AWS Questions with accurate answers, 2022/2023 updates, Rated A

AWS Questions with accurate answers, 2022/2023 updates, Rated A Which AWS service is used as a CDN to distribute content around the world? a) CloudStream b) CloudFormation c) CloudFront d) CloudPush - ✔?c) C ...

AWS Questions with accurate answers, 2022/2023 updates, Rated A Which AWS service is used as a CDN to distribute content around the world? a) CloudStream b) CloudFormation c) CloudFront d) CloudPush - ✔?c) CloudFront Which AWS service would be the best choice for long term data archival? a) S3 b) CloudFront c) EFS d) Glacier - ✔?d) Glacier What service connects an on-premise software appliance (or virtual machine) with cloud based storage? a) S3 b) Storage Gateway c) Snowball d) Glacier - ✔?b) Storage Gateway What is an AWS region? a) A region is an independent data center, located in different countries around the globe b) A region is a geographical area that consists of different availability zones. Each region consists of 2 (or more) Availability Zones. c) A region is a collection of Edge Locations available in specific countries. d) A region consists of a number of different subset of AWS technologies. For example the compute region consists of EC2, ECS, Lambda etc. - ✔?b) A region is a geographical area that consists of different availability zones. Each region consists of 2 (or more) Availability Zones. An AWS VPC is a component of which AWS service? a) Global Infrastructure b) Databases Service c) Networking Service d) Compute Service - ✔?c) Networking Service Which of the following is a petabyte scale data transfer solution? a) SQS b) Avalanche c) Snowball d) SWF - ✔?c) Snowball What service is Amazon's No-SQL database service? a) RDS b) Elasticache c) DynamoDB d) Redshift - ✔?c) DynamoDB Your company is interested in implementing a VDI solution to replace their local desktop environment. Which AWS service should you consider? a) IoT b) WorkSpaces c) WorkDocs d) WorkMail - ✔?b) WorkSpaces Where would be a durable place to store flat files on the AWS platform? a) Kinesis b) CloudFront Edge Locations c) SQS d) S3 - ✔?d) S3 (Simple Storage Service) You need to monitor the performance of your EC2 virtual servers (including metrics such as CPU Utilization, Disk IO etc.). What service would best suit this requirement? a) CloudTrail b) CloudWatch c) CloudMonitor d) CloudAudit - ✔?b) CloudWatch You are a digital media agency and you need to convert your media files in to different formats to suit different devices. Which AWS service should you consider using to meet these needs? a) Appstream b) SQS c) SWF d) Elastic Transcoder - ✔?d) Elastic Transcoder Which AWS compute service is specifically designed to assist you in processing large data sets? a) Big Data Processing b) Elasticache c) EC2 d) Elastic Map Reduce - ✔?d) Elastic Map Reduce What AWS service would you use primarily for data warehousing? a) Redshift b) RDS c) DynamoDB d) DMS - ✔?a) Redshift Which AWS service allows you to run code without having to worry about provisioning any underlying resources (such as virtual machines, databases etc.)? a) EC2 b) EC2 Container Service c) DynamoDB d) Lambda - ✔?d) Lambda You need to enable a way so that your system administrators can receive notifications for events that happen on your AWS environment (such as alarms etc.), what service should you use? a) Cognito b) Device Farm c) Mobile Hub d) SNS - ✔?d) SNS (Simple Notification Service) You need a service to aggregate your data from multiple data sources (such as S3, DynamoDB, RDS etc.) and then provide some business intelligence based on this data. What AWS service would best fit? a) Spice b) Quick Sight c) CloudOracle d) CloudViewer - ✔?b) Quick Sight What database would you use to migrate databases from Oracle to MySQL? a) RDS b) DMS c) Redshift d) Elasticache - ✔?b) DMS (Database Migration Service) What AWS service is effectively a NAS in the cloud, allowing you to connect it to multiple EC2 instances at once? a) EBS b) EFS c) SQS d) SNS - ✔?b) EFS (Elastic File System) What does an AWS Region consist of? a) A console that gives you a quick, global picture of your cloud computing environment. b) A collection of databases that can only be accessed from a specific geographic region. c) A collection of data centers that is spread evenly around a specific continent. d) A distinct location within a geographic area designed to provide high availability to a specific geography. - ✔?d) A distinct location within a geographic area designed to provide high availability to a specific geography. Which AWS service if specifically designed for developers to upload their code to and then it will automatically handle the provisioning of those resources that are required to host that code? a) Elastic Beanstalk b) CloudFormation c) CloudTrail d) CloudFormer - ✔?a) Elastic Beanstalk You need to supply auditors with logs as to who provisions which resources on your AWS platform. Which service would best suit this? a) CloudWatch b) CloudFormation c) CloudTrail d) Opsworks - ✔?c) CloudTrail What AWS service is used for collating large amounts of data streamed from multiple sources? a) Kinesis b) SQS c) CloudFront d) CloudCapture - ✔?a) Kinesis What is a VPC? a) Virtual Public Compute b) Virtual Private Cloud c) Virtual Public Cloud d) Virtual Private Compute - ✔?b) Virtual Private