COURSE 1 – AWS CLOUD TECHNICAL ESSENTIALS QUIZ ANSWERS

Week 4: Monitoring and Optimizing Solutions on AWS

Coursera AWS Fundamentals Specialization

Enroll in AWS Fundamental Specialization

INTRODUCTION

Welcome to Week 4, where you will learn about the benefits of monitoring on AWS, and how to optimize solutions on AWS. You will also learn about the function of Elastic Load Balancing (ELB), and how to differentiate between vertical scaling and horizontal scaling.

Learning Objectives

  • Define the benefits of monitoring on AWS
  • Describe the function of Amazon CloudWatch on AWS
  • Discover how to optimize solutions on AWS
  • Describe the function of Amazon Elastic Load Balancer
  • Route traffic with Amazon Elastic Load Balancing
  • Differentiate between vertical and horizontal scaling
  • Configure high availability for your application

WEEK 4 QUIZ

1. What are the three components of Amazon EC2 Auto Scaling?

  • Amazon Machine Image (AMI) ID, instance type, storage
  • Launch template, scaling policies, EC2 Auto Scaling group (CORRECT)
  • Scaling policies, security group, EC2 Auto Scaling group
  • Security group, instance type, key pair

Correct: Amazon EC2 Auto Scaling requires users to specify three main components: a configuration template for the Amazon Elastic Compute Cloud (Amazon EC2) instances (either a launch template or a launch configuration); an EC2 Auto Scaling group to list minimum, maximum, and desired capacity of instances; and scaling policies that scale an instance based on the occurrence of specified conditions or on a schedule. For more information, see Amazon EC2 Auto Scaling.

2. Which of the following features are included in Elastic Load Balancing (ELB)?

  • Automatic scaling
  • Integration with Amazon Relational Database Service RDS
  • Integration with Amazon EC2 Auto Scaling
  • A and B
  • A and C (CORRECT)

Correct: ELB automatically distributes incoming traffic across multiple targets—such as Amazon Elastic Compute Cloud (Amazon EC2) instances, containers, and IP addresses—in one or more Availability Zones. ELB automatically scales its capacity in response to changes in incoming traffic. In addition, if users enable Auto Scaling with Elastic Load Balancing, instances that are launched by Auto Scaling are automatically registered with the load balancer. For more information, see Route Traffic with Amazon Elastic Load Balancing.

3. True or False: When a user uses Elastic Load Balancing (ELB) with an Auto Scaling group, it is not necessary to manually register individual Amazon Elastic Compute Cloud (Amazon EC2) instances with the load balancer.

  • True (CORRECT)
  • False

Correct: The load balancer automatically registers new instances. For more information, see Amazon EC2 Auto Scaling.

4. An application must choose target groups by using a rule that is based on the path of a URL. Which Elastic Load Balancing (ELB) type should be used for this use case?

  • Network Load Balancer
  • Application Load Balancer (CORRECT)
  • Classic Load Balancer
  • Gateway Load Balancer

Correct: Application Load Balancer is a layer 7 load balancer that routes HTTP and HTTPs traffic, with support for rules. For more information, see Route Traffic with Amazon Elastic Load Balancing.

5. What are the two ways that an application can be scaled?

  • Diagonally and vertically
  • Vertically and horizontally (CORRECT)
  • Horizontally and diagonally
  • Independently and vertically

Correct: An application can be scaled vertically by adding more power to an existing machine, or it can be scaled horizontally by adding more machines to a pool of resources. For more information, see Optimizing Solutions on AWS.

6. Which elements in Amazon CloudWatch dashboards can be used to view and analyze metrics?

  • Widgets (CORRECT)
  • Metrics
  • Icons
  • Components

Correct: Widgets are the elements that can be added to a dashboard. For more information, see the Introduction to Amazon CloudWatch video.

7. What are the possible states of a metric alarm in Amazon CloudWatch?

  • OK, ALARM, NOT_AVAILABLE
  • OK, ALERT, INSUFFICIENT_DATA
  • OK, ALARM, INSUFFICIENT_DATA (CORRECT)
  • OK, ALERT, NOT_AVAILABLE

Correct: A metric alarm in CloudWatch has the following possible states. OK: The metric or expression is within the defined threshold. ALARM: The metric or expression is outside of the defined threshold. INSUFFICIENT_DATA: For this state, the alarm has just started, the metric is not available, or not enough data is available for the metric to determine the alarm state. For more information, see the Introduction to Amazon CloudWatch video.

