AWS Cloud Certification Assessment
Which statement best describes AWS Marketplace? A resource that can answer questions about best practices and assist with troubleshooting issues An online tool that inspects your AWS environment and provides real-time guidance in accordance with AWS best practices A digital catalog that includes thousands of software listings from independent software vendors A resource that provides guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications
A digital catalog that includes thousands of listings from independent software vendors You can use AWS Marketplace to find, test, and buy software that runs on AWS. The other response options are incorrect because: A resource that can answer questions about best practices and assist with troubleshooting issues - This response option describes AWS Support. A resource that provides guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications - This response option describes a Technical Account Manager (TAM). An online tool that inspects your AWS environment and provides real-time guidance in accordance with AWS best practices - This response option describes AWS Trusted Advisor.
Which statement best describes an Availability Zone? The server from which Amazon CloudFront gets your files A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location A separate geographical location with multiple locations that are isolated from each other A fully isolated portion of the AWS global infrastructure
A fully isolated portion of the AWS global An Availability Zone is a single data center or a group of data centers within a Region. Availability Zones are located tens of miles apart from each other. This helps them to provide interconnectivity to support the services and applications that run within a Region. The other response options are incorrect because: A separate geographical location with multiple locations that are isolated from each other - This response option describes a Region. The server from which Amazon CloudFront gets your files - This response option describes an origin. A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location - This response option describes an Edge location.
Which statement best describes Elastic Load Balancing? A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances A service that provides data that you can use to monitor your applications, optimize resource utilization, and respond to system-wide performance changes A service that monitors your applications and automatically adds or removes capacity from your resource groups in response to changing demand A service that enables you to set up, manage, and scale a distributed in-memory or cache environment in the cloud
A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances. A load balancer acts as a single point of contact for all incoming web traffic to your Auto Scaling group. This means that as Amazon EC2 instances are added or removed in response to the amount of incoming traffic, these requests are routed to the load balancer first and then spread across multiple resources that will handle them. The other response options are incorrect because: A service that monitors your applications and automatically adds or removes capacity from your resource groups in response to changing demand - This response option describes AWS Auto Scaling. A service that provides data that you can use to monitor your applications, optimize resource utilization, and respond to system-wide performance changes - This response option describes Amazon CloudWatch. Although Elastic Load Balancing does optimize resource utilization by distributing incoming traffic across available resources, this would not be the best response option because Elastic Load Balancing does not provide all the other listed features. A service that enables you to set up, manage, and scale a distributed in-memory or cache environment in the cloud - This response option describes Amazon ElastiCache.
Which statement best describes Amazon GuardDuty? A service that lets you monitor network requests that come into your web applications A service that helps protect your applications against distributed denial-of-service (DDoS) attacks A service that checks applications for security vulnerabilities and deviations from security best practices A service that provides intelligent threat detection for your AWS infrastructure and resources
A service that provides intelligent threat detection for your AWS infrastructure and resources. AWS GuardDuty identifies threats by continually monitoring the network activity and account behavior within your AWS environment. The other response options are incorrect because: A service that helps protect your applications against distributed denial-of-service (DDoS) attacks - This response option describes AWS Shield. A service that checks applications for security vulnerabilities and deviations from security best practices - This response option describes Amazon Inspector. A service that lets you monitor network requests that come into your web applications - This response option describes AWS WAF.
Where can a user find information about prohibited actions on the AWS infrastructure? AWS Trusted Advisor AWS Identity and Access Management (IAM) AWS Billing Console AWS Acceptable Use Policy
AWS Acceptable Use Policy The AWS Acceptable Use Policy provides information regarding prohibited actions on the AWS infrastructure.
Which service can identify the user that made the API call when an Amazon EC2 instance is terminated? AWS Trusted Advisor AWS CloudTrail AWS X-Ray AWS Identity and Access Management (AWS IAM)
AWS CloudTrail AWS CloudTrail helps users enable governance, compliance, and operational and risk auditing of their AWS accounts. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail. Events include actions taken in the AWS Management Console, AWS Command Line Interface (CLI), and AWS SDKs and APIs.
