whizlab incorrect answers Flashcards

Question

Which of the following are the things that Amazon CloudWatch Logs can accomplish? (Select TWO.) Create alarms that automatically stop, terminate, reboot, or recover your EC2 instances. Record AWS Management Console actions and API calls. Adjust the retention policy for each log group. Store your log data at absolutely no charge. Monitor application logs from Amazon EC2 Instances.

Answer 1

Monitor application logs from Amazon EC2 Instances. Adjust the retention policy for each log group. You can use Amazon CloudWatch Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, Route 53, and other sources. The option that says: record AWS Management Console actions and API calls is incorrect because this refers to CloudTrail and not CloudWatch Logs. The option that says: create alarms that automatically stop, terminate, reboot, or recover your EC2 instances is incorrect because this is actually a task that can be accomplished by CloudWatch Alarms. The option that says: store your log data at absolutely no charge is incorrect because this service is not entirely free and you still have to pay for your usage.

Answer 2

Amazon EBS and Amazon RDS

Answer 3

Amazon Rekognition. Amazon Macie is incorrect because it is a security service and not suitable for visual analysis. It uses machine learning to automatically discover, classify, and protect sensitive data in AWS. Amazon SageMaker is incorrect because this is a service that provides every developer and data scientist with the ability to build, train, and deploy machine learning models quickly in AWS. Amazon CloudSearch is incorrect because this service is used to set up, manage, and scale a search solution for your website or application in AWS.

Answer 4

Amazon Rekognition. Amazon Macie is incorrect because it is a security service and not suitable for visual analysis. It uses machine learning to automatically discover, classify, and protect sensitive data in AWS. Amazon SageMaker is incorrect because this is a service that provides every developer and data scientist with the ability to build, train, and deploy machine learning models quickly in AWS. Amazon CloudSearch is incorrect because this service is used to set up, manage, and scale a search solution for your website or application in AWS.

Answer 5

Create a case in the AWS Support Center page and request a service limit increase.

Answer 6

Create a case in the AWS Support Center page and request a service limit increase.

Answer 7

– Amazon RDS – Amazon Aurora

Answer 8

– Amazon RDS – Amazon Aurora

Answer 9

AWS Personal Health Dashboard

Answer 10

AWS X-Ray. Amazon CloudWatch is incorrect. Although you can troubleshoot the issue by checking the logs, it is still better to use AWS X-Ray as it enables you to analyze and debug your serverless application more effectively. Amazon Inspector is incorrect because this is primarily used for EC2 and not for Lambda. AWS CloudTrail is incorrect because this will only enable you to track all API calls to your Lambda, DynamoDB, and SNS. It is still better to use AWS X-Ray to debug your application.

Answer 11

Decouple your components

Answer 12

Upgrade to Enterprise support plan.

Answer 13

Amazon Cognito Identity Pool. Amazon Cognito User Pool is incorrect because a user pool is a user directory in Amazon Cognito. In addition, it doesn’t enable access to unauthenticated identities. You have to use an Identity Pool instead. Amazon Cognito Sync is incorrect because this is a client library that enables cross-device syncing of application-related user data. AWS Single Sign-On is incorrect because this service lets you centrally manage SSO access to multiple AWS accounts. It also does not allow any “guest” or unauthenticated access, unlike Amazon Cognito.

Answer 14

Amazon Cognito Identity Pool. Amazon Cognito User Pool is incorrect because a user pool is a user directory in Amazon Cognito. In addition, it doesn’t enable access to unauthenticated identities. You have to use an Identity Pool instead. Amazon Cognito Sync is incorrect because this is a client library that enables cross-device syncing of application-related user data. AWS Single Sign-On is incorrect because this service lets you centrally manage SSO access to multiple AWS accounts. It also does not allow any “guest” or unauthenticated access, unlike Amazon Cognito.

Answer 15

Amazon GuardDuty

Answer 16

Configure MFA delete on the S3 bucket. The option that says: Set up stricter IAM policies that will prevent users from deleting S3 objects is incorrect because you can prevent unwanted deletion by removing the permission from IAM Users. However, in this case, the issue is caused by unauthorized access to the account which had the capability of deleting objects. This will totally restrict the authorized users from deleting necessary objects. The option that says: Create access control policies so that only you can perform S3-related actions is incorrect because this will not prevent unauthorized access to AWS accounts. The option that says: Set your S3 buckets to private so that objects are not publicly readable/writable is incorrect because this is unrelated to the issue in this case.

Answer 17

Configure MFA delete on the S3 bucket. The option that says: Set up stricter IAM policies that will prevent users from deleting S3 objects is incorrect because you can prevent unwanted deletion by removing the permission from IAM Users. However, in this case, the issue is caused by unauthorized access to the account which had the capability of deleting objects. This will totally restrict the authorized users from deleting necessary objects. The option that says: Create access control policies so that only you can perform S3-related actions is incorrect because this will not prevent unauthorized access to AWS accounts. The option that says: Set your S3 buckets to private so that objects are not publicly readable/writable is incorrect because this is unrelated to the issue in this case.

