AWS - SAA ver.1

The email address of the account or the canonical user ID

The AWS account number

The ARN

An email address with a 2FA token

Open the port on the existing network Access Control List. Your EC2 instances will be able to communicate on this port after a reboot.

Open the port on the existing network Access Control List. Your EC2 instances will be able to communicate over this port immediately.

Open the port on the existing security group. Your EC2 instances will be able to communicate over this port immediately.

Open the port on the existing security group. Your EC2 instances will be able to communicate over this port as soon as the relevant Time To Live (TTL) expires.

Import to Amazon S3

Export from Amazon S3

Import to Amazon EBS

Import to Amazon Glacier

Export to Amazon Glacier

Security Groups – Specific Ports Unrestricted

MFA on Root Account

IAM Use

Vulnerability scans on existing VPCs.

Magnetic

General Purpose SSD

Provisioned IOPS (PIOPS)

Turbo IOPS (TIOPS)

Gateway-accessed volumes

Gateway-cached volumes

Gateway-stored volumes

Gateway-Virtual Tape Library

Upload it directly to S3

Purchase and AWS Direct connect and transfer the data over that once it is installed.

AWS Data pipeline

AWS Import/Export

Rather than use S3, store the images inside a BLOB on RDS with Multi-AZ configured for redundancy.

Store the images on S3 RRS, and create a lifecycle policy to delete the image after 24 hours.

Store the images on glacier instead of S3.

Use elastic block storage volumes to store the images.

https://acloudguru.s3-website-eu-west-1.amazonaws.com

https://s3-eu-east-1.amazonaws.com/acloudguru

https://acloudguru.s3-website-us-east-1.amazonaws.com

https://s3-eu-central-1.amazonaws.com/acloudguru

Use Elastic Load Balancing to load balance traffic between availability zones

Create a CloudFront distribution and to cache objects from an S3 bucket at Edge Locations.

Create a placement group within an Availability Zone and place the EC2 instances within that placement group.

Deploy your EC2 instances within the same region, but in different subnets and different availability zones so as to maximize redundancy.

Add a single additional volume to the EC2 instance with provisioned IOPS.

Create the database on an S3 bucket.

Add multiple additional volumes with provisioned IOPS and then create a RAID 0 stripe across those volumes.

Attach the single volume to multiple EC2 instances so as to maximize performance.

Elasticache & Elastic MapReduce

RDS & DynamoDB

EC2 & Elastic MapReduce

Elasticache & DynamoDB

SQS allows you to set priorities on individual items within the queue, so simply set the fee paying members at a higher priority than your free members.

Create two SQS queues, one for premium members and one for free members. Program your EC2 fleet to poll the premium queue first and if empty, to then poll your free members SQS queue.

SQS would not be suitable for this scenario. It would be much better to use SNS to encode the videos.

Migrate the database to an S3 bucket.

Migrate the database to Glacier.

Add 4 additional EBS SSD volumes and create a RAID 10 using these volumes.

Use Cloud Front to cache the database.

Save the API credentials to your php files.

Don’t save your API credentials. Instead create a role in IAM and assign this role to an EC2 instance when you first create it.

Save your API credentials in a public Github repository.

Pass API credentials to the instance using instance userdata.

CPU Usage

Memory usage

Disk read operations

Network in

Estimated charges

Configure Auto Scaling to terminate your oldest instances first, then adjust your CloudWatch alarm.

Configure Auto Scaling to terminate your newest instances first, then adjust your CloudWatch alarm.

Change your Auto Scaling so that it only scales at scheduled times.

Modify the Auto Scaling group cool-down timers & modify the Amazon CloudWatch alarm period that triggers your Auto Scaling scale down policy.

Use four Spot Instances for the task nodes rather than four On-Demand instances.

You should reduce the input split size in the MapReduce job configuration and then adjust the number of simultaneous mapper tasks so that more tasks can be processed at once.

Store the file on Elastic File Service instead of S3 and then mount EFS as an independent volume for your core nodes.

Configure an independent VPC in which to run the EMR jobs and then mount EFS as an independent volume for your core nodes.

Enable termination protection for the job flow.

Make sure the interns can only access data on S3 using signed URLs.

Enable S3 versioning on the bucket & enable Enable Multifactor Authentication (MFA) on the bucket.

Create an IAM bucket policy that disables deletes.

Use S3 Infrequently Accessed storage to store the data on.

Elastic Load Balancing request routing

An Amazon Route 53 weighted routing policy

Elastic Load Balancing cross zone load balancing

An Amazon Route 53 latency routing policy

For all new AWS accounts there is a soft limit of 20 EC2 instances per region. You should submit the limit increase form and retry the template after your limit has been increased.

