To take advantage of the greatest number of features available in Active Directory while having Amazon responsible for the management of the operating system and underlying hardware, you should choose: LDAP AD Redirector Simple AD Enterprise AD (Ans) AD Connector Which AWS Directory Services Offering does not store data in AWS but rather redirects all…
The best tool to identify excess access keys and passwords that have NOT been rotated recently is: Cloud Trail Trusted Advisor Amazon Inspector Access Advisor Credential Report (Ans) Which of the following AWS Directory Service offerings does not support transferring FSMO roles: AD Redirector AD Connector LDAP Simple AD (Ans) Enterprise AD Which of the…
What is the definition of a managed policy? Custom policy controlled by the customer Deployed by the customer Created and maintained by AWS (Ans) Policies applied to users and groups What’s one difference between a network access control lists and a security group? Security groups can span availability zones. Security groups control subnet access, and…
If resources at AWS have been created by a no other account, what feature can be enabled to share access to resources? Cross Account Access (Ans) Creating additional accounts for access to the required resources Enabling consolidated billing IAM role policies Administrative IAM policies linked to required resources Where can details be reviewed regarding user…
What security feature ensures no compromise of session keys during operation? Perfect forward secrecy (Ans) Sticky sessions Server order preference SSL offload When EBS volumes are created, who has access? All power users The AWS account that created the volume (Ans) All tenant administrators By default any IAM user What is the benefit of nesting…
Security Groups are: Stateless – traffic strictly filtered Stateless – return traffic not allowed (Ans) Stateful – return traffic allowed Stateful – traffic strictly filtered Read replicas are synchronously replicated: False (Ans) True Multiple ELBs can be deployed per region: True (Ans) False What CIDR block range can be configured with a VPC? 14 –…
What is one benefit of adding CDN services to a distributed cloud system? Lower latency for application users Better availability of static content All of the above (Ans) Less load on web application servers What actions can a CloudWatch alarm perform? All of the above (Ans) Turn off a server Send an email message Scale…
You can use the free tier for: 12 months (Ans) Free tier is always available 3 months 6 months One ECU is based on which generation of Intel processor? 2008 Xeon Opteron (Ans) Nehalem Core2 Which of the following is not an EC2 instance type? network optimized (Ans) compute optimized micro memory optimized Simple Compute…
Which of the following is not an AWS security method? Active Directory Authentication (Ans) IAM Security Groups VPC AWS infrastructure is built in such a way that it will never experience a failure. False (Ans) True You are allowed to export AWS provided AMIs. True False (Ans) The price of an instance varies depending on…
Database clients can connect to Redshift using ODBC and JDBC drivers for Postgres. True (Ans) False Cloudera Impala is included on EMR clusters by default. True False (Ans) EC2 stands for: External Cloud Connectivity Elastic Compute Cloud (Ans) Energy Conserving CPU Enhanced Capacity, Squared How does DynamoDB display data rows of differing schema together? It…
In what order should you utilize the different rule sources when looking to implement an AWS Config Rule? Built-in, custom, third-party Custom, built-in, third-party Built-in, third-party, custom (Ans) Third-party, built-in, custom What’s an example of a rule that would be appropriate for Continuous Compliance? Are EC2 instances tagged with an environment? Are EC2 instances launched…
What is a “visibilty timeout” in SQS? How long to delay the message before anyone can poll it none of the above An amount of time that the message is invisible to everyone but the publisher of the message The time that there is a “lock” on the message from the consumer who pulled it…
Hi Folks ! , In this tutorial we will be creating our own custom VPC.This VPC will have : Public and Private Subnets Route Table configuration for both subnets NACLS NAT instances to connect to internet for private subnet Step 1 – Create VPC screen, which will looks something like this. Step 2 – Click…
Hi ! Folks today we will be touching one of core and important concept in AWS infrastructure named Virtual Private Cloud.VPC is the tech which helped in wide spread AWS cloud adoption. In layman terms VPC is like having your own data centre, but in cloud. Let’s talk about important constituent of a VPC. Subnets…
An ECS task can be described as: A virtual container profile A software tool used to manage cluster resources A software agent used to enable communication across a cluster environment A collection metadata defining the environment elements needed to launch Docker containers (Ans) What is the function of this command? docker search apache/ubuntu It will…
