Dedicated hosts costs cheaper than reserved instances?

IAM roles can also be assigned to resources?

O365, Adobe CC are examples of...............?

The AWS Cloud Platform works on ........................ responsibility model?

in IAM, groups can be nested?

AWS Lamda is an example of ................. service.

AWS Cloud Watch triggers alarm through the following service?

EC2 Security Groups are example of ........................ service.

AWS Trusted Advisor is a service to ensure we meet the governing and compliance requirements?

NAT Gateway must be in Public ..................

The maximum CIDR range allowed in AWS is

AWS resources can have up to ...................... tags.

ALB can be internet and intranet facing?

All storage services (EFS, EBS, Fax and S3) have a Lifecycle policy?

JSON stands for ...............

In AWS IAM role: Explicit ALLOW does takes precedent, over Explicit DENY?

An application running in a VPC needs to access instances owned by a different account and running in a VPC in a different Region. For compliance purposes, the traffic must not traverse the public internet.

How should an Administrator configure network routing to meet these requirements?

You are implementing security group policies for a web application running on AWS. An Elastic Load Balancer connects to a fleet of Amazon EC2 instances that connect to an Amazon RDS database over port 1521. The security groups are named elbSG, ec2SG, and rdsSG, respectively. How should these security groups be implemented?

An ecommerce company wants to lower costs on its nightly jobs that aggregate the current day's sales and store the results in Amazon S3. The jobs run on multiple on-demand instances, and the jobs take just under 2 hours to complete. The jobs can run at any time during the night. If the job fails for any reason, it needs to be started from the beginning. Which solution is the MOST cost-effective based on these requirements?

You have some code that you would like to run occasionally and need to minimize costs. The completion time is typically under 10 minutes. Which solution is cost-effective and operationally efficient? 

An organization uses an application that uses per-socket licensing and they need full control over the placement of their EC2 instances on underlying hardware. What should they use? 

What type of storage is suitable for a use case that requires extremely high-performance local disks that do not need to be persistent? 

Which type of data volume provides very high performance and is ideal for storing data which is either replicated between EC2 instances or is only temporary and can be lost? 

How can you create a hierarchy that mimics a filesystem in Amazon S3? 

An Architect is designing an application that will use hundreds of EC2 instances across multiple availability zones. A shared filesystem is required that can be mounted by all instances. Which storage service is suitable for this requirement? 

How can you control access to files and directories in Amazon EFS filesystems? 

What is the maximum file size allowed in Amazon S3? 

What type of consistency model is provided in Amazon S3 when you upload a new version of an object? 

Your organization has a pre-production VPC and production VPC. You need to be able to setup routing between these VPCs using private IP addresses. How can this be done? 

Which services does Amazon API Gateway use for its public endpoint? 

You need to apply a firewall to a group of EC2 instances launched in multiple subnets. Which option should be used? 

How should subnets be used for fault tolerance? 

An attack has been identified from a group of IP addresses. What’s the quickest way to block these specific IP addresses from reaching the instances in your subnets? 

An Amazon RDS database is experiencing heavy demand and is slowing down. Most database calls are reads. What is the simplest way to scale the database without downtime? 

A customer needs a schema-less database that can seamlessly scale. Which AWS database service would you recommend? 

You need to implement an in-memory caching layer in front of an Amazon RDS database. The caching layer should allow encryption and replication. Which solution meets these requirements? 

An organization is migrating their relational databases to the AWS Cloud. They require full operating system access to install custom operational toolsets. Which AWS service should they use to host their databases? 

A new application requires a database that can allow writes to DB instances in multiple availability zones with read after write consistency. Which solution meets these requirements? 

To improve security in your AWS account you have decided to enable multi-factor authentication (MFA). You can authenticate using an MFA device in which two ways? (2 choices)

Your company would like to restrict the ability of most users to change their own passwords whilst continuing to allow a select group of users within specific user groups. 

What is the best way to achieve this? (choose 2) 

The financial institution you are working for stores large amounts of historical transaction records. There are over 25TB of records and your manager has decided to move them into the AWS Cloud. You are planning to use Snowball as copying the data would take too long. Which of the statements below are true regarding Snowball? (choose 2) 

Which type of scaling is provided by Amazon EC2 Auto Scaling? 

For compliance reasons, an organization needs to retain data for 7 years. If they need to retrieve data, they have 24 hours to do so. Which Amazon S3 storage class is most cost-effective? 

A company hosts copies of the same data in Amazon S3 buckets around the world and needs to ensure that customers connect to the nearest S3 bucket. Which Route 53 routing policy should be used? 

An Architect needs to point the domain name dctlabs.com to the DNS name of an Elastic Load Balancer. Which type of record should be used? 

An event in CloudTrail is the record of an activity in an AWS account. What are the two types of events that can be logged in CloudTrail? (choose 2) 

Which service provides a way to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PCs? 

You are developing a multi-tier application that includes loosely-coupled, distributed application components and need to determine a method of sending notifications instantaneously. Using SNS which transport protocols are supported? (choose 2) 

An application stack you are building needs a message bus to decouple the application components from each other. The application will generate up to 300 messages per second without using batching. You need to ensure that 270 message is only delivered once, and duplicates are not introduced into the queue. It is not necessary to maintain the order of the messages.  Which SQS queue type will you use?