Associate Architecting & SysOps on AWS (Day 3)

You have been evaluating the NACLs in your company. Most of the NACLs are configured the same:

100 All Traffic Allow

200 All Traffic Deny

* All Traffic Deny

What function does the * All Traffic Deny rule perform?

• Traffic will be denied from specified IP addresses
• The * specifies that it is an example rule
• This rule ensures that if a packet doesn't match any of the other numbered rules, it's denied
• It is there in case no other rules are defined

Which section of a CloudFormation template allows you to define which AMI ID to use based on the region you are deploying to?

• Mappings
• Outputs
• Description
• Resources

Your S3 buckets are separated based on the type of data they are holding and the level of security required for that data. You have several buckets that have data you want to safeguard from accidental deletion. Which configuration will meet this requirement?

• Signed URLs to all users to access the bucket
• Configure cross-account access with an IAM Role prohibiting object deletion in the bucket
• Archive sensitive data to Amazon Glacier
• Enable versioning on the bucket and multi-factor authentication delete as well

Your company has been using AWS Organizations. As a security engineer, what methods can you control permissions among accounts, resources? (select TWO.)

• IAM policies
• VPC peering
• Resource Access Manager
• Service Control Policy
• AWS Config

What of the following are about caching features/strategies? (select TWO.)

• Write Through
• TLS termination

• Read Replica
• TTL

Several S3 Buckets have been deleted and a few EC2 instances have been terminated. Which AWS service can you use to determine who took these actions?

• Trusted Advisor
• AWS CloudWatch
• AWS CloudTrail
• AWS Inspector

You are managing S3 buckets in your organization. For auditing purposes you would like to be informed if an object is moved because of Lifecycle transition. What is the most efficient way you can do this?

• Configure S3 Transfer Acceleration

• Create a Lambda function which is triggered by any event of S3 object

• Configure S3 event notifications

• Create an SNS notification for any upload to S3

Your application is going to use an Auto Scaling group of EC2 instances but you need to have some decoupling to store messages because of high volume. Which AWS service can be added to the solution to meet this requirement?

• AWS SQS
• RDS read replicas
• Elasticache
• AWS Simple Workflow Service

Your boss has asked for your recommendations to ensure that the AWS resources are deployed to proactively remain within budget. Which AWS service can you use to help ensure you don’t have cost overruns for your AWS resources?

• Inspector
• Cost Explorer
• Billing and Cost Management
• AWS Budgets

Can we use EKS with Fargate (True or False)?

• True
• False