Which service enables you to review details for user activities and API calls that have occurred within your AWS environment? Amazon Inspector AWS Trusted Advisor Amazon CloudWatch AWS CloudTrail
AWS CloudTrail With CloudTrail, you can view a complete history of user activity and API calls for your applications and resources. Events are typically updated in CloudTrail within 15 minutes after an API call was made. You can filter events by specifying the time and date that an API call occurred, the user who requested the action, the type of resource that was involved in the API call, and more. The other response options are incorrect because: Amazon CloudWatch is a service that provides data that you can use to monitor your applications, optimize resource utilization, and respond to system-wide performance changes. Amazon Inspector is a service that checks applications for security vulnerabilities and deviations from security best practices. AWS Trusted Advisor is an online tool that inspects your AWS environment and provides real-time guidance in accordance with AWS best practices.
Which tool is used to automate actions for AWS services and applications through scripts? Amazon QLDB AWS Command Line Interface Amazon Redshift AWS Snowball
AWS Command Line Interface The AWS Command Line Interface (AWS CLI) enables you to control multiple AWS services directly from the command line within one tool. For example, you can use commands to start an Amazon EC2 instance, connect an Amazon EC2 instance to a specific Auto Scaling group, and more. The AWS CLI is available for users on Windows, macOS, and Linux. The other response options are incorrect because: Amazon Redshift is a data warehousing service that you can use for big data analytics. It offers the ability to collect data from many sources and help you to understand relationships and trends across your data. Amazon Quantum Ledger Database (Amazon QLDB) is a ledger database service. You can use Amazon QLDB to review a complete history of all the changes that have been made to your application data. AWS Snowball is a device that enables you to transfer large amounts of data into and out of AWS.
Which tool enables you to visualize, understand, and manage your AWS costs and usage over time? AWS Budgets AWS Cost Explorer AWS Pricing Calculator AWS Artifact
AWS Cost Explorer With AWS Cost Explorer, you can quickly create custom reports to analyze your AWS cost and usage data. The other response options are incorrect because: AWS Budgets lets you set custom alerts that will notify you when your service usage exceeds (or is forecasted to exceed) the amount that you have budgeted. AWS Pricing Calculator lets you explore AWS services and create an estimate for the cost of your use cases on AWS. In the AWS Pricing Calculator, you can enter details for your cloud computing requirements and then receive a detailed estimate that can be exported and shared. AWS Artifact is a service that enables you to access AWS security and compliance reports and special online agreements.
Which AWS service would simplify the migration of a database to AWS? AWS Storage Gateway AWS Database Migration Service (AWS DMS) Amazon EC2 Amazon AppStream 2.0
AWS Database Migration Service (AWS DMS) AWS DMS helps users migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. AWS DMS can migrate data to and from most widely used commercial and open-source databases.
Which component or service enables you to establish a dedicated private connection between your data center and virtual private cloud (VPC)? Internet gateway Virtual private gateway Amazon CloudFront AWS Direct Connect
AWS Direct Connect AWS Direct Connect is a service that enables you to establish a dedicated private connection between your data center and VPC. The private connection that AWS Direct Connect provides helps you to reduce network costs and increase the amount of bandwidth that can travel through your network. The other response options are incorrect because: Amazon CloudFront is a content delivery service. It uses a network of edge locations to cache content and deliver content to customers all over the world. A virtual private gateway enables you to establish a virtual private network (VPN) connection between your VPC and a private network, such as an on-premises data center or internal corporate network. A virtual private gateway allows traffic into the VPC only if it is coming from an approved network. An internet gateway is a connection between a VPC and the internet. It allows public traffic from the internet to access a VPC.
Which service is used to quickly deploy and scale applications on AWS? AWS Outposts Amazon CloudFront AWS Snowball AWS Elastic Beanstalk
AWS Elastic Beanstalk You upload your application, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring. The other response options are incorrect because: AWS Outposts is a service that enables you to run infrastructure in a hybrid cloud approach. Amazon CloudFront is a content delivery service. AWS Snowball is a device that enables you to transfer large amounts of data into and out of AWS.
Which AWS offering enables users to find, buy, and immediately start using software solutions in their AWS environment? AWS Config AWS OpsWorks AWS SDK AWS Marketplace
AWS Marketplace AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that makes it easy to find, test, buy, and deploy software that runs on AWS.
