AWS Sample Paper 2
AWS Sample Paper 2
AWS Sample Paper 2
A. AWS Subnets
B. AWS Regions
C. AWS VPC check_circle
D. AWS Availability Zones
Answer Description
Explanation
Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources
into a virtual network that you've defined. This virtual network closely resembles a
traditional network that you'd operate in your own data center, with the benefits of
using the scalable infrastructure of AWS.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-vpc.html
You have just set up a brand new AWS account. You want to keep monthly
billing under $100, but you are worried about going over that limit. What can
you use in order to be notified when the monthly bill approaches $100?
A. A CloudTrail billing alarm that triggers an SNS notification to your email
address.
B. A SNS billing alarm that triggers a CloudWatch notification to your email
address.
C. A CloudWatch billing alarm that triggers an SNS notification to your email
address. check_circle
D. A CloudWatch billing alarm that triggers a CloudTrail notification to your email
address.
Answer Description
Explanation
In CloudWatch, you can set up a billing alarm that will trigger when your monthly bill
hit the set threshold. That alarm can then be set up to trigger an SNS topic that will
send you a notification that the alarm threshold has been met.
Derek is running a web application and is noticing that he is paying for way
more server capacity than is required. What AWS feature should Derek set up
and configure to ensure that his application is automatically adding/removing
server capacity to keep in line with the required demand?
A. AWS EC2
B. AWS Autoscaling check_circle
C. AWS ELB
D. AWS Inspector
Answer Description
Explanation
Auto scaling is the feature that automated the process of adding/removing server
capacity from a system (based on usage demand). Auto scaling creates a very cost
effective system by never having too much or too little server capacity.
You work as on-premises DBA, The work of database configuration, backups,
patching, and DR can be time consuming and repetitive. Your company decided
to migrate to the AWS cloud. Which of the following can help you save time on
regular tasks and focus on your applications, so you can give them the fast
performance, high availability, security, and compatibility that they need?
A. Amazon Redshift
B. Amazon RDS check_circle
C. Amazon DynamoDB
D. Amazon CloudWatch
Answer Description
Explanation
Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate,
and scale a relational database in the cloud. It provides cost-efficient and resizable
capacity while automating time-consuming administration tasks such as hardware
provisioning, database setup, patching and backups. It frees you to focus on your
applications so you can give them the fast performance, high availability, security and
compatibility they need. https://aws.amazon.com/rds/
A company is planning to introduce a new product to their customers. They are
expecting a high traffic to their web application. As part of Enterprise support
plan, Which of the following could provide them with an architectural and
scaling guidance?
A. Infrastructure Event Management check_circle
B. AWS Management Support
C. AWS Support API
D. AWS Support Concierge Service
Answer Description
Explanation
Answer Description
Explanation
Answer Description
Explanation
Since all are a part of consolidating billing, the pricing of reserved instances can be
shared by All. And since 2 are already used by the Dev team , another 2 can be used
by the QA team. The rest of the instances can be on-demand instances.
What should you do in order to grant a different AWS account permission to
your Amazon Simple Queue Service (Amazon SQS) queue?
Share credentials to your AWS account and have the other accountu2019s
applications use your accountu2019s credentials to access the Amazon SQS queue.
Create a user for that account in AWS Identity and Access Management (IAM) and
establish an IAM policy that grants access to the queue.
Create an Amazon SQS policy that grants the other account access. check_circle
Amazon Virtual Private Cloud (Amazon VPC) peering must be used to achieve this
Answer Description
Explanation
The main difference between Amazon SQS policies and IAM policies is that an
Amazon SQS policy enables you to grant a different AWS account permission to your
Amazon SQS queues, but an IAM policy does not
What is the AWS feature that enables you to manage services through a web-
based user interface?
A. AWS Application Programming Interface (API)
B. AWS Management Console check_circle
C. AWS Software Development Kit (SDK)
D. Amazon CloudWatch
Answer Description
Explanation
The AWS Management console allows you to access and manage Amazon Web
Services through a simple and intuitive web-based user interface. You can also use
the AWS Console mobile app to quickly view resources on the go.
https://aws.amazon.com/console/
According to the AWS Acceptable Use Policy, penetration testing of lambda
instances:
A. May be performed by AWS, and will be performed by AWS upon customer
request.