Cloud Amazon's highly scalable DNS service is known as... a) CloudTrail b) Directory Service c) Elastic Map Reduce d) Route 53 - ✔?d) Route 53 What AWS service consists of the following database services: SQL, MySQL, MariaDB, PostgreSQL, Aurora, Oracle? a) Redshift b) DynamoDB c) RDS d) Kinesis - ✔?c) RDS (Relational Database Service) You need a configuration management service to allow your system administrators to configure and operate your web applications using Chef. Which AWS service would best suit your needs? a) Opsworks b) CloudTrail c) Trusted Advisor d) CloudWatch - ✔?a) Opsworks You need to implement an automated service that will scan your AWS environment and tell you ways that you can improve your security as well as how to save costs. Which service should you use? a) CloudTrail b) Trusted Advisor c) Service Catalog d) Config Rules - ✔?b) Trusted Advisor You need to create new users to access AWS console and to set password rotation policies for these new users. Which AWS service would best fir your requirements? a) Directory Services b) IAM c) Inspector d) Key Management Service - ✔?b) IAM (Identity Access Management) What is the difference between Elastic Beanstalk and CloudFormation? a) Elastic Beanstalk is a monitoring tool to view the performance of your AWS resources, where as CloudFormation is an automated provisioning engine designed to deploy entire cloud environments via a JSON script. b) Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring based on the code you upload to it, where as CloudFormation is a security service designed to harden your cloud against an attack such as a DDoS c) Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring based on the code you upload to it, where as CloudFormation is an automated provisioning engine designed to deploy entire cloud environments via a JSON script. d) There is no difference between the two. Elastic Beanstalk was simply the code name used internally for CloudFormation, prior to the product being released. - ✔?c) Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring based on the code you upload to it, where as CloudFormation is an automated provisioning engine designed to deploy entire cloud environments via a JSON script. Which statement best describes an Availability Zone? a) Content distribution network which is used to distribute content to users. b) A restricted area designed specifically for creating virtual private clouds. c) Two zones containing compute resources that are designed to automatically maintain synchronized copies of data with each other. d) Distinct locations from within an AWS region that are engineered to be isolated from failures. - ✔?d) Distinct locations from within an AWS region that are engineered to be isolated from failures. You are a solutions architect working for a large engineering company who are moving their existing legacy hardware to AWS. You have configured their first AWS account and you have set up IAM. Your company will be primarily based in Andorra, however they will have a small subsidiary operating out of South Korea and you will need an AWS environment configured there as well. Which of the following statements is true: a) You will need to configure users and policy documents for each region respectively. b) You will need to configure users and policy documents only once, as these are applied globally. c) You will need to configure your users regionally, however your policy documents are global. d) You will need to configure your policy documents regionally, however your users are global. - ✔?b) You will need to configure users and policy documents only once, as these are applied globally. Power User Access allows... a) Full access to all AWS services and resources. b) Read Only access to all AWS services and resources. c) Access to all AWS services except for management of groups and users within IAM. d) Users to inspect the source code of the AWS platform. - ✔?c) Access to all AWS services except for management of groups and users within IAM. What is an additional way to secure IAM for both the root login and new users alike? a) Implement MFA for all accounts. b) Store the access key id and secret access key of all users in a publicly accessible plain text document on S3 of which only you and members of your organization know the address to. c) Configure the AWS console so that you can only log in to it from a specific IP address range. d) Configure the AWS console so that you can only log in to it from your internal network IP address range. - ✔?a) Implement MFA for all accounts. In what language are policy documents written in? a) Node.js b) Java c) JSON d) Python - ✔?c) JSON Which is NOT a feature of IAM? a) Centralized control of your AWS account b) Integrates with existing active directory account allowing single sign on c) Fine-grained access to control to AWS resources d) Allows you to setup biometric authentication, so that no passwords are required - ✔?d) Allows you to setup biometric authentication, so that no passwords are required You have a client who is considering moving to AWS services and do not yet have an account. What is the first thing the company should do to set up an AWS account? a) Set up an account using Cloud Search. b) Set up an account using their company email address. c) Set up an account via SQS. d) Set up an account via SNS. - ✔?b) Set