Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cloud Practioner > Wrong answers > Flashcards

Wrong answers Flashcards

1
Q

Data encryption is automatically enabled for which of the following AWS services? (Select two)?

A

Amazon S3 Glacier - Amazon S3 Glacier (S3 Glacier), is a storage service optimized for infrequently used data, or “cold data. Data at rest stored in S3 Glacier is automatically server-side encrypted using 256-bit Advanced Encryption Standard (AES-256) with keys maintained by AWS

AWS Storage Gateway - AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. All data transferred between the gateway and AWS storage is encrypted using SSL (for all three types of gateways - File, Volume and Tape Gateways).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which of the following AWS Support plans provides access to online training with self-paced labs?

A

Enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

An IT company is on a cost-optimization spree and wants to identify all EC2 instances that are under-utilized. Which AWS services can be used to address this use-case? (Select two)

A

AWS Trusted Advisor

AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations in five categories: Cost Optimization, Performance, Security, Fault Tolerance, Service Limits.

AWS Cost Explorer

The rightsizing recommendations feature in Cost Explorer helps you identify cost-saving opportunities by downsizing or terminating EC2 instances. You can see all of your underutilized EC2 instances across member accounts in a single view to immediately identify how much you can save.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two)

A

AWS Trusted Advisor

AWS Identity and Access Management (IAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?

A

AWS Systems Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which AWS service can be used to subscribe to an RSS feed to be notified of services’ interruptions?

A

AWS Service Health Dashboard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon S3. The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on S3?

A

Use S3 One-Zone Infrequent Access (One-Zone IA) to store the thumbnails

S3 One Zone-IA is for data that is accessed less frequently but requires rapid access when needed.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

An organization maintains a separate Virtual Private Cloud (VPC) for each of its business units. Two units need to privately share data. Which is the most optimal way of privately sharing data between the two VPCs?

A

VPC Peering

A VPC peering connection is a networking connection between two VPCs that enables you to route traffic between them privately. Instances in either VPC can communicate with each other as if they are within the same network. You can create a VPC peering connection between your VPCs, with a VPC in another AWS account, or with a VPC in a different AWS Region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two)

A

“For abstracted services like Amazon S3, AWS operates the infrastructure layer, the operating system, and platforms” - For abstracted services, such as Amazon S3 and Amazon DynamoDB, AWS operates the infrastructure layer, the operating system, and platforms, and customers access the endpoints to store and retrieve data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the primary benefit of deploying an RDS database in a Read Replica configuration?

A

Read Replica improves database scalability

Read Replicas allow you to create read-only copies that are synchronized with your master database. Read Replicas are used for improved read performance. You can also place your read replica in a different AWS Region closer to your users for better performance. Read Replicas are an example of horizontal scaling of resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

An AWS user is trying to launch an EC2 instance in a given region. What is the region-specific constraint that the Amazon Machine Image (AMI) must meet so that it can be used for this EC2 instance?

A

You must use an AMI from the same region as that of the EC2 instance. The region of the AMI has no bearing on the performance of the EC2 instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

A company would like to separate cost for AWS services by the department for cost allocation. Which of the following actions can assist with this task?

A

Create tags for each department

Typically, you use business tags such as cost center/business unit, customer, or project to associate AWS costs with traditional cost-allocation dimensions. But a cost allocation report can include any tag. This lets you associate costs with technical or security dimensions, such as specific applications, environments, or compliance programs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A financial services company wants to ensure that its AWS account activity meets the governance, compliance and auditing norms. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

A

You may see use-cases asking you to select one of CloudWatch vs CloudTrail vs Config. Just remember this thumb rule -

Think resource performance monitoring, events, and alerts; think CloudWatch.

Think account-specific activity and audit; think CloudTrail.

Think resource-specific change history, audit, and compliance; think Config.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following AWS services offer block-level storage? (Select two)

A

EBS -

Amazon Elastic Block Store (EBS) is an easy to use, high-performance block storage service designed for use with Amazon Elastic Compute Cloud (EC2) for both throughput and transaction-intensive workloads at any scale. A broad range of workloads, such as relational and non-relational databases, enterprise applications, containerized applications, big data analytics engines, file systems, and media workflows are widely deployed on Amazon EBS.

