Font size
Worksheetslorem ipsum AWS D4 cap.1-2
Total questions: 55
Worksheet time: 28mins
Under a single AWS account, you have set up an Auto Scaling group with a maximum capacity of 50 Amazon Elastic Compute Cloud (Amazon EC2) instances in us-west-2. When you scale out, however, it only increases to 20 Amazon EC2 instances. What is the likely cause?
Auto Scaling has a hard limit of 20 Amazon EC2 instances.
If not specified, the Auto Scaling group maximum capacity defaults to 20 Amazon EC2 instances.
The Auto Scaling group desired capacity is set to 20, so Auto Scaling stopped at 20 Amazon EC2 instances.
You have exceeded the default Amazon EC2 instance limit of 20 per region.
Elastic Load Balancing allows you to distribute traffic across which of the following?
Only within a single Availability Zone
Multiple Availability Zones within a region
Multiple Availability Zones within and between regions
Multiple Availability Zones within and between regions and on-premises virtualized instances running OpenStack Multiple Availability Zones within and between regions and on-premises virtualized instances running OpenStack
Amazon CloudWatch offers which types of monitoring plans? (Choose 2 answers)
Basic
Detailed
Diagnostic
Precognitive
Retroactive
An Amazon Elastic Compute Cloud (Amazon EC2) instance in an Amazon Virtual Private Cloud (Amazon VPC) subnet can send and receive traffic from the Internet when which of the following conditions are met? (Choose 3 answers)
Network Access Control Lists (ACLs) and security group rules disallow all traffic except relevant Internet traffic
Network ACLs and security group rules allow relevant Internet traffic.
Attach an Internet Gateway (IGW) to the Amazon VPC and create a subnet route table to send all non-local traffic to that IGW.
Attach a Virtual Private Gateway (VPG) to the Amazon VPC and create subnet routes to send all non-local traffic to that VPG.
The Amazon EC2 instance has a public IP address or Elastic IP (EIP) address.
If you launch five Amazon Elastic Compute Cloud (Amazon EC2) instances in an Amazon Virtual Private Cloud (Amazon VPC) without specifying a security group, the instances will be launched into a default security group that provides which of the following? (Choose 3 answers)
The five Amazon EC2 instances can communicate with each other.
The five Amazon EC2 instances cannot communicate with each other.
All inbound traffic will be allowed to the five Amazon EC2 instances.
No inbound traffic will be allowed to the five Amazon EC2 instances.
All outbound traffic will be allowed from the five Amazon EC2 instances.
Your company wants to host its secure web application in AWS. The internal security policies consider any connections to or from the web server as insecure and require application data protection. What approaches should you use to protect data in transit for the application? (Choose 2 answers)
Use BitLocker to encrypt data.
Use HTTPS with server certificate authentication.
Use an AWS Identity and Access Management (IAM) role.
Use Secure Sockets Layer (SSL)/Transport Layer Security (TLS) for database connection.
Use XML for data transfer from client to server. Use XML for data transfer from client to server.
You have an application that will run on an Amazon Elastic Compute Cloud (Amazon EC2) instance. The application will make requests to Amazon Simple Storage Service (Amazon S3) and Amazon DynamoDB. Using best practices, what type of AWS Identity and Access Management (IAM) identity should you create for your application to access the identified services?
IAM role
IAM user
IAM group
IAM directory
When a request is made to an AWS Cloud service, the request is evaluated to decide whether it should be allowed or denied. The evaluation logic follows which of the following rules? (Choose 3 answers)
An explicit allow overrides any denies.
By default, all requests are denied.
An explicit deny overrides any allows.
By default, all requests are allowed.
What is the data processing engine behind Amazon Elastic MapReduce (Amazon EMR)?
Apache Hadoop
Apache Hive
Apache Pig
Apache HBase
What type of AWS Elastic Beanstalk environment tier provisions resources to support a web application that handles background processing tasks?
Web server environment tier
Worker environment tier
Database environment tier
Batch environment tier
What Amazon Relational Database Service (Amazon RDS) feature provides the high availability for your database?
Regular maintenance windows
Security groups
Automated backups
Multi-AZ deployment
What administrative tasks are handled by AWS for Amazon Relational Database Service (Amazon RDS) databases? (Choose 3 answers)
Regular backups of the database
Deploying virtual infrastructure
Deploying the schema (for example, tables and stored procedures)
Patching the operating system and database software
Setting up non-admin database accounts and privileges
Which of the following use cases is well suited for Amazon Redshift?
A 500TB data warehouse used for market analytics
A NoSQL, unstructured database workload
A high traffic, e-commerce web application
An in-memory cache
Which of the following statements about Amazon DynamoDB secondary indexes is true?
Which of the following statements about Amazon DynamoDB secondary indexes is true?
