFront
b.
AWS Shield

How well did you know this?

Not at all

Perfectly

The principle “design for failure and nothing will fail” is very important when designing your AWS Cloud architecture. Which of the following would help in doing so? (Select all that apply)

a. Elastic Load Balancer
b. Regions
c. Availability Zones
d. AWS KMS

a. Elastic Load Balancer
b. Regions
c. Availability Zones

How well did you know this?

Not at all

Perfectly

You are going to create snapshots from the EBS volumes in another geographical location using the console. Where would you create the snapshots?

a.
In another data center
b.
In another Region
c.
In another Availability Zone
d.
In another Edge location

b.
In another Region

How well did you know this?

Not at all

Perfectly

What are the characteristics of Amazon S3? (Choose 2 answers)

a. S3 allows you to store objects of virtually unlimited size.
b. S3 allows you to store unlimited amounts of data.
c. S3 should be used to host a relation database.
d. Objects are directly accssible via a URL.

a. S3 allows you to store objects of virtually unlimited size.
d. Objects are directly accessible via a URL.

How well did you know this?

Not at all

Perfectly

Your logs show that one or more AWS-owned IP addresses are sending packets to multiple ports on your server, and you believe this is an attempt to discover unsecured ports. What should you do?

a.
Contact the AWS Security team.
b.
Contact the AWS Customer Service team.
c.
Contact the AWS Abuse team.
d.
Contact the AWS Concierge team.

c.
Contact the AWS Abuse team.

How well did you know this?

Not at all

Perfectly

What does the AWS Snowball provide?

a.
A direct encrypted connection to Amazon S3.
b.
It provides an encrypted SSL endpoint for backups in the Cloud.
c.
Secure transfer of large amounts of data into and out of the AWS Cloud.
d.
It’s a backup solution that provides an on-premises Cloud storage.

c.
Secure transfer of large amounts of data into and out of the AWS Cloud.

How well did you know this?

Not at all

Perfectly

Which of the following does AWS perform on your behalf for EBS volumes to reduce the possibility of failure?

a.
Replication of the volume across the Availability Zones
b.
Replication of the volume in the same Availability Zone.
c.
Replication of the volume across Regions
d.
Replication of the volume across Edge locations.

b.
Replication of the volume in the same Availability Zone.

How well did you know this?

Not at all

Perfectly

One of the main benefits of AWS as a cloud computing service is its reliability. What does it actually mean? (Choose 2)

a. Applying the principle of least privilege to all of its resources.
b. Provide compensation to the customers if any issue occurred.
c. Automatically provision new resources to meet demand.
d. Ability to recover quickly from failures.

c. Automatically provision new resources to meet demand.
d. Ability to recover quickly from failures.

How well did you know this?

Not at all

Perfectly

You have developed a web application targeting a global audience. Which of the following will help you achieve the highest redundancy and fault tolerance?

a.
Nothing from the above would help.
b.
Single Availability Zone (AZ).
c.
Multiple AZs in a Single AWS region.
d.
Multiple AZs in many AWS regions.

d.
Multiple AZs in many AWS regions.

How well did you know this?

Not at all

Perfectly

Which of the following is not a part of the Cloud Computing models?

a.
Hardware as a Service (HaaS)
b.
Infrastructure as a Service (IaaS)
c.
Platform as a Service (Paas)
d.
Software as a Service (SaaS)

a.
Hardware as a Service (HaaS)

How well did you know this?

Not at all

Perfectly

A company is currently using the Enterprise Support plan. They want quick and efficient guidance with their billing and account inquiries. Which of the following included services could assist them?

a.
AWS Advisor
b.
None of the above.
c.
AWS Support Concierge
d.
AWS Support API

c.
AWS Support Concierge

How well did you know this?

Not at all

Perfectly

As part of the Enterprise support plan, who is the primary point of contact for ongoing support needs?

a.
ISM
b.
IEM
c.
TAM
d.
TSM

c.
TAM

How well did you know this?

Not at all

Perfectly

Which of the following services provides object level storage in AWS?

a.
Amazon S3
b.
Amazon EBS
c.
Amazon SQS
d.
Amazon Storage Gateway

a.
Amazon S3

How well did you know this?

Not at all

Perfectly

A company has developed an eCommerce web application and the application needs an uptime of at least 99.5%. Which of the following deployment strategies should they use?

a.
Deploying the application across multiple VPC’s.
b.
Deploying the application across Edge locations
c.
Deploying the application across multiple Regions.
d.
Deploying the application across multiple subnets.

c.
Deploying the application across multiple Regions.

How well did you know this?

