AWS Q01

How can a user achieve high availability for a web application hosted on AWS?

• A. Use a Classic Load Balancer across multiple AWS Regions

• B. Use an Application Load Balancer across multiple Availability Zones in one AWS Region

• C. Set up automatic scaling and load balancing with another application instance running on premises

• D. Use the AWS Region with the highest number of Availability Zones

Answer explanation

The most appropriate option to achieve high availability for a web application hosted on AWS is B. Use an Application Load Balancer across multiple Availability Zones in one AWS Region.

Explanation:

An application load balancer (ALB) is an AWS service that distributes incoming traffic across multiple targets, such as EC2 instances, containers, and IP addresses, in one or more availability zones within a single AWS region. By deploying an ALB across multiple availability zones, the load balancer can automatically route traffic to healthy instances in other availability zones if any one availability zone becomes unavailable.

Using an ALB across multiple availability zones in one AWS region is the recommended approach for achieving high availability in AWS. Using a classic load balancer across multiple regions may increase latency and may also result in increased costs. Setting up automatic scaling and load balancing with another application instance running on premises may increase complexity and may also introduce additional points of failure. Using the AWS region with the highest number of availability zones may not be necessary and may also result in increased costs.

Therefore, the best approach is to use an application load balancer across multiple availability zones in one AWS region to achieve high availability for a web application hosted on AWS.

Which AWS service helps users create three-dimensional applications quickly without requiring any specialized programming or three-dimensional graphics expertise?

• A. AWS RoboMaker

• B. Amazon Rekognition

• C. Amazon Sumerian

• D. Amazon GameLift

Answer explanation

The AWS service that helps users create three-dimensional applications quickly without requiring any specialized programming or three-dimensional graphics expertise is C. Amazon Sumerian.

Explanation:

Amazon Sumerian is a fully-managed service provided by AWS that allows users to create and publish augmented reality (AR), virtual reality (VR), and 3D applications quickly and easily, without requiring any specialized programming or three-dimensional graphics expertise. With Amazon Sumerian, users can create interactive 3D scenes, including characters, animations, and physics simulations, and deploy them across multiple platforms, including mobile devices, head-mounted displays, and web browsers.

AWS RoboMaker is a service that helps developers easily develop, test, and deploy robotics applications using a cloud-based development environment. Amazon Rekognition is a machine learning-based image and video analysis service that can detect objects, scenes, and faces in images and videos. Amazon GameLift is a managed service for deploying, operating, and scaling session-based multiplayer games.

Therefore, the AWS service that helps users create three-dimensional applications quickly without requiring any specialized programming or three-dimensional graphics expertise is Amazon Sumerian.

A development learn wants to deploy multiple test environments for an application in a fast, repeatable manner. Which AWS service should the learn use?

• A. Amazon EC2

• B. AWS Cloudformation

• C. Amazon QuickSight

• D. Amazon Elastic Container Service (Amazon ECS)

Answer explanation

The AWS service that a development team should use to deploy multiple test environments for an application in a fast, repeatable manner is B. AWS CloudFormation.

Explanation:

AWS CloudFormation is a service that enables users to define and provision AWS infrastructure and resources in a declarative way using templates. With AWS CloudFormation, a developer can define a template for their infrastructure and application resources, and use that template to provision multiple test environments in a fast, repeatable manner. By using CloudFormation templates, the developer can quickly deploy the same environment across multiple AWS accounts or regions, ensuring consistency across all environments.

Amazon EC2 is a web service that provides resizable compute capacity in the cloud. It can be used to quickly provision virtual servers in a variety of configurations. Amazon QuickSight is a business intelligence service that allows users to build visualizations, perform ad-hoc analysis, and quickly get business insights from their data. Amazon Elastic Container Service (Amazon ECS) is a fully-managed container orchestration service that allows users to run and scale containerized applications on AWS.

Therefore, the AWS service that a development team should use to deploy multiple test environments for an application in a fast, repeatable manner is AWS CloudFormation.

A company uses AWS Direct Conned and wants to establish connectivity that spans VPCs across multiple AWS Regions. Which AWS service or feature should the company use to meet these requirements?

• A. AWS Transit Gateway

• B. AWS PrivateLink

• C. Amazon Connect

• D. Amazon Route 53

Answer explanation

The AWS service or feature that the company should use to establish connectivity that spans VPCs across multiple AWS Regions while using AWS Direct Connect is A. AWS Transit Gateway.

Explanation:

AWS Transit Gateway is a fully-managed service that enables customers to connect their Amazon Virtual Private Clouds (VPCs) and on-premises networks together in a single gateway. With AWS Transit Gateway, customers can scale their network connectivity across multiple AWS accounts, VPCs, and regions without having to manage multiple VPN connections or create complex peering relationships.