Instance Store

An instance store provides temporary block-level storage for your EC2 instance. This storage is located on disks that are physically attached to the host computer. Instance store is ideal for the temporary storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content, or for data that is replicated across a fleet of instances, such as a load-balanced pool of web servers. Instance storage is temporary, data is lost if instance experiences failure or is terminated. EC2 instance store cannot be used for file sharing between instances.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A startup runs its proprietary application on docker containers. As a Cloud Practitioner, which AWS service would you recommend so that the startup can run containers and still have access to the underlying servers?

A

Amazon Elastic Container Service (Amazon ECS)

Amazon Elastic Container Service (Amazon ECS) is a highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster. This is not a fully managed service and you can manage the underlying servers yourself.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is the difference between an Availability Zone and a Local Zone?

A

An Availability Zone is an isolated location within an AWS region. A Local Zone is an extension of an AWS Region in geographic proximity to your users.

An Availability Zone (AZ) is one or more discrete data centers with redundant power, networking, and connectivity in an AWS Region. AZ’s give customers the ability to operate production applications and databases that are more highly available, fault-tolerant, and scalable than would be possible from a single data center.

AWS Local Zones are managed and supported by AWS, bringing you all of the elasticity, scalability, and security benefits of the cloud. Each AWS Local Zone location is an extension of an AWS Region where you can run your latency-sensitive applications using AWS services such as Amazon Elastic Compute Cloud, Amazon Virtual Private Cloud, Amazon Elastic Block Store, Amazon File Storage, and Amazon Elastic Load Balancing in geographic proximity to end-users.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

You need to organize and consolidate information based on criteria specified in tags or resources in AWS. Which of the following should you use?

A

AWS Resource Groups lets you organize AWS resources such as Amazon EC2 instances, Amazon Relational Database Service databases, and Amazon S3 buckets into groups using criteria that you define as tags.

A resource group is a collection of resources that match the resource types specified in a query and share one or more tags or portions of tags. You can create a group of resources based on their roles in your cloud infrastructure, lifecycle stages, regions, application layers, or virtually any criteria.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which of the following services offers you the same AWS hardware infrastructure, services, APIs, and tools to build and run your applications on-premises and in the cloud?

A

AWS Outposts is a fully managed service that extends AWS infrastructure, AWS services, APIs, and tools to virtually any data center, co-location space, or on-premises facility for a truly consistent hybrid experience. AWS Outposts is ideal for workloads that require low latency access to on-premises systems, local data processing, or local data storage.

AWS Outposts offers you the same AWS hardware infrastructure, services, APIs, and tools to build and run your applications on-premises and in the cloud for a truly consistent hybrid experience.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A gaming company needs a service that uses the AWS global network to optimize users’ access to their applications using an anycast static IP address. Which of the following services fits this criteria?

A

AWS Global Accelerator is a service that improves the availability and performance of your applications with local or global users. It provides you with static IP addresses that serve as a fixed entry point to your applications hosted in one or more AWS Regions. These IP addresses are anycast from AWS edge locations, so they’re announced from multiple AWS edge locations at the same time. This enables traffic to ingress onto the AWS global network as close to your users as possible.

Global Accelerator uses the AWS global network to optimize the path from your users to your applications, improving the performance of your traffic by as much as 60%.

Hence, the correct answer in this scenario is: AWS Global Accelerator.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which of the following is true regarding the Developer support plan in AWS?

A
  • No access to the AWS Support API

- Limited access to the 7 Core Trusted Advisor checks

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

In AWS, ____ is one of the advantages of Consolidated Billing

A

Volume Pricing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

___ is one of the components of AWS Global Infrastructure which consists of one or more discrete data centers each with redundant power, networking, and connectivity, and housed in separate facilities

A

Availability Zone

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

Which of the following Amazon EC2 instance purchasing options can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses?

A

Dedicated Host

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

You need to launch a new EC2 Instance for a beta program which is scheduled to change its instance family, operating system and tenancy exactly 3 months after its trial period. Which type of Reserved Instance should you use

A

Convertible RI

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

A company is in the process of choosing the most suitable AWS Region to migrate their applications. Which of the following factors should they consider?

A
  • Enhance customer experiences by reducing latency to users

- Support country-specific data sovereignty compliances requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

In AWS Trusted Advisor, which of the following options are included among the five categories being considered to analyze AWS environment and provide the best practice recommendations?

A
  • Fault tolerance

- Performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which of the following is a key benefit of migrating systems hosted on your on-premises data center to AWS?

A

Opportunity to replace upfront capital expenses (CAPEX) with low variable costs

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

Which of the following are true regarding Amazon RDS?