B. May be performed by AWS, and is periodically performed by AWS.
C. Are expressly prohibited under all circumstances.
D. May be performed by the customer on their own instances with prior
authorization from AWS check_circle
Answer Description
Explanation
Answer Description
Explanation
This principle is very important as one of the security best practices and it means
granting only the permissions required to perform a task. Determine what users need
to do and then craft policies for them that let the users perform only those tasks.start
with a minimum set of permissions and grant additional permissions as necessary.
Doing so is more secure than starting with permissions that are too lenient and then
trying to tighten them later. For example, a user account for the sole purpose of
creating backups does not need to install software: hence, it has rights only to run
backup and backup-related applications.
https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html#grant-least-
privilege
You are facing a performance issues with your under development application
built using microservices architecture, Which of the following services would
help you analyze these issues?
A. X-Ray check_circle
B. AWS CodePipeline
C. AWS Inspector
D. AWS Config
Answer Description
Explanation
Answer Description
Explanation
Answer Description
Explanation
Answer Description
Explanation
AWS offers a broad range of resource types and configurations to suit a plethora of
use cases. For example,services like Amazon EC2, Amazon RDS, Amazon Redshift,
and Amazon Elasticsearch Service(Amazon ES)give you a lot of choice of instance
types. In some cases, you should select the cheapest type that suits your
workload’s requirements. In other cases, using fewer instances of a larger
instance type might result in lower total cost or better performance. You should
benchmark and select the right instance type depending on how your workload
utilizes CPU, RAM, network, storage size, and I/O.
https://d0.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf page 30
Which of the following factors would impact the process of data replication to
a remote location?
A. Distance between the sites
B. Available bandwidth
C. Data rate required by your application
D. Replication technology
E. All of the above check_circle
Answer Description
Explanation
When you replicate data to a remote location, you should consider these factors:
*Distance between the sites—Larger distances typically are subject to more latency
or jitter. *Available bandwidth—The breadth and variability of the
interconnections.*Data rate required by your application—The data rate should be
lower than the available bandwidth. *Replication technology—The replication
technology should be parallel (so that it can use the network effectively). Reference:
https://media.amazonwebservices.com/AWS_Disaster_Recovery.pdf
What should you do in order to keep the data on EBS volumes safe?
A. Delete the data when the device is destroyed
B. Create EBS snapshots check_circle
C. Attach volumes to EC2 Instances
D. Create copies of EBS Volumes
Answer Description
Explanation
Creating snapshots of EBS Volumes can help ensure that you have a backup of your
EBS volume in place. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-
creating-snapshot.html
A company is deploying a new two-tier web application in AWS. The company
wants to store their most frequently used data so that the response time for the
application is improved. Which AWS service provides the solution for the
company's requirements?
A. MySQL Installed on two Amazon EC2 Instances in a single Availability Zone
B. Amazon ElastiCache check_circle
C. Amazon RDS for MySQL with Multi-AZ
D. AWS Caching service
Answer Description
Explanation
Amazon ElastiCache is a web service that makes it easy to deploy, operate, and scale
an in-memory data store or cache in the cloud. The service improves the
performance of web applications by allowing you to retrieve information from fast,
managed, in-memory data stores, instead of relying entirely on slower disk-based
databases. https://aws.amazon.com/elasticache/
A user has created photo editing software and hosted it on EC2. The software
accepts requests from the user about the photo format and resolution and
sends a message to S3 to enhance the picture accordingly. Which of the below
mentioned AWS services will help make a scalable software with the AWS
infrastructure in this scenario?
A. AWS Simple Notification Service
B. AWS Simple Queue Service check_circle
C. AWS Elastic Transcoder
D. AWS Glacier
Answer Description
Explanation
Amazon Simple Queue Service (SQS) is a fast, reliable, scalable, and fully managed
message queuing service. SQS provides a simple and cost-effective way to decouple
the components of an application. The user can configure SQS, which will decouple
the call between the EC2 application and S3. Thus, the application does not keep
waiting for S3 to provide the data.
What are the benefits of having infrastructure hosted in the AWS Cloud?