When using AWS Direct Connect, customers can establish dedicated network connections from their on-premises data center or co-location facility to AWS. By using AWS Transit Gateway, customers can connect multiple VPCs that span multiple AWS Regions to their on-premises network via a single Direct Connect connection. This simplifies network management and reduces costs by eliminating the need for multiple Direct Connect connections.

AWS PrivateLink is a service that allows customers to access AWS services over private connections, rather than over the internet. Amazon Connect is a cloud-based contact center service that enables customers to provide customer service at any scale. Amazon Route 53 is a scalable and highly available Domain Name System (DNS) service.

Therefore, to establish connectivity that spans VPCs across multiple AWS Regions while using AWS Direct Connect, the company should use AWS Transit Gateway.

Which of the following are benefits of running a database on amazon rds compared to an on premises database?

• A. RDS backup are managed by AWS

• B. RDS supports any relational database

• C. RDs has no database engineer licensing costs.

• D. RDS database compute capacity can be easily scaled.

• E. RDS inbound traffic content (for example, security groups) is managed by AWS

Answer explanation

The benefits of running a database on Amazon RDS compared to an on-premises database are:

A. RDS backup are managed by AWS: Amazon RDS automatically takes backups of the database and retains them for a specified period, providing a convenient way to restore data in the event of an outage. This relieves the burden of managing backups from the customer.

D. RDS database compute capacity can be easily scaled: Amazon RDS makes it easy to scale the compute capacity of the database by allowing users to resize the database instance with just a few clicks, without any downtime.

E. RDS inbound traffic content (for example, security groups) is managed by AWS: Amazon RDS provides a secure way to access the database by managing the inbound traffic to the database instance, such as through the use of security groups. This ensures that the database is protected from unauthorized access.

Option B is partially correct. While Amazon RDS supports a variety of relational databases, it does not support all of them. Some examples of supported databases include MySQL, PostgreSQL, Oracle, and Microsoft SQL Server.

Option C is incorrect. While there may be no database engineer licensing costs associated with using Amazon RDS, there are still costs associated with using the service itself, such as the cost of the database instance, storage, and data transfer.

Therefore, the benefits of running a database on Amazon RDS compared to an on-premises database are that RDS backups are managed by AWS, RDS database compute capacity can be easily scaled, and RDS inbound traffic content is managed by AWS.

Which duty is a responsibility of AWS under the AWS shared responsibility model?

• A. Identity and access management

• B. Server-side encryption (SSE)

• C. Firewall configuration

• D. Maintaining physical hardware

Answer explanation

Under the AWS shared responsibility model, the duty that is a responsibility of AWS is D. Maintaining physical hardware.

Explanation:

The AWS shared responsibility model outlines the security responsibilities that are shared between AWS and its customers. Under this model, AWS is responsible for the security of the cloud infrastructure, including the physical hardware, while the customer is responsible for the security of their data and applications that are deployed on the cloud infrastructure.

Some examples of the responsibilities that are the responsibility of AWS include:

Maintaining physical hardware: AWS is responsible for the physical security of the infrastructure that hosts customer data, such as servers, storage, and networking equipment.

Network infrastructure: AWS is responsible for managing the underlying network infrastructure, including switches, routers, and load balancers.

Hypervisor: AWS is responsible for managing the virtualization layer, including the hypervisor and the underlying virtualization infrastructure.

Examples of the responsibilities that are the responsibility of the customer include:

Identity and access management: Customers are responsible for managing their user identities and access to their cloud resources.

Server-side encryption (SSE): Customers are responsible for implementing server-side encryption of their data stored in AWS.

Firewall configuration: Customers are responsible for configuring and managing the firewall and security groups to control traffic to and from their resources.

Therefore, under the AWS shared responsibility model, the duty that is a responsibility of AWS is maintaining physical hardware.

Which AWS service enables risk auditing of an AWS account by tracking and recording user actions and source IP addresses?

• A. AWS X-Ray

• B. AWS Shield

• C. AWS Trusted Advisor

• D. AWS CloudTrail

Answer explanation

The AWS service that enables risk auditing of an AWS account by tracking and recording user actions and source IP addresses is D. AWS CloudTrail.

Explanation:

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of an AWS account by providing a record of all AWS account activity, including actions taken through the AWS Management Console, AWS Command Line Interface (CLI), and AWS SDKs and APIs. With AWS CloudTrail, users can track and record user actions and source IP addresses to help identify potential security risks and troubleshoot issues.

