Exam Prep 2

 

You have an application running in us-west-2 that requires 6 EC2 Instances running at all times. With 3 Availability Zones in the region viz- us-west-2a, us-west-2b, and us-west-2c, which of the following deploymonts provides fault tolerance if ONE Availability Zone in us-west-2 becomes unavailable? (SELECT TWO.)

• 2 EC2 Instances in us-west-2a, 2 EC2 Instances in us-west-2b, and 2 EC2 Instances in us-west-2c

• 3 EC2 Instances in us-west-2a, 3 EC2 Instances in us-west-2b, and no EC2 Instances in us-west-2c

• 6 EC2 Instances in us-west-2a, 6 EC2 Instances in us-west-2b, and no EC2 Instances in us-west-2c

• 4 EC2 Instances in us-west-2a, 2 EC2 Instances in us-west-2b, and 2 EC2 Instances in us-west-2c

• 3 EC2 Instances in us-west-2a, 3 EC2 Instances in us-west-2b, and 3 EC2 Instances in us-west-2c

Which AWS service provides central governance and management across multiple AWS accounts?

• AWS Systems Manager

• CloudFormation

• AWS Organizations

• Identity and Access Management

When an administrator is looking to deploy shared file access Linux-based workloads which will roquire up to petabytes of data stores, what is the best-suited file storage option to use?

• AWS snowball

• Amazon EFS

• Amazon EBS

• Amazon S3

Which AWS service can be used to detect and prevent Distributed Denial of Service attacks against services hosted on AWS?

• AWS Inspector

• AWS Shield

• Amazon GuardDuty

• AWS WAF

An on-premises application requires a consistent, high-speed connection to the AWS Cloud environment that is better than an internet-based connection. Which AWS service can provide this connection?

• VPC Peering

• STS

• AWS VPN

• Direct Connect

Which of the following is an AWS Global Service?

• IAM

• EC2

• VPC

• Amazon RDS

Your company has recently migrated large amounts of data to the AWS cloud in S3 buckets. But it is necessary to discover and protect the sensitive data in these buckets. Which AWS service can do that?

• GuardDuty

• AWS Inspector

• CloudTrail

• Amazon Macie

Configuring user permissions so that users can access only the resources they need to do their job follows what principle?

• Principle of Least Privilege

• IAM Principle

• Principle of Organizations

• Principle of Minimum Permissions

Microsoft has announced a new patch for its operating system. For a Platform as a Service solution, who would be responsible for applying the patch?

• Customer

• AWS

• Either can apply this patch.

• The customer for spot instances only.

Your design team has recommended the need to distribute incoming traffic across multiple EC2 instances and also across multiple availability zones. Which AWS service can accomplish this?

• Elastic Load Balancer

• CloudFront

• CloudFormation

• Auto Scaling Group