Reference no: EM133892337
Questions
1. Which of the following are best practices to secure your account using AWS Identity and Access Management (IAM)? (Choose two.)
Leave unused and unnecessary users and credentials in place
Avoid using IAM groups to grant the same access permissions to multiple users.
Define fine-grained access rights
Provide users with default administrative privaleges
Manage access to AWS resources
2. Which of the following is the responsibility of AWS under the AWS shared responsibility model? (Select the best answer.)
Configuring third-party applications
Managing custom Amazon Machine Images (AMIs)
Security application access and data
Maintaining physical hardware
3. Which of the following is an optional security control that can be applied at the subnet layer of a VPC? (Select the best answer.)
Security group
Network ACL
Web application firewall
Firewall
4. You are a solutions architect who works at a large retail company that is migrating its existing infrastructure to AWS. You recommend that they use a custom VPC. When you create a VPC, you assign it to an IPv4 Classless Inter-Domain Routing (CIDR) block of 10.0.1.0/24 (which has 256 total IP addresses). How many IP addresses are available? (Select the best answer.)
251
250
246
256
5. Private subnets have direct access to the internet.
True
False
6. Which of the following can be used to protect Amazon Elastic Compute Cloud (Amazon EC2) instances hosted in AWS?
AMI
Security Group
All of the options
Internet Gateway
7. Which of the following must be specified when launching a new Amazon EC2 Windows instance? (Choose two)
Password for the administrator account
Amazon EC2 instance type
Amazon Machine Image (AMI)
The Amazon EC2 instance ID
8. If your project requires monthly reports that iterate through very large amounts of data, which Amazon EC2 purchasing options should you consider?
Spot Instances
Dedicated Hosts
On-Demand Instances
Scheduled Reserved Instances
9. What is included in an Amazon Machine Image (AMI)? (Select the best answer.)
A block device mapping that specifies the volumes to attach to the instance when it's launched
A template for the root volume for the instance
All of these options
Launch permissions that control which AWS accounts can use the AMI launch instances
10. Which Amazon EC2 option is best for long-term workloads with predictable usage patterns? (Select the best answer.)
Spot Instances
Reserved Instances
On-Demand Instances
11. The name of an S3 bucket must be unique ____________. (Select the best answer.)
across all your AWS accounts
within your AWS account
within a Region
worldwide across all AWS accounts
12. Regarding Amazon S3 Glacier, what is a Vault? (Select the best answer.)
An object (photos, videos, files or documents)
A container for storing archives
A policy that identifies who can access content stored in Glacier
The rules that determine who may (or may not) access archives
13. Amazon S3 replicates all objects _________. (Select the best answer.)
across multiple Regions for higher durability
on multiple volumes within an Availability Zone
in multiple Availability Zones within the same Region
on multiple S3 buckets
14. True or False? By default, all data stored in Amazon S3 is viewable by the public.
True
False
15. In Amazon DynamoDB, what does the query operation enable you to do? (Select the best answer.)
Query a table using the partition key and an optional sort key filter
Efficiently retrieve items form a table or secondary index
Query any secondary indexes that exist for a table
All of these options