AWS Cloud Concepts Quiz

<p>To allow communication between the VPC and the internet (A)</p> Signup and view all the answers

<p>Implement loosely coupled dependencies. (B)</p> Signup and view all the answers

<p>IAM credential report (A)</p> Signup and view all the answers

<p>Flexibility to change instance types (C)</p> Signup and view all the answers

<p>To manage a fleet of Spot Instances across multiple instance types (C)</p> Signup and view all the answers

<p>Amazon S3 (D)</p> Signup and view all the answers

<p>Operating system installations (C)</p> Signup and view all the answers

<p>Adopting a pay-as-you-go payment model (A)</p> Signup and view all the answers

<p>AWS Storage Gateway (D)</p> Signup and view all the answers

<p>AWS Pricing Calculator (C)</p> Signup and view all the answers

<p>AWS Software Development Kit (B)</p> Signup and view all the answers

<p>Learning from operational failures (A)</p> Signup and view all the answers

<p>Ability to focus on application development (C)</p> Signup and view all the answers

<p>Least privilege access (D)</p> Signup and view all the answers

<p>Network ACL (B)</p> Signup and view all the answers

<p>Amazon Redshift Serverless (C)</p> Signup and view all the answers

<p>AWS allows adjusting capacity according to demand. (A)</p> Signup and view all the answers

<p>IAM role (D)</p> Signup and view all the answers

<p>Maintenance of physical and environmental controls (D)</p> Signup and view all the answers

<p>Use of template files for resource definitions (C)</p> Signup and view all the answers

<p>Least privilege principle (C)</p> Signup and view all the answers

<p>To enhance performance by routing traffic through AWS infrastructure. (D)</p> Signup and view all the answers

<p>Amazon Simple Queue Service (Amazon SQS) (A)</p> Signup and view all the answers

<p>Volume discounts based on multiple account usage. (A)</p> Signup and view all the answers

<p>AWS Artifact (D)</p> Signup and view all the answers

<p>Through Access Analyzer for S3. (D)</p> Signup and view all the answers

<p>Amazon CloudFront (B)</p> Signup and view all the answers

<p>It provides a dedicated, high-speed connection to AWS services. (A)</p> Signup and view all the answers

<p>AWS WAF (A)</p> Signup and view all the answers

<p>Patching the operating system on Amazon RDS instances (C), Securing the virtualization layer (E)</p> Signup and view all the answers

<p>S3 Glacier Flexible Retrieval (A)</p> Signup and view all the answers

<p>AWS Identity and Access Management Access Analyzer (C)</p> Signup and view all the answers

<p>AWS Partner Network (APN) (A)</p> Signup and view all the answers

<p>AWS Cost and Usage Report (C)</p> Signup and view all the answers

<p>Amazon EC2 Auto Scaling (B)</p> Signup and view all the answers

<p>AWS Storage Gateway (A)</p> Signup and view all the answers

<p>AWS Secrets Manager (A)</p> Signup and view all the answers

<p>AWS Storage Gateway (B)</p> Signup and view all the answers

<p>S3 Standard-IA (A)</p> Signup and view all the answers

<p>Amazon Macie (B)</p> Signup and view all the answers

<p>Create an IAM user with administrator privileges for daily tasks (C), Enable multi-factor authentication (MFA) on the root user (D)</p> Signup and view all the answers

<p>Modify the DB instance to be a Multi-AZ deployment (C)</p> Signup and view all the answers

<p>Reserved Instances (D)</p> Signup and view all the answers

<p>AWS Key Management Service (AWS KMS) (A)</p> Signup and view all the answers

<p>Amazon GuardDuty (B)</p> Signup and view all the answers

AWS Direct Connect is a service that allows you to establish a dedicated network connection between your on-premises data center and AWS. This provides a private, high-bandwidth connection, improving performance compared to public internet connections.

A VPC peering connection allows you to establish a private connection between two VPCs in the same AWS account or in different accounts without routing traffic over the public internet. You can have bidirectional communication between your VPCs.

AWS Regions are the physical locations around the world where AWS data centers are located. This helps offer low latency and compliance requirements for customers.

The Security pillar of the AWS Well-Architected Framework focuses on protecting your AWS environment and data from unauthorized access, modification, and disclosure. This includes implementing security controls, managing identities and access, and protecting your data.

An Internet Gateway within a VPC allows your instances to communicate with the internet, effectively acting as a bridge between your VPC and the outside world.

Implementing loosely coupled dependencies follows the best practice of the AWS Well-Architected Framework for operational excellence. It refers to designing your application in a way that makes individual components independent and less reliant on each other, allowing for easier maintenance, scalability, and updates.

IAM credential report is a report that provides details about your IAM users, roles, and groups, including their access keys, last used dates, and associated permissions. You can leverage this information for auditing password and access key rotation for compliance purposes.

An AWS service that enhances application availability through fast failover across multiple Regions and Availability Zones, offering a robust solution for geographically distributed applications.

The AWS service that allows applications to communicate with one another using a messaging system.

A feature of AWS that enables centralized billing for multiple accounts, offering consolidation and potential cost optimizations.

