AWS Knowledge Check
Which of the following is a best practice for adding an additional layer of security when
logging into the AWS Management Console?
a. Root access permissions
b. Multi-factor authentication (MFA)
c. Secondary password
d. Secondary user name - ANSWER: b. Multi-factor authentication (MFA)
Which of the following tasks is the customer's responsibility when creating Amazon VPC
security groups?
a. Adding rules regarding inbound traffic to the security group
b. Choosing the level of physical security for the network
c. Ensuring that the security groups are linked to Amazon EC2
d. Selecting an appropriate load balancing strategy for the network routers - ANSWER:
a. Adding rules regarding inbound traffic to the security group
Which of the following examples best demonstrates the agility that cloud computing
offers?
a. Protect your data by centralizing your applications in one Availability Zone
b. Quickly deploy multi-factor authentication (MFA) to multiple data centers
c. Spin up servers in minutes, and shut down servers when you don't need them.
d. Increase network throughout with AWS Direct Connect (DX) nodes. - ANSWER: c.
Spin up servers in minutes, and shut down servers when you don't need them.
Which service provides persistent block storage volumes for use with Amazon EC2
instances?
a. Amazon S3
b. Amazon EFS
c. Amazon DynamoDB
d. Amazon EBS - ANSWER: d. Amazon EBS
What is Amazon Route 53
a. A highly available and scalable Domain Name System (DNS) web service
b. A monitoring and management service that collects and tracks metrics
c. A fast and flexible nonrelational database service for all applications that need
consistent, single-digit millisecond latency at any scale.
d. A cloud service solution that establishes private connectivity between AWS and your
data center, office, or colocation environment. - ANSWER: a. A highly available and
scalable Domain Name System (DNS) web service
,Users of your services are reporting latency. With on-premises architecture you would
notify your Administrator to launch another server to balance the load. How can this be
automated using AWS?
a. Create six Amazon EC2 instances in different Availability Zones.
b. Create a new template using AWS CloudFormation.
c. Enable AWS CloudTrail to monitor latency issues.
d. Enable an Amazon CloudWatch alarm to trigger a scaling policy. - ANSWER: d.
Enable an Amazon CloudWatch alarm to trigger a scaling policy.
Which of the following defines the AWS Command Line Interface (AWS CLI)?
a. A systematic approach to evaluating and implementing architectures
b. Packages that enable access to AWS in a variety of programming languages.
c. A suite of utilities that can be launched from a command program in Linux, macOS, or
Windows.
d. A rich graphical interface to majority of the features offered by AWS. - ANSWER: c. A
suite of utilities that can be launched from a command program in Linux, macOS, or
Windows.
Which service sends notifications or automatically makes changes to the resources
being monitored based on rules you established?
a. Amazon EC2
b. Amazon CloudWatch
c. Elastic Load Balancing
d. Amazon Aurora - ANSWER: b. Amazon CloudWatch
Which of the following components is included in the value proposition of the AWS
Cloud?
a. Fully independent development without parameters
b. Informal security restrictions
c. Physical relocation of your servers
d. Massive economies of scale - ANSWER: d. Massive economies of scale
Which of the pillars of the well-Architected Framework is defined as the ability to run
and monitor systems to deliver business value and to continually improve supporting
processes and procedures?
a. Performance efficiency
b. Security
c. Reliability
d. Operational excellence - ANSWER: d. Operational excellence
Which of the following services provides you with data and actionable insights to
monitor your applications, understand and respond to system-wide performance
changes, optimize resource utilization, and get a unified view of operational health?
a. AWS Cloud9
b. Amazon CloudWatch
c. AWS CloudFormation
, d. AWS CloudTrail - ANSWER: b. Amazon CloudWatch
Who is responsible for security of the cloud according to the shared responsibility
model?
a. AWS
b. Customer
c. AWS Support
d. IAM roles - ANSWER: a. AWS
Which of the following AWS services has no additional charge associated with its use?
(The resources provisioned within the service may incur costs.)
a. Amazon Elastic Computer Cloud (Amazon EC2)
b. Amazon Elastic Block Store (Amazon EBS)
c. Amazon Simple Storage Service (Amazon S3)
d. AWS Identity and Access Management (IAM) - ANSWER: d. AWS Identity and
Access Management (IAM)
Your company is developing a critical application, and the security of the application is
one of the top priorities. Which of the following AWS service will provide
recommendations for security optimization for your infrastructure?
a. AWS Trusted Advisor
b. Amazon CloudWatch
c. Amazon Inspector
d. Amazon Aurora - ANSWER: a. AWS Trusted Advisor
Which of the following use cases is appropriate for Amazon CloudFront (Select Three)
a. Schema Generation
b. Database Backups
c. Auto Scaling
d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption - ANSWER: d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption
Which parts of the AWS infrastructure support increased resilience?
a. Multiple Regions distributed globally
b. Multiple Availability Zones within a Region
c. Multiple edge locations with a Region
d. Multiple AWS Direct Connet (DX) gateways within a data center - ANSWER: b.
