AWS Cloud Quiz Part 1

A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. Which activities related to a Snowball Edge device are available to the company at no cost?

• Use of the Snowball Edge appliance for a 10-day period

• The transfer of data out of Amazon S3 and to the Snowball Edge appliance

• The transfer of data from the Snowball Edge appliance into Amazon S3

• Daily use of the Snowball Edge appliance after 10 days

A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. Which AWS service can the company use to meet these requirements?

• AWS Trusted Advisor

• Amazon Inspector

• AWS Config

• Amazon GuardDuty

What is the MOST operationally efficient AWS solution for extending file storage capabilities while retaining the benefit of sharing content locally for a company with centralized large file storage requirements?

• Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.

• Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.

• Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.

• Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.

According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?

• Hard code an IAM user’s secret key and access key directly in the application, and upload the file.

• Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.

• Have the EC2 instance assume a role to obtain the privileges to upload the file.

• Modify the S3 bucket policy so that any service can upload to it at any time.

Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?

• Physical security of DynamoDB

• Patching of DynamoDB

• Access to DynamoDB tables

• Encryption of data at rest in DynamoDB

Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?

• Security Perspective

• Governance Perspective

• Business Perspective

• Technology Perspective

Which AWS service is an alternative to help manage Docker environments on Amazon EC2 instances for tasks like cluster size, scheduling, and environment maintenance?

• AWS Lambda

• Amazon RDS

• AWS Fargate

• Amazon Athena

What is AWS responsible for in a scenario where a company runs a NoSQL database on Amazon EC2 instances?

• Update the guest operating system of the EC2 instances

• Maintain high availability at the database layer

• Patch the physical infrastructure that hosts the EC2 instances

• Configure the security group firewall

Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)

• AWS Cost Explorer

• AWS Billing Conductor

• Amazon CodeGuru

• Amazon SageMaker

• AWS Compute Optimizer

Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)

• Providing high-performance container orchestration

• Creating and rotating encryption keys

• Reducing costs by identifying unused resources

• Ensuring security by checking for open access to certain ports

• Improving performance by optimizing Amazon EBS volume settings