A
  • Makes it easy to set up, operate, and scale a relational database
  • Simplifies the management of time-consuming database administration tasks
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Which of the following options below is solely the responsibility of the customer in accordance with the AWS shared responsibility model?

A
  • Zone Security
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What should you provide to your developers to allow them to access your AWS services through the AWS CLI?

A

Access keys

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

You need to host a new Microsoft SQL Server database in AWS for an urgent project. Which AWS services should you use to meet this requirement?

A

EC2 and RDS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Which of the following can you use to connect your on-premises data center and your cloud architecture in AWS?

A

Virtual Private Gateway

Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Which of the following are regarded as regional services in AWS?

A

AWS Batch
EFS

Global services: IAM, Route 53, CloudFront, and WAF
Zonal: EC2 and EBS snapshots
The rest: regional

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

The DevOps team at an IT company is moving 500 GB of data from an EC2 instance to an S3 bucket in the same region. Which of the following scenario captures the correct charges for this data transfer?

A

The company would not be charged for this data transfer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Which of the following statements are CORRECT regarding the AWS VPC service? (Select two)

A

A Security Group can have allow rules only

A NAT Gateway is managed by AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Which of the following AWS services has encryption enabled by default?

A

CloudTrail Logs

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. CloudTrail can be used to record AWS API calls and other activity for your AWS account and save the recorded information to log files in an Amazon Simple Storage Service (Amazon S3) bucket that you choose. By default, the log files delivered by CloudTrail to your S3 bucket are encrypted using server-side encryption with Amazon S3–managed encryption keys (SSE-S3).

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

A company runs an application on a fleet of EC2 instances. The company wants to automate the traditional maintenance job of running timely assessments and checking for OS vulnerabilities. As a Cloud Practitioner, which service will you suggest for this use case?

A

Amazon Inspector

38
Q

Which of the following is a serverless AWS service?

A

Lambda

39
Q

AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources?

A

Amazon Route 53
AWS Global Accelerator

AWS Shield Advanced includes intelligent DDoS attack detection and mitigation for not only for network layer (layer 3) and transport layer (layer 4) attacks but also for application layer (layer 7) attacks.

AWS Shield Advanced provides expanded DDoS attack protection for web applications running on the following resources: Amazon Elastic Compute Cloud, Elastic Load Balancing (ELB), Amazon CloudFront, Amazon Route 53, AWS Global Accelerator.

40
Q

Which AWS Support plan provides architectural guidance contextual to your specific use-cases?

A

Business

AWS recommends Business Support if you have:

  • production workloads on AWS and want 24x7 phone, * email and chat access to technical support and architectural guidance in the context of your specific use-cases.
  • You get full access to AWS Trusted Advisor Best Practice Checks.
  • You also get access to Infrastructure Event Management for an additional fee.
41
Q

Which of the following is a benefit of using AWS managed services such as Amazon RDS?

A

The performance of AWS managed RDS instance is better than a customer-managed database instance

As the RDS instances are optimized for memory, performance, or I/O, therefore the performance of AWS managed RDS instance is better than a customer-managed database instance.

42
Q

Which of the following AWS Support plans provides access to Infrastructure Event Management for an additional fee?

A

Business

43
Q

Which of the following are correct statements regarding the AWS Global Infrastructure? (Select two)

A

Each AWS Region consists of two or more Availability Zones

Each Availability Zone (AZ) consists of one or more discrete data centers

44
Q

Which of the following AWS services support VPC Endpoint Gateway for a private connection from a VPC? (Select two)

A

S3, DynamoDB

You may see a question around this concept in the exam. Just remember that only S3 and DynamoDB support VPC Endpoint Gateway. All other services that support VPC Endpoints use a VPC Endpoint Interface.

45
Q

Which AWS services can be used to facilitate organizational change management, part of the Reliability pillar of AWS Well-Architected Framework? (Select three)

A

AWS Config
AWS CloudTrail
Amazon CloudWatch

46
Q

Which of the following is CORRECT regarding removing an AWS account from AWS Organizations?

A

The AWS account must be able to operate as a standalone account. Only then it can be removed from AWS organizations

You can remove an account from your organization only if the account has the information that is required for it to operate as a standalone account. For each account that you want to make standalone, you must accept the AWS Customer Agreement, choose a support plan, provide and verify the required contact information, and provide a current payment method. AWS uses the payment method to charge for any billable (not AWS Free Tier) AWS activity that occurs while the account isn’t attached to an organization.