Multiple Availability Zones within a Region
Which category of services includes Amazon S3?
a. Security
b. Migration
c. Storage
Which of the following is a best practice for adding an additional layer of security when
logging into the AWS Management Console?
a. Root access permissions
b. Multi-factor authentication (MFA)
c. Secondary password
d. Secondary user name - ANSWER: b. Multi-factor authentication (MFA)
Which of the following tasks is the customer's responsibility when creating Amazon VPC
security groups?
a. Adding rules regarding inbound traffic to the security group
b. Choosing the level of physical security for the network
c. Ensuring that the security groups are linked to Amazon EC2
d. Selecting an appropriate load balancing strategy for the network routers - ANSWER:
a. Adding rules regarding inbound traffic to the security group
Which of the following examples best demonstrates the agility that cloud computing
offers?
a. Protect your data by centralizing your applications in one Availability Zone
b. Quickly deploy multi-factor authentication (MFA) to multiple data centers
c. Spin up servers in minutes, and shut down servers when you don't need them.
d. Increase network throughout with AWS Direct Connect (DX) nodes. - ANSWER: c.
Spin up servers in minutes, and shut down servers when you don't need them.
Which service provides persistent block storage volumes for use with Amazon EC2
instances?
a. Amazon S3
b. Amazon EFS
c. Amazon DynamoDB
d. Amazon EBS - ANSWER: d. Amazon EBS
What is Amazon Route 53
a. A highly available and scalable Domain Name System (DNS) web service
b. A monitoring and management service that collects and tracks metrics
c. A fast and flexible nonrelational database service for all applications that need
consistent, single-digit millisecond latency at any scale.
d. A cloud service solution that establishes private connectivity between AWS and your
data center, office, or colocation environment. - ANSWER: a. A highly available and
scalable Domain Name System (DNS) web service
,Users of your services are reporting latency. With on-premises architecture you would
notify your Administrator to launch another server to balance the load. How can this be
automated using AWS?
a. Create six Amazon EC2 instances in different Availability Zones.
b. Create a new template using AWS CloudFormation.
c. Enable AWS CloudTrail to monitor latency issues.
d. Enable an Amazon CloudWatch alarm to trigger a scaling policy. - ANSWER: d.
Enable an Amazon CloudWatch alarm to trigger a scaling policy.
Which of the following defines the AWS Command Line Interface (AWS CLI)?
a. A systematic approach to evaluating and implementing architectures
b. Packages that enable access to AWS in a variety of programming languages.
c. A suite of utilities that can be launched from a command program in Linux, macOS, or
Windows.
d. A rich graphical interface to majority of the features offered by AWS. - ANSWER: c. A
suite of utilities that can be launched from a command program in Linux, macOS, or
Windows.
Which service sends notifications or automatically makes changes to the resources
being monitored based on rules you established?
a. Amazon EC2
b. Amazon CloudWatch
c. Elastic Load Balancing
d. Amazon Aurora - ANSWER: b. Amazon CloudWatch
Which of the following components is included in the value proposition of the AWS
Cloud?
a. Fully independent development without parameters
b. Informal security restrictions
c. Physical relocation of your servers
d. Massive economies of scale - ANSWER: d. Massive economies of scale
Which of the pillars of the well-Architected Framework is defined as the ability to run
and monitor systems to deliver business value and to continually improve supporting
processes and procedures?
a. Performance efficiency
b. Security
c. Reliability
d. Operational excellence - ANSWER: d. Operational excellence
Which of the following services provides you with data and actionable insights to
monitor your applications, understand and respond to system-wide performance
changes, optimize resource utilization, and get a unified view of operational health?
a. AWS Cloud9
b. Amazon CloudWatch
c. AWS CloudFormation
, d. AWS CloudTrail - ANSWER: b. Amazon CloudWatch
Who is responsible for security of the cloud according to the shared responsibility
model?
a. AWS
b. Customer
c. AWS Support
d. IAM roles - ANSWER: a. AWS
Which of the following AWS services has no additional charge associated with its use?
(The resources provisioned within the service may incur costs.)
a. Amazon Elastic Computer Cloud (Amazon EC2)
b. Amazon Elastic Block Store (Amazon EBS)
c. Amazon Simple Storage Service (Amazon S3)
d. AWS Identity and Access Management (IAM) - ANSWER: d. AWS Identity and
Access Management (IAM)
Your company is developing a critical application, and the security of the application is
one of the top priorities. Which of the following AWS service will provide
recommendations for security optimization for your infrastructure?
a. AWS Trusted Advisor
b. Amazon CloudWatch
c. Amazon Inspector
d. Amazon Aurora - ANSWER: a. AWS Trusted Advisor
Which of the following use cases is appropriate for Amazon CloudFront (Select Three)
a. Schema Generation
b. Database Backups
c. Auto Scaling
d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption - ANSWER: d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption
Which parts of the AWS infrastructure support increased resilience?
a. Multiple Regions distributed globally
b. Multiple Availability Zones within a Region
c. Multiple edge locations with a Region
d. Multiple AWS Direct Connet (DX) gateways within a data center - ANSWER: b.
Multiple Availability Zones within a Region
Which category of services includes Amazon S3?
a. Security
b. Migration
c. Storage
