Checkpoint B - AWS ACF - UNCISAL Turma 1

Which of the below listed 2 design principles relates to the “Operational Excellence” pillar of the Well-Architected framework? (Choose 2)

• Implement a strong identity foundation

• Enable traceability

• Anticipate Failure

• Manage change in automation

• Perform operations as code

An architect is asked to design a solution for a distributed system in which the system's components operate in a way that components of one system do not negatively impact other components of the system.

Which of the below listed architectural best practice can help to achieve this?

• Request Throttling

• Using stateless services

• Enabling automatic data backup

• Implement loose coupling

Which of the below statement is CORRECT regarding AWS Global infrastructure?

• Each AWS region has multiple Availability Zones

• Many AWS regions has single availability zone

• Availability zones are also known as AWS Local zones

• To provide High Availability, AWS management console and control plane are isolated to a single region

An online marketplace start-up dealing in real estate is planning to move to the cloud. Which of the below is NOT a benefit of moving to the cloud?

• Increased variable cost as customer Benefit from massive economies of scale.

• Go global in minutes.

• Stop guessing capacity.

• Benefit from massive economies of scale.

My On-Premise application’s deployment cycle is roughly around 3-4 weeks. On refactoring this huge application, its features can be deployed on AWS cloud in a matter of 2-3 days. What is the benefit achieved by moving to the AWS cloud?

• Elasticity

• Flexibility

• Agility

• Resilience

Under the “Shared Responsibility Model,” which of the listed below is Customer’s Responsibility?

• Hardware of the AWS underlying infrastructure

• Client-side data encryption

• Database of the AWS infrastructure

• Networking of the AWS infrastructure

To make programmatic calls to AWS, a user was provided an access key ID and secret access key. However, the user has now forgotten the shared credentials and cannot make the required programmatic calls.

How can an access key ID and secret access key be provided to the user?

• Use the “Forgot Password” Option

• Use “Create New Access Key” by logging in to AWS Management Console as the root user.

• Credentials can not be generated

• Raise a ticket with AWS Support

To enable an application on an EC2 instance to perform some actions, the developer requires to grant access to the application for a few AWS resources. The developer plans to provide his credential to the instance. However, as the developer’s credentials are long-term, the developer is looking for an alternate to reduce the security risk.

What can the developer do in this scenario to enable applications on EC2 to get access to the required AWS resources temporarily?

• Use “IAM Roles”

• Use “IAM Group”

• Use “IAM Tags”

• There is no alternate way. A developer needs to give his credentials and revoke access when the required action is done.

A client has decided to go for a MySQL RDS database on the AWS cloud based on its Scalability & High Availability features. When he does so, what role does he play in making the database secure? (Select TWO.)

• He can restrict RDP access to the database by using a Security Group.

• He can provide the most recent updates of his database software installed on the EC2 Instance for preventing Security attacks.

• He can provide the most recent versions of his Operating System on the EC2 instance for preventing Security attacks.

• He can Encrypt database data at rest by using EBS volume storage encryption.

• He can plan for backup & recovery strategies for data that may be lost.

During an internal audit exercise, auditors have requested the administrator to provide granular billing data for the main AWS account. The requirement is for the amount that a particular service accrued in an hour on the third day of a billing month. Can this information be obtained?

• Yes, by querying the Cost Explorer service with Billing and Cost Management.

• No, it is not possible to obtain the information on an hourly basis in the Cost and Usage Report.

• Yes, the administrator can obtain the information in the Cost and Usage Report.

• Yes, the administrator can query CloudTrail on the day in question and infer the data against Cost Explorer.