Exam questions Flashcards by Martijn vanCitteren

You need to create and show rates to specific customers across a given period an alternate version of the monthly invoice information. What service should you use.

AWS Billing conductor

How well did you know this?

Not at all

Perfectly

You want to run a report where you can see a monthly cost breakdown by AWS Service and potential future cost.

Which tool do you need?

AWS Cost Explorer

How well did you know this?

Not at all

Perfectly

Which service retrieve key costs related to various AWS services

AWS Pricing API

How well did you know this?

Not at all

Perfectly

AWS Trusted Advisor recommends AutoScaling groups. With what Pilar does this align best

Sustainability

By autoscaling you prevent running instances that consumes eneergy that aren’t needed

How well did you know this?

Not at all

Perfectly

What is an IGW?

Internet Gateway

How well did you know this?

Not at all

Perfectly

What is a good option for block storage for EC2 that’s Scale able to petabyte level

EFS (Elastic File Systems) - it’s a managed file system that can scale to petabyte level

How well did you know this?

Not at all

Perfectly

You need to use AWS service for managing and automating tasks performed on many AWS CloudFormation Stacks. Which system would you use?

AWS Resource groups - is used for managing automating tasks performed on multiple resources at the same time.

How well did you know this?

Not at all

Perfectly

What is a private cloud deployment?

On-premises

How well did you know this?

Not at all

Perfectly

You need expert Guidance to meet security and compliance requirements to implement best practices for a migration. What service should you use?

AWS Security Competency Partners

How well did you know this?

Not at all

Perfectly

What is default number of VPC you can have within an individual region?

How well did you know this?

Not at all

Perfectly

What section of an IAM policy manages the behaviors?

Effects -

How well did you know this?

Not at all

Perfectly

What type of storage option is a regional service that gives you the ability to store and manages files within the AWS cloud?

Amazon EFS (Elastic File Systems) - its a regional service that allows you to create and manage file systems within the AWS cloud infrastructure.

How well did you know this?

Not at all

Perfectly

Name 2 AWS container orchestration tools

ECS (Elastic container Service)
EKS (Elastic Kubernetes Service)

How well did you know this?

Not at all

Perfectly

What security group gives the ability to manage permissions for several different users at once time while controlling access to specific AWS resources?

IAM groups, these group manages permissions for multiple users at one time.

How well did you know this?

Not at all

Perfectly

What is rehosting?

“lift and shift” - little to no changes are made to the application while moving the application to the cloud.

How well did you know this?

Not at all

Perfectly

What is replatforming?

“lift, thinker and shift” - for this strategy you need to change certain part of the application, but not the core of the app.

How well did you know this?

Not at all

Perfectly

What is repurchasing?

This is a strategy means you replace your old application with a completely new cloud based application.

How well did you know this?

Not at all

Perfectly

What database instance type is offered by Amazon RDS?

Oracle

When a VPC is created, it automatically comes with a route table that can be modified

this

What are 2 situations where you can Utilize AWS DynamoDB

When using a serverless Database System
When catering up to 45milion request per second

What AWS service you want to get insights to reduce the company carbon footprint, allign with with new ESG requirements?

AWS Data exchange - This service allows you to locate and use 3rd party information that is related to sustainability.

Which AWS Framework pillar is focused on continual improvement and refinement oof system resources over the complete infrastructure cycle

Cost optimization pillar – this pillar support improvements and efficiencies on the AWS full lifecycle.

Meet functional requirements while achieving the smallest price point

What is a key capability of an amazon S3 data lake architecture component?

Utilitzes a broad perspective of data science, data analytics and machinelearning in a centralized platform

What is a VPC Flow Log?

It gives you the ability to gather details about IP addresses going from and to different network components within your VPC. You can view these via CloudLog

What is AWS Direct Connect?

It's a private connection that links your remote network to an VPC. It's a link between your on-premise netwrok and your VPC

Which AWS Service should you use to reduce misreporting and non-compliance risk, save cost on cloud infra, and ensure non-compliant server usage is stopped before it occurss?

AWS license manager This service simplifies the management of software licenses from multiple vendors.

If you want to access the internet from your EC2 instance and not use an public IP adress, what netwrok component would you need?

NAT (network adress translation) Gateway

Which AWS service would you use to improve communication with your users that are located far from your existing AWS Regions?

CloudFront - AWS CloudFront is a Content Delivery Network (CDN) that caches copies of data at locations around the world near customers. To do this CloudFront uses Edge locations.

What DynamoDB Feature is an in-memory caching component that delivers microsecond responses for it's front-end applications?

DAX - DynamoDB Accelerator

Which Technologies should you use to securely connecting remote workers and on-premises networks to your AWS cloud?

AWS VPN - virtual private network

What security policy do you need to make sure a connection has the appropriate SSL security policy

Predefined Security Policy

How many internet Gateways (IGW) can be attached to an Amazon VPC?

1 - a virtual private cloud can only have one internet gateway attached at a time.

Which of the following elements do you need to access an AWS account programmatically?

1. Access Key ID 2. Secret Access Key

What are Elastic IP addresses (EIPs)?

is a static, public IPv4 address designed for dynamic cloud computing. You can associate an Elastic IP address with any instance or network interface in any VPC in your account. With an Elastic IP address, you can mask the failure of an instance by rapidly remapping the address to another instance in your VPC. - connected to 1 instance or network interface at the time - IPv6 is not supported -

What do you need to securely connect your on-premises systems to your VPC?

Virtual Private Gateway (VPG)

When you create and manage an Amazon RDS environment, there are no setup fees. How is the RDS environment billed?

By running time. It billed per hour of use (even if the RDS service is just running for 10 minutes)

What is AWS re:Post?

a portal that provides access to the AWS knowledge Center for troubleshooting, query resolution by an AWS employee and best practices.

Which of the following components can be used to identify the faulty EC2 instances?

Resource tagging, via this label you can indentify resources easily.

What is the difference between AWS Cost Explores and Pricing calculator

Cost explores is looking back of the costs you made in the last 12 months AWS pricing calculator gives an estimate of the cost that you will make when starting certain services

What AWS service automates evidence collection and perform risk and compliance management?

AWS Audit Manager

What is consider a security best practice for an operating system or application?

Create a primary function for the EC2 instance, such as separating web servers from database servers.

What type of internal AWs user can be created to mimic a service/application or person to access a resource?

an IAM User

What does Amazon recommend for protecting data in transit when you have a concern of accidental information disclosure?

IPSec ESP Data should be encrypted using Secure Sockets Layer/Transport Layer Securit (SSL/TLS) or IPSec ESP. IPsec ESP is an internet protocol security