Free Printable Associate Architecting & SysOps on AWS (Day 2)

Worksheets

Associate Architecting & SysOps on AWS (Day 2)

Total questions: 10

Worksheet time: 9mins

Name

Class

Date

What database engines are compatible with Amazon Aurora? (Select TWO.)

DocumentDB

MySQL

MariaDB

Neptune

PostgreSQL

You are performing an update to all of your application servers, however some of your applications are failing following the upgrade and you notice that this seems to only be affecting servers with a specific application profile. How can you assess, audit and evaluate the configurations of your AWS resources so that you can easily identify which of your systems are likely to be affected?

CloudTrail

CloudFormation

Systems Manager

AWS Config

Which strategy can be used to create a highly available application using EC2 Auto Scaling?

Do nothing, as Auto Scaling is highly available by default.

Define multiple Regions in your Auto Scaling group

Check the "do not fail" box in the configuration page

Define multiple AZs in your Auto Scaling group

The application is hosted on groups of EC2 instances in Auto Scaling Groups in multiple AWS Regions. There are also load balancers routing traffic to these instances. In two countries, Ireland and Australia, there are compliance rules in place that dictate users connect to the application in eu-west-1 and ap-southeast-1. Which service can you use to meet this requirement?

Use Route 53 geolocation routing

Configure CloudFront and the users will be routed to the nearest edge location

Use Route 53 weighted routing

Configure the load balancers to route users to the proper region

An insurance company is creating an application which will perform analytics in near real-time on huge datasets in the terabyte range and potentially even petabyte. The company is evaluating an AWS data storage option. Which AWS service will allow storage of petabyte scale data and also allow fast querying of this data?

DynamoDB

Redshift

ElastiCache

RDS

Consider the following scenario:

- Rule 100 in a NACL associated with subnets A and B denies HTTP traffic from 0.0.0.0/0.

- Rule 105 in the same NACL allows HTTP traffic from 0.0.0.0/0.

- EC2 instances in subnet A are associated with a security group that allows HTTP traffic from 192.168.0.0/24.

- EC2 instances in subnet B are associated with a security group that denies HTTP traffic from 128.168.0.0/24. Based on this information, which of the following statements are true?

HTTP traffic from 192.168.0.0/24 will be denied to EC2 instances in subnet A because of the NACL rules.

HTTP traffic from the internet will be denied to EC2 instances in both subnets due to the NACL rules

HTTP traffic from the internet will be allowed to EC2 instances in subnet B

HTTP traffic from 192.168.0.0/24 will be allowed to EC2 instances in subnet A

What happens when RDS multi-AZ fails over from one Availability Zone to another?

Failover is handled by AWS, and the failover mechanism automatically changes the DNS record of the DB instance to point to the standby DB instance

You need to contact AWS for advice as to how to set up your application in the new Availability Zone

You need to update the connection string in your application to point to the new RDS IP address

You don't need to do anything: applications hosted on EC2 instances will failover automatically to the same AZ to which your RDS instances have failed over

According to the AWS shared responsibility model for abstracted services such as Amazon S3 and Amazon DynamoDB, what is the customer responsible for

Operating system patches

Managing the data (including encryption options)

Security of the data center

Using IAM to apply the appropriate permissions

Provisioning the underlying infrastructure

What are TRUE about AWS Transit Gateway

Create a secured tunnel between on-prem & AWS environment

Attach to VPCs and VPNs

Transit Gateway can be shared with other account

It's configured as full-mesh topology

10.

You are evaluating the security setting within the main company VPC. There are several NACLs and security groups to evaluate and possibly edit. What is true regarding NACLs and security groups?

Network ACLs and security groups are both stateful

Network ACLs and security groups are both stateless

Network ACLs are stateless, and security groups are stateful

Network ACLs are stateful, and security groups are stateless

100 %

Associate Architecting & SysOps on AWS (Day 2)

Total questions: 10

Worksheet time: 9mins

Similar Resources on Wayground