(choose three)
A. All of the physical security and most of the data/network security are taken care
of for youcheck_circle
B. Having complete control over the physical infrastructure
C. Increase speed and agility.check_circle
D. No Upfront costscheck_circle
E. There is no need to worry about security.
Answer Description
Explanation
option A : “All of the physical security and most of the data/network security are
taken care of for you†that’s right but you also have to worry about a lot of
things to be secure like setting up the IAMs and creating the MFA and so on. (please
read about the shared responsibility model). option E is not correct as we mentioned.
option B is not correct as the Physical infrastructure is a responsibility of AWS and
not the customer. Hence it is not an advantage of moving to the AWS Cloud. option
C is correct: “In a cloud computing environment, new IT resources are only a click
away, which means that you reduce the time to make those resources available to
your developers from weeks to just minutes. This results in a dramatic increase in
agility for the organization, since the cost and time it takes to experiment and
develop is significantly lower.â€.option D is correct in AWS there is no upfront costs
as it follows the “ pay as you go “ model. https://docs.aws.amazon.com/aws-
technical-content/latest/aws-overview/six-advantages-of-cloud-computing.html
You want to monitor the CPU utilization of an EC2 resource in AWS. Which of
the below services can help in this regard?
A. AWS config
B. AWS Inspector
C. AWS Cloudwatch check_circle
D. AWS Trusted Advisor
Answer Description
Explanation
Amazon CloudWatch is a monitoring service for AWS cloud resources and the
applications you run on AWS. You can use Amazon CloudWatch to collect and track
metrics, collect and monitor log files, set alarms, and automatically react to changes
in your AWS resources. Amazon CloudWatch can monitor AWS resources such as
Amazon EC2 instances, Amazon DynamoDB tables, and Amazon RDS DB instances, as
well as custom metrics generated by your applications and services, and any log files
your applications generate. https://aws.amazon.com/cloudwatch/
Which of the following is not a part of the Cloud Computing models?
A. Infrastructure as a Service (IaaS)
B. Hardware as a Service (HaaS) check_circle
C. Platform as a Service (PaaS)
D. Software as a Service (SaaS)
Answer Description
Explanation
Answer Description
Explanation
IAM policies allow you to specify what actions your IAM users are allowed to perform
against your EC2 Instances. However, when it comes to access control, security
groups are what you need in order to define and control the way you want your
instances to be accessed, and whether or not certain kind of communications are
allowed or not.
You want to run a questionnaire application for only one day (without
interruptions). Which AWS EC2 purchase option would you choose?
A. Reserved instances
B. Spot instances
C. Dedicated instances
D. On-demand instances check_circle
Answer Description
Explanation
Answer Description
Explanation
AWS Database Migration Service helps you migrate databases to AWS easily and
securely. The source database remains fully operational during the migration,
minimizing downtime to applications that rely on the database. The AWS Database
Migration Service can migrate your data to and from most widely used commercial
and open-source databases. The service supports homogenous migrations such as
Oracle to Oracle, as well as heterogeneous migrations between different database
platforms, such as Oracle to Amazon Aurora or Microsoft SQL Server to MySQL. It
also allows you to stream data to Amazon Redshift from any of the supported
sources including Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, SAP
ASE,and SQL Server, enabling consolidation and easy analysis of data in the
petabyte-scale data warehouse. AWS Database Migration Service can also be used
for continuous data replication with high availability. Reference:
https://d1.awsstatic.com/whitepapers/aws-overview.pdf
A company has developed an ecommerce web application. The application
needs an uptime of at least 99.5%. Which of the following deployment
strategies should they use?
A. Deploying the application across multiple VPCu2019s
B. Deploying the application across multiple Regions check_circle
C. Deploying the application across Edge locations
D. Deploying the application across multiple subnets
Answer Description
Explanation
The AWS Cloud infrastructure is built around Regions and Availability Zones (AZs).
