^{(from linux academy - Operation Exellence Pillar)}

Your existing custom NACL currently allows all Internet web traffic into the subnet. As part of a project implementation, you need to block IP traffic from a subnet to a specific internet IP address. How can this be accomplished?

^{(from linux academy - Operation Exellence Pillar)}

Which of the following events can be logged using CloudTrail. (Choose all that apply)

^{(from linux academy - Operation Exellence Pillar)}

You need to migrate a legacy application into AWS. It currently runs on a Linux operating system and has a requirement for iSCSI based block storage. Which AWS Service would you utilise to meet this requirement?

^{(from linux academy - Operation Exellence Pillar)}

Which of the following are AWS managed services that can allow host access to instances running on the respective services? (Choose all that apply)

^{(from linux academy - Operation Exellence Pillar)}

You are designing a VPC to host a small application. The VPC will be connected back to your on-premises network using a VPN. An EC2 instance runs the application, and will only need to connect to the internet for software updates. You have a list of the software update DNS names. How can you restrict this within the AWS VPC?

^{(from linux academy - Operation Exellence Pillar)}

You've been asked to host a docker container within your AWS environment. What is the most appropriate product to use for this task?

^{(from linux academy - Operation Exellence Pillar)}

You are designing a VPC for a small application. It will operate in a private subnet and needs internet access to software updates and other communications with internet IPs. Your security team is happy that there are no restrictions in the application server's internet access. Which AWS products are needed to allow this solution. The priority is using the least amount of services. Assume the EC2 instance and any NACL's, routes, and Security groups are included implicitly.

^{(from linux academy - Operation Exellence Pillar)}

Which of the following AWS storage services are able to be natively mounted as mount points on a Linux system.

^{(from linux academy - Operation Exellence Pillar)}

You run a single instance application on an EC2 instance in AWS. Your architecture teams are looking to make changes and convert the application to operate on multiple servers. The app runs on Linux and currently accesses millions of flat file data files in the /data/... folder structure. This database is stored on an EBS volume attached to the EC2 instance. How can this be moved to work on multiple servers, with as little application changes as possible? What product would you suggest?

^{(from linux academy - Operation Exellence Pillar)}

Your business generates a large amount of financial data within its SQL-backed financial application. You have been asked to suggest an AWS product which will allow storage of that data to be used for long term reporting, querying, forecasting, and business intelligence. Which AWS product should you suggest?

^{(from linux academy - Operation Exellence Pillar)}

You business has two EC2 instances, one is located in us-east, the other in us-west. You want to allow both machines to communicate with each other. Instances in either VPC need to be able to communicate with each other as if they are within the same network. What solution would you recommend?

^{(from linux academy - Operation Exellence Pillar)}

What steps are required to allow an EC2 instance to access the internet while being as secure as possible? Assume all security rules/ACL's and subnets are in place already. (Choose all that apply)

^{(from linux academy - Reliability pillar)}

Your businesses risk team has asked you to add additional resiliency to a critical business application. The application uses RDS and the MySQL engine and is based in us-east-1. The risk team would like to protect the application against an AZ failure and region issues, and wants to do it in a way which is as cost effective as possible. What two options could you suggest?

^{(from linux academy - Reliability pillar)}

Which of the following services or service features are natively highly available in a region and can cope with a AZ failure without itself failing. (Choose all that apply)

^{(from linux academy - Reliability pillar)}

What happens if you reboot an instance store-backed EC2 instance with a Public IP?

^{(from linux academy - Reliability pillar)}

You have designed a small VPC deployment for a highly-available web application. The VPC is in a Three Availability Zone region, and you have created nine subnets. Three are private (one per AZ), three are public (one per AZ), and three are database subnets (one per AZ). You have provisioned the three web servers in the public subnets, three application servers in the private subnets, and a three-node Aurora cluster. How many load balancers do you need to create, and in what subnets should they be placed, to ensure each tier is highly available?

^{(from linux academy - Reliability pillar)}

Why does stopping and starting an instance usually fix a System Status Check error?

^{(from linux academy - Reliability pillar)}

You are designing an environment with four VPCs serving unique functions. Each VPC is in a four-AZ region and has four subnets, one in each AZ.