Which service enables you to consolidate and manage multiple AWS accounts from a central location? AWS Artifact AWS Organizations AWS Key Management Service (AWS KMS) AWS Identity and Access Management (IAM)
AWS Organizations In AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs). Additionally, you can use the consolidated billing feature in AWS Organizations to combine usage and receive a single bill for multiple AWS accounts. The other response options are incorrect because: AWS Identity and Access Management (IAM) is a service that you can use to manage access to AWS services and resources. AWS Artifact is a service that enables you to access AWS security and compliance reports and special online agreements. AWS Key Management Service (AWS KMS) enables you to create, manage, and use cryptographic keys.
Which service is used to transfer up to 100 PB of data to AWS? Amazon CloudFront Amazon Neptune AWS Snowmobile AWS DeepRacer
AWS Snowmobile AWS Snowmobile is a service that is used for transferring up to 100 PB of data to AWS. Each Snowmobile is a 45-foot long shipping container that is pulled by a semi-trailer truck. The other response options are incorrect because: Amazon Neptune is a graph database service. You can use Amazon Neptune to build and run applications that work with highly connected datasets, such as recommendation engines, fraud detection, and knowledge graphs. Amazon CloudFront is a content delivery service. AWS DeepRacer is an autonomous 1/18 scale race car that you can use to test reinforcement learning models.
Which service enables you to build the workflows that are required for human review of machine learning predictions? Amazon Aurora Amazon Lex Amazon Textract Amazon Augmented AI
Amazon Augmented AI Amazon Augmented AI (Amazon A2I) provides built-in human review workflows for common machine learning use cases, such as content moderation and text extraction from documents. With Amazon A2I, you can also create your own workflows for machine learning models built on Amazon SageMaker or any other tools. The other response options are incorrect because: Amazon Textract is a machine learning service that automatically extracts text and data from scanned documents. Amazon Lex is a service that enables you to build conversational interfaces using voice and text. Amazon Aurora is an enterprise-class relational database.
You want to store data in a key-value database. Which service should you use? Amazon RDS Amazon Aurora Amazon DynamoDB Amazon DocumentDB
Amazon DynamoDB Amazon DynamoDB is a key-value database service. A key-value database might include data pairs such as "Name: John Doe," "Address: 123 Any Street," and "City: Anytown". In a key-value database, you can add or remove attributes from items in the table at any time. Additionally, not every item in the table has to have the same attributes. The other response options are incorrect because: Amazon Relational Database Service (Amazon RDS) and Amazon Aurora use structured query language (SQL) to store and query data. They are not key-value databases. Amazon DocumentDB is a document database service that supports MongoDB workloads.
Why is AWS more economical than traditional data centers for applications with varying compute workloads? Amazon EC2 costs are billed on a monthly basis. Users retain full administrative access to their Amazon EC2 instances. Amazon EC2 instances can be launched on demand when needed. Users can permanently run enough instances to handle peak workloads.
Amazon EC2 instances can be launched on demand when needed. The ability to launch instances on demand when needed allows users to launch and terminate instances in response to a varying workload. This is a more economical practice than purchasing enough on-premises servers to handle the peak load.
You want to store data in a volume that is attached to an Amazon EC2 instance. Which service should you use? Amazon Elastic Block Store (Amazon EBS) Amazon ElastiCache Amazon Simple Storage Service (Amazon S3) AWS Lambda
Amazon Elastic Block Store (Amazon EBS) Amazon EBS provides block-level storage volumes that you can use with Amazon EC2 instances. If you stop or terminate an Amazon EC2 instance, all the data on the attached EBS volume remains available. The other response options are incorrect because: Amazon Simple Storage Service (Amazon S3) is a service that provides object-level storage. Amazon S3 stores data as objects within buckets. AWS Lambda is a service that lets you run code without provisioning or managing servers. Amazon ElastiCache is a service that adds caching layers on top of your databases to help improve the read times of common requests.
Which service is used to run containerized applications on AWS? Amazon SageMaker Amazon Elastic Kubernetes Service (Amazon EKS) Amazon Redshift Amazon Aurora
Amazon Elastic Kubernetes Service (Amazon EKS) Amazon EKS is a fully managed service that you can use to run Kubernetes on AWS. Kubernetes is open-source software that enables you to deploy and manage containerized applications at scale. Containers provide you with a standard way to package your application's code and dependencies into a single object. Containers are frequently used for processes and workflows in which there are essential requirements for security, reliability, and scalability. The other response options are incorrect because: Amazon SageMaker is a service that enables you to quickly build, train, and deploy machine learning models. Amazon Aurora is an enterprise-class relational database. Amazon Redshift is a data warehousing service that you can use for big data analytics.