AWS Regions provide multiple, physically separated and isolated Availability Zones
which are connected with low latency, high throughput, and highly redundant
networking. These Availability Zones offer AWS customers an easier and more
effective way to design and operate applications and databases, making them more
highly available, fault tolerant, and scalable than traditional single datacenter
infrastructures or multi-datacenter infrastructures. For customers who specifically
need to replicate their data or applications over greater geographic distances, there
are AWS Local Regions. An AWS Local Region is a single datacenter designed to
complement an existing AWS Region. Like all AWS Regions, AWS Local Regions are
completely isolated from other AWS Regions. The AWS Cloud spans 55 Availability
Zones within 18 geographic Regions and one Local Region around the world.
https://aws.amazon.com/about-aws/global-infrastructure/
Which of the following services allows for object level storage in AWS?
A. Amazon EBS
B. Amazon S3 check_circle
C. Amazon Storage gateway
D. Amazon SQS
Answer Description
Explanation
Amazon S3 is object storage built to store and retrieve any amount of data from anywhere '
web sites and mobile apps, corporate applications, and data from IoT sensors or devices. It is
designed to deliver 99.999999999% durability, and stores data for millions of applications
used by market leaders in every industry. https://aws.amazon.com/s3/
One of the benefits of the AWS cloud is that there are many services Where you
don't need to manage their underlying Infrastructure. Which of the following is
an example of these services? (choose two)
A. DynamoDB check_circle
B. EC2
C. Simple Storage Service check_circle
D. AWS Autoscaling
Answer Description
Explanation
The Simple Storage service and DynamoDB are services where you don’t need to
manage the underlying infrastructure.
What AWS service allows you to have your own private network in the AWS
cloud?
A. AWS Elastic Beanstalk
B. AWS Elastic Compute Cloud (Amazon EC2)
C. AWS VPC check_circle
D. AWS SQS
Answer Description
Explanation
A Virtual Private Cloud (VPC) is a private sub-section of AWS that is your own private
network. You control what resources you place inside the VPC and the security
features around it.
A company has a DevOps team in its organizational structure. They are looking
forward to move to the AWS cloud. They are wondering if there is an AWS
service that can help them manage infrastructure as code. Which of the
following would you suggest for them?
A. AWS Inspector
B. AWS Config
C. AWS Cloudformation check_circle
D. Amazon EMR
Answer Description
Explanation
AWS CloudFormation is a service that helps you model and set up your Amazon Web
Services resources so that you can spend less time managing those resources and
more time focusing on your applications that run in AWS. You create a template that
describes all the AWS resources that you want (like Amazon EC2 instances or
Amazon RDS DB instances), and AWS CloudFormation takes care of provisioning and
configuring those resources for you. You don't need to individually create and
configure AWS resources and figure out what's dependent on what; AWS
CloudFormation handles all of that.
https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html
When using On-Demand instances in AWS, which of the following is a false
statement about its cost?
A. There is no upfront costs for the instance
B. You have to pay the termination fees if you terminate the
instance check_circle
C. You are charged per second based on the hourly rate
D. You pay for much you use.
Answer Description
Explanation
You don’t need to pay any termination fees when it comes to Ec2 Instances
https://aws.amazon.com/ec2/pricing/
A company is planning to develop microservices application consisting of
hundreds of services. They decided to host the application on the AWS cloud.
Since there are a large number of services produced by the application then it
needs a powerful tool for analyzing and debugging. Which of the following
services can meet this requirement?
A. AWS OpsWorks
B. AWS Config
C. Amazon Aurora
D. AWS X-Ray check_circle
Answer Description
Explanation
AWS X-Ray helps developers analyze and debug production, distributed applications,
such as those built using a microservices architecture. With X-Ray, you can
understand how your application and its underlying services are performing to
identify and troubleshoot the root cause of performance issues and errors. X-Ray
provides an end-to-end view of requests as they travel through your application, and
shows a map of your application’s underlying components. You can use X-Ray to
analyze both applications in development and in production, from simple three-tier
applications to complex microservices applications consisting of thousands of
services. https://aws.amazon.com/xray/
Upgrading a server with a larger hard drive is an example of __________ . While
adding more hard drives to a storage array is an example of __________ .
A. Vertical Scaling, Horizontal Scaling. check_circle
B. Vertical Scaling, Vertical Scaling.
C. Horizontal Scaling, Vertical Scaling.
D. Horizontal Scaling, Horizontal Scaling.
Answer Description
Explanation
Answer Description
Explanation
The user can achieve automated scaling by launching different EC2 instances and
making them a part of an ELB. Cloudwatch will be used to monitor the resources and
based on the scaling need it will trigger policies. AutoScaling is then used to scale up
or down the instances.
