Exam

Business Support Plan

24x7 access to Cloud Support Engineers via phone, chat, and email. General Guidance - < 24 hours System Impaired - < 12 hours Production System Impaired - < 4 hours Production System Down - < 1 hour

Enterprise Support Plan

24x7 access to Cloud Support Engineers via phone, chat, and email. General Guidance - < 24 hours System Impaired - < 12 hours Production System Impaired - < 4 hours Production System Down - < 1 hour Business Critical System Down - <15 min Proactive Technical Account Management

How can a company connect from their on-premises network to VPCs in multiple regions using private connections?

AWS Direct Connect Gateway

Which AWS tools can be used for automation

AWS cloud formation AWS elastic beanstalk

Which service can be used to track the CPU usage of an EC2 instance (is used for performance monitoring)

Amazon CloudWatch

Which AWS service is designed to be used for operational analytics?

Amazon Elasticsearch service

To reduce cost, which of the following services support reservations?

Amazon redshift ElastiCache

AWS managed VPN

Can be used to quickly connect from an office to an Amazon VPC

Which of the following are NOT features of AWS IAM?

Charged for what you use? logon using local user account

CLI

Command Line Interface

Bulk Glacier Retrieval

Data Retrieval: $0.0025 per GB Requests: $0.025 per 1,000 requests Length: 5-12 hours

Standard Glacier Retrieval

Data Retrieval: $0.01 per GB Requests: $0.05 per 1,000 requests length: 3-5 hours

Expedited Glacier Retrieval

Data Retrieval: $0.03 per GB Requests: $10.00 per 1,000 requests length: 1-5 minutes

To gain greater discounts, which services can be reserved?

DynamoDB Readshift

Developer Support Plan

General guidance:< 24 business hours** System impaired:< 12 business hours** Business hours** email access to Cloud Support Associates

What are the primary benefits of using AWS Elastic Load Balancing?

High availability Elasticity

AWS Storage Gateway

Is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. Used to simplify storage management and reduce costs for key hybrid storage use cases.

AWS Shield

Is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS

Amazon Glacier

Is a secure, durable, and extremely low-cost Amazon S3 cloud storage classes for data archiving and long-term backup. $0.004 per GB / Month.

AWS Inspector

Is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS. Amazon Inspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices

AWS Elastic Beanstalk

Is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.

Amazon S3

Is an object storage service that offers industry-leading scalability, data availability, security, and performance.

Security Group

Is stateful: Return traffic is automatically allowed, regardless of any rules

Amazon S3 Standard-IA

Is the most cost-effective Amazon S3 storage tier for data that is not often accessed but requires (-----High Availability----) stores data in at least 3 AZ unlike one zone AI

AWS Artifact

It provides on-demand access to AWS' security and compliance reports. provides several compliance reports from third-party auditors who have tested and verified our compliance with a variety of global, regional, and industry specific security standards and regulations.

What offerings are included in the Amazon LightSail product set?

Managed MySQL database Virtual Private Sever

EBS Volumes are:

Must be in the same AZ as the instance they are attached to You can attach multiple EBS volumes to an instance

NFS protocol

Netwrk File system

Network Access Control Lists

Operates at the subnet level. Is stateless: return traffic must explicitly allowed by rules

Under the shared responsibility model, what are examples of shared controls

Patch Management Configuration Management

Amazon CloudFormation

Provides a common language for you to model and provision AWS and third party application resources in your cloud environment. Can be used to automate and deploy third party resources in a safe repeatable manner.

Which of the below AWS services supports automated backups as a default configuration

RDS

The AWS Identity and Access Management (IAM) service can be used to manage which objects?

Roles Access policies

Which aspects of security on AWS are customer responsibilities?

Setting up account password policies Server-side encryption

GuardDuty

This service allows users to monitor their AWS account for unusual and unexpected behavior by analyzing AWS CloudTrail Event Logs, VPC Flow Logs, and DNS Logs.

IAM Policy

Used to grant read/write access to an S3 bucket

EBS Volume

Which AWS technology can be referred to as a "virtual hard disk in the cloud"?

Amazon ElasticICache

allows you to seamlessly set up, run, and scale popular open-Source compatible in-memory data stores in the cloud.

An AIM role

can be used for assigning permissions to AWS services

S3 Transfer Acceleration

enables fast, easy, and secure transfers of files over long distances between your client and your Amazon S3 bucket.

AWS Budgets

gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your budgeted amount.

AWS Organizations

helps you centrally govern your environment as you grow and scale your workloads on AWS. Whether you are a growing startup or a large enterprise, It helps you to centrally manage billing; control access, compliance, and security; and share resources across your AWS accounts.

Amazon Database Migration Service DMS

helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database.

Gateway Virtual Tape Library

helps you move your tape-based backup and archiving workflows to the AWS cloud easily, while keeping your existing backup applications in place.

Amazon DynamoDB

is It's a fully managed key-value and document database that delivers single-digit millisecond performance at any scale. Has no servers and scales automatically

Amazon Direct Connect

is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS. You can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.

