AWS Cloud Concepts Challenge

What are the best practices for AWS Cloud Security?

• Relying solely on antivirus software for security

• Using only public access for all resources

• Disabling all logging features

• Best practices for AWS Cloud Security include IAM roles, MFA, auditing permissions, data encryption, security groups, and log monitoring.

Explain the difference between IAM roles and IAM policies.

• IAM roles are temporary permissions; IAM policies are permanent permissions.

• IAM roles are identities with permissions; IAM policies are documents that define those permissions.

• IAM roles are only for AWS services; IAM policies can be used anywhere.

• IAM roles are used for user authentication; IAM policies are for data encryption.

What are the different EC2 instance types available?

• Serverless Functions

• General Purpose, Compute Optimized, Memory Optimized, Storage Optimized, Accelerated Computing, and I/O Optimized.

• Container Instances

• Virtual Machines

How does AWS Lambda handle serverless computing?

• AWS Lambda requires manual server management for scaling.

• AWS Lambda charges a flat monthly fee regardless of usage.

• AWS Lambda only runs code on dedicated servers.

• AWS Lambda enables serverless computing by executing code in response to events without server management, automatically scaling, and charging only for compute time used.

What are the different storage classes available in Amazon S3?

• Archive Storage

• Basic Storage

• Standard, Intelligent-Tiering, Standard-IA, One Zone-IA, Glacier, Glacier Deep Archive

• Premium Storage

Compare Amazon EBS and Amazon EFS in terms of use cases.

• Use Amazon EBS for block storage needs like databases; use Amazon EFS for shared file storage needs.

• Use Amazon EBS for archiving data; use Amazon EFS for real-time processing.

• Use Amazon EBS for shared file storage needs; use Amazon EFS for block storage needs.

• Use Amazon EBS for temporary storage; use Amazon EFS for backup solutions.

What is the purpose of IAM in AWS?

• To store data in AWS databases.

• The purpose of IAM in AWS is to manage user access and permissions to AWS resources securely.

• To monitor network traffic in AWS.

• To create virtual machines in AWS.

How can you secure your AWS account using IAM?

• Enable MFA, create IAM users, assign least privilege permissions, rotate access keys, and monitor activity.

• Share access keys with team members

• Use a single root account for all activities

• Disable all logging features

What factors influence the pricing of EC2 instances?

• User account age

• Instance type, region, pricing model, operating system, and additional features.

• Data center location

• Network latency

Describe a common use case for AWS Lambda.

• Running a virtual machine on EC2.

• Processing data uploaded to Amazon S3.

• Storing data in a DynamoDB table.

• Creating a static website on S3.