An organization has 500 employees. The organization wants to set up AWS
access for each department. Which of the below mentioned options is a
possible solution?
A. Create IAM roles based on the permission and assign users to each role
B. Create IAM users and provide individual permission to each
C. Create IAM groups based on the permission and assign IAM users to the
groups check_circle
D. It is not possible to manage more than 100 IAM users with AWS
Answer Description
Explanation
An IAM group is a collection of IAM users. Groups let the user specify permissions for
a collection of users, which can make it easier to manage the permissions for those
users.
Which of the following is a tool that can be used to display the distribution of
AWS spending?
A. AWS organizations
B. Amazon Dev Pay
C. AWS Cost Explorer check_circle
D. AWS Trusted Advisor
Answer Description
Explanation
Cost Explorer is a free tool that you can use to view your costs. You can view data up
to the last 13 months, forecast how much you are likely to spend for the next three
months, and get recommendations for what Reserved Instances to purchase. You can
use Cost Explorer to see patterns in how much you spend on AWS resources over
time, identify areas that need further inquiry, and see trends that you can use to
understand your costs. You also can specify time ranges for the data, and view time
data by day or by month. Ref:
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-explorer-what-
is.html
Stephen is having issues tracking how much compute capacity his application is using.
Ideally, he wants to track and have alarms for when CPU utilization goes over 70%.
What should Stephen do to accomplish this?
A. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU
utilization is greater than 30%.
B. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU
utilization is greater than 70%. check_circle
C. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU
utilization is smaller than 70%.
D. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU
utilization is equal to 70%.
Answer Description
Explanation
The answer is to configure a CloudWatch alarm with an alarm threshold set to trigger when
CPU utilization is greater than 70%. This will display the alarm in "alarm" state when CPU
utilization is greater than 70%. This question has been worded very specifically with the
works "goes above 70%". This disqualifies the answer that stated "greater than or equal to
70%".
Which of the following can be used as an additional layer of security to using a
user name and password when logging into the AWS Console?
A. Secondary user name
B. Secondary password
C. Root access privileges
D. Multi-Factor Authentication (MFA) check_circle
Answer Description
Explanation
AWS Multi-Factor Authentication (MFA) is a simple best practice that adds an extra
layer of protection on top of your user name and password.
https://aws.amazon.com/iam/details/mfa/
Which of the following AWS services provides infrastructure security
optimization recommendations?
A. AWS Price List Application Programming Interface (API)
B. AWS Cloud9
C. Amazon Elastic Compute Cloud (Amazon EC2) Spot Fleet
D. AWS Trusted Advisor check_circle
Answer Description
Explanation
AWS Trusted Advisor is an online resource to help you reduce cost, increase
performance, and improve security by optimizing your AWS environment, Trusted
Advisor provides real time guidance to help you provision your resources following
AWS best practices. https://aws.amazon.com/premiumsupport/trustedadvisor/
You are planning to host a large ecommerce application on the AWS Cloud.
One of your major concerns is Internet attacks such as DDos attacks. Which of
the following services can help mitigate this concern? Choose 2 answers
A. CloudFront check_circle
B. AWS Shield check_circle
C. AWS EC2
D. AWS Config
Answer Description
Explanation
One of the first techniques to mitigate DDoS attacks is to minimize the surface area
that can be attacked thereby limiting the options for attackers and allowing you to
build protections in a single place. We want to ensure that we do not expose our
application or resources to ports, protocols or applications from where they do not
expect any communication. Thus, minimizing the possible points of attack and letting
us concentrate our mitigation efforts. In some cases, you can do this by placing your
computation resources behind Content Distribution Networks (CDNs) or Load
Balancers and restricting direct Internet traffic to certain parts of your infrastructure
like your database servers. In other cases, you can use firewalls or Access Control
Lists (ACLs) to control what traffic reaches your applications.
https://aws.amazon.com/cloudfront/ https://aws.amazon.com/shield/
Regarding Amazon SQS, are there restrictions on the names of Amazon SQS
queues?
