AWS Quiz 4

Which AWS Group assists customers in achieving their desired business outcomes?

-AWS Professional Services

Which of the below options is true of Amazon Cloud Directory?

-Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions

Which of the below options is a best practice for making your application on AWS highly available?

-Deploy the application to at least two availability zones

​ Which of the following AWS offerings are serverless services? (Choose TWO)

-DynamoDB -AWS Lambda

Which of the following are types of AWS Identity and Access Management (IAM) identities? (Choose TWO)

-IAM Roles -IAM Users (or Groups)

A global company with a large number of AWS accounts is seeking a way in which they can centrally manage billing and security policies across all accounts. Which AWS Service will assist them in meeting these goals?

-AWS Organizations

A company is developing an application that will leverage facial recognition to automate photo tagging. Which AWS Service should the company use for facial recognition?

-AWS Rekognition

​Which AWS Service helps enterprises extend their on-premises storage to AWS in a cost-effective manner?

-AWS Storage Gateway - is a hybrid storage service that enables on-premises applications to seamlessly use AWS cloud storage. Enterprises can use the service for backup and archiving, disaster recovery, cloud data processing, storage tiering, and migration

What is the AWS Support feature that allows customers to manage support cases programmatically?

-AWS Support API - provides programmatic access to AWS Support Center features to create, manage, and close support cases, and operationally manage Trusted Advisor check requests and status.

The TCO gap between AWS infrastructure and traditional infrastructure has widened over the recent years. Which of the following could be the reason for that?

-AWS continues to lower the cost of cloud computing for its customers

You decide to buy a reserved instance for a term of one year. Which option provides the largest total discount?

-All up front reservation (The general rule is: "the more you spend upfront, the more discounts you get.")

Which of the following are examples of AWS-managed databases? (Choose two)

-Amazon DocumentDB -Amazon RDS for MySQL

A company is planning to use Amazon S3 and Amazon CloudFront to distribute its video courses globally. What tool can the company use to estimate the costs of these services?

AWS Simple Monthly Calculator - predict future spending where the cost explorer shows past spending

Which of the following services can be used to monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront?

AWS WAF - is a web application firewall that lets customers monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront or an Application Load Balancer.

Which AWS Service offers a filesystem that can be mounted concurrently from multiple EC2 instances?

Amazon Elastic File System (Amazon EFS) - provides simple, scalable file storage for use with Amazon EC2 instances in the AWS Cloud. Amazon EFS is easy to use and offers a simple interface that allows you to create and configure file systems quickly and easily.

​ Which AWS Service can perform health checks on Amazon EC2 instances?

Amazon Route 53 - provides highly available and scalable Domain Name System (DNS), domain name registration, and health-checking web services.

A company is building an online cloud storage platform. They need a storage service that can scale capacity automatically, while minimizing cost. Which AWS storage service should the company use to meet these requirements?

Amazon S3

A customer is seeking to store objects in their AWS environment and to make those objects downloadable over the internet. Which AWS Service can be used to accomplish this?

Amazon S3

Which features are included in the AWS Business Support Plan? (Choose TWO)

-24 x 7 access to customer service -Access to the infrastructure event management (IEM) feature for an additional fee

There is a requirement to grant a DevOps team full administrative access to all resources in an AWS account. Who can grant them these permissions?

-AWS Account Owner

A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly?

-AWS Application Load Balancer

Which AWS Service allows customers to download AWS SOC & PCI reports?

-AWS Artifact

Which of the following can be used to enable the Virtual Multi-Factor Authentication? (Choose TWO)

-AWS CLI -AWS IAM

Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)? (Choose TWO)

-AWS CLI -AWS SDKs

Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects?

-AWS CloudFormation

A company is seeking to deploy an existing .NET application onto AWS as quickly as possible. Which AWS Service should the customer use to achieve this goal?

-AWS Elastic Beanstalk

Your company requires a response time of less than 15 minutes from support interactions about their business-critical systems that are hosted on AWS if those systems go down. Which AWS Support Plan should this company use?

-AWS Enterprise support

Which services does AWS offer for free? (Choose TWO)

-AWS IAM -AWS Beanstalk

Which of the following Amazon RDS features facilitates offloading of database read activity?

-Read Replicas (You can reduce the load on your source DB Instance by routing read queries from your applications to one or more read replicas. Read replicas allow you to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads.)

A company is using EC2 Instances to run their e-commerce site on the AWS platform. If the site becomes unavailable, the company will lose a significant amount of money for each minute the site is unavailable. Which design principle should the company use to minimize the risk of an outage?

Fault Tolerance - A system that is designed to be fault tolerant can recover gracefully from EC2 instance failures.

What is the name of the DynamoDB replication capability that provides fast read \ write performance for globally deployed applications?

global tables - are ideal for massively scaled applications with globally dispersed users. Global tables provide automatic replication to AWS Regions world-wide. They enable you to deliver low-latency data access to your users no matter where they are located.

A customer is planning to migrate their Microsoft SQL Server databases to AWS. Which AWS Services can the customer use to run their Microsoft SQL Server database on AWS? (Choose TWO)

-Amazon Elastic Compute Cloud (EC2) -Amazon RDS - is a fully managed service where AWS manages the maintenance, backups, and patching.

Which AWS Service offers volume discounts based on usage?

-Amazon S3 (mores storage you use the less it cost)

Which of the following is true regarding the AWS availability zones and edge locations?

-An AWS Avalaibility zone is an isolated location within an AWS region, however edge locations are located in multiple cities worldwide

What are the advantages of using Auto Scaling Groups for EC2 instances?

