Associate Architecting & SysOps on AWS (Day 1)

You have been given an assignment to configure Network ACLs in your VPC. Before configuring the NACLs, you need to understand how the NACLs are evaluated. How are NACL rules evaluated?

• NACL rules are evaluated by rule number from lowest to highest and executed immediately when a matching rule is found
• NACL rules are evaluated by rule number from highest to lowest, and executed immediately when a matching rule is found
• All NACL rules that you configure are evaluated before traffic is passed through
• NACL rules are evaluated by rule number from highest to lowest, and all are evaluated before traffic is passed through

A company needs to deploy EC2 instances to handle overnight batch processing. This includes media transcoding and some voice to text transcription. This is not high priority work, and it is OK if these batch runs get interrupted. What is the best EC2 instance purchasing option for this work?

• Dedicated Hosts
• On-Demand
• Spot
• Reserved

Which CloudFormation feature can be used in templates to enable you to input custom values to your template each time you create or update a stack?

• Metadata
• Outputs
• Cookbook
• Parameters

A team of architects is designing a new AWS environment for a company which wants to migrate to the Cloud. The architects are considering the use of EC2 instances with instance store volumes. The architects realize that the data on the instance store volumes are ephemeral. Which action will not cause the data to be deleted on an instance store volume?

• The underlying disk drive fails
• Hardware disk failure
• Reboot
• Instance is stopped

A company has created a mobile application that is hugely popular. The initial plan was to give each user login credentials to the application. But due to the volume of users, this idea has become impractical. What service can you use to allow outside users to login through a third party such as Facebook, Amazon, Google or Apple?

• Google Authenticator
• AWS cross account access
• AWS IAM
• Amazon Cognito

A company is going to use several EC2 instances to host various reference applications. The applications are expected to receive steady and relatively low traffic. These applications are expected to run for 3 years, at which time the applications will be evaluated for upgrade. What type of EC2 will meet this requirement considering cost as an additional factor?

• On-Demand
• Reserved
• Spot
• Dedicated Hosts

A small startup is beginning to configure IAM for their organization. The user logins have been created and now the focus will shift to the permissions to grant to those users. An admin starts creating identity-based policies. To which item can an identity-based policy not be attached?

• users
• resources
• roles
• groups

You are attempting to launch EC2 instances in an Auto Scaling group. However, every time you try, the launch operation fails. Which of the following could be a reason for the failure? (Select THREE.)

• The security group specified in the launch template doesn't exist
• The requested instance type is not supported in your Availability Zone
• The key pair you have specified doesn't exist
• You have hit the default limit for the number of times you can use the key pair.

What AWS resource defines the configuration of instances created by EC2 Auto Scaling?

• Launch settings
• Launch templates
• Saved configurations
• Instance Wizard

You have been asked to update the operating system patches on 500 new EC2 instances by the end of the week. What is the most efficient way to patch all of these instances?

• Use EC2 Image Builder apply the patches on each instance simultaneously
• Use Systems Manager Patch Manager to patch all the instances simultaneously
• You have 5 people in your team, tell each person to patch 100 instances by logging in to each one. If they complete 20 per day they should complete all 500 by the end of the week
• Use Systems Manager Run Command to patch all the systems simultaneously