There can only be one per table, and it must be created when the table is created.
There can be many per table, and they can be created at any time.
There can only be one per table, and it must be created when the table is created. There can only be one per table, and it must be created when the table is created.
What is the primary use case of Amazon Kinesis Firehose?
Ingest huge streams of data and allow custom processing of data in flight.
Ingest huge streams of data and store it to Amazon Simple Storage Service (Amazon S3), Amazon Redshift, or Amazon Elasticsearch Service.
Generate a huge stream of data from an Amazon S3 bucket.
Generate a huge stream of data from Amazon DynamoDB.
Your company has 17TB of financial trading records that need to be stored for seven years by law. Experience has shown that any record more than a year old is unlikely to be accessed. Which of the following storage plans meets these needs in the most cost-efficient manner?
Store the data on Amazon Elastic Block Store (Amazon EBS) volume attached to t2.large instances.
Store the data on Amazon Simple Storage Service (Amazon S3) with lifecycle policies that change the storage class to Amazon Glacier after one year, and delete the object after seven years.
Store the data in Amazon DynamoDB, and delete data older than seven years.
Store the data in an Amazon Glacier Vault Lock. Store the data in an Amazon Glacier Vault Lock.
What must you do to create a record of who accessed your Amazon Simple Storage Service (Amazon S3) data and from where?
Enable Amazon CloudWatch logs.
Enable versioning on the bucket.
Enable website hosting on the bucket.
Enable server access logs on the bucket.
Create an AWS Identity and Access Management (IAM) bucket policy.
Amazon Simple Storage Service (Amazon S3) is an eventually consistent storage system. For what kinds of operations is it possible to get stale data as a result of eventual consistency?
GET after PUT of a new object
GET or LIST after a DELETE
GET after overwrite PUT (PUT to an existing key)
DELETE after GET of new object DELETE after GET of new object
How is data stored in Amazon Simple Storage Service (Amazon S3) for high durability?
Data is automatically replicated to other regions.
Data is automatically replicated to different Availability Zones within a region.
Data is replicated only if versioning is enabled on the bucket.
Data is automatically backed up on tape and restored if needed. Data is automatically backed up on tape and restored if needed.
Your company needs to provide streaming access to videos to authenticated users around the world. What is a good way to accomplish this?
Use Amazon Simple Storage Service (Amazon S3) buckets in each region with website hosting enabled.
Store the videos on Amazon Elastic Block Store (Amazon EBS) volumes.
Enable Amazon CloudFront with geolocation and signed URLs.
Run a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances to host the videos.
Which of the following are true about the AWS shared responsibility model? (Choose 3 answers)
AWS is responsible for all infrastructure components (that is, AWS Cloud services) that support customer deployments.
The customer is responsible for the components from the guest operating system upward (including updates, security patches, and antivirus software).
The customer may rely on AWS to manage the security of their workloads deployed on AWS.
While AWS manages security of the cloud, security in the cloud is the responsibility of the customer.
Which process in an Amazon Simple Workflow Service (Amazon SWF) workflow implements a task?
Decider
Activity worker
Workflow starter
Business rule
Which of the following is true if you stop an Amazon Elastic Compute Cloud (Amazon EC2) instance with an Elastic IP address in an Amazon Virtual Private Cloud (Amazon VPC)?
The instance is disassociated from its Elastic IP address and must be re-attached when the instance is restarted.
The instance remains associated with its Elastic IP address.
The Elastic IP address is released from your account.
The instance is disassociated from the Elastic IP address temporarily while you restart the instance.
Which Amazon Elastic Compute Cloud (Amazon EC2) pricing model allows you to pay a set hourly price for compute, giving you full control over when the instance launches and terminates?
Spot instances
Reserved instance
On Demand instances
Dedicated instances Dedicated instances
Under what circumstances will Amazon Elastic Compute Cloud (Amazon EC2) instance store data not be preserved?
The associated security groups are changed.
The instance is stopped or rebooted.
The instance is rebooted or terminated.
The instance is stopped or terminated.
None of the above
Which of the following describes a physical location around the world where AWS clusters data centers?
Endpoint
Collection
Fleet
Region
Each AWS region is composed of two or more locations that offer organizations the ability to operate production systems that are more highly available, fault tolerant, and scalable than would be possible using a single data center. What are these locations called?
Availability Zones
Replication areas
Geographic districts
Compute centers
What is the deployment term for an environment that extends an existing on-premises infrastructure into the cloud to connect cloud resources to internal systems?
All-in deployment
Hybrid deployment
On-premises deployment
Scatter deployment
Which AWS Cloud service allows organizations to gain system-wide visibility into resource utilization, application performance, and operational health?