You need to ensure that the public subnets in those VPCs can access the internet. What is the minimum number of internet gateways required to provide internet access to all VPCs, while being able to deal with availability zones within any of them?

The business is budget conscious and wants the minimum number possible.

^{(from linux academy - Reliability pillar)}

You have been asked to design an upgrade to a legacy environment running in an AWS VPC. The environment is currently using a single NAT instance running on EC2. The region the environment is in has four AZs. The VPC has eight subnets, four private (one in each AZ) and four public (one in each AZ). You have been asked to ensure the solution uses NAT gateways and that if any AZ fails, an instance in the other AZs can ALWAYS access the internet. What is the minimum number of NAT Gateways required?

^{(from linux academy - Reliability pillar)}

You are designing an application with three components: an app server running on EC2, a media store running on S3, and a database running on DynamoDB. You have been asked to make sure your design allows a single AZ to fail without impacting service. Which option is correct?

^{(from linux academy - Reliability pillar)}

Which of the following services/service features is natively highly available in a region, and can cope with a AZ failure without itself failing?

^{(from linux academy - Reliability pillar)}

Which of the following services or service features are natively highly available in a region and can cope with a AZ failure without itself failing.

^{(from linux academy - Reliability pillar)}

You need to design a VPC which is resilient to AZ failure from an internet access perspective. The VPC is in a four AZ region. How many Internet gateways are required to ensure multiple AZ failures won't disrupt internet connectivity.

^{(from linux academy - Reliability pillar)}

Your company is moving a legacy application from an on-premises data center to the cloud. The legacy application requires a static IP address hard-coded into the backend onto a single instance. What options do you have to maximize the availability of this application? (Choose 2)

^{(from linux academy - Reliability pillar)}

Your company is concerned with EBS volume backups on Amazon EC2, and wants to ensure they have proper backups so that the data is durable. What solutions could you implement (choose two)?

^{(from linux academy - Security pillar)}

Your company has just employed ten student for one week, and it is your task to provide them with access to AWS through IAM. Your supervisor has come to you and said that he wants to be able to track these students as a group, rather than individually. Because of this, he has requested for them to all have the same login ID but completely different passwords. Which of the following is the best way to achieve this?

^{(from linux academy - Security pillar)}

You have an EC2 instance located in a private subnet. The instance is using an private IP Version 4 address in the 10.0.0.0/24 range and has no public IP or elastic IP attached. NACLs and Security Groups are configured to allow the needed traffic. How can you provide this instance with access to the internet for updates.

^{(from linux academy - Security pillar)}

You are an EC2 administrator. You create an EC2 instance, and attach an EBS volume. Two weeks later, your supervisor informs you that the data on the EBS volume must be encrypted. What must you do to encrypt the existing EBS volume?

^{(from linux academy - Security pillar)}

Your CRM application running on EC2 needs to store and retrieve contract documents in an S3 bucket. How can your application get these permissions?

^{(from linux academy - Security pillar)}

You are about to create an AWS Lambda function, and need to give it the permissions to access Amazon S3. How do you best perform this (pick the best approach)

^{(from linux academy - Security pillar)}

You have a requirement to design a security architecture in AWS capable of allowing IP traffic using stateful intelligence from an EC2 instance. That is, for outgoing traffic which is allowed, then also allow the incoming return traffic. Which AWS product allows stateful security control ?

^{(from linux academy - Security pillar)}

You have been asked to advise a junior colleague how to explicitly deny traffic from an EC2 instance to a specific remote internet FQDN. What advice would you give?

^{(from linux academy - Security pillar)}

One of your environments utilizes DynamoDB as a database. You need to ensure that it can only be accessed by a select number of people using specific IP addresses. What design changes do you suggest?

^{(from linux academy - Security pillar)}

Multiple directors in your company have opened AWS accounts. The Chief Security Officer has expressed a concern that accounts may be using unapproved AWS services and wants your advice. What would you recommend?

^{(from linux academy - Security pillar)}

You are the system administrator for your company's AWS account, and it has approximately 200 IAM users. Your company has just introduced a new policy that will change the access for 50 of the IAM users to have unlimited access to S3 buckets. How can you implement this effectively so that there is no need to apply the policy at the individual user level?

