awssaa11

What is the default maximum number of MFA devices in use per AWS account (at the root account level)?

• 1.
• 5.
• 15.
• 10.

Select the correct statement: Within Amazon EC2, when using Linux instances, the device name /dev/sda1 is [...].

• reserved for EBS volumes.
• recommended for EBS volumes.
• recommended for instance store volumes.
• reserved for the root device.

Does Amazon Route 53 support NS Records?

• Yes, it supports Name Service records.
• No.
• It supports only MX records.
• Yes, it supports Name Server records.

Your web application front end consists of multiple EC2 instances behind an Elastic Load Balancer. You configured ELB to perform health checks on these EC2 instances, if an instance fails to pass health checks, which statement will be true?

• The instance gets terminated automatically by the ELB.
• The instance gets quarantined by the ELB for root cause analysis.
• The instance is replaced automatically by the ELB.
• The ELB stops sending traffic to the instance that failed its health check.

George has launched three EC2 instances inside the US-East-1a zone with his AWS account. Ray has launched two EC2 instances in the US-East-1a zone with his AWS account. Which of the below mentioned statements will help George and Ray understand the Availability Zone (AZ) concept better?

• All the instances of George and Ray can communicate over a private IP with a minimal cost.
• The US-East-1a region of George and Ray can be different Availability Zones.
• All the instances of George and Ray can communicate over a private IP without any cost.
• The instances of George and Ray will be running in the same data centre.

Once again your customers are concerned about the security of their sensitive data and with their latest enquiry ask about what happens to old storage devices on AWS. What would be the best answer to this question?

• AWS reformats the disks and uses them again.
• AWS uses the techniques detailed in DoD 5220.22-M to destroy data as part of the decommissioning process.
• AWS uses their own proprietary software to destroy data as part of the decommissioning process.
• AWS uses a 3rd party security organization to destroy data as part of the decommissioning process.

Which of the following are characteristics of Amazon VPC subnets? (Choose 2 answers)

• Each subnet spans at least 2 Availability Zones to provide a high-availability environment.
• Each subnet maps to a single Availability Zone.
• CIDR block mask of/25 is the smallest range supported.
• By default, all subnets can route between each other, whether they are private or public.
• Instances in a private subnet can communicate with the Internet only if they have an Elastic IP.

Which AWS instance address has the following characteristics? 'If you stop an instance, its Elastic IP address is unmapped, and you must remap it when you restart the instance.'

• Both A and B.
• None of these.
• VPC Addresses.
• EC2 Addresses.

You are designing a data leak prevention solution for your VPC environment. You want your VPC Instances to be able to access software depots and distributions on the Internet for product updates. The depots and distributions are accessible via third party CONs by their URLs. You want to explicitly deny any other outbound connections from your VPC instances to hosts on the internet. Which of the following options would you consider?

• Configure a web proxy server in your VPC and enforce URL-based ru les for outbound access Remove default routes.
• Implement security groups and configure outbound rules to only permit traffic to software depots.
• Move all your instances into private VPC subnets remove default routes from all routing tables and add specific routes to the software depots and distributions only.
• Implement network access control lists to all specific destinations, with an Implicit deny as a rule.

What is an isolated database environment running in the cloud (Amazon RDS) called?

• DB Instance.
• DB Unit.
• DB Server.
• DB Volume.