Which service would be used to send alerts based on Amazon CloudWatch alarms? Amazon Simple Notification Service (Amazon SNS) AWS CloudTrail AWS Trusted Advisor Amazon Route 53
Amazon Simple Notification Service (Amazon SNS) Amazon SNS and Amazon CloudWatch are integrated so users can collect, view, and analyze metrics for every active SNS. Once users have configured CloudWatch for Amazon SNS, they can gain better insight into the performance of their Amazon SNS topics, push notifications, and SMS deliveries.
You want to send and receive messages between distributed application components. Which service should you use? AWS Snowball Amazon Route 53 Amazon Simple Queue Service (Amazon SQS) Amazon ElastiCache
Amazon Simple Queue Service (Amazon SQS) Amazon SQS is a message queuing service. Using Amazon SQS, you can send, store, and receive messages between software components at any volume size, without losing messages or requiring other services to be available. In Amazon SQS, an application sends messages into a queue. A user or service retrieves a message from the queue, processes it, and then deletes it from the queue. The other response options are incorrect because: AWS Snowball is a device that enables you to transfer large amounts of data into and out of AWS. Amazon ElastiCache is a service that adds caching layers on top of your databases to help improve the read times of common requests. Amazon Route 53 is a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications that are hosted in AWS. Additionally, you can transfer DNS records for existing domain names that are currently managed by other domain registrars or register new domain names directly in Amazon Route 53.
Which AWS networking service enables a company to create a virtual network within AWS? AWS Config Amazon Route 53 AWS Direct Connect Amazon Virtual Private Cloud (Amazon VPC)
Amazon Virtual Private Cloud (Amazon VPC) Amazon VPC lets users provision a logically isolated section of the AWS Cloud where users can launch AWS resources in a virtual network that they define.
Which actions can you perform in Amazon Route 53? (Select TWO.) Automate the deployment of workloads into your AWS environment. Connect user requests to infrastructure in AWS and outside of AWS. Manage DNS records for domain names. Monitor your applications and respond to system-wide performance changes. Access AWS security and compliance reports and select online agreements.
Connect user requests to infrastructure in AWS and outside of AWS. Manage DNS records for domain names. Amazon Route 53 is a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications that are hosted in AWS. Additionally, you can transfer DNS records for existing domain names that are currently managed by other domain registrars, or register new domain names directly within Amazon Route 53. The other response options are incorrect because: Monitor your applications and respond to system-wide performance changes - These actions can be performed in Amazon CloudWatch. Access AWS security and compliance reports and special online agreements - This action can be performed in AWS Artifact. Automate the deployment of workloads into your AWS environment - This action can be performed with AWS Quick Starts.
Which action can you perform in Amazon CloudFront? Deliver content to customers through a global network of edge locations. Provision resources by using programming languages or a text file. Run infrastructure in a hybrid cloud approach. Provision an isolated section of the AWS Cloud to launch resources in a virtual network that you define.
Deliver content to customers through a global network of edge locations. Amazon CloudFront is a content delivery service. It uses a network of edge locations to cache content and deliver content to customers all over the world. When content is cached, it is stored locally as a copy. This content might be video files, photos, webpages, and so on. The other response options are incorrect because: Run infrastructure in a hybrid cloud approach - This action can be performed with AWS Outposts. Provision resources by using programming languages or a text file - This action can be performed in AWS CloudFormation. Provision an isolated section of the AWS Cloud to launch resources in a virtual network that you define - This action can be performed in Amazon Virtual Private Cloud (Amazon VPC).
Which component of the AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery? AWS Regions Edge locations Availability Zones Virtual Private Cloud (VPC)
Edge locations To deliver content to users with lower latency, Amazon CloudFront uses a global network of points of presence (edge locations and regional edge caches) worldwide.
How would a system administrator add an additional layer of login security to a user's AWS Management Console? Use Amazon Cloud Directory Audit AWS Identity and Access Management (IAM) roles Enable multi-factor authentication Enable AWS CloudTrail
Enable multi-factor authentication Multi-factor authentication (MFA) is a simple best practice that adds an extra layer of protection on top of a username and password. With MFA enabled, when a user signs in to an AWS Management Console, they will be prompted for their username and password (the first factor—what they know), as well as for an authentication code from their MFA device (the second factor—what they have). Taken together, these multiple factors provide increased security for AWS account settings and resources.
