2402 intake AWS

In AWS, which security aspects are the customer's responsibility?

• Life-cycle management of IAM credentials

• Decommissioning storage devices

• 
  Security Group and ACL (Access Control List) settings

• Encryption of EBS (Elastic Block Storage) volumes

• Controlling physical access to compute resources

A user is running a MySQL RDS instance. The user will not use the DB for the next 3 months but will continue use in future.
How can the user save costs?

• Pause the RDS activities from CLI until it is required in the future

• Stop the RDS instance

• Create a snapshot of RDS to launch in the future and terminate the instance now

• Change the instance size to micro

A user has launched five instances with ELB. How can the user add the sixth EC2 instance to ELB?

• 
  The user can add the instance and change the ELB config file.

• The user can add the sixth instance on the fly.

• The user must stop the ELB and add the sixth instance.

• The ELB can only have a maximum of five instances.

Which of these configuration or deployment practices is a BIG security risk for RDS?

• Storing SQL function code in plaintext

• Having RDS and EC2 instances exist in the same subnet

• Non-Multi-AZ RDS instance

• RDS in a public subnet

The DB of an application runs on Amazon RDS. We want that a reporting tool to access this data. How can we achieve it, considering that the reporting tool must be highly available without impacting the application’s performance?

• 1. Create a cross-region Multi-AZ deployment and create a read replica in the second region

• 1. Create a Multi-AZ RDS Read Replica of the RDS DB instance

• 1. Create a Single-AZ RDS Read Replica of the RDS DB instance. Create a second Single-AZ RDS Read Replica from the replica

• 1. Move the instance to Amazon EC2 and create and manage snapshots manually

Answer explanation

Amazon RDS Read Replicas can offload read traffic from your primary database instance. This is exactly what you need to support your reporting tool without impacting the performance of your application.

An ecommerce company is using an AWS Lambda function behind Amazon API Gateway as its application tier. To process orders during checkout, the application calls a POST API from the frontend. The POST API invokes the Lambda function asynchronously. In rare situations, the application has not processed orders. The Lambda application logs show no errors or failures.

• 
  Inspect the frontend logs for API failures. Call the POST API manually by using the requests from the log file.

• Inspect the Lambda logs in Amazon CloudWatch for possible errors. Fix the errors.

• Create and inspect the Lambda dead-letter queue. Troubleshoot the failed functions. Reprocess the events

• Make sure that caching is disabled for the POST API in API Gateway.

What is the primary purpose of using Amazon SNS?

• Data storage

• Pub/Sub messaging

• ueue management

• API management

Which AWS service is used to decouple application components and ensure message delivery?

How can you ensure that a Lambda function processes messages from SQS exactly once?

• Increase the Lambda timeout

• Use a FIFO queue

• Use multiple consumers

• Enable message encryption

What is the maximum message retention period for SQS standard queues?