1. Which AWS security service protects applications from distributed denial of service attacks with always-ondetection and automatic inline mitigations?
A) A. Amazon Inspector B) B. AWS Web Application Firewall (AWS WAF) C) C. Elastic Load Balancing (ELB) D) D. AWS Shield
2. A company wants to monitor the CPU usage of its Amazon EC2 resources.Which AWS service should the company use?
A) A. AWS CloudTrail B) B. Amazon CloudWatch C) C. AWS Cost and Usage report D) D. Amazon Simple Notification Service (Amazon SNS)
3. What is an AWS Identity and Access Management (IAM) role?
A) A. A user associated with an AWS resource B) B. A group associated with an AWS resource C) C. An entity that defines a set of permissions for use with an AWS resource D) D. An authentication credential associated with a multi-factor authentication (MFA) token
4. What are the advantages of Reserved Instances? (Choose two.)(Select 2answers)
A) A. They provide a discount over on-demand pricing. B) B. They provide access to additional instance types. C) C. They provide additional networking capability. D) D. Customers can upgrade instances as new types become available. E) E. Customers can reserve capacity in an Availability Zone.
5. How do Amazon EC2 Auto Scaling groups help achieve high availability for a web application?
A) A. They automatically add more instances across multiple AWS Regions based on global demand of theapplication. B) B. They automatically add or replace instances across multiple Availability Zones when the application needsit. C) C. They enable the application's static content to reside closer to end users. D) D. They are able to distribute incoming requests across a tier of web server instances.
1. Right Answer: D Explanation: AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applicationsrunning on AWS. AWS Shield provides always-on detection and automatic inline mitigations that minimizeapplication downtime and latency, so there is no need to engage AWS Support to benefit from DDoSprotection. There are two tiers of AWS Shield - Standard and Advanced.https://aws.amazon.com/shield/
2. Right Answer: B Explanation: With Basic monitoring you get data on your cloudwatch metrics every 5 minutes. Enabling detailed monitoring,you will get the data every one minute.To check if detailed monitoring is enabled, on your EC2 Console, Select the instance, on the lower plane,Select Monitoring.https://forums.aws.amazon.com/thread.jspa?threadID=263876
3. Right Answer: C Explanation: AWS Identity and Access Management (IAM) enables you to manage access to AWS services and resourcessecurely. Using IAM, you can create and manage AWS users and groups, and use permissions to allow anddeny their access to AWS resources.https://aws.amazon.com/iam/
4. Right Answer: A,E Explanation: https://aws.amazon.com/premiumsupport/knowledge-center/ec2-ri-basics/
5. Right Answer: B Explanation: When the unhealthy Availability Zone returns to a healthy state, Auto Scaling automatically redistributes theapplication instances evenly across all of the designated Availability Zones.https://docs.aws.amazon.com/autoscaling/ec2/userguide/auto-scaling-benefits.html
Leave a comment