Study Deck Flashcards
Learn about AWS
Which statement best describes an Availability Zone
A) A fully isolated portion of the AWS global infrastructure
B) A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location
C) The server from which Amazon CloudFront gets your files
D) A separate geographical location with multiple locations that are isolated from each other
A) A fully isolated portion of the AWS global infrastructure
An Availability Zone is a single data center or a group of data centers within a Region.
Availability Zones are located tens of miles apart from each other. This helps them to provide interconnectivity to support the services and applications that run within a Region.
Which compute option reduces costs when you commit to a consistent amount of compute usage for a 1-year or 3-year term?
A) Spot Instances
B) Dedicated Hosts
C) Savings Plans
D) Reserved Instances
C) Savings Plans
Amazon EC2 Savings Plans enable you to reduce your compute costs by committing to a consistent amount of compute usage for a 1-year or 3-year term. This results in savings of up to 72% over On-Demand Instance costs. Any usage up to the commitment is charged at the discounted Savings Plan rate (for example, $10 an hour). Any usage beyond the commitment is charged at regular On-Demand Instance rates.
Which service is used to quickly deploy and scale applications on AWS?
A) AWS Outposts
B) AWS Elastic Beanstalk
C) AWS Snowball
D) Amazon Cloud Front
B) AWS Elastic Beanstalk
You upload your application, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring.
Which tool enables you to visualize, understand, and manage your AWS costs and usage over time?
A) AWS Pricing Calculator
B) AWS Budgets
C) AWS Cost Explorer
D) AWS Artifact
C) AWS Cost Explorer
With AWS Cost Explorer, you can quickly create custom reports to analyze your AWS cost and usage data.
Which statement best describes Amazon GuardDuty?
A) A service that lets you monitor network requests that come into your web applications
B) A service that checks applications for security vulnerabilities and deviations from security best practices
C) A service that provides intelligent threat detection for your AWS infrastructure and resources
D) A service that helps protect your applications against distributed denial-of-service (DDoS) attacks
C) A service that provides intelligent threat detection for your AWS infrastructure and resources
AWS GuardDuty identifies threats by continually monitoring the network activity and account behavior within your AWS environment.
You want to store data in a key-value database. Which service should you use?
A) Amazon Aurora
B) Amazon RDS
C) Amazon DynamoDB
D) Amazon Document DB
C) Amazon DynamoDB
Amazon DynamoDB is a key-value database service. A key-value database might include data pairs such as “Name: John Doe,” “Address: 123 Any Street,” and “City: Anytown”.
You want to send and receive messages between distributed application components. Which service should you use?
A) Amazon ElastiCache
B) AWS Snowball
C) Amazon Simple Queue Service (SQS)
D) Amazon Route 53
C) Amazon Simple Queue Service (SQS)
Amazon SQS is a message queuing service. Using Amazon SQS, you can send, store, and receive messages between software components at any volume size, without losing messages or requiring other services to be available.
In the S3 Intelligent-Tiering storage class, Amazon S3 moves objects between a frequent access tier and an infrequent access tier. Which storage classes are used for these tiers? (Select TWO.)
A) S3 Glacier B) S3 One Zone-IA C) S3 Standard D) S3 Glacier Deep Archive E) S3 Standard-IA
C) S3 Standard
E) S3 Standard-IA
In the S3 Intelligent-Tiering storage class, Amazon S3 monitors objects’ access patterns. If you haven’t accessed an object for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, S3 Standard-IA. If you access an object in the infrequent access tier, Amazon S3 automatically moves it to the frequent access tier, S3 Standard.
Which service is used to transfer up to 100 PB of data to AWS? A) Amazon CloudFront B) AWS Snowmobile C) AWS DeepRacer D) Amazon Neptune
B) AWS Snowmobile
AWS Snowmobile is a service that is used for transferring up to 100 PB of data to AWS. Each Snowmobile is a 45-foot long shipping container that is pulled by a semi-trailer truck. It can transfer up to 100 PB of data.
Which tasks are the responsibilities of AWS? (Select TWO.)
A) Creating IAM users and groups
B) Training company employees on how to use AWS services
C) Configuring AWS infrastructure devices
D) Configuring security groups on Amazon EC2 instances
E) Maintaining virtualization infrastructure
C) Configuring AWS infrastructure devices
E) Maintaining virtualization infrastructure
The other three response options are tasks that are the responsibilities of customers.
Which pillar of the AWS Well-Architected Framework focuses on using computing resources in ways that meet system requirements?
A)Security
B)Reliability
C)Performance Efficiency
D)Operational Excellence
C)Performance Efficiency
The Performance Efficiency pillar focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.
Which service is used to run containerized applications on AWS?
A) Amazon Aurora
B) Amazon Elastic Kubernetes Service (Amazon EKS)
C) Amazon SageMaker
D) Amazon Redshift
B) Amazon Elastic Kubernetes Service (Amazon EKS)
Amazon EKS is a fully managed service that you can use to run Kubernetes on AWS. Kubernetes is open-source software that enables you to deploy and manage containerized applications at scale.
Containers provide you with a standard way to package your application’s code and dependencies into a single object. Containers are frequently used for processes and workflows in which there are essential requirements for security, reliability, and scalability.
Which Support plans include access to all AWS Trusted Advisor checks? (Select TWO.)
A)Developer B) Business C) AWS Free Tier D) Basic E) Enterprise
B) Business
E) Enterprise
The other response options are incorrect because:
The Basic and Developer Support plans provide access to a limited selection of AWS Trusted Advisor checks.
