AWS Academy Cloud Foundations - Modules 1 - 8

Which AWS Cloud service is best suited for Online Analytics Processing (OLAP)? (Select the best answer)

Amazon Redshift

True or False? The Access Key and Secret Access Key are used to log into the AWS Management Console.

False

Why is AWS more economical than traditional data centers for applications with varying compute workloads?

Amazon EC2 instances can be launched on-demand when needed.

True or False? By default, all data stored in Amazon S3 is viewable by the public.

False

True or False? Each Availability Zone is designed to be isolated from failures in other Availability Zones.

True

You can use Amazon Elastic File System (Amazon EFS) to: (Select the best answer)

implement storage for Amazon EC2 instances that multiple virtual machines can access at the same time.

AWS highly recommends provisioning your compute resources across _______ Availability Zones. (Select the best answer.)

multiple

When you create a table in Amazon DynamoDB, in addition to the table name, you must specify the _____ of the table. (Select the best answer)

primary key

Regarding Amazon S3 Glacier, what is a Vault? (Select the best answer)

A container for storing archives

Which service is an AWS database service? A. DynamoDB B. CloudFront C. Kinesis D. S3

DynamoDB

True or False? AWS IAM is appropriate for OS and application authentication.

False

In Amazon DynamoDB, an attribute is ______. (Select the best answer.)

a fundamental data element

You can run applications and workloads from a Region closer to the end users to_______ latency.

decrease

Which of the following is a fully managed NoSQL database service? A. Amazon RDS B. Amazon DynamoDB C. Amazon Aurora D. Amazon Redshift

- Amazon DynamoDB Note: DynamoDB is the only NoSQL database service

How long does Amazon CloudWatch keep metric data? (Select the best answer)

15 months

In ________, Amazon Web Services (AWS) began offering IT infrastructure services to businesses in the form of web services -- now commonly known as cloud computing.

2006

You are a solutions architect who works at a large retail company that is migrating its existing infrastructure to AWS. You recommend that they use a custom VPC. When you create a VPC, you assign it to an IPv4 Classless Inter-Domain Routing (CIDR) block of 10.0.1.0/24 (which has 256 total IP addresses). How many IP addresses are available? (Select the best answer.)

251 2^8=256 256 - 5 (reserved by AWS) = 251

Where can a customer find information about prohibited actions on AWS infrastructure? (Select the best answer)

AWS Acceptable Use Policy

What AWS tool utilizes edge locations to cache content and reduce latency? OR Which of the following services uses AWS edge locations? A. AWS CloudFront B. EC2 Instances C. RDS D. VPCs E. EBS Storage

AWS CloudFront

Which AWS service helps developers quickly deploy resources which can make use of different programming languages, such as .Net and Java? A. AWS CloudFormation B. AWS SQS C. AWS Elastic Beanstalk D. Amazon Elastic Compute Cloud (Amazon EC2)

AWS Elastic Beanstalk

_______ is up to five times faster than standard MySQL databases and three times faster than standard PostgreSQL databases. (Select the best answer)

Amazon Aurora

A company has an application, which consists of a .NET layer that connects to a MySQL database. They want to move this application on to AWS and use AWS features such as high availability and automated backups. Which of the following would be an ideal database for this use case? (Select the best answer)

Amazon Aurora Note: Amazon Aurora is a MySQL- and PostgreSQL- compatible relational database.

If you are developing an application that requires a database with extremely fast performance, fast scalability, and flexibility in the database schema, which service should you consider? (Select the best answer.)

Amazon DynamoDB

You are designing an eCommerce web application that will scale to hundreds of thousands of concurrent users. Which database technology is best suited to hold the session state in this example?

Amazon DynamoDB or NoSQL database table using Amazon DynamoDB

Which of the following should be done by the AWS account root user? (Select the best answer.)

Change the AWS support plan

Which of the following use cases is appropriate for using Amazon Relational Database Service (Amazon RDS)? (Select the best answer.)

Complex transactions Note: Use Amazon RDS when your application requires complex transactions or complex queries.

