Cloud Practitioner General Flashcards

What is the benefit of elasticity, in AWS's opinion?

Answer: Create systems that scale to the required capacity based on changes in demand

Elasticity in AWS refers to the ability of a system to automatically scale its resources up or down to match the current demand. This means you only pay for the capacity you actually use, preventing over-provisioning during low demand and ensuring sufficient resources during peak times. It allows applications to dynamically adapt to changing workloads without manual intervention, optimizing performance and cost.

Which technology can you employ to protect your AWS costs?

Answer: AWS Cost Explorer

AWS Cost Explorer is a powerful tool that allows users to visualize, understand, and manage their AWS costs and usage over time. It provides customizable reports and forecasts, helping identify cost trends, pinpoint areas for optimization, and protect against unexpected expenses. This service is specifically designed for detailed cost analysis and control, enabling effective cost management.

When producing routine reports for senior management, a business analyst would like to do away with writing complex database queries and static spreadsheets. They would like to release intelligent, visually appealing reports with interactive dashboards. Which service may they employ to do this?

Answer: Amazon Quick Sight

Amazon QuickSight is a scalable, serverless, cloud-powered business intelligence (BI) service designed for creating interactive dashboards and visually appealing reports. It allows business analysts to easily connect to various data sources, build visualizations, and share insights without needing complex database queries. This directly addresses the need for intelligent, interactive reporting for senior management, eliminating manual spreadsheet work.

What AWS technology offers quick, simple, and secure file transfers between your client and your Amazon S3 bucket over long distances?

Answer: Amazon S3 Transfer Acceleration

Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. It achieves this by routing data through AWS edge locations globally, which optimizes the path to your S3 bucket. This significantly reduces latency and improves transfer speeds, especially for geographically dispersed users, making large file transfers more efficient.

The phrase "Principle of Least Privilege" best describes what? Select the correct response from the list of possibilities below.

Answer: Users should only be allowed access to the required resources to complete the assigned tasks

The Principle of Least Privilege is a fundamental security concept stating that users, programs, or processes should be granted only the minimum necessary permissions to perform their intended function. This minimizes the potential damage from accidental errors or malicious activity, as unauthorized actions are prevented. It's a crucial practice for maintaining a secure AWS environment and reducing the attack surface.

A web administrator manages various private and public web resources for an organization. Which service can they use to monitor SSL/TLS certificate expiration dates and update and renew them?

Answer: AWS Certificate Manager

AWS Certificate Manager (ACM) is a service that makes it easy to provision, manage, and deploy public and private SSL/TLS certificates for use with AWS services and your internal connected resources. It automatically handles certificate renewal, ensuring that your SSL/TLS certificates do not expire unexpectedly. This simplifies the management of secure communication for web resources, preventing service disruptions.

Which of the aforementioned services can be utilized by AWS as an application firewall?

Answer: AWS WAF

AWS WAF (Web Application Firewall) helps protect your web applications or APIs from common web exploits that could affect application availability, compromise security, or consume excessive resources. It allows you to create custom rules to block common attack patterns like SQL injection or cross-site scripting. This service specifically functions as an application firewall, safeguarding web traffic at the application layer.