The AWS Free Tier is not a Support plan. It is a program that consists of three types of offers that allow customers to use AWS services without incurring costs: Always free, 12 months free, and Trials.
Which virtual private cloud (VPC) component controls inbound and outbound traffic for Amazon EC2 instances?
A) Network access control list
B) Internet gateway
C) Subnet
D) Security group
D) Security group
A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.
By default, a security group denies all inbound traffic and allows all outbound traffic. You can add custom rules to configure which traffic should be allowed or denied.
Which action can you perform in Amazon CloudFront?
A)Provision an isolated section of the AWS Cloud to launch resources in a virtual network that you define.
B) Provision resources by using programming languages or a text file.
C)Deliver content to customers through a global network of edge locations.
D) Run infrastructure in a hybrid cloud approach.
C)Deliver content to customers through a global network of edge locations.
It uses a network of edge locations to cache content and deliver content to customers all over the world. When content is cached, it is stored locally as a copy. This content might be video files, photos, webpages, and so on.
Which statement best describes Elastic Load Balancing?
A) A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances
B) A service that monitors your applications and automatically adds or removes capacity from your resource groups in response to changing demand
C) A service that provides data that you can use to monitor your applications, optimize resource utilization, and respond to system-wide performance changes
D) A service that enables you to set up, manage, and scale a distributed in-memory or cache environment in the cloud
A) A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances
A load balancer acts as a single point of contact for all incoming web traffic to your Auto Scaling group. This means that as Amazon EC2 instances are added or removed in response to the amount of incoming traffic, these requests are routed to the load balancer first and then spread across multiple resources that will handle them.
Which service enables you to consolidate and manage multiple AWS accounts from a central location?
A) AWS Organizations
B) AWS Artifact
C) AWS Identity and Access Management (IAM)
D) AWS Key Management Service (AWS KMS)
A) AWS Organizations
In AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies (SCPs). Additionally, you can use the consolidated billing feature in AWS Organizations to combine usage and receive a single bill for multiple AWS accounts.
Which actions can you perform in Amazon Route 53? (Select TWO.)
A) Connect user requests to infrastructure in AWS and outside of AWS.
B) Monitor your applications and respond to system-wide performance changes.
C) Automate the deployment of workloads into your AWS environment.
D) Manage DNS records for domain names.
E) Access AWS security and compliance reports and select online agreements
A) Connect user requests to infrastructure in AWS and outside of AWS.
D) Manage DNS records for domain names.
Amazon Route 53 is a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications that are hosted in AWS.
Additionally, you can transfer DNS records for existing domain names that are currently managed by other domain registrars, or register new domain names directly within Amazon Route 53.
You are running an Amazon EC2 instance and want to store data in an attached resource. Your data is temporary and will not be kept long term. Which resource should you use?
A) Instance store
B) Subnet
C) Amazon S3 bucket
D) Amazon Elastic Block Store (Amazon EBS) volume
A) Instance store
Instance stores are ideal for temporary data that does not need to be kept long term.
When an Amazon EC2 instance is stopped or terminated, all the data that has been written to the attached instance store is deleted.
Which migration strategy involves changing how an application is architected and developed, typically by using cloud-native features?
A) Refactoring
B) Replatforming
C) Rehosting
D) Repurchasing
A) Refactoring
Repurchasing involves replacing an existing application with a cloud-based version, such as software found in AWS Marketplace.
Rehosting involves moving an application to the cloud with little to no modifications to the application itself. It is also known as “lift and shift.”
Replatforming involves selectively optimizing aspects of an application to achieve benefits in the cloud without changing the core architecture of the application. It is also known as “lift, tinker, and shift.”
Which AWS Trusted Advisor category includes checks for your service limits and overutilized instances?
A) Security
B) Performance
C) Fault Tolerance
D) Cost Optimization
B) Performance
In this category, AWS Trusted Advisor also helps improve the performance of your services by providing recommendations for how to take advantage of provisioned throughput
Which service enables you to build the workflows that are required for human review of machine learning predictions?
A) Amazon Augmented AI
B) Amazon Aurora
C) Amazon Textract
D) Amazon Lex
A) Amazon Augmented AI
Amazon Augmented AI (Amazon A2I) provides built-in human review workflows for common machine learning use cases, such as content moderation and text extraction from documents. With Amazon A2I, you can also create your own workflows for machine learning models built on Amazon SageMaker or any other tools
You want Amazon S3 to monitor your objects’ access patterns. Which storage class should you use?
A) S3 Standard-IA
B) S3 Glacier
C) S3 Intelligent-Tiering
D) S3 One Zone-IA
C) S3 Intelligent-Tiering
In the S3 Intelligent-Tiering storage class, Amazon S3 monitors objects’ access patterns. If you haven’t accessed an object for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, S3 Standard-IA. If you access an object in the infrequent access tier, Amazon S3 automatically moves it to the frequent access tier, S3 Standard.
Which statement is TRUE for AWS Lambda?
A) The first step in using AWS Lambda is provisioning a server.
B) Before using AWS Lambda, you must prepay for your estimated compute time.
C) You pay only for compute time while your code is running.
D) To use AWS Lambda, you must configure the servers that run your code.
C) You pay only for compute time while your code is running.
AWS Lambda is a service that lets you run code without needing to provision or manage servers.
While using AWS Lambda, you pay only for the compute time that you consume. You are charged only when your code is running. With AWS Lambda, you can run code for virtually any type of application or backend service, all with zero administration.