Knowledge assessement

Question 1
Consider this deployment. Who is responsible – AWS or the customer?
AWS Cloud 1. Upgrades and patches to the 6. Oracle upgrades or patches If
Virtual Private Cloud operating system on the EC2 the Oracle instance runs as an
(VPC) instance? Amazon RDS instance?
• ANSWER: • ANSWER:
• Physical security of the 7. Oracle upgrades or patches If
data center? Oracle runs on an EC2
Amazon Simple Oracle • ANSWER: instance?
Amazon
Storage Service EC2 instance 2. Virtualization infrastructure? • ANSWER:
(Amazon S3) • ANSWER: 8. S3 bucket access
configuration?
AWS Global Infrastructure 3. EC2 security group settings?
• ANSWER:
• ANSWER:
4. Configuration of applications
that run on the EC2 instance?
• ANSWER:

2
Question 2
Consider this deployment. Who is responsible – AWS or the customer?
Secure Shell
(SSH) keys 1. Ensuring that the AWS 6. Ensuring network isolation
Management Console is not between AWS customers'
AWS Command hacked? data?
AWS Line Interface • ANSWER : • ANSWER:
Management
(AWS CLI) 2. Configuring the subnet? 7. Ensuring low-latency network
Console
Internet connection between the web
• ANSWER:
VPC gateway server and the S3 bucket?
3. Configuring the VPC? • ANSWER:
Subnet • ANSWER:
8. Enforcing multi-factor
4. Protecting against network authentication for all user
Web server on outages in AWS Regions? logins?
Amazon EC2 • ANSWER: • ANSWER:
5. Securing the SSH keys
• ANSWER:
S3 bucket with
objects
3
Question 3

Which component of AWS global infrastructure does Amazon CloudFront use

A. AWS Regions
B. AWS edge locations
C. AWS Availability Zones
D. Amazon Virtual Private Cloud (Amazon VPC)

4
Question 4

Which AWS networking service enables a company to create a virtual network within
AWS?

A. AWS Config
B. Amazon Route 53
C. AWS Direct Connect
D. Amazon VPC

5
Question 5

Which AWS service helps developers quickly deploy resources which can
make use of different programming languages, such as .NET and Java?

A. AWS CloudFormation

B. AWS SQS

C. AWS Elastic Beanstalk

D. Amazon Elastic Compute Cloud (Amazon EC2)

6
Question 6

• What kind of protection does AWS WAF provide against DDoS attacks?

A. It filters out illegitimate traffic when it reaches your web application.

B. It filters out illegitimate traffic before it reaches your web application

C. It filters out illegitimate traffic automatically when it reaches your web application

7
Question 7

A SysOps engineer working at a company wants to protect their data in transit and at rest.
What services could they use to protect their data?

A. Elastic Load Balancing

8
Question 8

9
Question 9

10
Question 10

11
Question 11

12
Question 12

13