IAM
When editing permissions (policies and ACLs), to whom does the concept of the "Owner" refer?
- The Owner refers to the identity and email address used to create the AWS Account
EC2
What is the underlying Hypervisor/s for EC2?
- Xen
- Nitro
You can RDP or SSH into an RDS instance to see what is going on with the operating system?
- FALSE
How is the Public IP address managed in an instance session via the instance GUI/RDP or Terminal/SSH session?
-
The Public IP is not managed on the instance: it is instead an alias applied as a network address translation of the Private IP address.
You work for a games development company that are re-architecting their production environment.
They have decided to make all web servers stateless.
Which of the following AWS services will help them achieve this goal?
DynamoDB - Yes?
ELB - No?
EMR - No?
RDS - Yes?
ElastiCache - Yes?
What is the Uptime SLA for Amazon EC2 and EBS within a given region?
- 99.95%
Support
What is the maximum response time for a Business Level 'production down' Support Case?
1 Hour
S3
You work for a large media organization who has traditionally stored all their media on large SAN arrays.
After evaluating AWS, they have decided to move their storage to the cloud.
Staff will store their personal data on S3, and will have to use their Active Directory credentials in order to authenticate.
These items will be stored in a single S3 bucket, and each staff member will have their own folder within that bucket named after their employee ID.
Which steps should you take in order to help set this up?
1. Create either a federation proxy or identity provider.
2. Create an IAM role.
3. Use AWS security token service to create temporary tokens.
Resource Groups
What are Resource Groups?
In AWS, a resource is an entity that you can work with.
Examples include an Amazon EC2 instance, an AWS CloudFormation stack, or an Amazon S3 bucket.
If you work with multiple resources, you might find it useful to manage them as a group rather than move from one AWS service to another for each task.
If you manage large numbers of related resources, such as EC2 instances that make up an application layer, you likely need to perform bulk actions on these resources at one time.
Examples of bulk actions include: Applying updates or security patches, Upgrading applications ect
A resource group is a collection of AWS resources that are all in the same AWS region, and that match criteria provided in a query.
In Resource Groups, there are two types of queries on which you can build a group:
1. Tag-based
2. AWS CloudFormation stack-based
Other
Which AWS Resources is available universally across the console?
Route 53
IAM
Which AWS services allow you to natively run Docker containers? (name 3)
Elastic Beanstalk
Fargate
ECS (Amazon Elastic Container Service)
As the AWS platform is PCI DSS Level 1 Certified, I can immediately deploy a website to it that can take and store credit card details without getting a delta accreditation from a QSA. (true or false)
False
AWS holds compliance certification for the services that 'AWS' runs. As a customer you are still responsible for the compliance certification of the code and process and configurations that 'you' manage. However you can avoid the cost and complication of proving that the underlying services are compliant.
With which AWS orchestration service can you implement Chef recipes?
Opsworks
By default, how many Elastic IP addresses are you limited to per region?
5
How quickly can objects be restored from Glacier?
3 to 5 hours