Which of the following options describes Infrastructure in Code? Script containing all needed steps to transform current state into target state. Checklist containing all steps needed to transform current state into target state manually. Blueprint containing target state. Tool transforming current sate into target state. (Ans) CloudFormation allows you to __ a stack. create, update,…
What is the difference between continuous delivery and continuous deployment? With continuous delivery, software releases are pushed into production automatically. With continuous deployment, software releases are pushed into production manually. With continuous deployment, software releases are pushed into production automatically. (Ans) With continuous deployment, software releases are pushed into staging automatically. What does AWS call…
Choose the correct types of access policy statements: API gateways and access policies Testimonies and affidavits Action-statements and resource-statements (Ans) Access policies and statements How many servers should be configured to support lambda functions? None (Ans) 2 times the number of compute cycles 1 per cpu It depends on load Which is not a client…
What set of operations can you perform on RDS database logs? View, watch, and download (Ans) View, download, and purge View and watch View and download What is a “node slice” in the Redshift architecture? The leader that managers communication with clients and nodes A partition of a compute node that works in parallel with…
Elastic Block Storage is limited in size and won’t auto scale with your storage needs. False True (Ans) Compared to a relational database’s data model… A DynamoDB attribute is like a row, and item is like a column None of these A DynamoDB key is like a column, and item is like a row A…
How long can an SQS queue hold onto a message before it is automatically removed? 14 days (Ans) 24 hours Unlimite 1 hour An SNS subscription must always be verified by a human recipient. True False (Ans) An AWS Availability Zone is made up of distinct geographic Regions. False (Ans) True Which of the following…
Amazon Web Services are organized physically using which terms? Data Regions, Zones, Centers States, Regions, Municipalities Regions, Areas, Data Centers Regions, Availability Zones, Data Centers (Ans) When reducing latency for static files, what is the best service to use? CloudWatch S3 Redshift CloudFront (Ans) What is the best access method to use when configuring user…
The IAS octave is an expansion of what security baseline? FEDRAMP HIPPA ISO 27001 The C.I.A. Triad (Ans) What are three goals AWS is striving to meet in the cloud through utilization of their security tools? Planning, control, and audibility Visibility, audibility, and control (Ans) Audibility, analysis, and governance Planning, governance, and control When defining…
Which of the following is true of Network ACLs? All rules are processed and order of processing is not important Rules are processed in strict numeric order (Ans) Which of the following describes an AWS Internet Gateway? Non-scalable but redundant and highly available Horizontally scaled, redundant, highly available (Ans) Horizontally scaled but not redundant or…
What kind of rules do Network Access Control Lists (NACLs) provide? Outbound allow and deny rules Inbound allow and deny rules Inbound and outbound allow rules Inbound and outbound allow and deny rules (Ans) How can you make a VPC Peering connection highly available (HA)? You can pay more to purchase a highly available version…
Instance A and instance B are running in two different subnets A and B of a VPC. Instance A is not able to ping instance B. What are two possible reasons for this? The routing table of subnet A has no taget route to subnet B & The security group attached to instance B doest…
A customer has a web application that uses cookie-based sessions to track logged-in users. It is deployed on AWS using Elastic Load Balancing and Auto Scaling. When load increases, Auto Scaling launches new instances, but the load on the other instances does not decrease, this causes all existing users to have a slow experience. What…
You are designing a new autoscaling config group and you need to create a new alarm to scale your EC2 instances in response to heave web traffic. You decide to base your scaling group off an elastic load balancer metric. Which of the below would be the best metric to base this on? SureQueueLength (Ans)…
You work for a gaming company that has built a serverless application on AWS using Lambda, API Gateway and DynamoDB. They release a new version of the lambda function and the application stops working. You need to get the application up and back online as fast as possible. What should you do? Roll your lambda…
You run the internal intranet for a corporate bank. The intranet consists of a number of webservers and single relational database running Microsoft SQL Server. Your peak demand occurs at 9am every week morning when users are first logging in to the intranet. They can only log in using the company’s internal network and it…