Answer 18

Physical and environmental controls. Implementing IAM policies and Applying Amazon S3 bucket policies are both incorrect because these are the responsibilities of the customer and not AWS. Patch Management is incorrect because this is actually a shared control between AWS and the customer.

Answer 19

– Grant Least Privilege – Lock away your AWS account root user access keys

Answer 20

– Grant Least Privilege – Lock away your AWS account root user access keys

Answer 21

– Bucket policies – User policies

Answer 22

Use the Multipart Upload API. The option that says: Use the BatchWriteItem API is incorrect because this is a DynamoDB API action and not S3. The option that says: Shift to S3 Intelligent-Tiering storage class is incorrect because this is primarily used to optimize your storage costs automatically based on your data access patterns without performance impact or operational overhead. The option that says: Enable Cross-Origin Resource Sharing (CORS) is incorrect because this is only applicable for client web applications that are loaded in one domain to interact with resources in a different domain.

Answer 23

Use the Multipart Upload API. The option that says: Use the BatchWriteItem API is incorrect because this is a DynamoDB API action and not S3. The option that says: Shift to S3 Intelligent-Tiering storage class is incorrect because this is primarily used to optimize your storage costs automatically based on your data access patterns without performance impact or operational overhead. The option that says: Enable Cross-Origin Resource Sharing (CORS) is incorrect because this is only applicable for client web applications that are loaded in one domain to interact with resources in a different domain.

Answer 24

AWS Snowball Edge. AWS Snowmobile is incorrect because this is primarily used to migrate tens of petabytes to exabytes of data in batches to the cloud. AWS Snowcone is incorrect. Although it is a data transport solution like Snowball Edge, it is not suitable for moving terabytes to petabytes of data. Take note that the usable storage for Snowcone is only 8 TB. Lambda@Edge is incorrect because this is just a feature of Amazon CloudFront that lets you run code closer to users of your application, which improves performance and reduces latency

Answer 25

AWS Snowball Edge. AWS Snowmobile is incorrect because this is primarily used to migrate tens of petabytes to exabytes of data in batches to the cloud. AWS Snowcone is incorrect. Although it is a data transport solution like Snowball Edge, it is not suitable for moving terabytes to petabytes of data. Take note that the usable storage for Snowcone is only 8 TB. Lambda@Edge is incorrect because this is just a feature of Amazon CloudFront that lets you run code closer to users of your application, which improves performance and reduces latency

Answer 26

Create an IAM role and have the application assume the role. The option that says: Create an IAM user with access keys and assign it to the application is incorrect because an IAM User is primarily used for long-term credentials, not for temporary access. The option that says: Create an IAM group that has access to the resources, and add the application there is incorrect because an IAM Group does not provide temporary access credentials. The option that says: Create an IAM policy that allows the application to access the resources, and attach the policy to the application is incorrect because IAM policies are not entities that have credentials in AWS.

Answer 27

Transfer of EC2 files between two AWS Regions. The option that says: Network charges for the transfer of data from your data center to S3 through a VPN is incorrect because the data coming in from your data center to AWS does not incur you charges. The option that says: Provisioning Elastic IPs and attaching them to running EC2 instances is incorrect because Elastic IPs are only charged if they are not attached to running instances. The option that says: Setting up additional VPCs in your account is incorrect because VPCs are free to use in AWS.

Answer 28

Transfer of EC2 files between two AWS Regions. The option that says: Network charges for the transfer of data from your data center to S3 through a VPN is incorrect because the data coming in from your data center to AWS does not incur you charges. The option that says: Provisioning Elastic IPs and attaching them to running EC2 instances is incorrect because Elastic IPs are only charged if they are not attached to running instances. The option that says: Setting up additional VPCs in your account is incorrect because VPCs are free to use in AWS.

Answer 29

Use a Windows Server with SQL Server Standard bundled AMI so you won’t need to buy and manage your own license. The option that says: Launch an EC2 instance and install MS SQL Server. Purchase a Standard MSSQL license from Microsoft and apply it to the database you installed is incorrect since this is not the most convenient method of launching an MS SQL Server in AWS. You typically use this solution if you already have a SQL Server license and you prefer to BYOL (bring your own license). The option that says: Launch an RDS instance that runs MS SQL Server Standard. Purchase a Standard MSSQL license and store it in the AWS Managed Services (AMS) is incorrect. It is explicitly stated in the scenario that the database instance should only be managed by the company’s DBA and must be accessible via RDP. You cannot directly establish an RDS connection to an Amazon RDS database. In addition, Amazon RDS costs more than Amazon EC2 because the infrastructure is managed by AWS. The option that says: Launch an Amazon Aurora database that runs MS SQL Server. Buy a Standard MSSQL license from the AWS License Manager service is incorrect since Amazon Aurora does not support MS SQL Server. Moreover, you cannot directly buy software licenses from the AWS License Manager service. This is just used to easily manage your software licenses from various vendors such as Microsoft, SAP, Oracle, and IBM across AWS and on-premises environments.

