AWS Building Serverless Applications Week 4 • STUDY MODE

WEEK 4 QUIZ

QUESTION 1 OF 24

Which of the following are valid Pillars of the Well-Architected Framework? Choose two.

Infrastructure

Redundancy

Speed

SecurityCorrect Answer

Cost OptimizationCorrect Answer

QUESTION 2 OF 24

What language does Amazon Athena support?

SQLCorrect Answer

Java

C++

dogescript

QUESTION 3 OF 24

What is the name of the model that shows how security is handled by AWS and it’s customers in the AWS Cloud?

Cloud Security Model

Role Based Model

Shared Responsibility ModelCorrect Answer

AWS Authentication Model

QUESTION 4 OF 24

What AWS Service is best suited for storing objects?

Amazon Simple Storage ServiceCorrect Answer

Amazon Elastic Beanstalk

Amazon DynamoDB

Amazon Object Store

QUESTION 5 OF 24

What AWS service can be used to manage multiple AWS Accounts for consolidated billing?

AWS Multiple-man

AWS Account Manager

AWS Billing

AWS OrganizationsCorrect Answer

QUESTION 6 OF 24

Which AWS Service supports threat detection by continuously monitoring for malicious or unauthorized behavior?

Amazon IDP

Amazon Knight

Amazon Monitor

Amazon GuardDutyCorrect Answer

QUESTION 7 OF 24

What is a customer access endpoint?

A customer token

A signed code segment

A URL entry point for a web serviceCorrect Answer

A websocket for customer connections

QUESTION 8 OF 24

Which statement is true?

You can only attach 1 elastic network interface (ENI) to each EC2 instance launched in VPC

By default, each instance that you launch into a nondefault subnet has a public IPv4 address

To use AWS Private Link, the VPC is required to have a NAT device

Traffics within an Availability Zone, or between Availability Zones in all Regions, are routed over the AWS private global networkCorrect Answer

QUESTION 9 OF 24

How many types of VPC Endpoints are available?

Many. Each AWS Service will be supported by 1 type of VPC Endpoints

Two: Amazon S3 and DynamoDB

Two: Gateway Endpoint and Interface EndpointCorrect Answer

One: VPC

QUESTION 10 OF 24

Which of these AWS resources cannot be monitored using VPC Flow logs?

VPC

A subnet in a VPC

A network interface attached to EC2

An Internet Gateway attached to VPCCorrect Answer

QUESTION 11 OF 24

Which of the following are monitoring and logging services available on AWS? Select all that apply.

AWS CloudLogger

Amazon Beehive

AWS CloudWatchCorrect Answer

Amazon ConfigCorrect Answer

QUESTION 12 OF 24

Which of the following sections from Trusted Advisor exists under the Well-Architected Framework as a pillar as well?

Cost Transparency

Operational Excellence

SecurityCorrect Answer

Fault Tolerance

QUESTION 13 OF 24

Which solution below grants AWS Management Console access to an DevOps engineer?

Enable Single sign-on on AWS accounts by using federation and AWS IAM

Create a user for the security engineer in AWS Cognito User Pool

Create IAM user for the engineer and associate relevant IAM managed policies to this IAM userCorrect Answer

Use AWS Organization to scope down IAM roles and grant the security engineer access to this IAM roles

QUESTION 14 OF 24

Which of these services doesn’t authenticate users to access AWS resources using existing credentials on their current corporate identity?

Amazon Cognito

AWS SSO

IAM

AD ConnectorCorrect Answer

QUESTION 15 OF 24

What is the main difference between Cognito User Pool and Cognito Identity Pool?

User Pool cannot use public identity providers (e.g Facebook, Amazon, …) while Identity Pool can

Identity Pools provide temporary AWS credentialsCorrect Answer

Only User Pools has feature to enable MFA

User Pools support both authenticated and unauthenticated identities

QUESTION 16 OF 24

What security mechanism can add an extra layer of protection to your AWS account in addition to a username password combination?

Transport Layer Protocol or TCP

Mult-factor Authentication or MFACorrect Answer

Iris Scan Service or ISS

Scure Bee Service or SBS

QUESTION 17 OF 24

If a user wanted to read from a DynamoDB table what policy would you attach to their user profile?