8. What kind of data can a company collect with VPC Flow Logs?

  • Data about network traffic that comes into and out of a virtual private cloud (VPC) (CORRECT)
  • Malicious activity and unauthorized behavior
  • Configurations of AWS resources
  • Compliance-related information

Correct: With VPC Flow Logs, a company can collect data about network traffic that comes into and out of their VPC. For more information, see Monitoring on AWS.

9. What is a benefit of monitoring on AWS?

  • Monitoring creates operation overhead.
  • Monitoring recognizes security threats and events. (CORRECT)
  • Monitoring decreases the performance and reliability of resources.
  • Increases speed and agility

Correct: When users monitor resources, events, and systems over time, they create what is called a : baseline. A baseline defines what activity is normal. By using a baseline, users can spot anomalies, such as unusual traffic spikes or unusual IP addresses that are accessing resources. When an anomaly occurs, an alert can be sent or an action can be taken to investigate the event. For more information, see Reading: Monitoring on AWS.

10. True or False: When a company redesigns an application by using a serverless service on AWS, they might not need to configure networking components, such as a virtual private cloud (VPC), subnets, and security groups.

  • T​rue (CORRECT)
  • F​alse

Correct: By default, AWS Lambda runs functions in a secure VPC with access to AWS services and the internet. For more information, see Redesigning the Employee Directory Application.!

END OF COURSE ASSESSMENT

1. What are the four main factors you should take into consideration when choosing a Region?

  • Latency, price, service availability, and compliance. (CORRECT)
  • Latency, security, high availability, and resiliency.
  • Latency, taxes, speed, and compliance.
  • Latency, high availability, taxes, and compliance.

Correct: You should consider four main aspects when deciding which AWS Region to host your applications and workloads: latency, price, service availability, and compliance. Focusing on these factors will enable you to make the right decision when choosing an AWS Region. You can find this content and more in the video “AWS Global Infrastructure”.

2. Which of the following best describe the relationship between Regions, Availability Zones and data centers?

  • Regions are clusters of Availability Zones. Availability Zones are clusters of data centers. (CORRECT)
  • Data centers are cluster of Availability Zones. Regions are clusters of Availability Zones.
  • Data centers are clusters of Regions. Regions are clusters of Availability Zones.
  • Availability Zones are clusters of Regions. Regions are clusters of data centers.

Correct: The AWS Global Infrastructure is nested for high availability and redundancy. AWS Regions are clusters of Availability Zones that are connected through highly availably and redundant high-speed links and Availability Zones are clusters of data centers that are also connected through highly available and redundant high-speed links. You can find this content and more in the video “AWS Global Infrastructure”. 

3. Which of the following can be found in an IAM policy?

  • Effect
  • Action
  • Object
  • A and B (CORRECT)
  • B and C

Correct: A policy is an object in AWS that, when associated with an identity or resource, defines their permissions. AWS evaluates these policies when an IAM principal (user or role) makes a request. Permissions in the policies determine whether the request is allowed or denied. Most policies are stored in AWS as JSON documents that are attached to an IAM identity (user, group of users, or role). The information in a policy statement is contained within a series of elements:

·        Version – Specify the version of the policy language that you want to use. As a best practice, use the latest 2012-10-17 version.

·        Statement – Use this main policy element as a container for the following elements. You can include more than one statement in a policy.

·        Sid (Optional) – Include an optional statement ID to differentiate between your statements.

·        Effect – Use Allow or Deny to indicate whether the policy allows or denies access.

·        Principal (Required in only some circumstances) – If you create a resource-based policy, you must indicate the account, user, role, or federated user to which you would like to allow or deny access. If you are creating an IAM permissions policy to attach to a user or role, you cannot include this element. The principal is implied as that user or role.

·        Action – Include a list of actions that the policy allows or denies.

·        Resource (Required in only some circumstances) – If you create an IAM permissions policy, you must specify a list of resources to which the actions apply. If you create a resource-based policy, this element is optional. If you do not include this element, then the resource to which the action applies is the resource to which the policy is attached.

·        Condition (Optional) – Specify the circumstances under which the policy grants permission.

This information can be found in the Introduction to Amazon Identity and Access Management video and reading.

4. Users in your company are authenticated in your corporate network and want to be able to use AWS without having to sign in again. Which AWS authentication option should you use?

  • AWS Root User
  • IAM User
  • IAM Role (CORRECT)
  • IAM Group

Correct: Instead of creating an IAM User for each employee that needs access to the AWS account, you should use IAM Roles to federate users. Read more here: https://aws.amazon.com/identity/federation/ This information can be found in the Role Based Access in AWS video and reading.