Answer 30

Provides a 1-hour response time support if your production system goes down. The option that says: Provides a 15-minute response time support if your production system goes down is incorrect because the Business support plan only provides a 1-hour response time and not 15 minutes. The option that says: Provides a 15-minute response time support if your business-critical system goes down is incorrect because this high level of support is only available for Enterprise support plan. The option that says: Provides a 1-hour response time support if your production system got impaired is incorrect because the Business support plan only gives you a 4-hour response time and not an hour in the event that your production system got impaired.

Answer 31

Focus your valuable IT resources on developing applications that differentiate your business rather than managing infrastructure and data centers.

Answer 32

Focus your valuable IT resources on developing applications that differentiate your business rather than managing infrastructure and data centers.

Answer 33

When you create a trail in the AWS Management Console, the trail applies to all AWS Regions by default. The option that says: CloudTrail is disabled by default for newly created AWS accounts is incorrect because AWS CloudTrail is now enabled by default for ALL CUSTOMERS and will provide visibility into the past seven days of account activity without the need for you to configure a trail in the service to get started. The option that says: CloudTrail is able to capture application error logs from your EC2 is incorrect because CloudTrail actually does not capture error logs in your EC2 instances. You may instead use CloudWatch Logs for this purpose. The option that says: CloudTrail charges you for every management event trail created is incorrect because actually, CloudTrail does not charge you for your first management trail, but only the additional management trails you create after the first one.

Answer 34

A substitute for an account ID in the web address for your account

Answer 35

Bucket Policy. Security Group is incorrect because this is primarily used as a virtual firewall for your EC2 instances, and not S3 buckets, to control inbound and outbound traffic. SSH key is incorrect because this is only used if you want to establish an SSH connection to your EC2 instances and not for S3 buckets. Network Access Control List is incorrect because this is just an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. This has nothing to do with providing users access to your S3 bucket.

Answer 36

Create a multi-region trail in AWS CloudTrail. Using Amazon Cloudwatch Logs is incorrect since this service is not related to user actions in your account. CloudWatch Logs enables you to centralize the logs from all of your systems, applications, and AWS services that you use, in a single, highly scalable service. Setting up MFA is incorrect because it will not tell you exactly who performed what in your AWS account. Using LDAP authentication on your AWS account is incorrect because not all company supports it. Access logging can be done from the company’s side however, this cannot capture the actions performed within the AWS account.

Answer 37

You are the owner of the data you store in AWS.

Answer 38

Inbound HTTP rule with security group ID as source and Inbound RDP rule with an address range as source. Inbound TCP rule with instance ID as source and Outbound HTTPS rule with hostname as destination are both incorrect because Instance IDs or hostnames are not valid values. Outbound MYSQL rule with IP address as source is incorrect because the source cannot be modified. Since it is outbound, you should specify the allowed destination instead.

Answer 39

– Amazon GuardDuty – AWS WAF Amazon SQS is incorrect because this is not a security service. This is a messaging service that allows you to decouple applications and provides more durability for your messages. AWS Single Sign-On is incorrect because this service only allows you to centrally manage SSO access to multiple AWS accounts and business applications. SSO does not protect your network from potential security threats, but it does provide additional access security for your AWS account. AWS KMS or Key Management Service is incorrect because this is a central repository for encryption keys in your account. It is not used to protect your network from potential security threats. KMS is useful if you have data that you need to encrypt, and you want a central location where you can manage your keys.

Answer 40

This is verified by the ELB health checks that you can see in your ELB dashboard, which determines whether an instance is healthy or not. Amazon CloudWatch is incorrect because this is just used to monitor your AWS resources and collect information in the form of logs, metrics, and events. Although this service can prove useful for investigation, it is not the first thing you should check in this scenario. AWS CloudTrail is incorrect because this simply provides an event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. Although this service can prove useful for investigation, it is not the first thing you should check in this scenario. AWS Config is incorrect because it just continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. This service will not help you very much in your investigation of the issue.

Answer 41

Amazon EC2 and RDS.

Answer 42

– If you need to decouple certain parts of your system for better fault tolerance – If you require a durable storage for your application events or messages

Answer 43

Each subnet must reside entirely within one Availability Zone

Answer 44

Create a CloudFormation template and deploy it in the new region.

Answer 45

Amazon S3 Standard. Amazon EC2 is incorrect because using this will not be as cost-effective as using Amazon S3 Standard for static website hosting. This is because there are other costs to consider when using EC2 instances, such as EBS volumes.

Answer 46

Amazon EFS is the correct answer. Amazon S3 is incorrect. First, it is meant specifically for object storage, and second, EFS can serve a fleet of EC2 instances better than S3 as file storage. Amazon Storage Gateway is incorrect because this service simply provides a file interface into Amazon Simple Storage Service (Amazon S3) and is a combination of storage service and a virtual software appliance. This service is meant for local software hosted on your on-premises data center which requires connection to S3. It is not meant to serve a fleet of EC2 instances. Amazon Redshift is incorrect because this is a data warehousing service offered by AWS. It cannot be used for file storage.

