CLF-C02(Ref EXM 6)

Question 1

What are the 6 pillars of a well-architected framework?

Answer 1

operational excellence, security, reliability, performance efficiency, cost optimization and sustainability.

Question 2

What is the purpose of AWS Trusted Advisor?

Answer 2

It helps you provision resources based on AWS best practices.

Question 3

What do AWS Trusted Advisor checks do?

Answer 3

Optimize your AWS infrastructure, increase security and performance, reduce your overall costs, and monitor service limits.

Question 4

What is a Security Group in AWS?

Answer 4

A security group acts as a virtual firewall for your Amazon EC2 instances to control incoming and outgoing traffic.

Question 5

What is a NACL?

Answer 5

Network Access Control List-It is an optional layer of security that controls traffic in and out of subnets acting as a firewall

Question 6

What is AWS LightSail?

Answer 6

LightSail provides developers with compute, storage, and networking capacity and capabilities to deploy and manage websites and web applications in the cloud. Very easy way to get started for AWS Developers

Question 7

What is AWS Partner Solutions(formerly Quick Starts)

Answer 7

AWS Partner Solutions are automated reference deployments for key workloads on the AWS Cloud. (reference deployment is well-documented and standardized configuration or setup of a software application, system, or service that serves as a guide or example for users or developers)

Question 8

What is CloudEndure Disaster Recovery

Answer 8

continuously replicates server-hosted applications and server-hosted databases from any source into AWS using block-level replication of the underlying server?

Question 9

What are the features of CloudEndure Disaster Recovery

Answer 9

1.Continuous replication
2.Low-cost staging area
3.Automated machine conversion and orchestration
4.Point-in-time recovery
5.Easy, non-disruptive drills
6.Wide application and infrastructure support

Question 10

What are 2 of the security best practices suggested by AWS for Identity and Access Management (IAM)

Answer 10

When you create IAM policies, grant the least privileges required to perform a task. Do not share security credentials between accounts, use IAM roles instead

Question 11

What is AWS CodeArtifact?

Answer 11

AWS CodeArtifact is a fully managed artifact repository service that makes it easy for organizations of any size to securely store, publish, and share software packages used in their software development process. Ended Q21

Question 12

What is AWS Config?

Answer 12

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations

Question 13

What is AWS CloudTrail?

Answer 13

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.

Question 14

What is AWS Cost Explorer?

Answer 14

AWS Cost Explorer lets you explore your AWS costs and usage at both a high level and at a detailed level of analysis, and empowering you to dive deeper using a number of filtering dimensions (e.g., AWS Service, Region, Member Account, etc.) AWS Cost Explorer also gives you access to a set of default reports to help you get started, while also allowing you to create custom reports from scratch.

Question 15

What is AWS Pricing Calculator?

Answer 15

AWS Pricing Calculator lets you explore AWS services and create an estimate for the cost of your use cases on AWS. You can model your solutions before building them, explore the price points and calculations behind your estimate, and find the available instance types and contract terms that meet your needs.

Question 16

What are the 2 types of savings plans offered by AWS?

Answer 16

Compute Savings Plans, EC2 Instance Savings Plans

Question 17

What is AWS Glue ?

Answer 17

AWS Glue is a serverless data integration service that makes it easy to discover, prepare, and combine data for analytics, machine learning, and application development. AWS Glue provides all of the capabilities needed for data integration, so you can start analyzing your data and putting it to use in minutes instead of months.

Question 18

What is Amazon Relational Database Service (Amazon RDS) ?

Answer 18

Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-efficient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching, and backups

Question 19

What is AWS Direct Connect?

Answer 19

AWS Direct Connect is a cloud service solution that makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacenter, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections. AWS Direct Connect does not encrypt your traffic that is in transit

Question 20

What is AWS Site-to-Site VPN?

Answer 20

AWS virtual private network (VPN) solutions establish secure connections between your on-premises networks, remote offices, client devices, and the AWS global network. AWS VPN is comprised of two services: AWS Site-to-Site VPN and AWS Client VPN. AWS Site-to-Site VPN creates encrypted tunnels between your network and your Amazon Virtual Private Clouds or AWS Transit Gateway(s).

Question 21

What is Amazon CloudFront?

Answer 21

Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds, all within a developer-friendly environment

Question 22

What are some disaster recovery Strategys

Answer 22

Pilot light strategy ,Multi-site active/active strategy,Warm standby strategy and Backup and restore strategy

Question 23

What is Amazon Aurora?

Answer 23

Amazon Aurora is a relational database engine that combines the speed and reliability of high-end commercial databases with the simplicity and cost-effectiveness of open-source databases. Amazon Aurora MySQL delivers up to five times the performance of MySQL without requiring any changes to most MySQL applications; similarly, Amazon Aurora PostgreSQL delivers up to three times the performance of PostgreSQL. Amazon RDS manages your Amazon Aurora databases, handling time-consuming tasks such as provisioning, patching, backup, recovery, failure detection, and repair

Question 24

What is the AWS Abuse team used for?

Answer 24

The AWS Abuse team can assist you when AWS resources are used to engage in the following types of abusive behavior: spam from AWS-owned IP addresses or AWS resources, port scanning, Denial-of-service (DoS) or DDoS from AWS-owned IP addresses, intrusion attempts, hosting objectionable or copyrighted content, distributing malware.

Question 25

What is Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering)?

Answer 25

Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering) is the only cloud storage class that delivers automatic cost savings by moving objects between four access tiers when access patterns change. The S3 Intelligent-Tiering storage class is designed to optimize costs by automatically moving data to the most cost-effective access tier, without operational overhead.

Question 26

What is AWS CloudTrail Insights?

Answer 26

AWS CloudTrail Insights helps AWS users identify and respond to unusual activity associated with write API calls by continuously analyzing CloudTrail management events.

Question 27

What is AWS Elastic Beanstalk used for?

Answer 27

You can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that runs those applications

Question 28

What is AWS Wavelength?

Answer 28

AWS Wavelength is an AWS Infrastructure offering optimized for mobile edge computing applications. Wavelength Zones are AWS infrastructure deployments that embed AWS compute and storage services within cloud service provider (CSP) data centers at the edge of the 5G network, so application traffic from 5G devices can reach application servers running in Wavelength Zones without leaving the telecommunications network.

Question 29

What is AWS Outposts?

Answer 29

AWS Outposts is a fully managed service that offers the same AWS infrastructure, AWS services, APIs, and tools to virtually any data center, co-location space, or on-premises facility for a truly consistent hybrid experience. AWS Outposts is ideal for workloads that require low latency access to on-premises systems, local data processing, data residency, and migration of applications with local system interdependencies.

Question 30

What is Amazon Elastic File System (Amazon EFS)?

Answer 30

Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS file system for use with AWS Cloud services and on-premises resources. It is built to scale on-demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove files, eliminating the need to provision and manage capacity to accommodate growth. Q52 Endpoint

Question 31

What is Amazon GuardDuty?

Answer 31

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts, workloads, and data stored in Amazon Simple Storage Service (Amazon S3)

Question 32

What is AWS Organizations?

Answer 32

AWS Organizations helps you centrally manage and govern your environment as you grow and scale your AWS resources.