AmazonDynamoDBFullAccess

AWSLambdaInvocation-DynamoDB

AmazonDynamoDBReadOnlyAccessCorrect Answer

AWSLambdaDynamoDBExecutionRole

QUESTION 18 OF 24

What are valid MFA or Multi-factor Authentication options available to use on AWS? Select all that apply.

Blizzard Authenticator

AWS IoT button

Gemalto tokenCorrect Answer

YubiKeyCorrect Answer

Google AuthenticatorCorrect Answer

QUESTION 19 OF 24

What requirement must you adhere to in order to deploy an AWS CloudHSM?

Run the HSM in two regions

Provision the HSM in a VPCCorrect Answer

Deploy an EBS volume for the HSM

Call AWS Support first to enable it

QUESTION 20 OF 24

How much data can you encrypt/decrypt using an Customer Master Key?

Up to 4MB

Up to 4TB

Up to 1MB

Up to 4KBCorrect Answer

QUESTION 21 OF 24

The purpose of encrypting data when it is in transit between systems and services is to prevent (choose 3 correct answers):

unauthenticated server and client communication

eavesdroppingCorrect Answer

unauthorized alterationsCorrect Answer

unauthorized copyingCorrect Answer

QUESTION 22 OF 24

Which protocol below is an industry-standard cryptographic protocol used for encrypting data at the transport layer?

HTTPS

TLSCorrect Answer

X.509

IPSec

QUESTION 23 OF 24

How do you encrypt an existing un-encrypted EBS volume?

EBS volumes are encrypted at rest by default

Enable Encryption by Default feature

Take a snapshot for EBS volume, and create new encrypted volume for this snapshotCorrect Answer

Enable encryption for EC2 instance, which will encrypt the attached EBS volumes

QUESTION 24 OF 24

When you enable encryption for RDS DB instance, what would not be encrypted?

JBDC connectionCorrect Answer

Transaction logs

Automated backups

Read Replicas

Snapshots

Ready to test your recall?

Which of the following are valid Pillars of the Well-Architected Framework? Choose two.

💡Select all 2 correct answers before submitting (0 of 2 selected).

Infrastructure

Redundancy

Speed

Security

Cost Optimization

How confident are you in this answer?

WEEK 4 QUIZ

W​hich of the following are valid Pillars of the Well-Architected Framework? Choose two.

W​hat language does Amazon Athena support?

What is the name of the model that shows how security is handled by AWS and it’s customers in the AWS Cloud?

What AWS Service is best suited for storing objects?

What AWS service can be used to manage multiple AWS Accounts for consolidated billing?

Which AWS Service supports threat detection by continuously monitoring for malicious or unauthorized behavior?

What is a customer access endpoint?

Which statement is true?

How many types of VPC Endpoints are available?

Which of these AWS resources cannot be monitored using VPC Flow logs?

Which of the following are monitoring and logging services available on AWS? Select all that apply.

Which of the following sections from Trusted Advisor exists under the Well-Architected Framework as a pillar as well?

Which solution below grants AWS Management Console access to an DevOps engineer?

Which of these services doesn&#8217;t authenticate users to access AWS resources using existing credentials on their current corporate identity?

What is the main difference between Cognito User Pool and Cognito Identity Pool?

What security mechanism can add an extra layer of protection to your AWS account in addition to a username password combination?

If a user wanted to read from a DynamoDB table what policy would you attach to their user profile?

What are valid MFA or Multi-factor Authentication options available to use on AWS? Select all that apply.

What requirement must you adhere to in order to deploy an AWS CloudHSM?

How much data can you encrypt/decrypt using an Customer Master Key?

The purpose of encrypting data when it is in transit between systems and services is to prevent (choose 3 correct answers):

Which protocol below is an industry-standard cryptographic protocol used for encrypting data at the transport layer?

How do you encrypt an existing un-encrypted EBS volume?

When you enable encryption for RDS DB instance, what would not be encrypted?

Ready to test your recall?

Which of the following are valid Pillars of the Well-Architected Framework? Choose two.

What language does Amazon Athena support?

Which of these services doesn’t authenticate users to access AWS resources using existing credentials on their current corporate identity?