Answer 47

Deploy small, incremental changes to your production servers using AWS CodeDeploy and Perform monthly game days on your AWS environment. The option that says: Launching your infrastructure manually via the console is incorrect because this is not a notable best practice under operational excellence. In the cloud, it is preferred to automate majority of the tasks to achieve a predictable and constant result. The option that says: Using serverless applications such as AWS Lambda is incorrect because this is more of a design principle that focuses on performance efficiency and not operational excellence. Serverless is a very useful tool that steers away from traditional server management and lets you focus more on your applications and services. The option that says: Monitoring EC2 consumption and adjusting your instance type accordingly is incorrect because this is more related to the performance efficiency pillar. Underprovisioned instances need to be scaled up to deliver better performance. Overprovisioned instances need to be scaled down to save on costs.

Answer 48

– Amazon Chime – Amazon Connect AWS Transfer Family is incorrect because this tool is used for recurring business-to-business file transfers to Amazon S3 and Amazon EFS using SFTP, FTPS, and FTP protocols. AWS Marketplace is incorrect because this is a sales channel for ISVs and Consulting Partners to sell their solutions to AWS customers. Amazon Workspaces is incorrect because this is a fully managed desktop virtualization service for Windows and Linux, and is not related to business communications or customer service.

Answer 49

AWS Step Functions provides serverless orchestration for modern applications. Amazon SWF is incorrect because it is just a fully-managed state tracker and task coordinator service. It does not provide serverless orchestration to multiple AWS resources. AWS Lambda is incorrect because although this service is used for serverless computing, it does not provide a direct way to coordinate multiple AWS services into serverless workflows. AWS Batch is incorrect because this is primarily used to efficiently run hundreds of thousands of batch computing jobs in AWS.

Answer 50

An Amazon VPC VPN connection links your data center (or network) to your Amazon Virtual Private Cloud (VPC) The option that says: VPC Peering connection between your on-premises network and VPC is incorrect because VPC Peering connects two different VPCs for inter-VPC communication. It does not connect your local network via IPsec VPN. The option that says: A NAT gateway in your private subnet connected to your on-premises network is incorrect because a NAT Gateway is primarily used to allow EC2 instances launched in your private subnet to be able to connect to the public Internet, but disallows external servers to establish Internet connection to the VPC. The option that says: An on-premises NAT gateway device connected to your VPC’s Internet Gateway is incorrect because as mentioned above, a NAT Gateway is not a suitable service/network device to be used here.

Answer 51

AWS Cost Explorer. AWS Billing Dashboard, AWS Budgets, and AWS Cost and Usage report are all incorrect since these tools do not provide Reserved Instance (RI) purchase recommendations, unlike AWS Cost Explorer.

Answer 52

security Group.

Answer 53

Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution where you provision either Windows or Linux desktops in just a few minutes and quickly scale to provide thousands of desktops to workers across the globe. AWS Cloud9 is incorrect because this is simply a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser. It includes a code editor, debugger, and terminal.

Answer 54

Application Load Balancer

Answer 55

AWS ELB and Amazon Route 53 help mask downtime by redirecting traffic to your healthy instances and allowing failover to your secondary systems. This is achieved through a combination of different health checks, routing policies, and failover policies. AWS EC2 Auto Scaling, and VPC Route Tables do not help mask downtime by rerouting traffic to healthy backend servers.

Answer 56

Amazon RDS Reserved Instances give you the option to reserve a DB instance for a one or three year term and in turn receive a significant discount compared to the On-Demand Instance pricing for the DB instance. The option that says: You can stop your RDS instances when idle to prevent AWS from charging you during this time is not the best way to save money as it entails more effort than required to do so. It is still better to opt for reserved instances for your RDS database cluster instead. The option that says: You can easily backup, terminate, and restore RDS instances when you need them is not the best solution. There is too much effort involved. The option that says: AWS does not charge you when your RDS is idle is incorrect. Idle time or not, once your RDS instance is running, AWS charges you for it.

Answer 57

S3 Glacier Deep Archive is Amazon S3’s lowest-cost storage class and supports long-term retention and digital preservation for data that may be accessed once or twice in a year. Amazon S3 Standard-IA is incorrect because this costs more than Glacier and Glacier Deep Archive. This storage type takes into consideration that you will still need to retrieve your objects in a timely manner, although infrequently. Amazon S3 Glacier is incorrect because it is already mentioned in the scenario that the retrieval option should be within 12 hours and thus, Glacier Deep Archive can provide a more cost-effective option than the Glacier class including the capability to retrieve the data within the mentioned timeframe. Amazon EBS Cold HDD is incorrect because this is not the best nor the cheapest choice for archival. You use Cold HDD if you have infrequent workloads that require consistent throughput. EBS volumes need to be used along with EC2 instances for you to have access to the files stored in it.

Answer 58

Amazon EMR is a web service that enables businesses, researchers, data analysts, and developers to easily and cost-effectively process vast amounts of data.

