Day 2 Adv Arch

What is a set of instructions written in JSON to tell Amazon ECS how to run a Docker container?

• Dockerfile

• Task Definition

• Container image

• Container registry

You can run Fargate deployed containers and Amazon EC2 deployed containers on the same cluster.

• True

• False

Which services perform orchestration operations? (Select 2)

• EKS

• ECS

• ECR

• Fargate

What is not a valid deployment target for CodeDeploy?

• EC2 Instances

• Lambda

• On-prem servers

• Snowball

• ECS/Fargate

Which AWS service is designed to help orchestrate events in a CI/CD model?

• CodeDeploy

• CodeBuild

• CodeCommit

• CodePipeline

Which statement is not true regarding Shield Advanced?

• It offers more visibility than Shield Standard.

• You pay extra for AWS WAF and Firewall Manager.

• It is a subscription service.

• The AWS DDoS team will triage attacks and analyze policies.

You encrypt a file on Amazon S3 and do not specify your own encryption key. Who manages the encryption key for the file?

• Amazon S3

• You

• IAM

• CloudWatch

Which encryption type works best when a client wants to protect data at rest in Amazon S3 using server-side encryption but does not want to store encryption keys on AWS?

• SSE-S3

• SSE-KMS

• SSE-C

• CloudHSM

Which statement best describes the need for S3 Intelligent-Tiering?

• Your storage costs are too high.

• Your usage patterns are unpredictable.

• A large percentage of your files don't require immediate retrieval.

• You want full Amazon S3 storage automation.

Which statements are false regarding Lake Formation blueprints and workflows?

• You can customize workflows.

• No blueprints are available by default.

• Blueprints generate AWS Glue workflows.

• You can set workflows as one-time or recurring events.