5. What must you do to allow resources in a public subnet to communicate with the internet?

  • Create a route to a private subnet.
  • Attach an internet gateway to your VPC.
  • Create a route in a route table to the internet gateway.
  • A and B
  • B and C (CORRECT)

Correct: To allow your resources to communicate with the internet, you’ll need to attach an internet gateway to your VPC, and create a route in a route table to the internet gateway and attach it to your subnet with your internet-facing resources. You’ll also need to make sure your internet-facing resources have a public IP address. Check out “Introduction to Amazon VPC” and “Amazon VPC routing” for more information.

6. What does an Amazon EC2 instance type indicate?

  • Instance AMI and networking speed
  • Instance tenancy and instance billing
  • Instance placement and instance size
  • Instance family and instance size (CORRECT)

Correct: Amazon EC2 provides a wide selection of instance types optimized to fit different use cases. Instance types comprise varying combinations of CPU, memory, storage, and networking capacity and give you the flexibility to choose the appropriate mix of resources for your applications. Each instance type includes one or more instance sizes, allowing you to scale your resources to the requirements of your target workload. This information can be found in the Introduction to Amazon Elastic Compute Cloud Video and corresponding reading.

7. Which of the following is a typical use case for Amazon S3?

  • File storage for multiple EC2 instances
  • Object storage for media hosting (CORRECT)
  • Block storage for an EC2 instance
  • Object storage for a boot drive

Correct: Amazon S3 is an object storage service designed for large objects like media files. Because you can store unlimited objects, and each individual object can be up to 5 TBs, S3 is an ideal location to host video, photo, or music uploads. This content is covered in “Object Storage with Amazon S3”

8. You are an employee at a healthcare facility tasked with storing 7 years of patient information that is rarely accessed. Your boss wants you to consider one of the Amazon S3 storage tiers to store this information. Which storage tier should you suggest?

  • S3 Standard
  • S3 Standard-Infrequent Access
  • S3 Glacier Deep Archive (CORRECT)
  • S3 Intelligent-Tiering

Correct: Amazon Glacier Deep Archive is Amazon S3’s lowest-cost storage class and supports long-term retention and digital preservation for data that may be accessed once or twice in a year. It is designed for customers—particularly those in highly regulated industries, such as the Financial Services, Healthcare, and Public Sectors—that retain data sets for 7 to 10 years or longer to meet regulatory compliance requirements. This content is covered in Reading 3.3.

9. When using Amazon Relational Database Service you are responsible for what task of running and operating the database?

  • Optimizing the database (CORRECT)
  • Provisioning and managing the underlying infrastructure
  • Installing the RDBMS onto the DB instance
  • Installing patches to the OS for the DB instance

Correct: When using Amazon RDS, you are no longer responsible for the underlying environment the database runs on, instead you can focus on optimizing the database. This is because Amazon RDS has components that are managed by AWS. This information can be found in the Explore Databases on AWS video.

10. True or false: A Multi-AZ deployment is beneficial when you want to increase the availability of your database.

  • True (CORRECT)
  • False

Correct: When you use Amazon RDS, it places the DB instance into a subnet which is bound by one AZ. For high availability reasons, you should use a Multi-AZ deployment in case one AZ is temporarily unavailable.  This information can be found in the Introduction to Amazon Relational Database Service video.

11. What are the three components of EC2 Auto Scaling?

  • Launch template, scaling policies, EC2 Auto Scaling group (CORRECT)
  • Scaling policies, security group, EC2 Auto Scaling group
  • Security group, instance type, Key pair
  • AMI ID, instance type, storage

Correct: EC2 Auto Scaling requires you to specify three main components: a launch template or a launch configuration as a configuration template for the EC2 instances, an EC2 Auto Scaling group that allows you to specify your minimum, maximum, and desired capacity of your instances, and scaling policies that allow you to configure a group to scale based on the occurrence of specified conditions or on a schedule. You can find this information and more in the video “Amazon EC2 Auto Scaling”.

12. Which of the following ELB load balancer types should be used for an application requiring to choose target groups with a rule based on the domain of a website?

  • Application Load Balancer (CORRECT)
  • Target Load Balancer
  • Network Load Balancer
  • Classic Load Balancer

Correct: Application Load Balancer is a layer 7 load balancer that routes HTTP and HTTPs traffic, with support for rules. Due to this, Application Load Balancer is the correct choice for this application. Check out the video “Route Traffic with Amazon Elastic Load Balancing” for more information.

CONCLUSION

TBW