Answer 59

Throughput Optimized HDD Provisioned IOPS SSD is incorrect because this is not the most cost-effective EBS type and is primarily used for critical business applications that require sustained IOPS performance. General Purpose SSD is incorrect because although this volume balances price and performance for a wide variety of workloads, it is not suitable for frequently accessed, throughput-intensive workloads. Throughput Optimized HDD is a more suitable option to use than General Purpose SSD. Cold HDD is incorrect because although this one provides the lowest cost among all other options, it is much suitable for less frequently accessed workloads.

Answer 60

AWS Opsworks

Answer 61

Amazon Cognito

Answer 62

The AWS Cost Explorer service has an easy-to-use interface that lets you visualize, understand, and manage your AWS costs and usage over time AWS Cost & Usage Report is incorrect because this simply lists AWS usage for each service category used by an account and its IAM users in hourly or daily line items, as well as any tags that you have activated for cost allocation purposes.

Answer 63

AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast and reliable application and infrastructure updates Amazon Data Pipeline is incorrect because this service is primarily used for data workflow orchestration which helps you reliably process and move data between different AWS compute and storage services, as well as on-premises data sources, at specified intervals. This has nothing to do with application release pipelines which is what AWS CodePipeline handles. AWS CodeCommit is incorrect because this is just a fully-managed source control service that makes it easy for companies to host secure and highly scalable private Git repositories.

Answer 64

Amazon Route 53 Both Amazon VPC and VPC Peering are incorrect because they don’t do any kind of failover rerouting procedure during a disaster. AWS ELB is incorrect. If the ELB itself were to fail then no traffic would reach your servers at all.

Answer 65

Amazon Pinpoint is AWS’s Digital User Engagement Service that enables AWS customers to effectively communicate with their end-users and measure user engagement across multiple channels including email, Text Messaging (SMS) and Mobile Push Notifications.

Answer 66

– AWS Device Farm – AWS Mobile Hub AWS Ground Station is incorrect since this service is for controlling satellite communications and processing data using satellites. Amazon Lumberyard is incorrect because this is a game engine service for creating games. Take note that you need to test out a new mobile app on multiple devices. Therefore, this service won’t help you accomplish the task. AWS Security Bulletin is incorrect because this AWS service is a security announcement provider service. This means that you can’t use this service to test mobile apps on multiple devices.

Answer 67

– AWS Identity and Access Management – Amazon CloudFront

Answer 68

Infrastructure as a Service (IaaS)

Answer 69

AWS Batch is a regional service that simplifies running batch jobs across multiple Availability Zones within a region. Amazon EFS is a regional service storing data within and across multiple Availability Zones (AZs) for high availability and durability. AWS Security Token Service and Amazon Route 53 are incorrect because these are considered as global services. Amazon EC2 is incorrect because this is considered as a zonal service

Answer 70

Performance | Service Limits

Answer 71

– AWS Management Console – AWS CloudFormation AWS Concierge is incorrect because this is actually a senior customer service agent who is assigned to your account when you subscribe to an Enterprise or qualified Reseller Support plan.

Answer 72

Create a golden AMI of the instance and copy it to the other region.

Answer 73

Amazon RDS Read Replicas The option that says: Enable Multi-AZ deployments is incorrect because the Multi-AZ deployments feature is mainly used to achieve high availability and failover support for your database. The option that says: Enable Amazon RDS Standby Replicas is incorrect because a Standby replica is used in Multi-AZ deployments and hence, it is not a solution to reduce read-heavy database workloads.

Answer 74

An instance store provides temporary block-level storage for your instance. This storage is located on disks that are physically attached to the host computer

Answer 75

AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage.

Answer 76

AWS OpsWorks and AWS CodeDeploy. AWS CloudFormation and AWS Elastic Beanstalk are incorrect because these services can only deploy applications to your AWS resources

Answer 77

General Purpose SSD

Answer 78

Cost optimization Performance efficiency is incorrect because this pillar focuses on using IT and computing resources efficiently. Key topics include selecting the right resource types and sizes based on workload requirements, monitoring performance, and making informed decisions to maintain efficiency as business needs evolve. Operational Excellence is incorrect because this pillar focuses on running and monitoring systems to deliver business value, and continually improving processes and procedures.

Answer 79

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources.

Answer 80

AWS Systems Manager allows you to centralize operational data from multiple AWS services and automate tasks across your AWS resources.

Answer 81

Amazon Lightsail is a PaaS solution for users who need a simple virtual private server (VPS) solution. Lightsail provides developers compute, storage, and networking capacity and capabilities to deploy and manage websites and web applications in the cloud. Amazon Elastic Beanstalk is another PaaS solution of AWS. This is not the correct answer, however, because you would have to deploy and set up your own WordPress application first. Elastic Beanstalk does not offer a simple solution to quickly set up a functional WordPress website in minutes, unlike Lightsail. Amazon GameLift is incorrect because you can’t use this service to deploy applications. Amazon GameLift is a dedicated game server hosting solution that deploys, operates, and scales cloud servers for multiplayer games. AWS Glue is incorrect because this is a serverless ETL (extract, transform, and load) service that makes it simple and cost-effective to categorize your data, clean it, enrich it, and move it reliably between various data stores and data streams. This service is not for setting up a WordPress site.