AWS Access Analyzer for S3 is a tool that allows users to review IAM policies granting access to Amazon S3 buckets, helping to identify potential security risks.

AWS Artifact is a resource that provides compliance-related information and reports about AWS services.

Amazon CloudFront is an AWS service that enables deploying applications closer to end users, improving latency and performance.

AWS Global Accelerator is a service that enhances network performance by routing traffic through AWS's global network infrastructure.

A network security principle that involves configuring firewalls and network rules to secure resources within the AWS Cloud, ensuring only authorized access.

Amazon EC2 Auto Scaling enables dynamic scaling of EC2 instances based on defined metrics. This ensures your applications can handle varying workloads efficiently.

AWS Secrets Manager securely stores, rotates, and manages secrets like database credentials and API keys. It automates credential management, saving you time and effort.

Amazon Macie is a security service that analyzes your data in Amazon S3 and identifies sensitive data or intellectual property, helping you enforce compliance and protect your valuable information.

The AWS account root user has ultimate administrative privileges. To maintain security, it's crucial to enable multi-factor authentication (MFA) on the root user and create an IAM user with administrator privileges for regular tasks. Never share root user credentials.

A Multi-AZ deployment for Amazon RDS DB instances ensures high availability with minimal downtime. It creates a replica in a different Availability Zone, allowing instant failover in case of failure.

Reserved Instances provide discounted pricing for Amazon EC2 instances if you commit to using them for a specific duration (1 year). If you have continuous application usage for a year, Reserved Instances are the most cost-effective option.

Amazon Simple Storage Service (Amazon S3) is a highly durable object storage service provided by AWS. It offers high availability, scalability, and data redundancy for storing vast amounts of data, making it ideal for a wide range of use cases.

AWS takes responsibility for installing and managing the operating system when you run your databases on EC2 instances.

AWS's pay-as-you-go model allows you to pay only for the resources you use, offering flexibility and cost savings. Additionally, AWS eliminates the need to predict capacity requirements upfront, allowing you to scale resources as needed.

AWS Storage Gateway is a hybrid cloud storage service that lets you access AWS cloud storage from on-premises systems. This allows you to seamlessly scale your storage capacity and benefit from the advantages of cloud storage while keeping your data accessible locally.

The AWS Pricing Calculator is a tool that allows you to estimate the cost of your AWS use cases before you deploy them. This helps you plan your spending and make informed decisions about your cloud infrastructure.

The AWS Software Development Kit (SDK) allows developers to integrate AWS services directly into their applications. It provides a way to interact with AWS services programmatically, making it easier to build cloud-based applications.

A recommended design principle of the AWS Well-Architected Framework is to learn from operational failures. By analyzing such failures, you can identify areas for improvement and enhance the resilience and efficiency of your cloud infrastructure.

Amazon Virtual Private Cloud (Amazon VPC) is a service that lets you launch AWS resources in a customizable, isolated virtual network environment. It gives you control over your network configuration, including IP address allocation, routing tables, and security groups.

The practice of granting users only the minimum access privileges required to perform their job duties. This minimizes the potential impact of security breaches by limiting the scope of access.

A virtual firewall that controls network traffic going into and out of an Amazon VPC subnet. It works by applying rules to incoming and outgoing traffic.

A fully managed, serverless data warehouse service that automatically scales to meet your needs. It is ideal for analyzing large datasets without managing infrastructure.

AWS helps reduce business costs by offering on-demand capacity and eliminating the need to build and maintain on-premises data centers.

An IAM (Identity and Access Management) feature that allows users in one AWS account to access resources in another account. This is achieved by granting the users a specific role that provides access to the targeted resources.

AWS is responsible for maintaining physical and environmental controls for their services, ensuring a secure infrastructure for customers. This includes security measures like physical security, environmental controls, and data center management.

Infrastructure as Code (IaC) is a practice of managing and provisioning infrastructure using code. You can define and automate infrastructure deployments using tools like CloudFormation or Terraform.

AWS Identity and Access Management (IAM) user permissions are managed by the individual users or administrators, not by AWS. Users are responsible for configuring their IAM policies to define their access levels to various services and resources.

AWS is responsible for securing the virtualization layer and patching the operating system on Amazon RDS instances. These tasks are part of the underlying infrastructure and are not directly managed by customers.

Amazon S3 Glacier Flexible Retrieval is the optimal choice for infrequently accessed data with a 12-hour retrieval requirement. It provides cost-efficient storage while ensuring timely access when needed.

AWS Identity and Access Management (IAM) Access Analyzer helps track and identify services used by users within a specific timeframe. This assists with security audits and understanding resource usage.

The AWS Partner Network (APN) facilitates partnerships with third-party consultants to support AWS environments. This provides access to expertise and resources for specialized assistance.

The AWS Cost and Usage Report provides detailed billing data in a downloadable format. This report helps analyze cost trends, identify cost optimization opportunities, and create automated dashboards.

Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) offers a cost-effective option for storing data that is infrequently accessed. It is locally cached and designed for backups and archival data.

AWS Direct Connect provides a dedicated, high-bandwidth connection between your on-premises data center and AWS. This private connection offers enhanced security and performance over public internet connections.