^{(from linux academy - Security pillar)}

You operate a commercial stock images website with millions of images. Watermarked preview images are available via an EC2 instance application. Full resolution versions are stored on an EBS volume. The EBS volume is attached to the EC2 instance and delivered by the application. You have been asked to find a cheaper solution that can scale. Which option is the most suitable.

^{(from linux academy - Security pillar)}

Your information security officer has asked for modifications to an application running on an EC2 instance, to ensure that it uses regular key rotation for its interaction with AWS. What is the key point to let her know?

^{(from linux academy - Performance Efficiency pillar)}

Your autoscaling group launches instances that use provisioned IOPS EBS secondary data volumes. They are in a RAID 0 configuration, and serve 20TB of files. Whenever new instances are added to the group, they perform very slowly compared to the already running instances. What is the most likely problem?

^{(from linux academy - Performance Efficiency pillar)}

Your application needs to perform 100 eventually consistent reads per second from DynamoDB. Each read is 7KB is size. What is the minimum number of RCUs required to meet this demand?

^{(from linux academy - Performance Efficiency pillar)}

You've been asked to upgrade an old AWS environment (T series EC2 instances) which is suffering from slow internet throughput. Which option below represents a potential solution?

^{(from linux academy - Performance Efficiency pillar)}

Which of the following is true regarding S3 Request Rate Performance?

^{(from linux academy - Performance Efficiency pillar)}

You have been asked to design some scaling upgrades on a legacy web application which utilises a MySQL RDS instance. The application is suffering from increasing reports of performance issues during peak periods. The application is used for archival information storage, where data is reviewed constantly and very rarely updated. Which option provides the best possibility of performance improvements for the least cost?

^{(from linux academy - Performance Efficiency pillar)}

You are in the middle designing a media processing application, which runs on a fleet of EC2 instances. You need to make a choice on the most suitable EBS disk type to utilize. The business is concerned first about meeting its performance requirements, and second about being as cost effective as possible.

The business needs storage which can provide 500 MB/s. The IOPS requirements are a secondary consideration, so around 500 is fine. Which volume type is required?

^{(from linux academy - Performance Efficiency pillar)}

You are in the middle designing a media processing application, which runs on a fleet of EC2 instances. You need to make a choice on the most suitable EBS disk type to utilize. The business is concerned first about meeting its performance requirements, and second about being as cost effective as possible.

The business needs storage which can provide 20,000 IOPS on a single volume. Which storage type should be used?

^{(from linux academy - Performance Efficiency pillar)}

You have an application which demands extreme database performance. It needs to handle millions of read operations per second, and offer low latency. What product or combination of products would you suggest?

^{(from linux academy - Performance Efficiency pillar)}

Your business has a image processing application. It runs on a single x1.16xl EC2 instance. The instance is extremely expensive, and operations staff have noticed that CPU and memory usage fluctuates between around 20-30% during non busy periods and 100% at other times.

The application consists of two components, one allows image uploading, and one processes the images. You have been asked to rearchitect the application, aiming for reduced costs and optimized performance. What AWS products would you select?

(Choose all that apply)

^{(from linux academy - Performance Efficiency pillar)}

You are the solutions architect for a busy photo management website. Your business receives about 200 high resolution photo uploads per minute, and you store these in an S3 bucket. The business wants to do some analysis on all uploaded photos, then store the metadata in DynamoDB. They have asked you to suggest the cheapest option that can scale as the business grows.

^{(from linux academy - Performance Efficiency pillar)}

An application that retrieves data from an external web site is running on a single M5 large instance with a private IP. During peak loads, users report very long delays and timeouts. CloudWatch reports the CPU usage never climbs above 60%. What could be causing the issue?

^{(from linux academy - Performance Efficiency pillar)}

You've been asked to design a solution for a high volume website, and it needs to be highly available. In your proof of concept environment, you chose to use RDS using the MySQL engine. In your failover testing, you have noticed that when a failover occurs, there is sometimes data loss. It's as though the DB instance which takes over is behind the primary instance. What options do you have to resolve this?

^{(from linux academy - Performance Efficiency pillar)}

You run a small WordPress site focusing on photography. The site only experiences light usage, but has over 1TB of media files. The files are currently stored on an EC2 attached EBS volume. How can you reduce costs and improve performance. Which products can help?