For all new AWS accounts there is a soft limit of 20 EC2 instances per availability zone. You should submit the limit increase form and retry the template after your limit has been increased.

You cannot launch more than 20 instances in your default VPC, instead reconfigure the CloudFormation template to provision the instances in a custom VPC.

Your CloudFormation template is configured to use the parent account and not the new account. Change the account number in the CloudFormation template and relaunch the template.

Connect to the environment using AWS Direct Connect.

Assign a public IP address to your Amazon VPC Gateway.

Create a dedicated NAT and deploy this to the public subnet.

Update your route table to add a route for the NAT to 0.0.0.0/0.

You need to update your routing table so as to provide a route out for this instance.

Assign an elastic IP address to the fourth instance.

You have not configured a NAT in the public subnet.

You have not configured a routable IP address in the host OS of the fourth instance.

CloudFormation

Elastic Beanstalk

Opsworks

Lambda

User data

EC2Config service

IAM roles

AWS Config

Multiple Amazon EBS volume with snapshots

A single Amazon Glacier vault

A single Amazon S3 bucket

Multiple instance stores

Use multi-part upload.

Add a random prefix to the key names.

Amazon S3 will automatically manage performance at this scale.

Use a predictable naming scheme, such as sequential numbers or date time sequences, in the key names

Enable AWS CloudTrail to audit all Amazon S3 bucket access.

Enable server access logging for all required Amazon S3 buckets

Enable the Requester Pays option to track access via AWS Billing

Enable Amazon S3 event notifications for Put and Post.

Enable enhanced networking

Use Amazon S3 multipart upload

Leveraging Amazon CloudFront, use the HTTP POST method to reduce latency.

Use Amazon Elastic Block Store Provisioned IOPs and use an Amazon EBS-optimized instance

Amazon DynamoDB

Amazon Redshift

Amazon Kinesis

Amazon Simple Queue Service

Spot Instances

Reserved instances

Dedicated instances

On-Demand instances

Multiple Availability Zones

AWS Direct Connect

EC2 Dedicated Instances

Placement Groups

VPC private subnets

Remove public read access and use signed URLs with expiry dates.

Use CloudFront distributions for static content.

Block the IPs of the offending websites in Security Groups.

Store photos on an EBS volume of the web server.

AWS ElastiCache Memcached

Amazon Simple Storage Service

Amazon EC2 instance storage

Amazon DynamoDB

Add a password to the user.

Enable Multi-Factor Authentication for the user.

Assign a Password Policy to the user.

Create a set of Access Keys for the user

May be performed by AWS, and will be performed by AWS upon customer request.

May be performed by AWS, and is periodically performed by AWS.

Are expressly prohibited under all circumstances.

May be performed by the customer on their own instances with prior authorization from AWS.

May be performed by the customer on their own instances, only if performed from EC2 instances

SQS guarantees the order of the messages.

SQS synchronously provides transcoding output.

SQS checks the health of the worker instances.

SQS helps to facilitate horizontal scaling of encoding tasks.

A standalone Amazon EC2 instance

Amazon RDS in a Multi-AZ configuration

Amazon EC2 instances in a replication configuration utilizing a single Availability Zone

Amazon EC2 instances in a replication configuration utilizing two different Availability Zones

Create an image of the instance, and register the image with an IAM role assigned and an Amazon EBS
volume mapping.

Create a new IAM role with the same permissions as an existing IAM role, and assign it to the running
instance.

Create an image of the instance, add a new IAM role with the same permissions as the desired IAM role, and deregister the image with the new role assigned.

Create an image of the instance, and use this image to launch a new instance with the desired IAM role assigned.

Deploy 6 EC2 instances in one availability zone and use Amazon Elastic Load Balancer.

Deploy 3 EC2 instances in one region and 3 in another region and use Amazon Elastic Load Balancer.

Deploy 3 EC2 instances in one availability zone and 3 in another availability zone and use Amazon Elastic Load Balancer.

Deploy 2 EC2 instances in three regions and use Amazon Elastic Load Balancer.

Single facility in eu-west-1 and a single facility in eu-central-1

Single facility in eu-west-1 and a single facility in us-east-1

Multiple facilities in eu-west-1

A single facility in eu-west-1

Use an IAM policy that references the LDAP account identifiers and the AWS credentials.

Use SAML (Security Assertion Markup Language) to enable single sign-on between AWS and LDAP

Use AWS Security Token Service from an identity broker to issue short-lived AWS credentials.

Use IAM roles to automatically rotate the IAM credentials when LDAP credentials are updated.

Use the LDAP credentials to restrict a group of users from launching specific EC2 instance types.

