Quizz 1

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.
Which AWS service can the company use to meet these requirements?

• AWS Trusted Advisor

• Amazon Inspector

• AWS Config

• Amazon GuardDuty

Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?

• Access to DynamoDB tables

• Physical security of DynamoDB

• Patching of DynamoDB

• Encryption of data at rest in DynamoDB

A company provides an API to its users that automates inquiries for tax computations based on item prices. The company experiences a larger number of inquiries during the holiday season only that cause slower response times. A solutions architect needs to design a solution that is scalable and elastic.

What should the solutions architect do to accomplish this?

• Provide an API hosted on an Amazon EC2 instance. The EC2 instance performs the required computations when the API request is made.

• Design a REST API using Amazon API Gateway that accepts the item names. API Gateway passes item names to AWS Lambda for tax computations.

• Create an Application Load Balancer that has two Amazon EC2 instances behind it. The EC2 instances will compute the tax on the received item names.

• Design a REST API using Amazon API Gateway that connects with an API hosted on an Amazon EC2 instance. API Gateway accepts and passes the item names to the EC2 instance for tax computations.

A company wants to establish a schedule for rotating database user credentials.
Which AWS service will support this requirement with the LEAST amount of operational overhead?

• AWS Systems Manager

• AWS Secrets Manager

• AWS License Manager

• AWS Managed Services

An application runs on Amazon EC2 instances in private subnets. The application needs to access an Amazon DynamoDB table.

What is the MOST secure way to access the table while ensuring that the traffic does not leave the AWS network?

• Use a VPC endpoint for DynamoDB.

• Use a NAT gateway in a public subnet.

• Use a NAT instance in a private subnet.

• Use the internet gateway attached to the VPC.

A company is running a batch application on Amazon EC2 instances. The application consists of a backend with multiple Amazon RDS databases. The application is causing a high number of reads on the databases. A solutions architect must reduce the number of database reads while ensuring high availability.

What should the solutions architect do to meet this requirement?

• Add Amazon RDS read replicas.

• Use Amazon ElastiCache for Redis.

• Use Amazon Route 53 DNS caching

• Use Amazon ElastiCache for Memcached.

A company needs to export its database once a day to Amazon S3 for other teams to access. The exported object size varies between 2 GB and 5 GB. The S3 access pattern for the data is variable and changes rapidly. The data must be immediately available and must remain accessible for up to 3 months. The company needs the most cost-effective solution that will not increase retrieval time.

Which S3 storage class should the company use to meet these requirements?

• S3 Intelligent-Tiering

• S3 Glacier Instant Retrieval

• S3 Standard

• S3 Standard-Infrequent Access (S3 Standard-IA)

A company is running and managing its own Docker environment on Amazon EC2 instances. The company wants an alternative to help manage cluster size, scheduling, and environment maintenance.
Which AWS service meets these requirements?

• Amazon RDS

• AWS Lambda

• Amazon Athena

• AWS Fargate

A solutions architect is designing a new API using Amazon API Gateway that will receive requests from users. The volume of requests is highly variable; several hours can pass without receiving a single request. The data processing will take place asynchronously, but should be completed within a few seconds after a request is made.

Which compute service should the solutions architect have the API invoke to deliver the requirements at the lowest cost?

• An AWS Glue job

• A containerized service hosted in Amazon Elastic Kubernetes Service (Amazon EKS)

• A containerized service hosted in Amazon ECS with Amazon EC2

• An AWS Lambda function

Which of the following are advantages of the AWS Cloud? (Choose two.)

• Trade variable expenses for capital expenses

• High economies of scale

• Launch globally in minutes

• Focus on managing hardware infrastructure

• Overprovision to ensure capacity