Font size
WorksheetsFinal practice test mod 7
Total questions: 17
Worksheet time: 34mins
You need to host a file in a location that's publicly accessible from anywhere in the world. Which AWS service would best meet that need?
RDS
EBS
S3
EC2
Which of the following is AWS' Data Warehousing service?
S3 Big Data
Snowball
Elastic Map Reduce
Redshift
You have a mission-critical application which must be globally available at all times. Which deployment strategy should you follow?
Multi-Availability Zone
Multi-Region
Deploy to all Availability Zones in your home region.
Multi-VPC in two AWS Regions
Which AWS service enables you to store file data as objects in S3 for data lakes, backups, and ML workflows?
Amazon Elastic Block Store
Amazon Elastic File System
Amazon S3
Storage Gateway
You are put in charge of your company’s Disaster Recovery planning. As part of this plan, you intend to create all of the company infrastructure with CloudFormation templates. The templates can then be saved in another region and used to launch a new environment in case of disaster. What determines the costs associated with CloudFormation templates?
The distance of the region from the home region.
There is no cost for templates, but when deployed, the resources created may accumulate charges.
There is a cost per template and discounts for over 100 templates.
It depends whether the resources in the template are in the free tier.
You are working for a large financial institution and have been tasked with creating a relational database solution to deal with a read-heavy workload. The database needs to be highly available within the Oregon region and quickly recover if an Availability Zone goes offline. Which of the following would you select to meet these requirements?
Split your database into multiple RDS instances across different regions. In the event of a failure, point your application to the new region.
Enable Multi-AZ support for the RDS database.
Using RDS, create a read replica. If an AZ fails, RDS will automatically cut over to the read replica.
Use an Amazon Aurora global database to ensure a region failure won't break the application.
Create a read replica and point your read workloads to the new endpoint RDS provides.
A large, big-box hardware chain is setting up a new inventory management system. They have developed a system using IoT sensors which captures the removal of items from the store shelves in near real-time and want to use this information to update their inventory system. The company wants to analyze this data in the hopes of being ahead of demand and properly managing logistics and delivery of in-demand items.
Which AWS service can be used to capture this data as close to real-time as possible, while being able to both transform and load the streaming data into Amazon S3 or Elasticsearch?
Amazon Redshift
Amazon Kinesis Data Firehose
Amazon Kinesis Data Streams
Amazon Aurora
A team member has been tasked to configure four EC2 instances for four separate applications. These are not high-traffic apps, so there is no need for an Auto Scaling group. The instances are all in the same public subnet and each instance has an EIP address, and all of the instances have the same security group. But none of the instances can send or receive internet traffic. You verify that all the instances have a public IP address. You also verify that an internet gateway has been configured. What is the most likely issue?
You are using the default NACL.
The route table is corrupt.
Each instance needs its own security group.
There is no route in the route table to the internet gateway (or it has been deleted).
You have been evaluating the NACLs in your company. Currently, you are looking at the default network ACL. Which statement is true regarding subnets and NACLs?
Only public subnets can use the default NACL.
The default NACL will always be associated with each subnet.
Each subnet in your VPC must be associated with a network ACL. If you don't explicitly associate a subnet with a network ACL, the subnet is automatically associated with the default network ACL.
You have to delete the default NACL before creating a custom NACL to associate with a subnet.
You are managing S3 buckets in your organization. One of the buckets in your organization has gotten some bizarre uploads and you would like to be aware of these types of uploads as soon as possible. Because of that, you configure event notifications for this bucket. Which of the following is NOT a supported destination for event notifications?
SES
SQS
SNS
Lambda function
A news media company is using an S3 bucket as a website to serve photos of television personalities within the company. The photos are intended to be served nationwide to local affiliates across the company. But you have found that these photos are being accessed and pirated for other websites not affiliated with the company. What can you do to stop this?
Use a Network Access Control List (NACL) to block the IP address of unauthorized users.
Remove public read access from your bucket, then provide your users with presigned URLs to access the photos.
Use CloudFront on the front end to serve the photos.
Set up an RDS database to store the photos. Make users register and login to the site.
You have been tasked with migrating an application and the servers it runs on to the company AWS cloud environment. You have created a checklist of steps necessary to perform this migration. A subsection in the checklist is security considerations. One of the things that you need to consider is the shared responsibility model. Which option does AWS handle under the shared responsibility model?
Firewall configuration
Client-side data encryption
User Authentication
Physical hardware infrastructure
Your company is storing stack traces for application errors in an S3 Bucket. The engineers using these stack traces review them when addressing application issues. It has been decided that the files only need to be kept for four weeks then they can be purged. How can you meet this requirement in S3?
Write a cron job to purge the files after one month.
Add an S3 Lifecycle rule to archive these files to Glacier after one month.
Create a bucket policy to purge the rules after one month.
Configure the S3 Lifecycle rules to purge the files after a month.
You have been assigned the review of the security in your company AWS cloud environment. Your final deliverable will be a report detailing potential security issues. One of the first things that you need to describe is the responsibilities of the company under the shared responsibility model. Which measure is the customer’s responsibility?
EC2 instance OS patching
Virtualization infrastructure
Physical security of data centers
Managing underlying network infrastructure
A software company is looking for compute capacity in the cloud for a fault-tolerant and flexible application. The application is not mission-critical, so occasional downtime is acceptable. What type of EC2 servers can be used to meet these requirements at the lowest cost?
Reserved
Spot
On-Demand
Dedicated Hosts
A consultant hired by a small company to configure an AWS environment. The consultant begins working with the VPC and launching EC2 instances within the VPC. The initial instances will be placed in a public subnet. The consultant begins to create security groups. What is true of security groups?
Security groups act at the instance level, not the subnet level.
Security groups act at the VPC level, not the instance level.
Security groups act at the subnet level, not the instance level.
Security groups are stateless.
Your boss has tasked you with decoupling your existing web frontend from the backend. Both applications run on EC2 instances. After you investigate the existing architecture, you find that (on average) the backend resources are processing about 50,000 requests per second and will need something that supports their extreme level of message processing. It's also important that each request is processed only 1 time. What can you do to decouple these resources?
Use SQS FIFO to decouple the applications.
Upsize your EC2 instances to reduce the message load on the backend servers.
Use S3 to store the messages being sent between the EC2 instances.
Use SQS Standard. Include a unique ordering ID in each message, and have the backend application use this to deduplicate messages.