How would a system administrator add an additional layer of login security to a user's AWS Management Console? (Select the best answer.)

Enable multi-factor authentication

What is AWS Trusted Advisor?

Online tool that helps you configure resources to follow best practices.

With the "pay as you go" pricing model, how often do you pay for compute resources from the time you launch a resource until you terminate it? (Select the best answer) A. Quarterly B. Monthly C. Secondly and Hourly D. Yearly E. Daily

Secondly and Hourly

What can you use S3 for with your web application? (Select the best answer)

Store static content such as images, video, CSS, JavaScript, etc.

Which of these is not a cloud deployment model? (Select the best answer.)

System administration as a service

What AWS tool compares the cost of running your application in an on-premises data center to AWS? (Select the best answer.) A. AWS Simple Monthly calculator B. Total Cost of Ownership (TCO) calculator C. AWS Billing Dashboard D. AWS Cost and Usage Report

Total Cost of Ownership (TCO) calculator

True or False? AWS Organizations enables you to consolidate multiple AWS accounts so that you centrally manage them.

True

True or False? Amazon Simple Storage Service (Amazon S3) is an object storage suitable for the storage of flat files like Microsoft Word documents, photos, etc.

True

Economies of scale result from ______. (Select the best answer)

having hundreds of thousands of customers aggregated in the cloud

The name of an S3 bucket must be unique _________. (Select the best answer)

worldwide across all AWS accounts

A company wants to store data that is not frequently accessed. What is the best and cost-effective solution that should best be considered? A. Amazon Storage Gateway B. Amazon S3 Glacier C. Amazon EBS D. Amazon S3

Amazon S3 Glacier

True or False? AWS is responsible for the security of everything above the hypervisor layer.

False

True or False? Availability Zones within a Region are connected through low-latency links.

True

True or False? You can launch multiple instances of different types from a single AMI when launching an EC2 instance.

True

After initial login, what does AWS recommend as the best practice for the AWS account root user? (Select the best answer.)

Delete the access keys of the AWS account root user or Delete root user access keys

AWS Marketplace allows cloud users to:

Discover, procure, deploy, and manage software in the cloud.

Which of the following is a compute service? (Select the best answer)

Amazon EC2

Why is AWS more economical than traditional data centers for applications with varying compute workloads? (Select the best answer)

Amazon EC2 instances can be launched on-demand when needed.

Which of the following can be used to protect Amazon Elastic Compute Cloud (Amazon EC2) instances hosted in AWS? A. Subnts B. Network Protection Group C. Security Group D. Network Access Control (NACL)

- Security Group

How many IGWs can you attach to an Amazon VPC at any one time?

1 Note: You may only have one IGW for each Amazon VPC. This quota is directly correlated with the quota on VPCs per Region. To increase this quota, increase the quota on VPCs per Region. Only one internet gateway can be attached to a VPC at a time.

Which of these statements about Availability Zones is not true? (Select the best answer.) A. Availability Zones are connected to each other using high-speed private links. B. Availability Zones are made up of one or more data centers. C. A data center can be used for more than one Availability Zone. D. Availability Zones are designed for fault isolation.

A data center can be used for more than one Availability Zone.

Where can a customer go to get more details about Amazon Elastic Compute Cloud (Amazon EC2) billing activity that took place 3 months ago? (Select the best answer.)

AWS Cost Explorer

What is the service provided by AWS that enables developers to easily deploy and manage applications in the cloud? (Select the best answer)

AWS Elastic Beanstalk

Which of the following are geographic areas that host two or more Availability Zones? (Select the best answer.)

AWS Regions

Which AWS service provides infrastructure security optimization recommendations? A. AWS Price List Application Programming Interface (API) B. Reserved Instances C. AWS Trusted Advisor D. Amazon Elastic Compute Cloud (Amazon EC2) Spot Fleet

AWS Trusted Advisor Online tool that helps you configure resources to follow best practices.

Which Amazon Elastic Compute Cloud (Amazon EC2) feature ensures your instances will not share a physical host with instances from any other AWS customer? (Select the best answer)

Dedicated Instances

True or False? Edge locations are only located in the same general area as Regions.