Which Support plans include access to all AWS Trusted Advisor checks? (Select TWO.) Enterprise Basic AWS Free Tier Developer Business
Enterprise Business The other response options are incorrect because: The Basic and Developer Support plans provide access to a limited selection of AWS Trusted Advisor checks. The AWS Free Tier is not a Support plan. It is a program that consists of three types of offers that allow customers to use AWS services without incurring costs: Always free, 12 months free, and Trials.
You are running an Amazon EC2 instance and want to store data in an attached resource. Your data is temporary and will not be kept long term. Which resource should you use? Instance store Amazon Elastic Block Store (Amazon EBS) volume Subnet Amazon S3 bucket
Instance store Instance stores are ideal for temporary data that does not need to be kept long term. When an Amazon EC2 instance is stopped or terminated, all the data that has been written to the attached instance store is deleted. The other response options are incorrect because: Amazon EBS volumes are ideal for data that needs to be retained. When an Amazon EC2 instance is stopped or terminated, all of the data on the attached EBS volume is still available. Amazon S3 buckets cannot be attached to Amazon EC2 instances. A subnet is a section of a virtual private cloud (VPC) in which you can group resources based on security or operational needs.
Which of the following is an AWS responsibility under the AWS shared responsibility model? Configuring third-party applications Maintaining physical hardware Securing application access and data Managing guest operating systems
Maintaining physical hardware Maintaining physical hardware is an AWS responsibility under the AWS shared responsibility model.
Which tasks are the responsibilities of AWS? (Select TWO.) Configuring security groups on Amazon EC2 instances Creating IAM users and groups Maintaining virtualization infrastructure Configuring AWS infrastructure devices Training company employees on how to use AWS services
Maintaining virtualization infrastructure Configuring AWS infrastructure devices The other three response options are tasks that are the responsibilities of customers.
Which Perspective of the AWS Cloud Adoption Framework focuses on recovering IT workloads to meet the requirements of your business stakeholders? Governance Perspective Business Perspective People Perspective Operations Perspective
Operations Perspective The Operations Perspective of the AWS Cloud Adoption Framework also includes principles for operating in the cloud by using agile best practices. The other response options are incorrect because: The Business Perspective helps you to move from a model that separates business and IT strategies into a business model that integrates IT strategy. The People Perspective helps Human Resources (HR) employees prepare their teams for cloud adoption by updating organizational processes and staff skills to include cloud-based competencies. The Governance Perspective helps you understand how to update the staff skills and organizational processes that are necessary to ensure business governance in the cloud.
Which AWS Trusted Advisor category includes checks for your service limits and overutilized instances? Security Fault Tolerance Performance Cost Optimization
Performance In this category, AWS Trusted Advisor also helps improve the performance of your services by providing recommendations for how to take advantage of provisioned throughput. The other response options are incorrect because: The Security category includes checks that help you to review your permissions and identify which AWS security features to enable. The Cost Optimization category includes checks for unused or idle resources that could be eliminated and provide cost savings. The Fault Tolerance category includes checks to help you improve your applications' availability and redundancy.
Which pillar of the AWS Well-Architected Framework focuses on using computing resources in ways that meet system requirements? Performance Efficiency Operational Excellence Reliability Security
Performance Efficiency The Performance Efficiency pillar focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve. The other responses are incorrect because: The Operational Excellence pillar includes the ability to run workloads effectively, gain insights into their operations, and continuously improve supporting processes to deliver business value. The Security pillar focuses on protecting data, systems, and assets. It also focuses on using cloud technologies to improve the security of your workloads. The Reliability pillar focuses on the ability of a workload to consistently and correctly perform its intended functions.
Which migration strategy involves changing how an application is architected and developed, typically by using cloud-native features? Repurchasing Refactoring Rehosting Replatforming
Refactoring The other response options are incorrect because: Repurchasing involves replacing an existing application with a cloud-based version, such as software found in AWS Marketplace. Rehosting involves moving an application to the cloud with little to no modifications to the application itself. It is also known as "lift and shift." Replatforming involves selectively optimizing aspects of an application to achieve benefits in the cloud without changing the core architecture of the application. It is also known as "lift, tinker, and shift."
