AWS - Assessment Questions

What authentication method will you use to access your AWS resources remotely through the AWS Command Line Interface(CLI)? 1) Strong password 2) Multifactor Authentication 3) SSH key pairs 4) Access keys

4) Access Keys

AWS

Amazon Web Services

Which of these is a designation for two or more AWS data centers within a single geographic area? 1) Availability Zone 2) Region 3) Network subnet 4) Geo-unit

Availability Zone

What is Amazon Cognito? 1) A service that can manage authentication and authorization for your public-facing applications 2) A service that automates the administration of authentication secrets used by your AWS resources 3) A service that permits processing and analyzing of real-time video and data streams 4) A relational database engine

1) A service that can manage authentication and authorization for your public-facing applications

What is Amazon Athena? 1) A service that permits queries against data stored in Amazon S3 2) A service that permits processing and analyzing of real-time video and data streams 3) A NoSQL database engine 4) A Greece-based Amazon Direct Connect service partner

1) A service that permits queries against a data stored in Amazon S3

Which of the following describes a methodology that protects your organization's data when it's on-site locally, in transit to AWS, and stored on AWS? 1) Client-side encryption 2) Server-side encryption 3) Cryptographic tranformation 4) Encryption at rest

1) Client-side encryption

What is an Amazon's Git-compliant version control for integrating your source code with AWS resources? 1) CodeCommit 2) CodeBuild 3) CodeDeploy 4) Cloud9

1) CodeCommit

Which of the following AWS object storage services offers the lowest ongoing charges, but at the cost of some convenience? 1) Glacier 2) Storage Gateway 3) Simple Storage Service (S3) 4) Elastic Block Storage (EBS)

1) Glacier - Can reliably store large amounts of data for a very low price but requires CLI and SDK administration access, and retrieving your data can take hours.

Which of the following will provide the most reliable and scalable relational database experience on AWS? 1) Relational Database Service (RDS) 2) Running a database on an EC2 instance 3) DynamoDB 4) Redshift

1) RDS - offers a managed and highly scalable database environment for most popular relational database engines (Including MySQL, MariaDB, and Oracle)

Which of the following describes the cloud design principle of scalability? 1) The ability to automatically increase available compute resources to meet growing user demand. 2) The ability to route incoming client requests between multiple application servers 3) The ability to segment physical resources into multiple virtual partitions 4) The ability to reduce production costs by spreading capital expenses across many accounts.

1) The ability to automatically increase available compute resources to meet growing user demand.

What is Amazon Kinesis? 1) A service that permits queries against data stored in Amazon S3 2) A service that permits processing and analyzing of real-time video and streams 3) A NoSQL database engine 4) A Greece-based Amazon Direct Connect service partner

2) A service that permits processing and analyzing of real-time video and streams

How does AWS ensure that no single customer consumes an unsustainable proportion of available resources? 1) AWS allows customers to consume as much as they're willing to pay for, regardless of general availability 2) AWS imposes default limits on the use of its service resources but allows customers to request higher limits 3) AWS imposes hard default limits on the use of its service resources 4) AWS imposes default limits on the use of its services by Basic account holders; Premium account holders face no limits.

2) AWS imposes default limits on the use of its service resources but allows customers to request higher limits

AWS customers receive "production system down" support within one hour when they subscribe to which support plan(s)? 1) Enterprise 2) Business and Enterprise 3) Developer and Basic 4) All plans get this level support

2) Business and Enterprise

Which of these is the primary benefit from using resource tags with your AWS assets? 1) Tags enable the use of remote administration operations via the AWS CLI 2) Tags make it easier to identify and administrate running resources in a busy AWS account 3) Tags enhance data security throughout your account 4) Some AWS services won't work without the use of the resource tag

2) Tags make it easier to identify and administrate running resources in a busy AWS account

The AWS Shared Responsibility Model illustrates how AWS itself (as opposed to its customers) is responsible for which aspects of the cloud environment? 1) The redundancy and integrity of customer-added data 2) The underlying integrity and security of AWS physical resources 3) Data and configurations added by customers 4) The operating systems run on EC2 instance