Answer 82

Have the customer directly upload the sprites to S3 Standard – Infrequent Access. Sprites are rarely accessed (and after accessing them they are stored on the user’s phone). Add a lifecycle policy to move sprites to S3 Standard – Infrequent Access after the customer uploads them is not necessary since you can store the objects directly to S3 Standard-IA.

Answer 83

To keep them as far apart from each other in case of a disaster

Answer 84

– Provides you with granular data about your AWS costs and usage – Allows you to load your cost and usage information into Amazon Athena, Amazon Redshift, and AWS QuickSight

Answer 85

: Data transfer costs for uploading objects into your S3 bucket.

Answer 86

AWS introduces cost reductions each year in their services.

Answer 87

Amazon Linux instances are now billed in a per-second duration. With per-second billing, you pay for only what you use.

Answer 88

With AWS CodeStar, you can set up your entire continuous delivery toolchain in minutes, allowing you to start releasing code faster. AWS CodeBuild is incorrect because this is just a fully managed build service that compiles source code, runs tests, and produces software packages that are ready to deploy. AWS CodeCommit is incorrect because this is simply a fully-managed source control service that makes it easy for companies to host secure and highly scalable private Git repositories. AWS CodePipeline is incorrect because this basically helps you automate your release pipelines for fast and reliable application and infrastructure updates. It doesn’t provide an entire development and continuous delivery toolchain for coding, building, testing, and deploying your application code, unlike AWS CodeStar.

Answer 89

Proactive Technical Account Management Access to online self-paced labs The option that says: Limited access to the 7 Core Trusted Advisor checks is incorrect because the Enterprise support plan has access to the full set of Trusted Advisor checks. The option that says: 15-minute response time support if your production system goes down is incorrect because the Enterprise support plan actually provides a 1-hour response time for this kind of incident. The option that says: 5-minute response time support if your business-critical system goes down is incorrect because the Enterprise support plan actually provides a 15-minute response time for this type of outage.

Answer 90

Amazon Aurora Amazon RDS is incorrect. Although it is similar to Amazon Aurora such that they are both SQL databases, RDS does not have self-healing capabilities. Amazon DynamoDB and Amazon Redshift are both incorrect since these services are not self-healing databases. Amazon Redshift is considered more as a data warehouse rather than a database.

Answer 91

Platform as service - PaaS services include AWS Elastic Beanstalk, which provides you a platform to launch your applications, while the service prepares all the necessary infrastructure to run your application.

Answer 92

– Database size scales automatically so you won’t have to worry about capacity – You can store different kinds of unstructured data that would normally not be suitable for relational databases The option that says: DynamoDB is self-healing, which means your data is scanned for errors and is repaired continuously is incorrect because DynamoDB is not a self-healing database and it doesn’t automatically scan or repair your data. An example of a self-healing database in AWS is Amazon Aurora in which the concept of “self-healing” relates to the underlying infrastructure. The option that says: DynamoDB offers 11 9’s in terms of durability, according to the SLA is incorrect because it does not offer 11 9’s in durability, unlike Amazon S3. The option that says: You can perform very complex queries and joins without deterioration in performance is incorrect because usually, with NoSQL databases, you would not perform complex queries due to the unstructured formatting of your data. Complex queries are better performed in SQL databases due to predictable structuring.

Answer 93

The ability to provision resources only when you need them

Answer 94

Benefit from massive economies of scale

Answer 95

Amazon Connect. Amazon Lex is incorrect because this is just a service for building conversational interfaces into any application using voice and text.

Answer 96

AWS Fargate is a serverless compute engine for containers. Amazon FSx is incorrect because this is primarily used as a file system for Windows-based applications. Amazon ECS is incorrect because by using this service, you still need to manage your own EC2 instances where your containers are hosted. Amazon EC2 is incorrect since you still need to provision and manage your Docker containers that are hosted in these EC2 instances.

Answer 97

Allows you to estimate your monthly spending in AWS.

Answer 98

PaaS - you don’t need to worry about setting up servers, storage, and network. You only manage the application and the data.

Answer 99

S3 One Zone-IA is for data that is accessed less frequently but requires rapid access when needed. S3 Standard is incorrect because it is not the cheapest option available. S3 Glacier and S3 Glacier Deep Archive are both incorrect because they are designed for low-cost data archiving. These storage classes have retrieval options that take from a few minutes to hours.

Answer 100

Basic, Developer, Business, Enterprise

Answer 101

– S3 Standard – S3 Intelligent-Tiering S3 Glacier Deep Archive, S3 Standard-IA, and S3 One Zone-IA are all incorrect since these storage tiers have object retrieval fees.

