Udemy: Practice Test #3 Flashcards

1
Q

Which AWS service protects your AWS account by monitoring malicious activity and detecting threats?

Amazon CloudWatch
Amazon GuardDuty
AWS CloudTrail
AWS Trusted Advisor

A

Amazon GuardDuty

Amazon GuardDuty is a threat detection service that monitors malicious activity and unauthorized behavior to protect your AWS account.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which AWS service can be used for online analytical processing?

Amazon ElastiCache

Amazon DynamoDB

Amazon Redshift

Amazon Relational Database Service (Amazon RDS)

A

Amazon Redshift

Amazon Redshift is a fast, fully managed cloud data warehouse that makes it simple and cost-effective to analyze all your data using standard SQL and your existing Business Intelligence (BI) tools.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which of the following AWS entities provides the information required to launch an Amazon Elastic Compute Cloud (Amazon EC2) instance?

Amazon Elastic File System (Amazon EFS)
AWS Lambda
Amazon Machine Image (AMI)
Amazon Elastic Block Store (Amazon EBS)

A

Amazon Machine Image (AMI)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which AWS services/features support High Availability by default? (Select two)

Amazon Elastic File System (Amazon EFS)
Subnet
Instance Store
Amazon DynamoDB
Amazon Elastic Block Store (Amazon EBS)

A

Amazon DynamoDB
Amazon Elastic File System (Amazon EFS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which AWS service will you use if you have to move large volumes of on-premises data to AWS Cloud from a remote location with limited bandwidth?

AWS Snowball
AWS Virtual Private Network (VPN)
AWS Transit Gateway
AWS Direct Connect

A

AWS Snowball

If you have large quantities of data you need to migrate into AWS, offline data transfer with AWS Snowball can overcome the challenge of limited bandwidth

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

AWS Lambda pricing is based on which of the following criteria? (Select two)

The language runtime of the AWS Lambda function

The size of the deployment package for the AWS Lambda function

The time it takes for the AWS Lambda function to execute

The number of lines of code for the AWS Lambda function

Number of requests for the AWS Lambda function

A

The time it takes for the AWS Lambda function to execute

Number of requests for the AWS Lambda function

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which of the following AWS services are regional in scope? (Select two)

Amazon Rekognition
Amazon CloudFront
AWS Lambda
AWS Web Application Firewall (AWS WAF)
AWS Identity and Access Management (AWS IAM)

A

Amazon Rekognition
AWS Lambda

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which of the following are components of an AWS Site-to-Site VPN? (Select two)

Virtual private gateway (VGW)
Customer gateway
Internet gateway
AWS storage gateway

A

Virtual private gateway (VGW)
Customer gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which Amazon Route 53 routing policy would you use when you want to route your traffic in an active-passive configuration?

Simple routing
Failover routing
Weighted routing
Latency-based routing

A

Failover routing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of the following statements are CORRECT regarding security groups and network access control lists (network ACL)? (Select two)

A network access control list (network ACL) contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic

A security group is stateful, that is, it automatically allows the return traffic

A security group is stateless, that is, the return traffic must be explicitly allowed

A network access control list (network ACL) is stateful, that is, it automatically allows the return traffic

A security group contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic

A

A network access control list (network ACL) contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic

and

A security group is stateful, that is, it automatically allows the return traffic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

An AWS user is trying to launch an Amazon Elastic Compute Cloud (Amazon EC2) instance in a given region. What is the region-specific constraint that the Amazon Machine Image (AMI) must meet so that it can be used for this Amazon Elastic Compute Cloud (Amazon EC2) instance?

You can use an Amazon Machine Image (AMI) from a different region, but it degrades the performance of the Amazon EC2 instance

An Amazon Machine Image (AMI) is a global entity, so the region is not applicable

You should use an Amazon Machine Image (AMI) from the same region, as it improves the performance of the Amazon EC2 instance

You must use an Amazon Machine Image (AMI) from the same region as that of the Amazon EC2 instance. The region of the Amazon Machine Image (AMI) has no bearing on the performance of the Amazon EC2 instance

A

You must use an Amazon Machine Image (AMI) from the same region as that of the Amazon EC2 instance. The region of the Amazon Machine Image (AMI) has no bearing on the performance of the Amazon EC2 instance

An Amazon Machine Image (AMI) provides the information required to launch an instance. The Amazon Machine Image (AMI) must be in the same region as that of the Amazon EC2 instance to be launched.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A startup runs its proprietary application on docker containers. As a Cloud Practitioner, which AWS service would you recommend so that the startup can run containers and still have access to the underlying servers?

Amazon Elastic Container Service (Amazon ECS)

AWS Fargate

Amazon Elastic Container Registry (Amazon ECR)

AWS Lambda

A

Amazon Elastic Container Service (Amazon ECS)

This is not a fully managed service and you can manage the underlying servers yourself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A research lab wants to optimize the caching capabilities for its scientific computations application running on Amazon Elastic Compute Cloud (Amazon EC2) instances. Which Amazon Elastic Compute Cloud (Amazon EC2) storage option is best suited for this use-case?

Amazon Elastic File System (Amazon EFS)
Instance Store
Amazon Elastic Block Store (Amazon EBS)
Amazon Simple Storage Service (Amazon S3)

A

Instance Store

Instance store is ideal for the temporary block-level storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content, or for data that is replicated across a fleet of instances, such as a load-balanced pool of web servers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following AWS services offer block-level storage? (Select two)

Amazon Elastic Container Service (Amazon ECS)

Amazon Elastic File System (Amazon EFS)

Instance Store

Amazon Simple Storage Service (Amazon S3)

Amazon Elastic Block Store (Amazon EBS)

A

Instance Store
and
Amazon Elastic Block Store (Amazon EBS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A company has a static website hosted on an Amazon Simple Storage Service (Amazon S3) bucket in an AWS Region in Asia. Although most of its users are in Asia, now it wants to drive growth globally. How can it improve the global performance of its static website?

Use Amazon S3 Transfer Acceleration (Amazon S3TA) to improve the performance of your website

Use Amazon CloudFront to improve the performance of your website

Use Amazon CloudFormation to improve the performance of your website

Use AWS Web Application Firewall (AWS WAF) to improve the performance of your website

A

Use Amazon CloudFront to improve the performance of your website

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which of the following statements is correct regarding the Amazon Elastic File System (Amazon EFS) storage service?

EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ) but not across VPCs and Regions

EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system only in one Availability Zone (AZ)

EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ) and VPCs but not across Regions

EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ), Regions and VPCs

A

EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ), Regions and VPCs