NEW
Font size
S
M
L
XL
WorksheetsAWS Practitioner 03
Total questions: 57
Worksheet time: 14hrs 15mins
Name
Class
Date
1.
In addition to setting alarms, what else can Cloud Watch do?
a)
all of these
b)
Collect and track metrics
c)
Collect and monitor log files
d)
Automatically react to changes
2.
which of the following can cloudwatch do
a)
all of these
b)
SNS email notification
c)
Auto scaling event
d)
Send stats to the management consolse
3.
T/F You can use Cloudwatch to invoke AWS Lambda to update DNS when an event notifies that an EC2 instance is in a running state
a)
true
b)
false
4.
Which of the following are cloudwatch components
a)
all of these
b)
metrics and logs
c)
alarms and events
d)
dashboards
5.
Which is true for Cloudwatch?
a)
Alarms watch a single metric
b)
Metrics watch a single alarm
c)
alarms watch several metrics
d)
all of these
6.
Which of the following is a valid cloudwatch alarm action
a)
all of these
b)
EC2 action
c)
Autoscaling action
d)
notification sent to SNS topic
7.
Cloudwatch log monitoring will monitor for which of the following
a)
all of these
b)
specific phrases
c)
values
d)
patterns
8.
How does Cloudwatch monitor Linux and Windows instances?
a)
agents
b)
monitors at hypervisor level
c)
monitors at cloud level
d)
reviews OS logs
9.
__ is all API actions that happen in the AWS account
a)
CloudTrail
b)
Cloudwatch
c)
CloudFoundation
d)
all of these
10.
Cloudwatch logs can be archived to __ for long term storage
a)
S3
b)
ECB
c)
EC2
d)
Cloudfront
11.
You are creating a Cloudfront for video. What would you select?
a)
RTMP
b)
Web
c)
HTTPS
d)
MIME
12.
Which is a good use case for Cloudfront
a)
all of these
b)
Video streaming
c)
API Acceleration
d)
Dynamic Content
13.
Your content server crashes in a cloudfront configuration. What will happen?
a)
Static pages still delivered by edge cache
b)
web site unavailable
c)
cloud front will display a maintenance message
d)
All of these
14.
Which AWS service creates resource provisioning
a)
Cloudformation
b)
Cloudtrail
c)
Cloudfront
d)
CloudWatch
15.
In Cloudformation, a set of resources is known as a
a)
stack
b)
cluster
c)
shard
d)
pool
16.
T/F To update a cloudformation stack, you rerun a modified template
a)
true
b)
false
17.
A cloudformation template is written in
a)
both answers
b)
JSON
c)
YAML
d)
neither answer
18.
Cloudformation templates __ prompt the user for parameters
a)
can
b)
can not
19.
Infrastructure as Code is provided by
a)
Cloudformation
b)
Cloudtrail
c)
Cloudfront
d)
CloudWatch
20.
If Cloudformation template has an error, what happens?
a)
All changes are rolled back
b)
Process ends at the point of error
c)
The template will complete but write error to log
d)
Template will complete but instances will be powered off
21.
To assist with creating cloudformation templates, you can use
a)
Designer
b)
Flowcharts
c)
Creator
d)
Workflows
22.
Allows private subnet resources to access Internet
a)
NAT Gateway
b)
Internet Gateway
c)
Route Tables
d)
Network Access Control Lists
23.
aws is compliant with
a)
All of these
b)
iso9001
c)
iso 27001
d)
iso 27018
24.
What does the AWS Well-Architected Framework do?
a)
All of these
b)
Access and improve architectures
c)
Understand how designs impact business
d)
5 pillars and design principals
25.
In addition to Security and Reliability, which is another of the 5 pillars of a well-architected framework
a)
All of these
b)
performance efficiency
c)
cost optimization
d)
operational excellence
26.
Detective Controls, Data Protection, and Incident Response are part of which of the 5 pillars?
a)
Security
b)
performance efficiency
c)
cost optimization
d)
operational excellence
27.