47
Q

Which AWS services can be used to facilitate organizational change management, part of the Reliability pillar of AWS Well-Architected Framework? (Select three)

A

Amazon CloudWatch
AWS CloudTrail
AWS Config

48
Q

Which of the following represents a serverless stack on AWS Cloud?

A

Step Function, DynamoDB, Lambda

AWS Step Function lets you coordinate multiple AWS services into serverless workflows. You can design and run workflows that stitch together services such as AWS Lambda, AWS Glue and Amazon SageMaker.

49
Q

Five pillars of well-architected framework

A 
Operational Excellence
Security
Reliability
Performance Efficiency
Cost Optimization
50
Q

Six advantages of Cloud Computing

A

Trade capital expense for variable expense – Instead of having to invest heavily in data centers and servers before you know how you’re going to use them, you can pay only when you consume computing resources, and pay only for how much you consume.

  • Benefit from massive economies of scale
  • Stop guessing capacity
  • Increase speed and agility
  • Stop spending money running and maintaining data centers
  • Go global in minutes

https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

51
Q

____ should be used to automatically distribute incoming traffic across multiple targets?

A

AWS Elastic Load Balancing

52
Q

___ acts as a firewall at the instance level whereas __ acts as a firewall at the subnet level

A

Security Group
Network Access Control List

Security Group: only allow rules
NACL: allow and deny rules

53
Q

Security groups

A

Instance level
Allow rules only
Stateful: Return traffic is automatically allowed, regardless of any rules

We evaluate all rules before deciding whether to allow traffic

Applies to an instance only if someone specifies the security group when launching the instance, or associates the security group with the instance later on

54
Q

NACL

A

Operates at subnet level
Supports allow rules and deny rules
Is stateless: Return traffic must be explicitly allowed by rules
We process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic

Automatically applies to all instances in the subnets that it’s associated with (therefore, it provides an additional layer of defense if the security group rules are too permissive)

55
Q

Which AWS service helps with global application availability and performance using the AWS global network?

A

Global Accelerator

Global Accelerator improves performance for a wide range of applications over TCP or UDP by proxying packets at the edge to applications running in one or more AWS Regions. Global Accelerator is a good fit for non-HTTP use cases, such as gaming (UDP), IoT (MQTT), or Voice over IP, as well as for HTTP use cases that specifically require static IP addresses or deterministic, fast regional failover.

56
Q

Which AWS service can be used to store, manage, and deploy Docker container images?

A

Amazon Elastic Container Registry (ECR)

57
Q

Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)

A

AWS Shield
AWS WAF
Amazon CloudFront with Route 53

58
Q

An e-commerce company wants to assess its applications for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?

A

Amazon Inspector

Amazon Inspector helps you to identify security vulnerabilities as well as deviations from security best practices in applications, both before they are deployed, and while they are running in a production environment. This helps improve the overall security posture of your applications deployed on AWS.

59
Q

An online gaming company wants to block users from certain geographies from accessing its content. Which AWS services can be used to accomplish this task? (Select two)

A

AWS WAF
Route 53

AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define. These conditions include IP addresses, HTTP headers, HTTP body, URI strings, SQL injection, and cross-site scripting. You can use the IP address based match rule to block specific geographies. The accuracy of the IP Address to country lookup database varies by Region. Based on recent tests, AWS mentions that the overall accuracy for the IP address to country mapping is 99.8%.

Route 53 is Amazon’s Domain Name System (DNS) web service. You can use Route 53 geolocation routing policy to block certain geographies.

60
Q

Which of the following is correct about AWS “Developer” Support plan?

A

Allows one contact to open unlimited cases

61
Q

In Amazon EC2, which pricing construct adjusts its price based on supply and demand of EC2 instances?

A

Spot instance

62
Q

What is the best type of instance purchasing option to choose if you will run an EC2 instance for 3 months to perform a job that is uninterruptible?

A

On-Demand

3 months

63
Q

Which among the services below can you use to test and troubleshoot IAM and resource-based policies?

A

IAM Policy Simulator

64
Q

Business support plan response time is…

A

Provides 1-hour response time support if your production system goes down

65
Q

Shared security model

A

AWS:
host operating system

Shared:
Patch management
Configuration management
Awareness & Training

Customer specific:
Service and communications protection or Zone security

66
Q

Which of the following is not required when launching an EBS-backed EC2 instance

A

Elastic IP address

67
Q

Which of the following policies grant the necessary permissions required to access your Amazon S3 resources?