False

______ means the infrastructure has built-in component redundancy and ______ means that resources dynamically adjust to increases or decreases in capacity requirements.

Fault tolerant, elastic and scalable Fault tolerant means the infrastructure has built-in component redundancy and elastic and scalable means that resources dynamically adjust to increases or decreases in capacity requirements.

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? (Select the best answer). A. Route Tables B. Network Access Control List C. NAT Gateway D. Security Groups

NAT Gateway

Which of the following is an optional security control that can be applied at the subnet layer of a VPC? (Select the best answer)

Network ACL

Your web application needs four instances to support steady traffic all of the time. On the last day of the month, the traffic triples. What is the most cost-effective way to handle this pattern? (Select the best answer)

Run four Reserved Instances constantly, then add eight On-Demand Instances on the last day of each month.

If your project requires monthly reports that iterate through very large amounts of data, which Amazon Elastic Compute Cloud (Amazon EC2) purchasing option should you consider? (Select the best answer)

Scheduled Reserved Instances

Which of the following can be used to protect Amazon Elastic Compute Cloud (Amazon EC2) instances hosted in AWS? (Select the best answer)

Security group

In the shared responsibility model, the customer is responsible for providing what? (Select the best answer.)

Security in the cloud

Which of the following must be configured on an Elastic Load Balancing load balancer to except incoming traffic? (Select the best answer)

A listener

Which of the following are features of Amazon Elastic Block Store (Amazon EBS)? (Choose two)

- Amazon EBS volumes can be encrypted transparently to workloads on the attached instance. - Data stored on Amazon EBS is automatically replicated within an Availability Zone. Note: There are no tapes in the AWS infrastructure. Amazon EBS volumes persist when the instance is stopped. The data is automatically replicated within an Availability Zone. Amazon EBS volumes can be encrypted upon creation and used by an instance in the same manner as if they were not encrypted.

Which of the following must be specified when launching a new Amazon Elastic Compute Cloud (Amazon EC2) Windows instance? (Choose two)

- Amazon EC2 instance type - Amazon Machine Image (AMI)

Which of the following elements are used to create an Amazon ec2 auto scaling launch configuration? (Choose three)

- Amazon Machine Image (AMI) - Instance Type - Amazon Elastic Block Store (Amazon EBS) volumes

Elastic Load Balancing health checks may be what? (Choose three)

- An Amazon Elastic Compute Cloud (Amazon EC2) instance status check - A connection attempt - A ping

Amazon CloudWatch supports which types of monitoring plans? (Choose two)

- Basic monitoring, which is free - Detailed monitoring, which has an additional cost

What are the three types of load balancers that ELB offers? (Choose three)

- Classic Load Balancer - Network Load Balancer - Application Load Balancer

What should you consider when choosing a database type? (Select the best answer.)

- Data size - Data access period - Query frequency - Highly available All of the above

Which of the following AWS tools help your application scale up or down based on demand? (Choose two)

- Elastic Load Balancing - Auto Scaling

Which of the following are characteristics of the Auto Scaling service on AWS? (Choose three)

- Enforces a minimum number of running Amazon EC2 instances - Launches instances from a specified Amazon Machine Image (AMI) - Responds to changing conditions by adding or terminating Amazon Elastic Compute (Amazon EC2) instances

What are the minimum elements required to create an Auto Scaling launch configuration? (Choose three)

- Launch Configuration Name - Instance type - Amazon Machine Image (AMI)

Which of the following are required elements of an Auto Scaling group? (Choose two)

- Launch configuration - Minimum size

In Amazon DynamoDB, what does the query operation enable you to do? (Select the best answer.)

- Query a table using the partition key and an optional sort key filter - Query any secondary indexes that exist for a table - Efficiently retrieve items from a table or secondary index. All of the above

Which of the following are AWS IAM best practices? (Choose two)

- Rotate credentials regularly - Monitor activity in your AWS account

Which of the following can be used as a storage class for an S3 object lifecycle policy? (Choose three)

- Simple Storage Service Glacier - S3 - Infrequent Access - S3 - Standard Access

What is included in an Amazon Machine Image (AMI)?