Not at all

Perfectly

A company decided to migrate its Oracle database to AWS. Which AWS service can help achieve this without negatively impacting the functionality of the source database?

a.
RDS Multi-AZ
b.
AWS Server Migration Service
c.
AWS Application Discovery Service
d.
AWS Database Migration Service

d.
AWS Database Migration Service

Which of the following services allows you to manage your agreements with AWS?

a.
AWS Artifact
b.
AWS Certificate Manager.
c.
AWS Organization
d.
AWS Systems Manager

a.
AWS Artifact

You are planning to host your education website on AWS. Most of your video courses will be streamed to places all around the world. Which of the following AWS services would help you achieve high transfer speeds?

a.
AWS Cloud Distributer
b.
AWS CloudFront
c.
AWS Cloud Formation
d.
AWS Delivery

b.
AWS CloudFront

A user has created a photo editing software and hosted it on EC2. The software accepts requests from the user about the photo format and resolution and sends a message to S3 to enhance the picture accordingly. Which of the below-mentioned AWS services will help make a scalable software with the AWS infrastructure in this scenario?

a.
AWS Elastic Transcoder
b.
Amazon SES
c.
AWS Glacier
d.
AWS SImple Queue Service

d.
AWS SImple Queue Service

A company is deploying a new two-tier web application in AWS. The company wants to store their most frequently used data so that the response time of the application is improved. Which AWS service provides the solution for the company’s requirements? a. MySQL installed on two Amazon EC2 Instances in a single Availability Zone b. Amazon RDS for MySQL with Multi-AZ c. Amazon ElastiCache d. Amazon Cache Accelerator

c. Amazon ElastiCache

What should you do in order to keep the data on EBS volumes safe? a. Store a backup daily in an external drive. b. Create EBS snapshots. c. Attach the volumes to EC2 Instances. d. Create copies of EBS Volumes.

b. Create EBS snapshots.

Select TWO examples of the AWS shared controls? a. IAM Management b. VPC Management c. Configuration Management d. Patch Management e. Datacenter Operations

c. Configuration Management d. Patch Management

In AWS, which security aspects are the customer’s responsibility? (Choose three) a. Hardware Global Infrastructure b. Networking Traffic Protection. c. The configuration of the security groups. d. Encryption of EBS Volumes. e. Controlling Physical Access to computer resources.

b. Networking Traffic Protection. c. The configuration of the security groups. d. Encryption of EBS Volumes.

A company decided to migrate to the AWS Cloud. AWS offers a wide range of services and instance types. They want to reduce costs as much as possible. Which of the following is the main factor to consider when choosing the instance type of services like Amazon RDS, Amazon Redshift, and Amazon Elasticsearch? a. Workload utilization of CPU & RAM. b. Your team experience with these services. c. The type of your current on-premise database. d. Sources of Traffic.

a. Workload utilization of CPU & RAM.

You noticed that several critical Amazon Elastic Compute Cloud (Amazon EC2) instances have been terminated. Which of the following AWS services would help you determine who took this action? a. AWS Trusted Advisor b. Amazon EC2 Instance usage report c. AWS CloudTrail d. Amazon CloudWatch

c. AWS CloudTrail

Which of the below S3 storage classes is ideal for data with unpredictable access patterns? a. Amazon 3 Standard-Infrequent Access Tiering b. Amazon S3 on-demand Tiering. c. Amazon S3 Intelligent-Tiering. d. Amazon S3 Standard Tiering. e. Amazon S3 Glacier Tiering.

c. Amazon S3 Intelligent-Tiering.

An organization has set up consolidated billing with 3 different AWS accounts. Which of the below-mentioned advantages will the organization receive in terms of the AWS pricing? a. The EC2 instances of each account will received a total of 750*3 micro instance hours free. b. All AWS accounts will be charged for S3 storage by combining the total storage of each account. c. The consolidated billing does not bring any cost advantaged for the organization. d. The free usage tier for all the 3 accounts will be 3 years and not a single year.

b. All AWS accounts will be charged for S3 storage by combining the total storage of each account.

When creating security groups, one of the best practices is to _____________ . a. Deny IPv6 traffic for all your public EC2 instances. b. Deny all unwanted traffic, which is allowed by default. c. Allow only port 80,443, HTTP,HTTPS requests. d. Allow only the required traffic, which is denied by default.

d. Allow only the required traffic, which is denied by default.

What best describes the "Principle of Least Privilege"? a. Users should submit all access request in written so that there is a paper trail of who needs access to different AWS resources. b. Users should always have a little more access granted to them then they need, just in case they end up needing it in the future. c. All user should have the same baseline permissions granted to them to use basic AWS services. d. Users should be granted permissions to access only the resources they need to do their assigned job.

d. Users should be granted permissions to access only the resources they need to do their assigned job.

According to the AWS Acceptable Use Policy, penetration testing of EC2 instances a. Will be performed by AWS upon customer request. b. May be performed by the customer on their own instances with prior authorization from AWS. c. Are expressly prohibited under all circumstances. d. May be performed by the customer on their own instances without prior authorization from AWS.

d. May be performed by the customer on their own instances without prior authorization from AWS.

