Revision 2

Question 1

Allows to connect to AWS Services using a private network. instead of www

Answer 1

VPC Endpoints
-enhanced security
-lower latency

Question 2

VPC Endpoint for S3 and Dynamo DB

Answer 2

VPC Endpoint Gateway

Question 3

VPC Enpoint to connect to the rest of AWS Sercvices

Answer 3

VPC Endpoint Interface

Question 4

Most secure way to expose a service to 1000s of VPC

Answer 4

Private Link

Question 5

Necessary for a Private Link

Answer 5

-Service: Network Load Balancer
-Consumer: Elastic Network Interface

Question 6

Connect on-prem to AWS over the public internet, connection encrypted

Answer 6

Site to Site VPN

Question 7

Physical connection between on-prem and AWS over the private network , private,secure, fast,

Answer 7

Direct Connect DX

Question 8

Necessary for a site to site VPN

Answer 8

On-prem: Customer Gateway
AWS: Virtual Private Gateway

Question 9

Connect computer to EC2 over a private IP

Answer 9

AWS Client VPN
-using Open VPN
-over public internet
-could use the site to site to speak to on-prem

Question 10

Use with
-A transit gateway when you have multiple VPCs in the same Region
-A virtual private gateway

Answer 10

AWS Direct Connect Gateway

Question 11

Six Pillars of the Well Architected Framework

Answer 11

-Operational Excellence
-Security
-Reliability
-Performance Efficiency
-Cost Optimization
-Sustainability

Question 12

Well Architected Framework Genera Guiding Principles

Answer 12

-Stop guessing capacity needs
-Test systems at production scale
- Automate to make architectural experimentation easier
-Allow for evolutionary architectures
-Design based on changing requirements
-Drive architectures using data
-Improve through game days
-stress system

Question 13

Cloud best practices design principles

Answer 13

-Scalability
-Disposable resources
-Automation
-Loose coupling
-Services not servers

Question 14

Operational Excellence Design Principles

Answer 14

-Perform operations as code - (Cloud Formation)
-Annotate documentation
-Make frequent, small, reversible changes
-Refine operation procedures frequently
-Anticipate failure

Question 15

Operational excellence design principles as Services

Answer 15

-Prepare
CloudFormation / Config
-Operate
CloudFormation / Config / CloudTrail / CloudWatch / Xray
-Evolve
CloudFormation / CICD services - Code…

Question 16

Trace HTTP requests

Answer 16

AWS X-RAY

Question 17

Security Design Principles

Answer 17

-Strong identity foundation
-Enable traceability
-Apply security at all levels
-Automate security best practices
-Protect data in transit and at rest
-Keep people away from data
-Prepare for security events

Question 18

Security Design principles in services

Answer 18

-Identity and Access Management
IAM / AWS-STS / MFA Token / AWS Organization
-Detective Controls
Config / Cloud Trail / CloudWatch
-Infrastructure Protection
-Data protection
-Incident Response

-Infrastructure Protection

Question 19

Reliability Design Principles

Answer 19

-Test recovery procedures
-Automatically recover from failure
-Scale horizontally to increase availability
-Stop guessing capacity
-Manage change in automation

Question 20

Reliability services

Answer 20

-Foundations
IAM / VPC / Service Limits “Quotas” / Trusted Advisor
-Change Management
-Failure Management

Question 21

Performance Efficiency Design Principles

Answer 21

-Democratize advanced technologies
-Go global in minutes
-Use serverless architecture
-Experiment more often

Question 22

Performance Eficiency Services

Answer 22

-Selection
-Review
-Monitoring
-Tradeoffs

Question 23

Cost Optimization Design Principles

Answer 23

-Adopt a consumption model
-Measure overall efficiency
-Stop spending on data centre operations
-Analyze and attribute expenditure
-Use managed and application-level services to reduce the cost of ownership

Question 24

Cost Optimization Services

Answer 24

-Expenditure Awareness
-Cost-Effective Resources
-Matching supply and demand
-Optimizing overtime

Question 25

Sustainability Design Principle

Answer 25

-Understand your impact
-Establish sustainability goals
-Anticipate and adop new, more efficient hardware and software