AWS CSA Prep

What best describes the concept of high availability?

• A durable system that can operate for long periods of time without failure

• The ability of the system to easily increase in size

• Following proper security procedures

• Always finding what you are looking for

You work for a large consulting firm that has just hired a junior consultant named Jessica, who will be working on a large AWS project. She will be working remotely and, therefore, is not present in the office. You create a new IAM user for her named "Jessica" in your company’s AWS account. On Jessica's first day, you ask her to make a change to a CloudWatch alarm in an Auto Scaling group. Jessica reports back that she does not have access to CloudWatch or auto scaling in the aws console. What is a possible explanation for this?

• Because she is working remotely, she would need to SSH into the instances in the Auto Scaling group via her terminal to make the changes

• Only IAM account admins can make changes to Auto Scaling groups

• You have not added the appropriate IAM permissions and access policies to her user; there is a non-explicit deny to all new users

• When you created the new user, you forgot to assign access keys

• Always finding what you are looking for

You have been tasked with auditing the security of your VPC. As part of this process, you need to start by analyzing what traffic is allowed to and from various EC2 instances. What two parts of the VPC do you need to check to accomplish this task?

• NACLs and Subnets

• Security Groups and Internet Gateways

• NACLs and Route Tables

• Security Groups and NACLs

If your are designing an application that requires fast (10GBpS), low-latency connections between EC2 instances, what EC2 feature should you use?

• Snapshots

• Placement groups

• Instance store volume

• IOPS provisioned instances

What are the two main components of AWS auto scaling?

• Elastic Load Balancer and Auto Scaling groups

• Launch configuration and Auto scaling groups

• Auto Scaling groups and instance types

• Launch configuration and elasticity

You have provisioned several EC2 instances into private subnets; however, you now have the problem of not being able to download any new software packages or updates. Which of the following provides the best solution?

• Create a bastion host in a public subnet to allow the instance in the private subnets with route to the internet.

• Create a NAT Gateway in a private subnet, then create a route to it in the route table associated with the private subnets.

• Change the associated route table of the private subnets to a route table with a route to an IGW, thus making the subnets public.

• Create a NAT Gateway in a public subnet and create a route to it in the route table associated with the private subnets.

If you have an EBS volume in availability zone us-easet-1d and you want to attach it to an EC2 instance in availability zone us-east-1a, what procedure should you follow?

• Make a copy of the volume and have it placed in us-east-1a, then attach it to the instance.

• Select the volume and simply attach it to the instance in us-east-1a.

• EBS volumes cannot be moved between Availability Zones.

• Create a snapshot of the volume in us-east-1d, then create a new volume from the snapshot, choosing to place it in us-east-1a. Attach the new volume to the instance .

You work for a hospital that is required to store patient's medical records for a minimum of 10 years. Most of these records will never be accessed but must be made available upon request (within a few hours). What is the most cost-effective storage option?

• Glacier

• S3-IA (Infrequent Access)

• AWS Import/Export

• Reduced redundancy storage

If you need a dedicated, low-latency connection to AWS from your on-premises data center, what solution should you choose?

• AWS VPN

• AWS Storage Gateway

• AWS VPG

• AWS Direct Connect

The Availability Zone that your RDS database instance is located in is suffering from outages, and you have lost access to the database. What could you have done to prevent losing access to your database (in the event of this type of failure) without any downtime?

• Created a read replica.

• Enabled multi-AZ failover.

• Increased the database instance size.

• Made a snapshot of it.