A

User policies

Bucket policies

68
Q

You are permitted to conduct security assessments and penetration testing without prior approval against which AWS resources?

A

Aurora

RDS

69
Q

Which AWS Support plan provides general architectural guidance on how services can be used for various use-cases, workloads, or applications?

A

Developer

70
Q

Facts about Cost Allocation Tags

A
  1. For each resource, each tag key must be unique, and each tag key can only have one value
  2. You must activate both AWS generated tags and user-defined tags separately before they can appear in Cost Explorer or on a cost allocation report.
71
Q

Separate invoices for development and production environments

A

Create separate AWS accounts for development and prod

You can’t create separate invoices based on tags

72
Q

What two things are components of Site-to-Site VPNs?

A

Customer Gateway

Virtual Private Gateway

73
Q

What two services support High Availability by default?

A

EFS - regional service

DynamoDB (automatic replication across multiple AZ zones)

74
Q

ECS instances can access files on EFS across…

A

Many availability zones, regions and VPCs

75
Q

Budget types

A

Cost budget
Usage budget
Reservation budget
Savings Plan budget

76
Q

Transit gateway facts

A

Data is encrypted automatically, never travels over the public internet. Acts as a cloud router.

77
Q

What is a primary reason why you should be using an elastic load balancer?

A

ELBs provide elasticity by directing traffic to a minimum number of instances required to handle the traffic load.

ELBs do not boost website performance.

78
Q

Which of the following services allow you to mask downtime of your application by rerouting your traffic to healthy instances?

A

Route 53

ELB

79
Q

Which service in AWS protects your resources from common DDoS attacks in a proactive manner?

A

AWS Shield

WAF blocks against XSS and SQL injection

80
Q

Which service will be able to reroute traffic to your secondary EC2 instances in another region during disaster recovery?

A

Route 53

ELB is a regional service.

81
Q

________ is AWS’s digital user engagement service that enables AWS customers to effectively communicate with their end users and measure user engagement across multiple channels including email, Text Messaging (SMS) and Mobile Push Notifications.

A

Amazon Pinpoint is AWS’s Digital User Engagement Service that enables AWS customers to effectively communicate with their end-users and measure user engagement across multiple channels including email, Text Messaging (SMS) and Mobile Push Notifications.

82
Q

What do security groups accept?

A

IP Address
IP Address range
Security Group ID

for source or destination of inbound or outbound rules

83
Q

Which of the following statements is true for AWS CloudTrail?

A

When you create a trail in the AWS Management Console, the trail applies to all AWS Regions by default.

84
Q

You have a large number of log files that will be archived in AWS for a long time and should have a retrieval time of 12 hours or less. Which service is the most cost-effective storage class for this purpose?

A

All objects stored in S3 Glacier Deep Archive are replicated and stored across at least three geographically-dispersed Availability Zones, protected by 99.999999999% of durability, and can be restored within 12 hours.

85
Q

In which of the following occasions should you use the Amazon SQS application system? (Select TWO.)

A
  • If you require a durable storage for your application events or messages
  • If you need to decouple certain parts of your system for better fault tolerance
86
Q

How can your RDS production instances be more cost-effective when they will be used for a long period of time?

A

Amazon RDS Reserved Instances give you the option to reserve a DB instance for a one or three year term and in turn receive a significant discount compared to the On-Demand Instance pricing for the DB instance.

87
Q

____ is a continuous delivery service that you should use to automate your release pipelines for fast and reliable application and infrastructure updates

A

CodePipeline

88
Q

Which of the following infrastructure correlates to a VPC’s subnet?

A

Availability Zone

After creating a VPC, you can add one or more subnets in each Availability Zone. Each subnet must reside entirely within one Availability Zone and cannot span zones.

89
Q

Which AWS service lets you provision either Windows or Linux desktops in just a few minutes and can scale easily to provide thousands of desktops to workers?

A

Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution where you provision either Windows or Linux desktops in just a few minutes and quickly scale to provide thousands of desktops to workers across the globe.

90
Q

Which of the following should you set up in order to connect your AWS VPC network to your local network via an IPsec tunnel?

A

A VPN gateway in your VPC connected to the Customer Gateway in your on-premises network.

An Amazon VPC VPN connection links your data center (or network) to your Amazon Virtual Private Cloud (VPC). A customer gateway is the anchor on your side of that connection. It can be a physical or software appliance. The anchor on the AWS side of the VPN connection is called a virtual private gateway.

Cloud Practioner (3 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions