Quiz
Domain 1.16
Create a free account to finish this quiz
Save your progress and see your final score.
Already have an account? Sign in
Questions in this quiz (19)
1You have a custom VPC with a public subnet. The VPC has an internet gateway attached
to it. What else should you do to ensure that instances within the subnet can reach the
Internet?- AAdd a route to the route table that directs traffic directed at the public Internet to go
through the internet gateway. - BAdd a rule to the security group allowing outbound traffic out via HTTP.
- CEnsure that each instance has a public IP address.
- DThe instances should have public access with this configuration already.
- AAdd a route to the route table that directs traffic directed at the public Internet to go
2Which types of content can CloudFront cache?
- AStatic and dynamic content
- BStatic content, but not dynamic content
- CDynamic content, but not static content
- DCloudFront is not a caching mechanism.
3You have web applications that are serving up content via a large RDS instance. You are
seeing heavy database utilization and want to improve performance. What might you suggest?
(Choose two.)- AIncrease the instance size of the database.
- BIncrease the instance size of the web application servers.
- CSet up CloudFront to handle dynamic content as well as static content.
- DAdd an additional fleet of EC2 instances to serve the web content.
4You are tasked with creating a new VPC for a large company, hosting a fleet of instances
within the VPC, and ensuring that they can write to the company’s S3 buckets and also
be accessed via a REST API that they each host. Which of the following would be part of
your proposed solution? (Choose two.)- AA customer gateway
- BAn internet gateway
- CA VPC endpoint
- DA new NACL
5You are tasked with hosting a fleet of instances within the default VPC of a company’s
AWS account and ensuring that the instances can write to the company’s S3 buckets and
also be accessed via a REST API that they each host. Which of the following would be
part of your proposed solution? (Choose two.)- AA customer gateway
- BAn internet gateway
- CA VPC endpoint
- DAn updated set of rules for the NACL
6You have been asked to troubleshoot a Direct Connect connection between your company’s
on-site data center and a subnet within a public VPC. You have confirmed that
you can reach the instances in the VPC from your data center, but those instances cannot
reach back to your data center. What would you investigate? (Choose two.)- AThe VPC subnet’s routing table
- BThe on-site storage gateway
- CThe NAT instance in your VPC
- DThe virtual private gateway configuration
7What is route propagation with respect to a virtual private gateway?
- AIt copies all routes from an on-site network to an AWS VPC’s subnets routing tables.
- BIt helps avoid manually entering VPN routes into your VPC routing tables.
- CIt automatically allows inbound traffic from your on-premises connection.
- DIt enables storage-based traffic from a customer’s storage gateway.
8What URL provides you with the public and private IP addresses of running EC2 instances?
- Ahttp://169.254.169.254/meta-data/
- Bhttp://169.254.169.254/latest/meta-data/
- Chttp://169.254.169.254/instance-data/
- Dhttp://169.254.169.254/latest/instance-data/
9Which of the following is a highly durable key-value store?
- AS3
- BEFS
- CEBS
- DElastiCache
10Which of the following is a valid Glacier use case?
- AStoring insurance documents accessed once or twice a day by mobile clients
- BStoring medical records in case of annual audits
- CStoring patient images used in the scheduling department’s web-based software
- DStoring X-rays used in teaching exercises at the local college
11You have been called in to mitigate a disastrous loss of data on S3 at a bioethics company.
After investigating, it is determined that the data was deleted accidentally by a developer.
The company wants to ensure that data cannot be accidentally deleted like this in the
future. What would you suggest? (Choose two.)- AEnable S3 versioning on all S3 buckets.
- BCreate an IAM policy that disallows developers from deleting data in S3.
- CReplace the current access pattern with signed URLs.
- DEnable MFA Delete on the buckets.
12How many instances can you launch in a given AWS region?
- A20
- B40
- C20, but this is a soft limit and can be increased by AWS
- D40, but this is a soft limit and can be increased by AWS
13You are using a NAT instance inside of a VPC to support routing out to the public Internet
from private instances within that VPC. As traffic has increased, the performance of
any operations involving the outbound Internet traffic has degraded to unacceptable levels.
How would you mitigate this problem?- AAdd an additional internet gateway so the NAT instance can split outbound traffic
over two gateways. - BAdd an additional elastic IP to the NAT instance to increase throughput.
- CIncrease the instance size of the NAT instance by one or more instance size classes.
- DAll of these are valid solutions.
- AAdd an additional internet gateway so the NAT instance can split outbound traffic
14What is the simplest way to reduce frequent scaling in an application? For example, if an
application is showing that it’s scaling up and down multiple times in an hour, how would
you reduce the number of “ups and downs” you are seeing?- ASet up scheduled times with proactive cycling for the scaling so that it is not occurring
all the time. - BIncrease the cooldown timers so that scaling down requires greater thresholds of
change in your triggers. - CUpdate CloudWatch to use a FIFO termination policy, only terminating the oldest
instances in a scaledown. - DNone of these will improve the issue.
- ASet up scheduled times with proactive cycling for the scaling so that it is not occurring
15Which of these steps are required to get a NAT instance working? (Choose two.)
- AUpdate the routing table for EC2 instances accessing the public Internet to go
through the NAT instance. - BLocate the NAT instance within the private subnet that it will be serving.
- CDisable source/destination checks on your instance.
- DSet the NAT instance to allow port forwarding from the private subnet.
- AUpdate the routing table for EC2 instances accessing the public Internet to go
16Which of these is not a default CloudWatch metric?
- ADisk read operations
- BMemory usage
- CCPU usage
- DInbound network traffic
17You have an existing fleet of EC2 instances in a public subnet of your VPC. You launch
an additional instance from the same AMI as the existing instances, into the same public
subnet. What steps might you need to take to ensure that this instance can reach the public
Internet? (Choose two.)- AAssign an elastic IP address to the instance.
- BAdd the instance to the ELB serving the existing instances.
- CAdd the instance into a private subnet.
- DEnsure that the instance has a route out to the Internet.
18Which of the following is the destination address for the public Internet?
- A192.168.1.255/0
- B0.0.0.0/16
- C169.254.169.254/0
- D0.0.0.0/0
19Which of the following would you use to route traffic from your subnet to the public Internet?
- ADestination: 0.0.0.0/0 ➢ Target: your internet gateway
- BDestination: 0.0.0.0/16 ➢ Target: your internet gateway
- CDestination: your internet gateway ➢ Target: 0.0.0.0/0
- DDestination: 0.0.0.0/0 ➢ Target: your virtual private gateway
Information
- Description
- AWS (AWS - Practice Book Domain 1) Quiz on Domain 1.16, created by Fausto Trindade on 22/02/2020.
- Author
- Fausto Trindade
- Language
- Português
- Views
- 0
- Tags
- Rating
- No ratings yet Rate this quiz