^{(from linux academy - Cost Optimization Pillar)}

To reduce costs, you have been asked to revamp the design for an existing application. The system consists of four instances, all the same size, which are constantly powered on and are currently using an on-demand billing model. The CIO wants to reduce costs, but also wants to reserve the capacity that the four instances use. Reserve capacity in another AZ should be guaranteed by AWS. What suggestion should you make?

^{(from linux academy - Cost Optimization Pillar)}

As an AWS consultant, you have been tasked with finding ways to quickly lower a client's AWS monthly bill. What is the first thing you should ask them for?

^{(from linux academy - Cost Optimization Pillar)}

A client has asked you to advise them on some AWS cost related questions. The client has over 1000 EC2 instances that are preconfigured and used during peak periods of the year for their application. Those are currently in a stopped state now, but they are still incurring costs in that region. What's a possible reason for this?

^{(from linux academy - Cost Optimization Pillar)}

You have been asked for your advice on optimizing a client's EC2 costs. The client has 20 EC2 instances which are used 24/7/365. The EC2 instances are generally the same size and are spread across multiple availability zones. The client wants to achieve the maximum possible savings and doesn't care about capacity reservations. What would you suggest?

^{(from linux academy - Cost Optimization Pillar)}

You are designing infrastructure for an application which handles multiple petabytes per month of data transfer. It's utilized by customers globally, and you have been asked to develop a solution that provides the lowest costs and best user experience. The data consists of static large video clips. You already have datacenter infrastructure, and the business is keen to use that if possible. Which option would you suggest, in order to meet the requirements?

^{(from linux academy - Cost Optimization Pillar)}

Your operations team is using several EC2 instances for running scheduled maintenance scripts on your infrastructure. What are two ways you could possibly reduce costs for them?

^{(from linux academy - Cost Optimization Pillar)}

You have an environment which consists of ten classic load balancers, each serving HTTPS requests to two EC2 instances each. Multiple hostnames are in use. You have been asked to reduce costs while maintaining high availability. What would you suggest?

^{(from linux academy - Cost Optimization Pillar)}

A client has asked you to advise them on some AWS cost related questions. The client has over 1000 preconfigured EC2 instances that are used during peak periods of the year for their application. The client has decided to perform an upgrade of their application before the next peak period, and so has terminated all 1000 EC2 instances. They report still being charged a fee on an ongoing basis. Which option below is a possible reason?

^{(from linux academy - Cost Optimization Pillar)}

You have millions of objects in an S3 bucket. You are storing irreplaceable data that requires real-time access on rare occasions. Which of the following is the cheapest suitable storage class to use?

^{(from linux academy - Cost Optimization Pillar)}

You've been asked to review the architecture of an application within a client's AWS environment. It runs as a web app, with a DynamoDB backend. DynamoDB stores hundreds of millions of items of information, and each one is about 350KB in size. Most of every item is a satellite image of a plot of land, and could be anywhere on the earth's surface. The information is generated from a satellite image, and can't be regenerated. The data is read constantly, and is costing the business a fortune. On top of this, it's impacting read performance. What would you suggest as a quick potential way to reduce costs?

^{(from linux academy - Cost Optimization Pillar)}

Your business needs a small database for storing simple names, addresses, and ID picture information for 1000 employees. The usage will be low, queries will occur every day, and the business wants the most suitable low cost solution available within AWS. Which database would you suggest?

^{(from linux academy - Cost Optimization Pillar)}

Your business stores high resolution media imaging in one of its S3 buckets accessible internally to it's applications. The number of objects increase daily, and approximately 100,000 objects are added daily. After discussing the situation with your medical consultants you have learned a few things. First, images are used extensively for 7 days, after that those images may or may not need to be accessed extensively for up to 60 days after arrival. Beyond that point, images are only accessed for scheduled consultations. What is the most economical solution to these mounting costs?

^{(from linux academy - Cost Optimization Pillar)}

You are designing the storage needs for a movie processing application. Large videos are uploaded to your website and stored on S3. AWS Elastic Transcoder processes these master copies out into multiple formats and stores them on S3. The master copies can be used directly up to a year, sometimes less. There are over 20 size and bitrate variations for each master movie file. 90% of users of your website use only two of these size variants. Storage costs are increasing rapidly, and you have been asked to optimize the running costs.