AWS basics

The full form of AWS EC2 is ___

• Elastic Compute Capacity

• Elastic Cloud Compute

• Elastic Compute Cloud

• Elastic Compute 2

Which AWS networking service enables a company to create a virtual network within AWS?

• EC2

• S3

• RDS

• VPC

Which of the following is an AWS responsibility under the AWS shared responsibility model?

• Configuring third-party applications

• Maintaining physical hardware

• Securing application access and data

• Managing security patches and upgrades of guest operating systems

How would a system administrator add an additional layer of login security to a user's AWS Management Console?

• Use Amazon Cloud Directory

• Audit AWS Identity and Access Management (IAM) roles

• Enable multi-factor authentication (MFA)

• Enable AWS CloudTrail

Which service can identify the user that made the API call when an Amazon EC2 instance is terminated?

• AWS VPC

• AWS CloudTrail

• AWS IAM

• AWS API

What best describes the “Principle of Least Privilege”? Choose the correct answer from the options given below.

• All users should have the same baseline permissions granted to them to use basic AWS services.

• Users should be granted permission to access only resources they need to do their assigned job.

• Users should submit all access requests in written form so that there is a paper trail of who needs access to different AWS resources.

• Users should always have a little more permission than they need.

An organization runs a public facing e-commerce website using several EC2 instances inside a VPC using three subnets, one for Development, one for Test, and one for Production. The Security team has some concerns about the VPC configuration. It requires restricting communication across the EC2 instances using Security Groups.

Which among the following is the correct and best way to restrict the communication?

• Whitelist all internet traffic for all the 3 instances

• Whitelist inbound connection from office ips for Development and Test instances.

  Whitelist all internet traffic for Production instance.

• Whitelist inbound connection from office ips for Development, Test and Production instances.

  Whitelist only HTTP and HTTPS inbound internet traffic for Production instance.

• Restrict all inbound traffic from internet to all 3 instances

Which of the following databases is not supported by AWS RDS service?

• MongoDB

• MySQL

• Oracle

• Microsoft SQL server

Which of the following is region-based AWS service?

• AWS EC2

• AWS VPC

• AWS Subnet

• AWS IAM

Answer explanation

EC2 is launched in a subnet which is scoped to Availability Zone

AWS IAM is a global service. Means it doesn't have any regions.

When you create VPC, you need to choose region first.

Which service allows a customer to whitelist incoming and outgoing traffic to its EC2 instance?

• SSH

• Security Groups

• Subnets

• AWS IAM