AWS Identity and Access Management (IAM)
Amazon Simple Notification Service (Amazon SNS)
Amazon CloudWatch
AWS CloudFormation
Which of the following AWS Cloud services is a fully managed NoSQL database service?
Amazon Simple Queue Service (Amazon SQS)
Amazon DynamoDB
Amazon ElastiCache
Amazon Relational Database Service (Amazon RDS))
Your company experiences fluctuations in traffic patterns to their e-commerce website based on flash sales. What service can help your company dynamically match the required compute capacity to the spike in traffic during flash sales?
Auto Scaling
Amazon Glacier
Amazon Simple Notification Service (Amazon SNS)
Amazon Virtual Private Cloud (Amazon VPC)
Your company provides an online photo sharing service. The development team is looking for ways to deliver image files with the lowest latency to end users so the website content is delivered with the best possible performance. What service can help speed up distribution of these image files to end users around the world?
Amazon Elastic Compute Cloud (Amazon EC2)
Amazon Route 53
AWS Storage Gateway
Amazon CloudFront
Your company runs an Amazon Elastic Compute Cloud (Amazon EC2) instance periodically to perform a batch processing job on a large and growing filesystem. At the end of the batch job, you shut down the Amazon EC2 instance to save money but need to persist the filesystem on the Amazon EC2 instance from the previous batch runs. What AWS Cloud service can you leverage to meet these requirements?
Amazon Elastic Block Store (Amazon EBS)
Amazon DynamoDB
Amazon Glacier
AWS CloudFormation
What AWS Cloud service provides a logically isolated section of the AWS Cloud where organizations can launch AWS resources in a virtual network that they define?
Amazon Simple Workflow Service (Amazon SWF)
Amazon Route 53
Amazon Virtual Private Cloud (Amazon VPC)
AWS CloudFormation
Your company provides a mobile voting application for a popular TV show, and 5 to 25 million viewers all vote in a 15-second timespan. What mechanism can you use to decouple the voting application from your back-end services that tally the votes?
AWS CloudTrail
Amazon Simple Queue Service (Amazon SQS)
Amazon Redshift
Amazon Simple Notification Service (Amazon SNS)
In what ways does Amazon Simple Storage Service (Amazon S3) object storage differ from block and file storage? (Choose 2 answers)
Amazon S3 stores data in fixed size blocks.
Objects are identified by a numbered address.
Objects can be any size.
Objects contain both data and metadata.
Objects are stored in buckets.
Which of the following are not appropriates use cases for Amazon Simple Storage Service (Amazon S3)? (Choose 2 answers)
Storing web content
Storing a file system mounted to an Amazon Elastic Compute Cloud (Amazon EC2) instance
Storing backups for a relational database
Primary storage for a database
Storing logs for analytics
What are some of the key characteristics of Amazon Simple Storage Service (Amazon S3)? (Choose 3 answers)
All objects have a URL.
Amazon S3 can store unlimited amounts of data.
Objects are world-readable by default.
Amazon S3 uses a REST (Representational State Transfer) Application Program Interface (API).
You must pre-allocate the storage in a bucket.
Which features can be used to restrict access to Amazon Simple Storage Service (Amazon S3) data? (Choose 3 answers)
Enable static website hosting on the bucket.
Create a pre-signed URL for an object.
Use an Amazon S3 Access Control List (ACL) on a bucket or object.
Use a lifecycle policy.
Use an Amazon S3 bucket policy.
Your application stores critical data in Amazon Simple Storage Service (Amazon S3), which must be protected against inadvertent or intentional deletion. How can this data be protected? (Choose 2 answers)
Use cross-region replication to copy data to another bucket automatically.
Set a vault lock.
Enable versioning on the bucket.
Use a lifecycle policy to migrate data to Amazon Glacier.
Enable MFA Delete on the bucket.
Your company stores documents in Amazon Simple Storage Service (Amazon S3), but it wants to minimize cost. Most documents are used actively for only about a month, then much less frequently. However, all data needs to be available within minutes when requested. How can you meet these requirements?
Migrate the data to Amazon S3 Reduced Redundancy Storage (RRS) after 30 days.
Migrate the data to Amazon Glacier after 30 days.
Migrate the data to Amazon S3 Standard – Infrequent Access (IA) after 30 days.
Turn on versioning, then migrate the older version to Amazon Glacier.
How is data stored in Amazon Simple Storage Service (Amazon S3) for high durability?
Data is automatically replicated to other regions.
Data is automatically replicated within a region.
Data is replicated only if versioning is enabled on the bucket.
Data is automatically backed up on tape and restored if needed. .
Based on the following Amazon Simple Storage Service (Amazon S3) URL, which one of the following statements is correct?
https://bucket1.abc.com.s3.amazonaws.com/folderx/myfile.doc
The object “myfile.doc” is stored in the folder “folderx” in the bucket “bucket1.abc.com.”