Answer 102

AWS Transit Gateway. AWS Client VPN is incorrect because this is just a VPN service used to securely access your AWS resources and resources in your on-premises network. You can’t use AWS Client VPN to connect and manage multiple VPCs. VPC Peering is incorrect. Although this service could connect two or more VPCs, it is not appropriate to use if you are managing multiple VPC peering connections and on-premises networks at scale. AWS Direct Connect is incorrect because this is a dedicated network connection from your on-premises to AWS. Direct Connect doesn’t support the peering between VPCs unless it is associated with Transit Gateway.

Answer 103

AWS Service Health Dashboard

Answer 104

– AWS Certificate Manager – AWS Identity and Access Management AWS License Manager is incorrect because this service is mainly used for managing software licenses from different vendors (Microsoft, Oracle, SAP, IBM)

Answer 105

Savings Plans

Answer 106

Amazon ElastiCache for Redis | Amazon ElastiCache for Memcached

Answer 107

Amazon Redshift

Answer 108

An Origin Access Identity is used for sharing private content through CloudFront. Service Control Policies is incorrect because this is an AWS Organization policy and not an Amazon CloudFront feature.

Answer 109

AWS CloudHSM is standards-compliant and enables you to export all of your keys to most other commercially available HSMs, AWS KMS is incorrect because this service is primarily used to create and manage cryptographic keys, and control their use across a wide range of AWS services and in your applications. Requirement in the scenario is to have exclusive control over how its keys are used via an authentication mechanism independent from AWS.

Answer 110

AWS Trust & Safety Concierge Support is incorrect because this is a team of experts that quickly and efficiently assist you with your billing and account inquiries, and work with you to implement billing and account best practices so that you can focus on running your business. AWS Support API is incorrect because this is not a team in AWS, but a collection of APIs that provides programmatic access to AWS Support Center features. This is primarily used to create, manage, and close your support cases, and operationally manage your Trusted Advisor check requests and status. Architecture Support is incorrect because this is a team that guides customers on how AWS services fit together to meet a specific architecture, use-case, workload, or application.

Answer 111

Amazon FSx makes it easy and cost-effective to launch and run popular file systems. Amazon EFS is incorrect. Although it is a shared file system storage, EFS only supports Linux workloads. Amazon EBS is incorrect. An EBS volume can only be accessed by multiple EC2 instances if it is a Provisioned IOPS EBS volume. A more suitable option here is to use Amazon FSx for Windows File Server.

Answer 112

AWS Transit Gateway connects VPCs and on-premises networks through a central hub. AWS Direct Connect is incorrect because this is a dedicated network connection from your on-premises to AWS. Direct Connect doesn't support the peering between VPCs unless it is associated with Transit Gateway.

Answer 113

AWS Architecture Center. AWS Trusted Advisor is incorrect because this is just an online tool that provides real-time guidance to help you provision your resources following AWS best practices.

Answer 114

AWS CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy. CodeDeploy is primarily used to automate code deployments to any instance, including EC2 instances and instances running on-premises. CodePipeline is a continuous delivery service while CodeCommit is a fully-managed source control service

Answer 115

- AWS Lambda - Amazon DynamoDB Amazon RDS is incorrect because it is not a key-value database. RDS is a managed service that makes it easy to set up, operate, and scale a relational database in the cloud. Also, RDS is not a suitable fit for key-value pairs. Amazon ECR is incorrect because this is a fully-managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images. ECR is not a serverless computing service. If you want to have a serverless container, you can use AWS Fargate. Amazon SageMaker is incorrect because this is not a serverless service. SageMaker is primarily used to build, train, and deploy machine learning (ML) models quickly.

Answer 116

Decreased latency in accessing applications hosted in AWS

Answer 117

Amazon S3 provides Block Public Access settings for buckets and accounts to help you manage public access to Amazon S3 resources. Network ACL is incorrect because a Network ACL is primarily used for VPCs and not in S3 buckets. Security Group is incorrect because Amazon S3 doesn't have a security group.

Answer 118

Amazon MQ is a managed message broker service for Apache ActiveMQ that makes it easy to set up and operate message brokers in the cloud

Answer 119

Domain Registration | DNS Resolution

Answer 120

– Amazon EC2 – Amazon EBS Amazon EC2 is a compute capacity in the cloud and Amazon EBS is a block storage service. Both are created in a specific Availability Zone, and EBS can be attached to any instances in that same Availability Zone. Amazon S3, Amazon Route 53, and AWS IAM are all incorrect because these are global services offered by AWS.

Answer 121

Per GB The usage of an EC2 instance is calculated by the hour or second based on the size of the instance, operating system, and the AWS Region where the instances are launched

Answer 122

AWS Directory Service

Answer 123

Architecture Support

Answer 124

AWS Quick Starts

Answer 125

Cost Explorer

Answer 126

AWS Cost and Usage report

Answer 127

Standard Reserved Instances provide you with a significant discount compared to On-Demand instance pricing and can be purchased for a 1-year or 3-year term

Answer 128

– ALlows the change of instance family, operating system, tenancy, and payment option. – Has the capability to change the attributes of the RI as long as the exchange results in the creation of Reserved Instances of equal or greater value.

