AWS ACF Módulo 9 - Arquitetura de nuvem

Which AWS service provides infrastructure security optimization recommendations?

• AWs Application Programming Interface (API)

• Reserved Instances

• AWS Trusted Advisor

• Amazon Elastic Compute Cloud (Amazon EC2) SpotFleet

The Trusted Advisor service provides insight regarding which five categories of an AWS account?

• Security, fault tolerance, high availability, connectivity and service limits.

• Security, access control, high availability, performance and service limits.

• Performance, cost optimization, security, fault tolerance and service limits.

• Performance, cost optimization, access control, connectivity and service limits.

An administrator is looking to run their cloud infrastructure along best practice guidelines by leveraging on Amazon Inspector and AWS Trusted Advisor services. Which of the following statements correctly describe how this can be done? (Select TWO)

• Running Amazon Inspector service to probe and protect infrastructure from threats regularly

• Adhering to recommendations given in the main pillars of AWS Trusted Advisor, which are cost optimization, security, performance, fault-tolerance and service limits.

• Regularly running Amazon Inspector Service on EC2 instances to get a concise list of security vulnerabilities and exposures to attack.

• AWS Trusted Advisor will highlight pending tasks to be resolved in only performance and cost optimization best practices whilst Amazon Inspector will alert the administrator of security vulnerabilites.

• Amazon Inspector will highlight pending tasks to be resolved in only performance and cost optimization best practices whilst AWS Trusted Advisor will alert the administrator of security vulnerabilities.

Which of the following is not a disaster recovery deployment technique?

• Pilot Light

• Warm Standy

• Single Site

• Multi Site

Which of the following disaster recovery deployment mechanisms that has the highest downtime?

• Pilot Light

• Warm Standby

• Multi Site

• Backup and Restore

You are planning to server a web application on the AWS Platform by using EC2 instances. Which of the below principles would you adopt to ensure that even if some of the EC2 Instance crashes, you still have a working application?

• Using a scalable system

• Using an elastic system

• Using a regional system

• Using a fault tolerance system

Based on the AWS Well-Architected Framework, how should a start-up company with a dynamic AWS environment manage its users and resources securely without affecting the cost? Select TWO.

• Create multiple unique IAM users with administrator access for each functional group of the company.

• Use of AWS CloudFront template versions and revision controls to keep track of the dynamic configuration changes.

• Use of AWS Organizations with respective OUs that differentiate billing across the company's functions.

• Implement the most stringent security measures on the VPC-edge rather than on the resource hosts.

• Provisioning of resources and compute security capacity that accommodates future growth.

Which pillar of the AWS Well-Architected Framework focuses on maintaining computing efficiency using serverless architectures?

• Performance Efficiency Pillar

• BigData Management and Operations Pillar

• Information and Reliability Pillar

• Operational Excellence Pillar

With a focus on the Well-Architected Framework's security pillar, you want to define standards and best practices for your EC2 instances and validate adherence to these standards so as the workload security is enhanced. Which of the below would you choose?

• Amazon Detective

• AWS Inspector

• AWS Security HUB

• AWS Resource Access Manager (RAM)

One of our clients has outlined a cloud adoption journey and requires help for the transformation journey in moving to AWS cloud. Which of the below services would assist them in their transformation journey?

• AWS Trusted Advisor

• AWS Whitepapers

• AWS Professional Services

• AWS Managed Services