The object “myfile.doc” is stored in the bucket “bucket1.abc.com.”
The object “folderx/myfile.doc” is stored in the bucket “bucket1.abc.com.”
The object “myfile.doc” is stored in the bucket “bucket1.”
To have a record of who accessed your Amazon Simple Storage Service (Amazon S3) data and from where, you should do what?
Enable versioning on the bucket.
Enable website hosting on the bucket.
Enable server access logs on the bucket.
Create an AWS Identity and Access Management (IAM) bucket policy.
Enable Amazon CloudWatch logs.
What are some reasons to enable cross-region replication on an Amazon Simple Storage Service (Amazon S3) bucket? (Choose 2 answers)
You want a backup of your data in case of accidental deletion.
You have a set of users or customers who can access the second bucket with lower latency.
You have a set of users or customers who can access the second bucket with lower latency.
Your data needs at least five nines of durability.
Your company requires that all data sent to external storage be encrypted before being sent. Which Amazon Simple Storage Service (Amazon S3) encryption solution will meet this requirement?
Server-Side Encryption (SSE) with AWS-managed keys (SSE-S3)
SSE with customer-provided keys (SSE-C)
Client-side encryption with customer-managed keys
Server-side encryption with AWS Key Management Service (AWS KMS) keys (SSE-KMS)
You have a popular web application that accesses data stored in an Amazon Simple Storage Service (Amazon S3) bucket. You expect the access to be very read-intensive, with expected request rates of up to 500 GETs per second from many clients. How can you increase the performance and scalability of Amazon S3 in this case?
Turn on cross-region replication to ensure that data is served from multiple locations.
Ensure randomness in the namespace by including a hash prefix to key names.
Turn on server access logging.
Ensure that key names are sequential to enable pre-fetch.
What is needed before you can enable cross-region replication on an Amazon Simple Storage Service (Amazon S3) bucket? (Choose 2 answers)
Enable versioning on the bucket.
Enable a lifecycle rule to migrate data to the second region.
Enable static website hosting.
Create an AWS Identity and Access Management (IAM) policy to allow Amazon S3 to replicate objects on your behalf. Create an AWS Identity and Access Management (IAM) policy to allow Amazon S3 to replicate objects on your behalf.
Your company has 100TB of financial records that need to be stored for seven years by law. Experience has shown that any record more than one-year old is unlikely to be accessed. Which of the following storage plans meets these needs in the most cost efficient manner?
Store the data on Amazon Elastic Block Store (Amazon EBS) volumes attached to t2.micro instances.
Store the data on Amazon Simple Storage Service (Amazon S3) with lifecycle policies that change the storage class to Amazon Glacier after one year and delete the object after seven years.
Store the data in Amazon DynamoDB and run daily script to delete data older than seven years.
Store the data in Amazon Elastic MapReduce (Amazon EMR).
Amazon Simple Storage Service (S3) bucket policies can restrict access to an Amazon S3 bucket and objects by which of the following? (Choose 3 answers)
Company name
IP address range
AWS account
Country of origin
Objects with a specific prefix
Amazon Simple Storage Service (Amazon S3) is an eventually consistent storage system. For what kinds of operations is it possible to get stale data as a result of eventual consistency? (Choose 2 answers)
GET after PUT of a new object
GET after PUT of a new object
GET after overwrite PUT (PUT to an existing key)
DELETE after PUT of new object
What must be done to host a static website in an Amazon Simple Storage Service (Amazon S3) bucket? (Choose 3 answers)
Configure the bucket for static hosting and specify an index and error document.
Create a bucket with the same name as the website.
Enable File Transfer Protocol (FTP) on the bucket.
Enable File Transfer Protocol (FTP) on the bucket.
Enable HTTP on the bucket.
You have valuable media files hosted on AWS and want them to be served only to authenticated users of your web application. You are concerned that your content could be stolen and distributed for free. How can you protect your content?
Use static web hosting.
Generate pre-signed URLs for content in the web application.
Use AWS Identity and Access Management (IAM) policies to restrict access.
Use logging to track your content.
Amazon Glacier is well-suited to data that is which of the following? (Choose 2 answers)
Is infrequently or rarely accessed
Must be immediately available when needed
Is available after a three- to five-hour restore period
Is frequently erased within 30 days
Which statements about Amazon Glacier are true? (Choose 3 answers)
Amazon Glacier stores data in objects that live in archives.
Amazon Glacier archives are identified by user-specified key names.
Amazon Glacier archives take three to five hours to restore.
Amazon Glacier vaults can be locked.
Amazon Glacier can be used as a standalone service and as an Amazon S3 storage class.