Answer 129

AWS Cost Explorer

Answer 130

When you create a trail in the AWS Management Console, the trail applies to all AWS Regions by default

Answer 131

Instance tags Instance metadata is incorrect because it just details the server and network information of the instance itself. This is automatically generated for you by AWS when you launch an instance. To add metadata of your own, use tags. Instance user data is incorrect because this is just a custom script that you prepare if you want your instance to be initialized every time it is launched. You cannot add metadata such as environment tags here

Answer 132

Performance Efficiency

Answer 133

Amazon RDS Amazon EFS Amazon S3 is incorrect because although you can technically use this service as a data storage for rapidly changing data, this entails high latency since S3 is located outside of your VPC. Amazon Glacier is not suitable to be used for applications with rapidly changing data.

Answer 134

AWS OpsWorks AWS CloudFormation and AWS Elastic Beanstalk are incorrect because these services can only deploy applications to your AWS resources and not to the servers located in your on-premises data center.

Answer 135

Enterprise support plan

Answer 136

Dedicated Host Dedicated Instance purchasing option is incorrect because although Dedicated instances also run on dedicated hardware, Dedicated Hosts provide further visibility and control by allowing you to place your instances on a specific, physical server

Answer 137

Network ACL Security group is incorrect because this is used to secure your resource-level network such as EC2 instances and RDS databases, in a similar way with how network ACLs work. However, security groups do not operate on the subnet level.

Answer 138

Amazon Route 53 and AWS WAF are both global services AWS Lambda, AWS CloudTrail, and Amazon VPC are all incorrect because these are region-specific services.

Answer 139

– Amazon API Gateway – Lambda@Edge All of the other options are incorrect because you still need to choose which type of EC2 instance type will be used for running these services as well as its scaling capability.

Answer 140

c) None of these apply AWS services with built-in DDoS mitigation/protection include: 1) Route 53 2) CloudFront 3) WAF (web application firewall) 4) Elastic Load Balancing 5) VPCs and Security Groups https://linuxacademy.com/cp/courses/lesson/course/1548/lesson/5/module/154

Answer 141

d) 1 By default, when an AWS account is created, each region will get 1 VPC.

Answer 142

c) A firewall on the subnet level A NACL is a firewall on the subnet level.

Answer 143

a) AWS Regions VPCs cannot span AWS Regions.

Answer 144

a) Firewall, Instance A security group is a firewall on the instance level.

Answer 145

c) Internet Gateway An internet gateway connects instances within a VPC to the network outside of the VPC. Video for reference: Internet Gateways and Route Tables

Answer 146

a) Single sign-on

Answer 147

c) The IAM user cannot access any of the AWS services This IAM User will not be able to access any of the AWS services because the user is attached to an _AWSDenyAll_ policy regardless of being in an IAM Group with access to these services. This is because an explicit deny always overrides and explicit allow. Video for reference: Overview of Identity and Access Management Part 2

Answer 148

a) 5 minutes By default, CloudWatch analyzes AWS resources for metrics every 5 minutes for free. Video for reference: CloudWatch Monitoring, Metrics, and Logs

Answer 149

c) S3 S3 is the service in which CloudTrail logs events. It logs the events as an S3 object.

Answer 150

(c) Spin up servers in minutes, and shut down servers when you don't need them.

Answer 151

(c) Enable an Amazon CloudWatch alarm to trigger a scaling policy.

Answer 152

(a) AWS CloudFormation

Answer 153

(a) Application Load Balancer

Answer 154

c. 60 seconds

Answer 155

b. Enterprise

Answer 156

c. Lambda | e. CloudWatch

Answer 157

d. Amazon S3 Glacier | e. AWS Storage Gateway

Answer 158

a. You must use an AMI from the same region as that of the EC2 instance. The region of the AMI has no bearing on the performance of the EC2 instance.

Answer 159

a. AWS Quick Start References

Answer 160

b. AWS CloudFormation

Answer 161

b. Track configuration changes

Answer 162

d. AWS Single Sign-On (SSO)

Answer 163

a. Operational Excellence

Answer 164

a. Use S3 One-Zone Infrequent Access (One-Zone IA) to store the thumbnails.

Answer 165

d. Use Amazon Transcribe to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech.

Answer 166

c. AWS Systems Manager

Answer 167

d. Virtual MFA device

Answer 168

b. Weighted routing policy

Answer 169

d. AWS Service Health Dashboard

Answer 170

D.) CloudTrail You can use CloudTrail to log, monitor and retain account activity related to actions across your AWS infrastructure. CloudTrail provides an event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command-line tools, and other AWS services.

Answer 171

b. EBS | e. Instance Store

Answer 172

c. AWS CloudHSM AWS CloudHSM is a service for creating and managing cloud-based hardware security modules. AWS Key Management Service (AWS KMS) lets you create, store, and manage KMS keys securely.