SP15-Quiz10

You are building an application on Amazon EC2 that must call AWS APIs. Which method would you use to allow an application access to the APIs securely?

• Store API credentials as an object in Amazon S3

• Assign IAM roles to the EC2 instances

• Use Secure Vault managed service

A company needs to store images that are uploaded by users via a mobile application. There is also a need to ensure that security measures are in place to avoid data loss. What step should be taken for protection against unintended user actions?

• Store data in an S3 bucket and enable versioning

• Store data in an EBS volume and create snapshots once a week.

• Store data on Amazon EFS Storage

• Storage data on EC2 instance storage

There is a requirement to host a database on an EC2 instance. It is also required that the EBS volume should support 18,000 IOPS. Which Amazon EBS volume type would meet the performance requirements of this database?

• EBS General Purpose SSD

• EBS Super Fast SSD

• EBS Provisioned IOPS SSD

Amazon's EBS volumes are ________?

• Object-based storage

• Encrypted by default

• Block-based storage

• Not suitable for databases

Individual instances are provisioned in ______.

• Regions

• Availability Zones

• Globally

What actions you can not do with EBS Snapshots?

• Create AMI out of it

• Share snapshot with other accounts

• Attach to EC2 instance

You know that you need 24 CPUs for your production server. You also know that your compute capacity is going to remain fixed until next year. What pricing option would be cheapest?

• Spot Instance

• On-demand Instance

• Three-year reserved instance

• One-year reserved instance

You are running your application on a bunch of on-demand servers. Weekends you have to kickoff a large batch job and you are planning to add capacity. The batch job you are going to run over the weekend can be restarted if it fails. What is the best way to secure additional compute resources?

• On-demand Instance

• Spot Instance

• Reserved instance

You have a compliance requirement that you should own the entire physical hardware and not other customer should run any other instance on the physical hardware. What options should you chose?

• Explain to auditor that EC2 is very secure

• Reserve instance for 1 year

• Use dedicated instance

What are the advantages of using Spot Instances?

• Price

• Persistence

• Special hardware