AWS OpsWorks

is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers. It lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments.

Amazon QuickSight

is a fast, cloud-powered business intelligence (BI) service that makes it easy for you to deliver insights to everyone in your organization.

Amazon RedShift

is a fast, fully managed cloud data warehouse that makes it simple and cost-effective to analyze all your data using standard SQL and your existing Business Intelligence (BI) tools. It allows you to run complex analytic queries against terabytes to petabytes of structured data, using sophisticated query optimization, columnar storage on high-performance storage, and massively parallel query execution

Amazon Macie

is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in Amazon S3 provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data

Amazon CodeDeploy

is a fully managed deployment service that automates software deployments to a variety of compute services. is a fully managed deployment service that automates software deployments to a variety of compute services

AWS Glue

is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics.

Amazon Simple Queue Service SQS

is a fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications. SQS eliminates the complexity and overhead associated with managing and operating message oriented middleware, and empowers developers to focus on differentiating work. Using SQS, you can send, store, and receive messages between software components at any volume, without losing messages or requiring other services to be available.

Amazon SageMaker

is a fully-managed platform that enables developers and data scientists to quickly and easily build, train, and deploy machine learning models at any scale.

Amazon Elastic Container Service ECS

is a highly scalable, fast, container management service that makes it easy to run, stop, and manage Docker containers on a cluster. You can host your cluster on a serverless infrastructure that is managed by Amazon ECS

amazon mq

is a managed message broker service for Apache ActiveMQ

Amazon CloudSearch

is a managed service in the AWS Cloud that makes it simple and cost-effective to set up, manage, and scale a search solution for your website or application.

AWS Fargate

is a serverless compute engine for containers that works with both Amazon Elastic Container Service (ECS) and Amazon Elastic Kubernetes Service (EKS). It removes the need to provision and manage servers, lets you specify and pay for resources per application, and improves security through application isolation by design.

AWS Transit Gateway

is a service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and their on-premises networks to a single gateway. establish network connectivity from on-premises to multiple VPCs in different AWS Regions

AWS Config

is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. This service continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With it, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines.

Amazon Cogntio

is a simple user identity and data synchronization service that helps you securely manage and synchronize app data for your users across their mobile devices.

Cost Explorer

is a tool that enables you to view and analyze your costs and usage. Visualize your usage patterns over time and to identify your underlying cost drivers

AWS Data Pipeline

is a web service that helps you reliably process and move data between different AWS compute and storage services, as well as on-premises data sources, at specified intervals.

Amazon RDS

is a web service that makes it easier to set up, operate, and scale a relational database in the AWS Cloud. It provides cost-efficient, resizable capacity for an industry-standard relational database and manages common database administration tasks. Note

Amazon EC2

is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers.

Amazon Athena

is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL. is serverless, so there is no infrastructure to manage, and you pay only for the queries that you run.

Amazon LightSail

is designed to be the easiest way to launch and manage a virtual private server with AWS. cloud platform that offers you everything needed to build an application or website, plus a cost-effective, monthly plan.

Amazon S3 One Zone-Infrequent Access

is for data that is accessed less frequently, but requires rapid access when needed (stores data in only one avaiability zone)

Amazon Elasticsearch Service

is involved with operational analytics such as application monitoring, log analytics and clickstream analytics.

Amazon Kinesis Data Firehose

is the easiest way to reliably load streaming data into data stores and analytics tools. It can capture, transform, and load streaming data into Amazon S3, Amazon Redshift, Amazon Elasticsearch Service, and Splunk, enabling near real-time analytics with existing business intelligence tools and dashboards you're already using today.

Lamdba

lets you run code without provisioning or managing servers. Just upload your code and aws takes care of everything required to run and scale your code with high availability. It's a "serverless" service which lets outside code or events invoke functions. It doesn't store data, but it allows access to other services which do. is an event-driven service.

Amazon Kinesis

makes it easy to collect, process, and analyze real-time, streaming data so you can get timely insights and react quickly to new information.

Amazon EMR

provides a managed Hadoop framework that makes it easy, fast, and cost-effective to process vast amounts of data across dynamically scalable Amazon EC2 instances. You can also run other popular distributed frameworks such as Apache Spark, HBase, Presto, and Flink

File Gateway

provides a seamless way to connect to the cloud in order to store application data files and backup images as durable objects in Amazon S3 cloud storage.

Amazon Elastic Block Store (Amazon EBS)

provides block level storage volumes for use with EC2 instances. EBS volumes behave like raw, unformatted block devices. You can mount these volumes as devices on your instances. EBS volumes that are attached to an instance are exposed as storage volumes that persist independently from the life of the instance. We recommend Amazon EBS for data that must be quickly accessible and requires long-term persistence.

AWS CodeCommit

service is primarily used for software version control?

Bookstrapping

you can execute automated actions to modify default configurations. This includes scripts that install software or copy data to bring that resource to a particular state.