up an account using their company email address. You are a developer at a fast growing start up. Traditionally you have been using the root account to log in to the AWS console but as you have taken on more staff, to prevent dangerous mistakes you will now need to stop sharing the root account. What should you do so that everyone can access the AWS resources? (select 2) a) Create an additional AWS root account for each new user. b) Create individual user accounts with minimum necessary rights and tell the staff to log in to the console using the credentials provided. c) Create a customized sign in link such as yourcompany.signin.aws.amazon.com/console for your new users to use to sign in with. d) Give your users the root account credentials so that they can also sign in. - ✔?b) Create individual user accounts with minimum necessary rights and tell the staff to log in to the console using the credentials provided. c) Create a customized sign in link such as yourcompany.signin.aws.amazon.com/console for your new users to use to sign in with. Which statement best describes IAM? a) IAM allows you to manage users, groups and roles and their corresponding level of access to the AWS platform. b) IAM allows you to manage users passwords only. AWS staff must create new users for your organization. This is done by raising a ticket. c) IAM allows you to manage permissions for AWS resources only. d) IAM stands for Improvised Application Management and it allows you to deploy and manage applications in the AWS cloud. - ✔?a) IAM allows you to manage users, groups and roles and their corresponding level of access to the AWS platform. A new user has started at your work and it is your job to give them administrator access to the AWS console. You have set them up with a user name, access key ID, secret access key and you have generated a password for them. They are able to log in to the AWS console, but they cannot do anything. What should you do next? a) Add them to the Administrators group, where your other administrator users belong. b) Set up MFA for them. c) Ensure they are logging in to the AWS console from your corporate network and not the normal internet. d) Tell them to log out and try logging back in again. - ✔?a) Add them to the Administrators group, where your other administrator users belong. When you create a new user, that user: a) Will be able to log in to the console anywhere in the world, using their access key ID and secret access key. b) Will be able to interact with AWS using their access key ID and secret access key, using the API, CLI or AWS SDK's. c) Will only be able to log in to the console in the region in which that user was created. d) Will be able to log in to the console only after MFA is enabled on their account. - ✔?b) Will be able to interact with AWS using their access key ID and secret access key, using the API, CLI or AWS SDK's. Which of the following is NOT a component of IAM? a) Roles b) Users c) Groups d) Organizational Units - ✔?d) Organizational Units You have created a new AWS account for your company and you have also configured multi-factor authentication on the root account. You are about to create your new users. What strategy should you consider in order to ensure that there is good security on this account. a) Enact a strong password policy, so that your users have to change their passwords every 45 days and must use a combination of capital and lower case letters, numbers and special symbols for all passwords. b) Require users to only be able to log in using biometric authentication. c) Restrict login to the corporate network only. d) Give all users the same password so that if they forget their passwords they can just ask their co-workers. - ✔?a) Enact a strong password policy, so that your users have to change their passwords every 45 days and must use a combination of capital and lower case letters, numbers and special symbols for all passwords. What level of access does the "root" account have? a) Read Only access b) Power User access c) Administrator Access d) No Access - ✔?c) Administrator Access You are a security administrator working for a hotel chain. You have a new member of staff who has started as a systems administrator and they will need full access to the AWS console. You have created the user account and generated the access key id and the secret access key. You have moved this user into the group where the other administrators are and you have provided the new user with their secret access key and their access key id. However when they go to log in to the AWS console, they cannot sign in. What could be the cause of this? a) You have not applied the "log in from console" policy document to the user. You must apply this first so that they can log in. b) Your user is trying to log in from the AWS console from outside the corporate network. This is not possible. c) You have not yet activated MFA for the user, so by default they will not be able to log in. d) You cannot log in to the AWS console using the Access Key ID and Secret Access Key, instead you must generate a password for the user and supply the user with this password, as well as the unique link to sign in to the AWS console. - ✔?d) You cannot log in to the AWS console using the Access Key ID and Secret Access Key, instead you must generate a password for the user and supply