AWS X-Ray is a service that enables users to analyze and debug distributed applications, such as those built using microservices architecture. AWS Shield is a managed distributed denial of service (DDoS) protection service that safeguards applications running on AWS against DDoS attacks. AWS Trusted Advisor is a service that provides real-time guidance to help optimize AWS resources and improve security and performance.

Therefore, the AWS service that enables risk auditing of an AWS account by tracking and recording user actions and source IP addresses is AWS CloudTrail.

Where can a user receive help with deploying popular technologies based on AWS best practices, including architecture and deployment instructions?

• A. Amazon QuickSight

• B. AWS Artifact

• C. AWS Config

• D. AWS Quick Starts

Answer explanation

A user can receive help with deploying popular technologies based on AWS best practices, including architecture and deployment instructions through D. AWS Quick Starts.

Explanation:

AWS Quick Starts are pre-built, customizable reference architectures that help users deploy popular technologies based on AWS best practices. AWS Quick Starts provide detailed architecture and deployment instructions for a wide range of use cases, including compute, storage, database, networking, security, analytics, and more. AWS Quick Starts can help users quickly build and deploy production-ready environments in a fast, reliable, and repeatable manner, with minimal manual intervention.

Amazon QuickSight is a business intelligence service that allows users to build visualizations, perform ad-hoc analysis, and quickly get business insights from their data. AWS Artifact is a portal that provides on-demand access to AWS compliance reports and select online agreements. AWS Config is a service that enables users to assess, audit, and evaluate the configurations of their AWS resources for compliance with organizational policies and industry standards.

Therefore, the option that best answers the question is AWS Quick Starts, where users can receive help with deploying popular technologies based on AWS best practices, including architecture and deployment instructions.

What is an advantage of deploying an application across multiple Availability Zones?

• A. There is a lower risk of service failure if a natural disaster causes a service disruption in a given AWS Region

• B. The application will have higher availability because it can withstand a service disruption in one Availability Zone

• C. There will be better coverage as Availability Zones are geographical^ distant and can serve a wider area

• D. There will be decreased application latency that will improve the user experience

Answer explanation

The advantage of deploying an application across multiple Availability Zones is B. The application will have higher availability because it can withstand a service disruption in one Availability Zone.

Explanation:

Availability Zones are separate and distinct physical locations within an AWS Region that are engineered to be isolated from failures in other Availability Zones, while being connected to each other via low-latency, high-bandwidth, and redundant network connections. By deploying an application across multiple Availability Zones, the application can withstand a service disruption in one Availability Zone, without disrupting the application's availability in other Availability Zones. This can help to ensure that the application is highly available and can continue to serve users even in the event of a service disruption.

Option A is partially correct, but not the best answer. While deploying an application across multiple Availability Zones can lower the risk of service failure in the event of a natural disaster or other service disruption in a given AWS Region, the primary advantage is the increased availability of the application.

Option C is incorrect. While deploying an application across multiple Availability Zones can provide better coverage, it is not because they are geographically distant and can serve a wider area. Availability Zones are typically located within the same metropolitan area or region and are designed to provide low-latency connectivity between them.

Option D is also incorrect. While deploying an application across multiple Availability Zones can reduce application latency in some cases, the primary advantage is the increased availability of the application.

Therefore, the advantage of deploying an application across multiple Availability Zones is that the application will have higher availability because it can withstand a service disruption in one Availability Zone.

A company plans to create a data lake that uses Amazon S3. Which factor will have the MOST effect on cost?

• A. The selection of S3 storage tiers

• B. Charges to transfer existing data into Amazon S3

• C. The addition of S3 bucket policies

• D. S3 ingest fees for each request

Answer explanation

The factor that will have the MOST effect on cost for a company planning to create a data lake that uses Amazon S3 is A. The selection of S3 storage tiers.

Explanation:

Amazon S3 offers multiple storage tiers with different pricing models based on the frequency of access to the data and the durability required for the data. The most frequently accessed data can be stored in the S3 Standard storage class, which has a higher cost per GB than other storage classes such as S3 Infrequent Access or S3 Glacier. Therefore, the selection of S3 storage tiers is the most significant factor that affects the cost of storing data in Amazon S3.

Charges to transfer existing data into Amazon S3 (option B) may have some impact on cost, but this is a one-time cost and will not be as significant as the ongoing cost of storage.

The addition of S3 bucket policies (option C) may have a negligible impact on cost.

S3 ingest fees for each request (option D) apply only to data transferred into Amazon S3 using a data transfer acceleration service and are not charged for regular S3 data transfer requests. Therefore, this is not the factor that will have the most effect on cost.

Therefore, the factor that will have the MOST effect on cost for a company planning to create a data lake that uses Amazon S3 is the selection of S3 storage tiers.