Mixed Deck — All CCP Topics Flashcards

Which AWS service provides recommendations to help reduce costs, including identifying idle EC2 instances and underutilized resources?

Answer: AWS Trusted Advisor

AWS Trusted Advisor analyzes your AWS environment and provides real-time recommendations across cost optimization, security, performance, and fault tolerance.

A company wants to run containerized applications without managing the underlying infrastructure. Which AWS service fits this need?

Answer: AWS Fargate

AWS Fargate is a serverless compute engine for containers that removes the need to provision and manage servers.

What does AWS WAF protect against?

Answer: Common web exploits such as SQL injection and cross-site scripting

AWS WAF (Web Application Firewall) protects web applications from common exploits like SQL injection and XSS that could affect availability or compromise security.

Under the AWS Shared Responsibility Model, who is responsible for patching the guest operating system on an EC2 instance?

Answer: The customer

Customers are responsible for patching and maintaining the guest OS on EC2 instances; AWS manages the underlying hypervisor and hardware.

Which AWS compliance program ensures that AWS services meet the security requirements for processing US federal government data?

Answer: FedRAMP

FedRAMP (Federal Risk and Authorization Management Program) is the US government compliance framework that AWS participates in for federal cloud services.

Which AWS Well-Architected pillar focuses on using cloud resources efficiently to deliver business value?

Answer: Performance Efficiency

The Performance Efficiency pillar focuses on using computing resources efficiently and maintaining that efficiency as demand changes and technologies evolve.

What happens to your unused Reserved Instance hours in a month?

Answer: They are forfeited and do not carry forward

Reserved Instance capacity reservations are billed monthly and any unused hours in a given month are forfeited — they do not roll over.

Which AWS service allows you to track and visualize the migration status of servers and databases across multiple migration projects?

Answer: AWS Migration Hub

AWS Migration Hub provides a single location to track the progress of application migrations across multiple AWS and partner migration tools.

Which AWS service automatically detects security threats using machine learning and threat intelligence?

Answer: Amazon GuardDuty

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior using ML.

What is the minimum number of Availability Zones recommended for a highly available AWS architecture?

Answer: 2

AWS recommends deploying across at least 2 Availability Zones to achieve high availability and fault tolerance.

A startup wants to estimate costs before migrating to AWS. Which tool should they use?

Answer: AWS Pricing Calculator

The AWS Pricing Calculator lets you model your AWS architecture and estimate costs before deploying any resources.

What is the purpose of an Amazon S3 bucket policy?

Answer: To control access permissions to the bucket and its objects

An S3 bucket policy is a resource-based policy that grants or denies access to the bucket and its objects for specified principals.

A company wants to run workloads without managing servers. Which AWS service is the best fit?

Answer: AWS Lambda

AWS Lambda is a serverless compute service that runs code without provisioning or managing servers.

Which AWS cost management tool provides forecasts and recommendations to help reduce cloud spend?

Answer: AWS Cost Explorer

AWS Cost Explorer visualizes, understands, and manages costs over time with historical analysis and forecasting capabilities.

How do Network Access Control Lists (NACLs) differ from Security Groups?

Answer: NACLs apply at the subnet level and are stateless, while Security Groups apply at the instance level and are stateful

NACLs act as a firewall at the subnet level and are stateless (must explicitly allow both inbound and outbound), while Security Groups operate at the instance level and are stateful (return traffic is automatically allowed).

Which AWS service allows you to coordinate multiple AWS services into serverless workflows using visual state machines?

Answer: AWS Step Functions

AWS Step Functions is a serverless orchestration service that lets you build workflows that coordinate multiple AWS services using visual state machine diagrams.

Which AWS service would you use to migrate an existing on-premises database to AWS with minimal downtime?

Answer: AWS Database Migration Service (DMS)

AWS Database Migration Service (DMS) migrates databases to AWS with minimal downtime by continuously replicating changes during migration.

Which AWS pricing model offers the largest discount compared to On-Demand pricing in exchange for a 1- or 3-year commitment?

Answer: Reserved Instances

Reserved Instances offer up to 72% savings over On-Demand pricing when you commit to a specific instance type for 1 or 3 years.

Which AWS service helps you detect unusual activity and potential threats in your AWS account using machine learning?

Answer: Amazon GuardDuty

Amazon GuardDuty is a threat detection service that continuously monitors for malicious activity and anomalous behavior using machine learning.

Which AWS service provides DDoS protection automatically for all AWS customers at no extra cost?

Answer: AWS Shield Standard

AWS Shield Standard automatically protects all AWS customers from common DDoS attacks at no additional charge.