A. No
B. Yes. Queue names must be unique within an AWS account and you cannot use
hyphens (-) and underscores (_)
C. Yes. Queue names are limited to 80 characters and queue names must be
unique within an AWS account check_circle
D. Yes. Queue names are limited to 80 characters but queue names do not need
to be unique within an AWS account
Answer Description
Explanation
Queue names are limited to 80 characters. Alphanumeric characters plus hyphens (-)
and underscores (_) are allowed. Queue names must be unique within an AWS
account. After you delete a queue, you can reuse the queue name. Reference:
https://aws.amazon.com/sqs/faqs/
You have developed a web application that has “.Net layer†which
connects to a MySQL database. Which of the following AWS databases would
provide high availability and automated backups to your application?
A. Aurora check_circle
B. DynamoDB
C. An EC2 instance with MySQL installed.
D. An EC2 instance with Aurora installed.
Answer Description
Explanation
Answer Description
Explanation
Answer Description
Explanation
You should aim to build as much automation as possible in both detecting and
reacting to failure. You can use services like ELB and Amazon Route53 to configure
health checks and mask failure by routing traffic to healthy endpoints. In addition,
Auto Scaling can be configured to automatically replace unhealthy nodes .You can
also replace unhealthy nodes using the Amazon EC2 auto-recovery feature or
services such as AWS OpsWorks and AWS Elastic Beanstalk. It won’t be possible
to predict every possible failure scenario on day one. Make sure you collect enough
logs and metrics to understand normal system behavior. After you understand that,
you will be able to set up alarms for manual intervention or automated response.
Reference: https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf
You are working on a project that involves creating thumbnails of millions of
images; however, time is not really an issue and continuous processing is not
required. Which type of EC2 buying option would be the most cost-effective?
A. Reserved instances
B. Spot instances check_circle
C. On-demand instances
D. Dedicated instances
Answer Description
Explanation
Spot Instances are a cost-effective choice if you can be flexible about when your
applications run and if your applications can be interrupted. For example, Spot
Instances are well-suited for data analysis, batch jobs, background processing, and
optional tasks. Reference:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html
You want to implement a HPC ( High performance computing ) system with
low-latency network performance. In order to establish this, which AWS feature
can be used?
ELB and Auto scaling
Placement groups check_circle
EC2 and DynamoDB
ElasticMapReduce
Answer Description
Explanation
You can launch or start instances in a placement group, which determines how
instances are placed on underlying hardware. When you create a placement group,
you specify one of the following strategies for the group: >>Cluster—clusters
instances into a low-latency group in a single Availability Zone. >> Spread—spreads
instances across underlying hardware. There is no charge for creating a placement
group. https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/placement-
groups.html
You are trying to organize and import (to AWS) gigabytes of data that are
currently structured in JSON-like, name-value documents. What AWS service
would best fit your needs?
A. Lambda
B. Aurora
C. RDS
D. DynamoDB check_circle
Answer Description
Explanation
DynamoDB is AWS's NoSQL database offering. NoSQL databases are for non-
structured data that are typically stored in JSON-like, name-value documents.
A company is currently using the Enterprise Support plan. They want a quick
and efficient guidance with their billing and account inquiries. Which of the
following included services could assist them?
A. AWS Support API
B. AWS Support Concierge check_circle
C. AWS Advisor
D. Customer Contacts
Answer Description
Explanation
Included as part of the Enterprise Support plan, the Support Concierge Team are
AWS billing and account experts that specialize in working with enterprise accounts.
This Concierge team will quickly and efficiently assist you with your billing and
account inquiries, and work with you to help implement billing and account best
practices so that you can focus on what matters: running your business. Support
Concierge service includes: **24 x7 access to AWS billing and account inquires.
**Guidance and best practices for billing allocation, reporting, consolidation of
accounts, and root-level account security. **Access to Enterprise account specialists
for payment inquiries, training on specific cost reporting, assistance with service
limits, and facilitating bulk purchases.
https://aws.amazon.com/premiumsupport/features/
As part of the Enterprise support plan, Who is the primary point of contact for
the ongoing support needs?