- a template for the root volume for the instance - launch permissions that control which aws accounts can use the ami to launch instances - a block device mapping that specifies the volumes to attach to the instance when its launched All of the above

Amazon Elastic Block Store (Amazon EBS) is recommended when data _______ and _______. (Choose two)

- requires an encryption solution - must be quickly accessible, requiring long-term persistence

Which AWS Cloud service is best suited for analyzing your data by using standard structured query language (SQL) and your existing business intelligence (BI) tools? (Select the best answer.)

Amazon Redshift

Which service would you use to send alerts based on Amazon CloudWatch alarms? (Select the best answer)

Amazon Simple Notification Service (Amazon SNS)

Access Control Lists are used to make entire buckets (like one hosting an S3 website) public. (Select the best answer)

False

Which of the following is an example of Amazon Lightsail?

Platform as a service

Which Amazon EC2 option is best for long-term workloads with predictable usage patterns? (Select the best answer)

Reserved Instances

You need to find an item in an Amazon DynamoDB table using an attribute other than the item's primary key. Which of the following operations should you use? (Select the best answer.)

Scan or Scan Operation

True or false? Amazon RDS automatically patches the database software and backs up your database, storing the backups for a user-defined retention period and enabling point-in-time recovery.

True

When you create a bucket in Amazon S3, it is associated with a specific AWS Region. (Select the best answer)

True

Amazon S3 replicates all objects ______. (Select the best answer)

in multiple Availability Zones within the same Region

What is included in an Amazon Machine Image (AMI)? A. A template for the root volume for the instance B. Launch permissions that control which aws accounts can use the ami to launch instances C. A block device mapping that specifies the volumes to attach to the instance when its launched D. All of the above

- A template for the root volume for the instance - Launch permissions that control which aws accounts can use the ami to launch instances - A block device mapping that specifies the volumes to attach to the instance when its launched All of the above

When creating an AWS Identity and Access Management (IAM) policy, what are the two types of access that can be granted to a user? (Choose two.)

- AWS Management Console access - Programmatic access

Your company is planning to use the AWS Cloud. But there is a management decision that resources need to split department wise. And the decision is trending towards managing multiple AWS accounts. Which of the following would help in effective management and also provide an efficient costing model? A. AWS Multiple Account join B. AWS IAM C. AWS Policy Management D. AWS Organizations

- AWS Organizations Note: AWS Organizations helps you centrally govern your environment as you grow and scale your workloads on AWS. Whether you are a growing startup or a large enterprise, Organizations helps you to centrally manage billing; control access, compliance, and security; and share resources across your AWS accounts.

Which of the following are advantages of AWS Cloud security? (Choose two)

- AWS uses multi-factor access control systems. - You retain complete control and ownership of your data region.

What are the advantages of cloud computing over computing on-premises? (Select the best answer.) A. Avoid large capital purchases B. Use on-demand capacity C. Go global in minutes D. Increase speed and agility E. On-demand capacity F. All of the above

- Avoid large capital purchases - Use on-demand capacity - Go global in minutes - Increase speed and agility - On-demand capacity All of the above

The AWS Risk and Compliance Programs is made up of which of the following components? (Choose three) A. Control Environment B. Information Security C. Automation Environment D. Risk Management E. Identity Management F. Physical Security

- Control Environment -Information Security - Risk Management

There is no charge for which of the following? (Choose two answers.) A. Compute B. Storage C. Inbound data transfer (with some exceptions) D. Outbound data transfer E. Data transfer between services with the same AWS Region

- Data transfer between services within the same AWS Region - Inbound data transfer (with some exceptions)

What is true about Regions? (Choose two.) A. They are the physical locations of your customers. B. Each Region is located in a separate geographic area. C. All Regions are located in one specific geographic area. D. A Region is a physical location that has multiple Availability Zones.

- Each Region is located in a separate geographic area. - A Region is a physical location that has multiple Availability Zones.