2) The underlying integrity and security of AWS physical resources

How does AWS describe an isolated networking environment into which you can launch compute resources while closely controlling network access? 1) Security Group 2) Virtual Private Cloud (VPC) 3) Availability Zone 4) Internet gateway

2) Virtual Private Cloud (VPC)

Which of the following best describes the cloud service model known as infrastructure as a service (Iaas)? 1) End user access to software applications delivered over the internet. 2) Access to a simplified interface through which customers can directly deploy their application code without having to worry about managing the underlying infrastructure. 3) Customer rental of the use of measured units of a provider's physical compute, storage, and networking resources. 4) Abstracted interfaces built to manage clusters of containerized workloads.

3) Customer rental of the use of measured units of a provider's physical compute, storage, and networking resources. - Rent the physical infrastructure

Which of the following AWS compute service offers an administration experience that most closely resembles the way you would run physical servers in your own local data center? 1) Simple Storage Service (S3) 2) Elastic Container Service (ECS) 3) Elastic Compute Cloud (ECC) 4) Lambda

3) Elastic Compute Cloud (ECS)

What's the best and simplest way to increase reliability of an RDS database instance? 1) Increase the available IOPS 2) Choose the Aurora database engine when you configure your instance 3) Enable multi-AZ 4) Duplicate the database in a second AWS Region

3) Enable Multi-AZ - Multi-AZ will automatically replicate your database in a second Availability Zone for greater reliability. - though, it will also double cost

What defines the base operating system and software stack that will be available for a new Elastic Compute Cloud (EC2) instance when it launches? 1) The Virtual Private Cloud (VPC) into which you choose to launch your instance 2) The instance type you select 3) The Amazon Machine Image (AMI) you select 4) You don't need to define the base OS-you can install that once the instance launches

3) The Amazon Machine Image (AMI) you select - AMI defines the base OS

How, using security best practices, should your organization's team members access your AWS account resources? 1) Only a single team member should be given any account access 2) Through a jointly shared single account user who's been given full account-wide permission 3) Through the use of specifically created users, groups, and roles, each given the fewest permissions necessary 4) Ideally, resource access should occur only through the use of access keys

3) Through the use of specifically created users, groups, and roles, each given the fewest permissions necessary

Which AWS service allows you to build a script-like template representing complex resources stacks than can be used to launch precisely defined environments involving the full range of AWS resources? 1) LightSail 2) EC2 3) CodeDeploy 4) CloudFormation

4) CloudFormation

What service does AWS use to provide a Content Delivery Network (CDN) for its customers? 1) VPC peering 2) Internet gateway 3) Route 53 4) CouldFront

4) CloudFront - distributes content through its global network of edge locations

AWS customers get full access to the AWS Trusted Advisor best practice checks when they subscribe to which support plan(s)? 1) All plans get this level of support 2) Basic and Business 3) Business and Enterprise 4) Developer, Business, and Enterprise

4) Developer, Business, and Enterprise - All tier EXCEPT (Free) Basic Plan

Which of the following AWS storage services can make the most practical sense for petabype-sized archives that currently exist in your local data center? 1) Saving to a Glacier Vault 2) Saving to a Simple Storage Service (S3) bucket 3) Saving to an Elastic Block Storage (EBS) volume 4) Saving to an AWS Snowball device

4) Saving to an AWS Snowball device

The AWS Free Tier is designed to give new account holders the opportunity to get to know how their services work without necessarily costing any money. How does it work? 1) You get service credits that can be used to provision and launch a few typical workloads 2) You get full free access to a few core AWS services for one month 3) You get low-cost access to many core AWS services for three months 4) You get free lightweight access to many core AWS services for a full 12 months

4) You get free lightweight access to many core AWS services for a full 12 months

Cloud Computing

use of web services to perform functions that were traditionally performed with software on an individual computer; i.e. Flickr, Google Docs, etc.