Advanced Architecting on AWS - 2nd Day (set 1)

Your company has performed a security audit on your AWS infrastructure, finding inconsistent security rules protecting various AWS resources. The lead security engineer recommends using AWS Firewall Manager to close these findings. What resources does Firewall Manager help you manage across your organization? (Select THREE.)

• Security groups
• Amazon Route 53 hosted zones
• AWS Network Firewalls
• AWS WAF rules
• AWS Global Accelerators

What are the different deployment models supported by AWS Code Deploy? (Select TWO.)

• In-place
• Rolling
• Immutable
• Canary
• Blue/green

Which of the following statements best describes AWS Local Zones?

• Local Zones do not support AWS Direct Connect 

• Local Zones are connected by high speed links to an AWS Region

• Local Zones support all the same services offered by an AWS Region

• Local Zones offer lower latency than AWS Outposts

What network modes is the only supported mode for ECS Fargate launch type?

• Host

• Bridge

• awsvpc

• None

What of following statements are correct regarding AWS Network Firewall? (multiple choice)

• Support stateful inspection only

• Ensure compliance to mandatory rules across the organization

• We can import existing rules from community maintained Suricata rulesets

• Automatically scales

What are AWS Services in CI/CD pipelines? (Select TWO.)

• CodeCommit

• CodeBuild

• CodeAutomation

• Github

How does Local Zone differ from Edge location? (Select TWO.)

• AWS resources are stored in Local Zone

• AWS resources are stored in Edge Location

• Local Zone appears as an AZ inside VPC

• CloudFront support multi-AZ deployment while Local Zone doesn't