-Auto Scaling groups scales EC2 instances in multiple availability zones to increase application availability and fault tolerance

Which of the following are examples of the customer's responsibility to implement "security in the cloud"? (Choose TWO)

-Building a schema for an application -File system encryption

Which of the following should be taken into account when performing a TCO analysis regarding the costs of running an application on AWS VS on-premises? (Choose TWO)

-Cooling and power consumption -Labor and IT costs

Which of the following factors should be considered when determining the region in which AWS Resources will be deployed? (Choose TWO)

-Cost -Data Sovereignty

Which of the below options are use cases of the Amazon Route 53 service? (Choose TWO)

-DNS configuration and management -Domain Registration

What does AWS offer to protect your data? (Choose TWO)

-Data Encryption -Access Control

A company's AWS workflow requires that it periodically perform large-scale image and video processing jobs. The customer is seeking to minimize cost and has stated that the amount of time it takes to process these jobs is not critical, but that cost minimization is the most important factor in designing the solution. Which EC2 instance class is best suited for this processing?

-EC2 Spot instances

Which of the following are advantages of using AWS as a cloud computing provider? (Choose two)

-Enables customers to trade their capital expenses for operational expenses -Eliminates the need to guess on infrastructure capacity needs

Which AWS Support Plan gives customers access to a "Well-Architected Review" for business critical workloads?

-Enterprise support

What are the capabilities of AWS X-Ray? (Choose TWO)

-Facilitates tracking of user requests to identify application issues -Helps improve application performance

Which of the following are true regarding the languages that are supported on AWS Lambda? (Choose TWO)

-Lambda natively supports a number of programming languages such as Node.js, Python and Java -Lambda can support any programming languages using an API

A key practice when designing solutions on AWS is to minimize dependencies between components so that the failure of a single component does not impact other components. What is this practice called?

-Loosely Coupling

Which of the following is NOT a factor when estimating the costs of Amazon EC2? (Choose TWO)

-Number of hosted zones -Number of security groups

What should you do if you see resources, which you don't remember creating, in the AWS Management Console? (Choose TWO)

-Open an investigation and delete any potentially compromised IAM users -Change your AWS root account password and the passwords of any IAM users

A company is seeking to better secure its AWS account from unauthorized access. Which of the below options can the customer use to achieve this goal?

-Require MFA for all IAM User access

A company is migrating a web application to AWS. The application's compute capacity is continually utilized throughout the year. Which of the below options offers the company the most cost-effective solution?

-Reserved Instances

According to best practices, which of the below options is best suited for processing a large number of binary files?

-Running EC2 instances in parallel (One of the core principles of the AWS Well-Architected Framework is that of scaling horizontally. Horizontal scaling means adding several smaller instances when workloads increase, instead of adding additional CPU, memory, or disk capacity to a single instance.)

You have just hired a skilled sys-admin to join your team. As usual, you have created a new IAM user for him to interact with AWS services. On his first day, you ask him to create snapshots of all existing Amazon EBS volumes and save them in a new Amazon S3 bucket. However, the new member reports back that he is unable to create neither EBS snapshots nor S3 buckets. What might prevent him from doing this simple task?

-There is a non-explicit deny to all new users

Which of the following approaches will help you eliminate human error and automate the process of creating and updating your AWS environment?

-Use code to provision and operate your AWS infrastructure

How does AWS notify customers about security and privacy events pertaining to AWS services?

-Using Security bulletins (AWS publishes security bulletins about the latest security and privacy events with AWS services on the Security Bulletins page.)

An AWS customer has used one Amazon Linux instance for 2 hours, 5 minutes and 9 seconds, and one Windows instance for 4 hours, 23 minutes and 7 seconds. How much time will the customer be billed for?

-With per-second billing in EC2 you pay for only what you use. It takes cost of unused minutes and seconds in an hour off of the bill, so you can focus on improving your applications instead of maximizing usage to the hour. Per-second billing is available for instances launched in Amazon Linux or Ubuntu. For other instances, including Windows, each partial instance-hour consumed will be billed as a full hour.

​One of the major advantages of using AWS is cost savings. Which of the below options is an example of the cost savings offered by AWS?

-per second instance billing

Which AWS service enables you to quickly purchase and deploy SSL/TLS certificates?

AWS Certificate Manager (AWS ACM) - is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.

An external auditor is requesting a log of all accesses to the AWS resources in the company's account. Which of the following services will provide the auditor with the requested information?

AWS CloudTrail

Which AWS Service is used to manage the keys used to encrypt customer data?

AWS Key Management Service (AWS KMS) - is a managed service that enables customers to easily create and control the keys used for cryptographic operations.

Which AWS Service provides integration with Chef to automate the configuration of EC2 instances?

AWS OpsWork - is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers.

A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS Service should the company use for this purpose?

Amazon Cognito

A hospital needs to store medical records for a minimum period of 10 years. The records being stored will only need to be recalled if there is a legal or audit need, which is expected to be extremely infrequent. Which AWS Service offers the most cost-effective method for storing the records?

Amazon S3 Glacier

An organization has a legacy application designed using monolithic-based architecture. Which AWS Service can be used to decouple the components of the application?

Amazon SQS - is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. Amazon SQS offers a reliable, highly-scalable hosted queue for storing messages as they travel

Which IAM entity can best be used to grant temporary access to your AWS resources?

IAM Roles - is an IAM entity that defines a set of permissions for making AWS service requests.

Which of the following is a type of MFA device that customers can use to protect their AWS resources?

Universal 2nd Factor Key (U2F Security Key)