What is the AWS feature that enables you to manage AWS services through a web-based user interface? a. AWS API b. AWS Management Console c. AWS SDK d. AWS CLI

b. AWS Management Console

You have 2 accounts in AWS. One for the Dev and the other for QA. All are part of consolidated billing. The master account has purchased 4 reserved instances. The Dev department is currently using 2 reserved instances. The QA team is planning on using 3 instances, which are of the same instance type. What is the pricing tier of the instances that can be used by the QA Team? a. Three Reserved and one on-demand b. Two Reserved and 1 on-demand c. No Reserved and 3 on-demand d. One Reserved and 2 on-demand 37

b. Two Reserved and 1 on-demand

What are the benefits of the AWS Personal Health Dashboard? (Select all that apply) a. Detailed Troubleshooting Guidance b. Cost Optimization c. Personalized View of Service Health d. Proactive Notifications

a. Detailed Troubleshooting Guidance c. Personalized View of Service Health d. Proactive Notifications

You want to run a questionnaire application for only one day (without interruption), which AWS EC2 purchase option would you choose? a. Reserved Instances b. On-Demand Instances c. Dedicated Instances d. Spot Instances

b. On-Demand Instances

A company is planning to introduce a new product to their customers. They are expecting high traffic to their web application. As part of the Enterprise support plan, which of the following could provide them with architectural and scaling guidance? a. AWS Support API b. Infrastructure Event Management c. AWS Management Support d. AWS Support Concierge Service

b. Infrastructure Event Management

You work as on-premises MySQL DBA. The work of database configuration, backups, patching, and DR can be time-consuming and repetitive. Your company decided to migrate to the AWS Cloud. Which of the following can help you save time on the regular database tasks and focus on giving them the fast performance and high availability that they need? a. Amazon Redshift b. Amazon DynamoDB c. Amazon CloudWatch d. Amazon RDS

d. Amazon RDS

Derek is running a web application and is noticing that he is paying for way more server capacity than required. What AWS feature should Derek set up and configure to ensure that his application is automatically adding/removing the server capacity to keep in line with the required demand? a. AWS Inspector b. AWS EC2 c. AWS Autoscaling d. AWS ELB

c. AWS Autoscaling

You have just set up a brand-new AWS account. You want to keep monthly billing under $100, but you are worried about going over that limit. What can you use in order to be notified when the monthly bill approaches $100? a. A CloudWatch billing alarm that triggers an SNS notification to your email address. b. A CloudTrail billing alarm that triggers and SNS notification to your email address. c. A CloudWatch billing alarm that triggers a CloudTrail notification to your email address. d. A SNS billing alarm that triggers a CloudWatch notification to your email address.

a. A CloudWatch billing alarm that triggers an SNS notification to your email address.

Which of the following allows you to carve out a portion of the AWS Cloud? a. AWS Subnets b. AWS Availability Zones c. AWS VPC d. AWS Regions

c. AWS VPC

Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery? a. Amazon Virtual Private Cloud (Amazon VPC) b. AWS Regions c. AWS Edge Locations d. AWS Availability Zones

c. AWS Edge Locations

What is the main benefit of decoupling an application? a. Increase the integrity of the application's components b. Optimize Costs c. Reduce inter-dependencies so failures do not impact other components of the application. d. Make updates quickly and easily.

c. Reduce inter-dependencies so failures do not impact other components of the application.

Your company has a microservices data store that requires access to a NoSQL database. Your IT department has no desire to manage the NoSQL servers. Which Amazon service provides a fully-managed and highly available NoSQL service? a. Amazon RDS b. ElasticMap Reduce c. SimpleDB d. DynamoDB

d. DynamoDB

One of the most important AWS best practices is to follow the cloud architecture principle of elasticity. How could this principle improve your architecture design? a. By reducing storage required for your application. b. By scaling automatically and provision the required AWS resources based on changes on demand c. None of the above. d. By scaling automatically to your on-premises resources based on changes on-demand

b. By scaling automatically and provision the required AWS resources based on changes on demand

A company moved to AWS recently. They have a lot of concerns about their security. Which of the following would help them ensure that the right security settings are put in place? (Select all that apply) a. Concierge Support Team b. AWS Inspector c. AWS Trusted Advisor d. AWS Kinesis

b. AWS Inspector c. AWS Trusted Advisor

Which of the following can be used to control access to your Amazon EC2 instances? a. IAM Policies b. EC2 Security Groups c. None of These d. DB Security Groups

b. EC2 Security Groups

Your web application is generating digital policy files for verifying users. Once the files are verified, they may not be required in the future unless there are some compliance issues. If you want to save them in a cost-effective way, what is the best possible solution? a. S3 Intelligent-Tiering b. AWS RDS c. AWS EBS d. AWS Glacier

d. AWS Glacier

Which of the following services has been described as a global content delivery network (CDN) service? a. Amazon S3 b. Amazon Cloudtrail c. Amazon CloudFront d. Amazon SES

c. Amazon CloudFront