In the shared responsibility model, which of the following are examples of "security in the cloud"? (Choose two.) A. Protect the global infrastructure B. Compliance with compute security standards and regulations C. Physical security of the facilities in which the services operate D. Encryption of data at rest and data in transit E. Security group configurations

- Encryption of data at rest and data in transit -Security group configurations

Which of the following are CloudFront benefits? (Select all that apply)

- Fast & global - Highly programmable - Security at the Edge - Deep integration with AWS - Cost-Effectiveness

When are free data transfers applicable across AWS? (Choose two.) A. Free inbound data transfer across all AWS services in all Regions B. Free outbound data transfer across all AWS services in all Regions C. Free inbound data transfer for Amazon Elastic Compute Cloud (Amazon EC2) instances D. Free outbound data transfer between AWS services with the same Region

- Free inbound data transfer for Amazon Elastic Compute Cloud (Amazon EC2) instances - Free outbound data transfer between AWS services with the same Region

Which of these is not a benefit of cloud computing over on-premises computing? (Select the best answer.) or Which of the following are not benefits of AWS Cloud computing? (Choose two) A. Multiple procurement cycles B. Temporary and disposable resources C. Fault-tolerant databases D. High availability E. High latency

- High latency - Multiple procurement cycles

The the Shared Responsibility Model, which of the following are examples of "security in the cloud?" (Choose two) A. In which country content is stored B. Compliance with compute security standards and regulations C. Protecting the global infrastructure D. Physical security of the facility in which the services operate E. Which AWS services are used the content

- In which country content is stored - Which AWS services are used the content

What type of AWS data transfer is free for Amazon S3? (Choose two) A. Inbound data transfer from Internet to S3 B. Outbound data transfer from S3 to all regions C. Outbound data transfer fro m S3 to Internet D. Outbound data transfer from S3 to CloudFront

- Inbound data transfer from Internet to S3 - Outbound data transfer from S3 to CloudFront

Which of the following are included in AWS Assurance Programs? (Choose two)

- Laws, regulations, and privacy - Certification/Attestation Or - Laws, regulations, and privacy - Certification/Attestation - Alignments / Frameworks https://aws.amazon.com/compliance/programs/

Which of the following are best practices to secure your account using AWS Identity and Access Management (IAM)? (Choose two.) A. Provide users with default administrative privileges. B. Leave unused and unnecessary users and credentials in place. C. Manage access to AWS resources. D. Avoid using IAM groups to grant the same access permissions to multiple users. E. Define fine-grained access rights.

- Manage access to AWS resources - Define fine-grained access rights.

For certain services like Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Relational Database Service (Amazon RDS), you can invest in reserved capacity. What options are available for Reserved Instances? (Choose three.) or For certain services like Amazon EC2 and Amazon RDS, you can invest in reserved capacity. Reserved Instances are available in what 3 options? (Choose three)

- PURI - NURI - AURI

Which of the following are some of the security benefits that AWS offers? (Choose 2) A. Secure global infrastructure B. Shared Collaboration Model C. Inventory and Application Management D. Data Storage E. Meet compliance requirements

- Secure global infrastructure - Meet compliance requirements

John, a junior engineer for company XYZ wants to know the difference between a security group in VPC and a network ACL in VPC. (Select three)

- Security group restricts access to EC2 while ACL restricts traffic to a subnet - Network ACL performs stateless filtering and Security group provides stateful filtering - Security group can only set Allow rule, while ACL can set Deny rule also

Which of these are ways to access AWS core services? (Choose three) or What are the three ways to access AWS core services? (Choose three) A. Technical support calls B. AWS Command Line Interface (AWS CLI) C. AWS Management Console D. Software Development Kits (SDKs) E. AWS Marketplace

- Software Development Kits (SDKs) - AWS Command Line Interface (AWS CLI) - AWS Management Console

Instance A and instance B are running in two different subnets A and B of a VPC. Instance A is not able to ping instance B. What are two possible reasons for this?

