All posts in AWS

Which of the following are you responsible for? Networking Data security (Ans) Storage Compute The root account can be restricted by permissions. False (Ans) True When a user is moved…

To take advantage of the greatest number of features available in Active Directory while having Amazon responsible for the management of the operating system and underlying hardware, you should choose:…

The best tool to identify excess access keys and passwords that have NOT been rotated recently is: Cloud Trail Trusted Advisor Amazon Inspector Access Advisor Credential Report (Ans) Which of…

What is the definition of a managed policy? Custom policy controlled by the customer Deployed by the customer Created and maintained by AWS (Ans) Policies applied to users and groups…

If resources at AWS have been created by a no other account, what feature can be enabled to share access to resources? Cross Account Access (Ans) Creating additional accounts for…

What security feature ensures no compromise of session keys during operation? Perfect forward secrecy (Ans) Sticky sessions Server order preference SSL offload When EBS volumes are created, who has access?…

Security Groups are: Stateless – traffic strictly filtered Stateless – return traffic not allowed (Ans) Stateful – return traffic allowed Stateful – traffic strictly filtered Read replicas are synchronously replicated:…

What is one benefit of adding CDN services to a distributed cloud system? Lower latency for application users Better availability of static content All of the above (Ans) Less load…

You can use the free tier for: 12 months (Ans) Free tier is always available 3 months 6 months One ECU is based on which generation of Intel processor? 2008…

Which of the following is not an AWS security method? Active Directory Authentication (Ans) IAM Security Groups VPC AWS infrastructure is built in such a way that it will never…

Database clients can connect to Redshift using ODBC and JDBC drivers for Postgres. True (Ans) False Cloudera Impala is included on EMR clusters by default. True False (Ans) EC2 stands…

In what order should you utilize the different rule sources when looking to implement an AWS Config Rule? Built-in, custom, third-party Custom, built-in, third-party Built-in, third-party, custom (Ans) Third-party, built-in,…

What is a “visibilty timeout” in SQS? How long to delay the message before anyone can poll it none of the above An amount of time that the message is…

An ECS task can be described as: A virtual container profile A software tool used to manage cluster resources A software agent used to enable communication across a cluster environment…

Which of the following options describes Infrastructure in Code? Script containing all needed steps to transform current state into target state. Checklist containing all steps needed to transform current state…

What is the difference between continuous delivery and continuous deployment? With continuous delivery, software releases are pushed into production automatically. With continuous deployment, software releases are pushed into production manually….

Choose the correct types of access policy statements: API gateways and access policies Testimonies and affidavits Action-statements and resource-statements (Ans) Access policies and statements How many servers should be configured…

What set of operations can you perform on RDS database logs? View, watch, and download (Ans) View, download, and purge View and watch View and download What is a “node…

Elastic Block Storage is limited in size and won’t auto scale with your storage needs. False True (Ans) Compared to a relational database’s data model… A DynamoDB attribute is like…

How long can an SQS queue hold onto a message before it is automatically removed? 14 days (Ans) 24 hours Unlimite 1 hour An SNS subscription must always be verified…