You want Amazon S3 to monitor your objects' access patterns. Which storage class should you use? S3 Standard-IA S3 Intelligent-Tiering S3 One Zone-IA S3 Glacier
S3 Intelligent-Tiering In the S3 Intelligent-Tiering storage class, Amazon S3 monitors objects' access patterns. If you haven't accessed an object for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, S3 Standard-IA. If you access an object in the infrequent access tier, Amazon S3 automatically moves it to the frequent access tier, S3 Standard. The other response options are incorrect because: S3 Glacier is a low-cost storage class that is ideal for data archiving. You can retrieve objects stored in the S3 Glacier storage class within a few minutes to a few hours. The S3 Standard-IA storage class is ideal for data that is infrequently accessed but requires high availability when needed. Both S3 Standard and S3 Standard-IA store data in a minimum of three Availability Zones. S3 Standard-IA provides the same level of availability as S3 Standard but at a lower storage price. S3 One Zone-IA is ideal for infrequently accessed data that does not require high availability.
In the S3 Intelligent-Tiering storage class, Amazon S3 moves objects between a frequent access tier and an infrequent access tier. Which storage classes are used for these tiers? (Select TWO.) S3 Glacier Deep Archive S3 One Zone-IA S3 Glacier S3 Standard-IA S3 Standard
S3 Standard S3 Standard-IA In the S3 Intelligent-Tiering storage class, Amazon S3 monitors objects' access patterns. If you haven't accessed an object for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, S3 Standard-IA. If you access an object in the infrequent access tier, Amazon S3 automatically moves it to the frequent access tier, S3 Standard.
Which compute option reduces costs when you commit to a consistent amount of compute usage for a 1-year or 3-year term? Spot Instances Savings Plans Reserved Instances Dedicated Hosts
Savings Plans Amazon EC2 Savings Plans enable you to reduce your compute costs by committing to a consistent amount of compute usage for a 1-year or 3-year term. This results in savings of up to 72% over On-Demand Instance costs. Any usage up to the commitment is charged at the discounted Savings Plan rate (for example, $10 an hour). Any usage beyond the commitment is charged at regular On-Demand Instance rates. The other response options are incorrect because: Reserved Instances are a billing discount that is applied to the use of On-Demand Instances in your account. You can purchase Standard Reserved and Convertible Reserved Instances for a one-year or three-year term, and Scheduled Reserved Instances for a one-year term. Unlike Savings Plans, Reserved Instances do not require you to commit to a consistent amount of compute usage over the duration of the contract. Spot Instances are ideal for workloads with flexible start and end times or that can withstand interruptions. Spot Instances leverage unused EC2 computing capacity and offer you cost savings at up to 90% of On-Demand Instance prices. Dedicated Hosts are physical servers with EC2 instance capacity that is fully dedicated to your use. You can use your existing per-socket, per-core, or per-VM software licenses to help maintain license compliance. You can purchase On-Demand Dedicated Hosts or Reserved Dedicated Hosts. Of all the Amazon EC2 options that were covered in this course, Dedicated Hosts are the most expensive.
Which virtual private cloud (VPC) component controls inbound and outbound traffic for Amazon EC2 instances? Security group Network access control list Subnet Internet gateway
Security group A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. By default, a security group denies all inbound traffic and allows all outbound traffic. You can add custom rules to configure which traffic should be allowed or denied. The other response options are incorrect because: A subnet is a section of a VPC in which you can group resources based on security or operational needs. A network access control list (ACL) is a virtual firewall that controls inbound and outbound traffic at the subnet level. An internet gateway is a connection between a VPC and the internet. It allows public traffic from the internet to access a VPC.
Which statement is TRUE for AWS Lambda? The first step in using AWS Lambda is provisioning a server. Before using AWS Lambda, you must prepay for your estimated compute time. To use AWS Lambda, you must configure the servers that run your code. You pay only for compute time while your code is running.
You pay only for compute time while your code is running AWS Lambda is a service that lets you run code without needing to provision or manage servers. While using AWS Lambda, you pay only for the compute time that you consume. You are charged only when your code is running. With AWS Lambda, you can run code for virtually any type of application or backend service, all with zero administration.