- The security group attached to instance B does not allow inbound ICMP traffic. - The NACL on subnet B does not allow outbound ICMP traffic

Which of the following can be used to protect Amazon Elastic Compute Cloud (Amazon EC2) instances hosted in AWS? A. Usage of Security Groups B. Usage of AMI's C. Usage of Network Access Control Lists D. Usage of the Internet gateway

- Usage of Security Groups - Usage of Network Access Control Lists

Which of the following are features of an edge location? (select all that applies) A. Used in conjunction with the CloudFront service B. Distribute Network Address C. Distribute content to users D. Cache common responses

- Used in conjunction with the CloudFront service - Distribute content to users - Cache common responses

With Amazon VPC, what is the maximum size IP address range you can have in a VPC? or What is the maximum size IP address range you can have in an Amazon VPC?

/16

With Amazon VPC, what is the smallest size subnet you can have in a VPC? or What is the minimum size subnet you can have in an Amazon VPC?

/28

You are a solutions architect working for a large retail company that is migrating its existing infrastructure to AWS. You recommend they use a custom Amazon VPC. They'll need a public subnet for their web servers and a private subnet for their databases. They web servers and database servers be highly available, with a minimum of two web servers and two database servers each. How many subnets should you have to maintain high availability? A. 3 B. 2 C. 1 D. 4

4 You need two public subnets (one for each Availability Zone) and two private subnets (one for each Availability Zone). Therefore, you need four subnets.

What happens when you create a new Amazon VPC? (Select the best answer)

A main route table is created by default.

Which of the following services is a serverless compute service in AWS? (Select the best answer)

AWS Lambda

Which of the following services provides trusted users with temporary security credentials that can control access to your AWS resources? (Select the best answer)

AWS Security Token Service (STS)

Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery?(Select the best answer)

AWS edge locations

Which component of the AWS Global Infrastructure does Amazon CloudFront use to ensure low-latency delivery? (Select the best answer.) A. AWS Regions B. AWS edge locations C. AWS Availability Zones D. Amazon Virtual Private Cloud (Amazon VPC)

AWS edge locations Note: A site that CloudFront uses to cache copies of your content for faster delivery to users at any location. An edge location is where end users access services located at AWS. They are located in most of the major cities around the world and are specifically used by CloudFront (CDN) to distribute content to end user to reduce latency. It is like frontend for the service we access which are located in AWS cloud.

In the basic monitoring package for EC2, Amazon CloudWatch provides the following metrics: A. The percentage of allocated EC2 compute units that are currently is use B. The number of CPU credits consumed C. Completed read operations D. All answer choices

All answer choices

Which of the following is NOT a way to manage your database instances? A. AWS Management Console B. Amazon RDS APIs C. Command Line Tools D. Amazon CloudFront

Amazon CloudFront

Why is AWS more economical that traditional data centers for applications with variable compute workloads? A. Amazon Elastic Compute Cloud (Amazon EC2) costs are billed on a monthly basis. B. Customers retain full administrative access to their Amazon EC2 instances. C. Amazon EC2 instances can be launched on-demand when needed. D. Customers can permanently run enough instances to handle peak workloads.

Amazon EC2 instances can be launched on-demand when needed.

Which AWS service is a compute service that allows you to upload your code and run your code in response to events, such as changes to data in an Amazon S3 bucket or an Amazon DynamoDB table?

Amazon Lambda

Which AWS service is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud? A. Amazon RDS B. Amazon CloudFront C. Amazon Lambda D. Amazon EC2

Amazon RDS

Which AWS networking service enables a company to create a virtual network within AWS? (Select the best answer). A. AWS Config B. Amazon Route 53 C. AWS Direct Connect D. Amazon Virtual Private Cloud (Amazon VPC)

Amazon Virtual Private Cloud (Amazon VPC) Note: Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define.

What are the four support plans offered by AWS Support? (Select the best answer.)

Basic, Developer, Business, Enterprise

As AWS grows, the cost of doing business is reduced and savings are passed back to the customer with lower pricing. What is this optimization called? (Select the best answer.)