A. TAM check_circle
B. IEM
C. ISM
D. TSM
Answer Description
Explanation
Answer Description
Explanation
Since you are targeting a global audience then you have to use many AWS regions
around the world and multiple AZs within it to prevent any impact in case of an AZ or
even a region going down. AWS Cloud infrastructure is built around Regions and
Availability Zones (AZs). A Region is a physical location in the world where we have
multiple AZs. AZs consist of one or more discrete data centers, each with redundant
power, networking, and connectivity, housed in separate facilities. These AZs offer
you the ability to operate production applications and databases that are more
highly available, fault tolerant, and scalable than would be possible from a single
data center. Each Amazon Region is designed to be completely isolated from the
other Amazon Regions. This achieves the greatest possible fault tolerance and
stability. Each AZ is isolated, but the AZs in a Region are connected through low-
latency links. AWS provides you with the flexibility to place instances and store data
within multiple geographic Regions as well as across multiple Availability Zones
within each Region. Each Availability Zone is designed as an independent failure
zone. This means that Availability Zones are physically separated within a typical
metropolitan region and are located in lower risk flood plains (specific flood zone
categorization varies by Region). In addition to discrete uninterruptable power
supply (UPS) and onsite backup generation facilities, they are each fed via different
grids from independent utilities to further reduce single points of failure. AZs are all
redundantly connected to multiple tier-1 transit providers. Reference:
https://d1.awsstatic.com/whitepapers/aws-overview.pdf
Which of the following is your responsibility when creating Amazon VPC
security groups? (Select all that apply)
A. Ensuring that the rules take effect before creating another security groups.
B. Giving a name and description for the security group check_circle
C. Adding rules to the security group. check_circle
D. Ensuring that the security groups are linked to the Elastic Network interface.
Answer Description
Explanation
https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/
VPC_SecurityGroups.html
Which of the following does AWS perform on your behalf for EBS volumes to
reduce the possibility of failure?
A. Replication of the volume across Availability Zones
B. Replication of the volume across Regions
C. Replication of the volume in the same Availability Zone check_circle
D. Replication of the volume across Edge locations
Answer Description
Explanation
Answer Description
Explanation
Answer Description
Explanation
The AWS Abuse team can assist you when AWS resources are being used to engage
in the following types of abusive behavior: I. Spam: You are receiving unwanted
emails from an AWS-owned IP address, or AWS resources are being used to spam
websites or forums. II. Port scanning: Your logs show that one or more AWS-owned
IP addresses are sending packets to multiple ports on your server, and you believe
this is an attempt to discover unsecured ports. III. Denial of service attacks (DOS):
Your logs show that one or more AWS-owned IP addresses are being used to flood
ports on your resources with packets, and you believe this is an attempt to
overwhelm or crash your server or software running on your server. IV. Intrusion
attempts: Your logs show that one or more AWS-owned IP addresses are being used
to attempt to log in to your resources. V. Hosting objectionable or copyrighted
content: You have evidence that AWS resources are being used to host or distribute
illegal content or distribute copyrighted content without the consent of the copyright
holder. VI. Distributing malware: You have evidence that AWS resources are being
used to distribute software that was knowingly created to compromise or cause harm
to computers or machines on which it is installed. Reference:
https://aws.amazon.com/premiumsupport/knowledge-center/report-aws-abuse/
What are characteristics of Amazon S3? Choose 2 answers
A. S3 allows you to store unlimited amounts of data. check_circle
B. S3 allows you to store objects of virtually unlimited size.
C. S3 should be used to host a relational database.
D. Objects are directly accessible via a URL. check_circle
Answer Description
Explanation
Each object does have a limitation in S3, but you can store virtually unlimited
amounts of data. Also each object gets a directly accessible URL.
https://aws.amazon.com/s3/
he principle “design for failure and nothing will fail†is very important
when designing your AWS cloud architecture. Which of the following would
help in doing so?
A. Availability Zones check_circle
B. Regions check_circle
C. AWS WAF
D. Elastic Load Balancer check_circle
Answer Description
Explanation
Each AZ is a set of one or more data centers. By deploying your AWS resources to
multiple Availability zones , you are designing with failure with mind. So if one AZ
were to go down , the other AZ’s would still be up and running and hence your
application would be more fault tolerant. For disaster recovery scenarios , one can
move or make resources run in other regions And finally one can use the Elastic Load
Balancer to distribute load to multiple backend instances within a particular region.