This captures and audit logs in attempt to find a security incident
a)
detective controls
b)
data protection
c)
identity and access management
d)
infrastructure protection
28.
Recovering from failure is part of which of the 5 pillars
a)
reliability
b)
security
c)
performance efficiency
d)
operational excellence
29.
A design principle for the Reliability Pillar is
a)
All of these
b)
Scale Horizontally
c)
Automatically recover
d)
test recovery procedures
30.
Consuming a new technology as a service (instead of learning it) is known as
a)
democratizing technologies
b)
serverless architectures
c)
mechanical sympathy
d)
all of these
31.
Matching supply with demand is part of which of the 5 pillars
a)
cost optimization
b)
reliability
c)
performance efficiency
d)
operational excellence
32.
Understanding how much money a system makes compared to the cost is known as
a)
measure overall efficiency
b)
consumption model
c)
managed servies
d)
attribute expenditures
33.
The ability of a system to remain operational
a)
Fault Tolerance
b)
Highly Available
c)
Both Answers
d)
Neither Answer
34.
Minimal downtime, system is always functional and accessible
a)
Highly Available
b)
Fault Tolerance
c)
Both Answers
d)
Neither Answer
35.
Which requires no human intervention
a)
Highly Available
b)
Fault Tolerance
c)
Both Answers
d)
Neither Answer
36.
Elastic IP is __ because the IP can be used on a replacement server should the server fail
a)
Fault Tolerance
b)
Highly Available
c)
Both Answers
d)
Neither Answer
37.
Route53's DNS failover feature is an example of
a)
Highly Available
b)
Fault Tolerance
c)
Both Answers
d)
Neither Answer
38.
Which is a distributed statistics gathering system?
a)
CloudWatch
b)
Cloud Foundation
c)
Route 53
d)
Elastic Load Balancing
39.
Which of the following provides Fault Tolerance in AWS?
a)
All of these
b)
Simple Queue Service
c)
Simple Storage Service
d)
Relational Database Service
40.
Cloud based security governance offers which of the following
a)
All of these
b)
Additional Oversight
c)
Security Control
d)
Central Automation
41.
AWS does/does not offer Encryption in Transit (TLS) for data
a)
Does
b)
Does not
42.
Which of the following is offered by AWS for network security
a)
All of these
b)
Private/Dedicated Connections
c)
DDOS mitigation
d)
Built-in firewalls
43.
Who is responsible for securing applications and customer data
a)
customers
b)
both answers
c)
aws
d)
neither answer
44.
AWS uses a __ based hypervisor
a)
Zen
b)
Hyper-V
c)
ESX
d)
RedHat
45.
A permanent main operator (human or machine)
a)
user
b)
group
c)
role
d)
policy docs
46.
With IAM, a role is/is not your permission
a)
is not
b)
is
47.
This is an authentication method
a)
role
b)
group
c)
user
d)
policy docs
48.
Credentials for this operator are temporary
a)
role
b)
group
c)
user
d)
policy docs
49.
With IAM, this is your permissions
a)
policy doc
b)
group
c)
user
d)
role
50.
With IAM, a policy document may be attached to which
a)
all of these
b)
user
c)
role
d)
group
51.
With IAM, An explicit __ overrides a __
a)
Deny, Allow
b)
Allow, Deny
c)
Deny, Deny
d)
Allow, Allow
52.
You would like to find out about vulnerabilities and deviations from security best practices. Use which?
a)
Amazon Inspector
b)
IAM
c)
Cloudwatch
d)
AWS Shield
53.
Amazon Inspector is
a)
All of these
b)
agent based
c)
API driven
d)
Delivered as a service
54.
You can access Amazon inspector via CLI and __
a)
All of these
b)
Inspector Console
c)
SDK
d)
API
55.
Which of the following protects against DDoS attacks
a)
AWS Shield
b)
IAM
c)
Cloudwatch
d)
Amazon Inspector
56.
AWS Shield Standard IS/IS NOT free
a)
IS
b)
IS NOT
57.
Which of the following includes 24hr access to a response team?
a)
AWS Shield Advanced
b)
AWS Shield Standard
Reset