Economies of scale

What does the IAM policy simulator do?(Select the best answer)

Evaluates the policies you choose and determines the effective permissions for each of the actions you specify.

True or False? AWS Key Management Service (AWS KMS) enables you to assess, audit, and evaluate the configurations of your AWS resources.

False

True or False? Cloud computing provides a simple way to access servers, storage, databases, and a broad set of application services over the internet. You own the network-connected hardware required for these services and Amazon Web Services provisions what you need.

False

True or False?Private subnets have direct access to the Internet.

False

True or false? To receive the discounted rate associated with Reserved Instances, you must make a full, upfront payment for the term of the agreement. (Select the best answer.)

False

True or false? Unlimited services are available with the AWS Free Tier to new AWS customers for 12 months following their AWS sign-up date. (Select the best answer.)

False

Containers contain an entire operating system. (True or False?)

False Note: Containers are a method of operating system virtualization that allow you to run an application and its dependencies in resource-isolated processes. Containers allow you to easily package an application's code, configurations, and dependencies into easy-to-use building blocks that deliver environmental consistency, operational efficiency, developer productivity, and version control. Running containers in the AWS Cloud allows you to build robust, scalable applications and services by leveraging the benefits of the AWS Cloud such as elasticity, availability, security, and economies of scale. You also only pay for as many resources as you use. The Container solutions showcased include a combination of AWS services and APN Partner technologies, can be deployed quickly with solution accelerators like AWS Quick Starts, and feature optional consulting offerings to accelerate your cloud transformation.

Matthew, a cloud engineer created an EC2 Security Group with several running EC2 instances. He changed the Security Group rules to allow inbound traffic on a new port and protocol and launched several new instances in the same Security Group. The new rules apply:

Immediately to all instances in the Security Group. You can add rules to each security group that allow traffic to or from its associated instances. You can modify the rules for a security group at any time. New and modified rules are automatically applied to all instances that are associated with the security group.

What is the number one reason businesses are switching to cloud computing? (Select the best answer) A. Finite infrastructure B. Automation C. Instant configuration D. Overprovisioning E. Increased speed and agility

Increased speed and agility

What is an AWS IAM instance profile?(Select the best answer)

Is a container for an IAM role that you can use to pass role informationto an EC2 instance when the instance starts

Which of the following is the responsibility of AWS under the AWS shared responsibility model? (Select the best answer.) A. Configuring third-party applications B. Maintaining physical hardware C. Securing application access and data D. Managing custom Amazon Machine Images (AMIs)

Maintaining physical hardware

What is the pricing model that enables AWS customers to pay for resources on an as-needed basis? (Select the best answer.) or What is the pricing model that allows AWS customers to pay for resources on an as-needed basis? (Select the best answer)

Pay as you go

Which of the following are not benefits of AWS Cloud computing. or Which of these is not a primary benefit of cloud computing over on-premises computing? (Select the best answer) A. Benefit from massive economies of scale B. Pay for racking, stacking, and powering servers C. Eliminate guessing on your infrastructure capacity needs D. Increase speed and agility E. Trade capital expenses for variable expenses

Pay for racking, stacking, and powering servers

____________ consist of one or more Availability Zones, are geographically dispersed, and will be in separate geographic areas or countries.

Regions Regions consist of one or more Availability Zones, are geographically dispersed, and will be in separate geographic areas or countries

In the shared responsibility model, AWS is responsible for providing what? (Select the best answer.)

Security of the cloud

True or False? AWS owns and maintains the network-connected hardware required for application services, while you provision and use what you need.

True

True or False? Networking, storage, compute, and databases are examples of service categories that AWS offers.

True

True or False? Using IAM Groups is the recommended way to manage IAM users' permissions by job function.

True

True or false? AWS offers a variety of services at no charge, for example, Amazon Virtual Private Cloud (Amazon VPC), AWS Identity and Access Management (IAM), Consolidated Billing, AWS Elastic Beanstalk, automatic scaling, AWS OpsWorks and AWS CloudFormation. However, you might be charged for other AWS services that you use in conjunction with these services.

True