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-
zones.html https://aws.amazon.com/elasticloadbalancing/
You are going to create snapshots from the EBS volumes in another
geographical location using the console. Where would you create the
snapshots?
A. In another Availability Zone
B. In another data center
C. In another Edge location
D. In another Region check_circle
Answer Description
Explanation
since you are going to create the snapshots in another geographical location then
the answer is regions.
https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndA
vailabilityZones.html
Which of the following services has been described as a global content delivery
network (CDN) service?
A. Amazon SES
B. Amazon Cloudtrail
C. Amazon CloudFront check_circle
D. Amazon S3
Answer Description
Explanation
Amazon CloudFront is a global content delivery network (CDN) service that securely
delivers data, videos, applications, and APIs to your viewers with low latency and high
transfer speeds. CloudFront is integrated with AWS ' including physical locations that
are directly connected to the AWS global infrastructure, as well as software that
works seamlessly with services including AWS Shield for DDoS mitigation, Amazon
S3, Elastic Load Balancing or Amazon EC2 as origins for your applications,
and Lambda@Edge to run custom code close to your viewers.
https://aws.amazon.com/cloudfront/
Your web application is generating digital policy files for verifying users. Once
the files are verified they may not be required in the future unless there are
some compliance issues. If you want to save them in a cost effective way, what
is the best possible solution?
A. AWS RRS
B. AWS RDS
C. AWS S3
D. AWS Glacier check_circle
Answer Description
Explanation
Answer Description
Explanation
** AWS Trusted Advisor is an online resource to help you reduce cost, increase
performance, and improve security by optimizing your AWS environment, Trusted
Advisor provides real time guidance to help you provision your resources following
AWS best practices. https://aws.amazon.com/premiumsupport/trustedadvisor/.
**Amazon Inspector is an automated security assessment service that helps improve
the security and compliance of applications deployed on AWS. Amazon Inspector
automatically assesses applications for vulnerabilities or deviations from best
practices. After performing an assessment, Amazon Inspector produces a detailed list
of security findings prioritized by level of severity. These findings can be reviewed
directly or as part of detailed assessment reports which are available via the Amazon
Inspector console or API. To help you get started quickly, Amazon Inspector includes
a knowledge base of hundreds of rules mapped to common security best practices
and vulnerability definitions. Examples of built-in rules include checking for remote
root login being enabled, or vulnerable software versions installed. These rules are
regularly updated by AWS security researchers. https://aws.amazon.com/inspector/
Systems that follow the cloud architecture principle of elasticity will:
A. Minimize storage requirements by reducing logging and auditing activities
B. Accelerate the design process because recovery from failure is automated,
reducing the need for testing
C. Enable AWS to automatically select the most cost-effective services.
D. Create systems that scale to the required capacity based on changes on
demand check_circle
Answer Description
Explanation
The concept of Elasticity is the means of an application having the ability to scale up
and scale down based on demand. An example of such a service is the Autoscaling
service.
Your company has an application that requires access to a NoSQL database.
Your IT department has no desire to manage the NoSQL servers. Which Amazon
service provides a fully-managed and highly available NoSQL service?
A. SimpleDB
B. Amazon RDS
C. ElasticMap Reduce
D. DynamoDB check_circle
Answer Description
Explanation
Amazon DynamoDB is a fast and flexible NoSQL database service for all applications
that need consistent, single-digit millisecond latency at any scale. It is a fully
managed cloud database and supports both document and key-value store models.
Its flexible data model, reliable performance, and automatic scaling of throughput
capacity, makes it a great fit for mobile, web, gaming, ad tech, IoT, and many other
applications.
Which component of AWS global infrastructure does Amazon CloudFront use
to ensure low-latency delivery?
A. AWS Regions
B. AWS edge locations check_circle
C. AWS Availability Zones
D. Amazon Virtual Private Cloud (Amazon VPC)
Answer Description
Explanation
https://aws.amazon.com/cloudfront/
The main benefit of decoupling an application is to:
A. Create a tightly integrated application
B. Enable data synchronization across the web application layer.
C. Reduce inter-dependencies so failures do not impact other
components check_circle
D. Have the ability to execute automated bootstrapping actions.
Answer Description
Explanation