Exam Prep 1

In AWS Global Infrastructure, which component has one or more discrete data centers with redundant power, networking, and connectivity?

• Availability Zone

• VPC

• Route 53

• AWS Region

You are creating a few IAM policies. This is the first time you have worked with IAM policies. Which tool can you use to test IAM policies?

• Amazon GuardDuty

• Amazon Inspector

• CloudWatch

• IAM Policy Simulator

To install a PCI-compliant workload on AWS, which of the following tasks is required?

• Use an AWS service that is in-scope for PCI compliance and raise an AWS support ticket to enable PCI compliance at the application layer

• Use any AWS service and implement PCI controls at the application layer

• Use any AWS service and raise an AWS support ticket to enable PCI compliance on that service

• Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer

You are managing the company's AWS account. The current support plan is Basic, but you would like to begin using Infrastructure Event Management. What support plan (that already includes Infrastructure Event Management without an additional fee) should you upgrade to?

• Upgrade to Developer plan.

• Do nothing. It is included in the Basic plan.

• Upgrade to the Business plan. No other steps are necessary.

• Upgrade to Enterprise plan.

What is the customer's responsibility while using Amazon RDS?

• Controlling network access through security groups.

• Patching and maintenance of the underlying operating system.

• Managing automatic backups of the database.

• Replacing failed instances in the event of a hardware failure.

What is the customer's obligation while using an AWS managed service under the AWS shared responsibility model?

• Physical security of the data centers

• Customer data

• Server-side encryption

• Operating system patching

You have a MySQL database that you want to migrate to the cloud, and you need it to be significantly faster there. You are looking for a speed increase up to 5 times the current performance. Which AWS offering could you use?

• Amazon RDS MySQL

• Elasticache

• DynamoDB

• Amazon Aurora

You need to set up a virtual firewall for your EC2 instance. Which would you use?

• IAM Policy

• Security Group

• Network ACL

• Subnet

Which AWS service can provide a Desktop as a Service (DaaS) solution?

• AWS Systems Manager

• EC2

• Amazon WorkSpaces

• Elastic Beanstalk

Several EC2 instances in what will be a public subnet need internet access. Which will you configure as one of the steps in granting internet access?

• NAT Gateway

• API Gateway

• Internet Gateway

• VPC Peering