Use a DynamoDB table with an attribute defining the priority level. Transformation instances will scan the table for tasks, sorting the results by priority level.

Use Route 53 latency based-routing to send high priority tasks to the closest transformation instances.

Use two SQS queues, one for high priority messages, and the other for default priority. Transformation instances first poll the high priority queue; if there is no message, they poll the default priority queue

Use a single SQS queue. Each message contains the priority level. Transformation instances poll high-priority messages first.

Attaching a second Elastic Network interface (ENI) to the NAT instance, and placing it in the private subnet

Attaching an Elastic IP address to the instance in the private subnet

Attaching a second Elastic Network Interface (ENI) to the instance in the private subnet, and placing it in the public subnet

Disabling the Source/Destination Check attribute on the NAT instance

It provides an encrypted virtual disk in the Cloud.

It doesn’t exist for Amazon S3, but only for Amazon EC2.

It encrypts the files that you send to Amazon S3, on the server side.

It allows to upload files using an SSL endpoint, for a secure transfer.

Launch the test and production instances in separate regions and allow region wise access to the group

Define the IAM policy which allows access based on the instance ID

Create an IAM policy with a condition which allows access to only small instances

Define the tags on the test and production servers and add a condition to the IAM policy which allows access to specific tags

None of these.

Amazon Instance Storage

Any of these

Amazon EBS

No

Yes

You will need to delete the Read Replica and create a new one to replace it.

You will need to disassociate the DB Engine and re associate it.

The instance should be deployed to Single AZ and then moved to Multi- AZ once again.

You will need to delete the DB Instance and create a new one to replace it.

Yes, you can integrate private multi-factor token devices to authenticate users to the AWS platform.

No, you cannot integrate multi-factor token devices with the AWS platform.

Yes, using the AWS multi-factor token devices to authenticate users on the AWS platform.

An application container on top of Amazon Web Services.

A scalable storage appliance on top of Amazon Web Services.

A scalable cluster of EC2 instances.

A service by this name doesn’t exist.

You don’t need not specify the resource identifier while stopping a resource

You can terminate, stop, or delete a resource based solely on its tags

You can’t terminate, stop, or delete a resource based solely on its tags

You don’t need to specify the resource identifier while terminating a resource

key pairs

Elastic IP addresses

placement groups

Amazon EBS snapshots

Allow no inbound traffic, Allow all outbound traffic and Allow instances associated with this security group to talk to each other

Allow all inbound traffic, Allow no outbound traffic and Allow instances associated with this security group to talk to each other

Allow no inbound traffic, Allow all outbound traffic and Does NOT allow instances associated with this security group to talk to each other

Allow all inbound traffic, Allow all outbound traffic and Does NOT allow instances associated with this security group to talk to each other

Amazon Cloud Watch

Status of the Amazon RDS DB

AWS Service Health Dashboard

AWS Cloud Monitor

The ability to setup Autoscaling for Amazon EC2 instances.

None of these.

A templated resource creation for Amazon Web Services.

A template to map network resources for Amazon Web Services.

The remaining Read Replicas will still replicate from the older master DB Instance

The remaining Read Replicas will be deleted

The remaining Read Replicas will be combined to one read replica

They don’t exist. The Amazon EC2 AMI tools, instead, are used to manage permissions.

Command-line tools to the Amazon EC2 web service.

They are a set of graphical tools to manage EC2 instances.

They don’t exist. The Amazon API tools are a client interface to Amazon Web Services.

A security group in which only tasks inside can communicate with each other

A special type of worker

A collection of related Workflows

The DNS record for the Amazon SWF service

1,000 write capacity units

100,000 write capacity units

Dynamic DB is designed to scale without limits, but if you go beyond 10,000 you have to contact AWS first.

10,000 write capacity units

Removes one or more security groups from a rule.

Removes one or more security groups from an Amazon EC2 instance.

Removes one or more rules from a security group.

Removes a security group from our account.

You mean Amazon “Iceberg”: it’s a low-cost storage service.

A security tool that allows to “freeze” an EBS volume and perform computer forensics on it.

A low-cost storage service that provides secure and durable storage for data archiving and backup.

It’s a security tool that allows to “freeze” an EC2 instance and perform computer forensics on it.

Groups the user created security groups in to a new group for easy access.

Creates a new security group for use with your account.

Creates a new group inside the security group.

Creates a new rule inside the security group.

Protect the EC2 instances against unsolicited access by enforcing the principle of least-privilege access

Protect against IP spoofing or packet sniffing

Assure all communication between EC2 instances and ELB is encrypted

Install latest security patches on ELB. RDS and EC2 instances