Cloud Security Responsibilities

1-50 1. Under the shared responsibility model, which of the following is the customer responsible for? • A. Ensuring that disk drives are wiped after use. • B. Ensuring that firmware is updated on hardware devices. • C. Ensuring that data is encrypted at rest. • D. Ensuring that network cables are category six or higher. Commented [MC2]: C “Data configuration (i.e. encrypting data at rest and in transit) is responsibility of the customer” Commented [MC3]: A “After you activate cost allocation tags, AWS uses the cost allocation tags to organize your resource costs on your cost allocation report, to make it easier for you to categorize and track your AWS costs” 2. Which allows companies to track and categorize spending on a detailed level? • A. Cost allocation tags • B. Consolidated billing • C. AWS Budgets • D. AWS Marketplace Commented [MC4]: C 3. Stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities: • A. Amazon Glacier • B. AWS Storage Gateway • C. Amazon S3 • D. Amazon EBS Example of object storage: Amazon S3 4. What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas? • A. AWS Enterprise Support • B. AWS Solutions Architects • C. AWS Professional Services • D. AWS Account Managers 5. A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house. Which of the following AWS programs can a customer take advantage of to achieve that outcome? • A. AWS Partner Network Technology Partners • B. AWS Marketplace • C. AWS Partner Network Consulting Partners • D. AWS Service Catalogue Compared to block storage, object storage is much newer. With object storage, data is bundled with customizable metadata tags and a unique identifier to form objects. The metadata tags are a key advantage with object storage — they allow for much better identification and classification of data. Versioning in Amazon S3 is a means of keeping multiple variants of an object in the same bucket. You can use the S3 Versioning feature to preserve, retrieve, and restore every version of every object stored in your buckets. With versioning you can recover more easily from both unintended user actions and application failures. After versioning is enabled for a bucket, if Amazon S3 receives multiple write requests for the same object simultaneously, it stores all of those objects. Answer is NOT EBS because that stores blocks, not objects Block storage is the oldest and simplest form of data storage. Block storage stores data in fixed-sized chunks... [1] Commented [MC5]: C “The AWS Professional Services organization is a global team of experts that can help you realize your desired business outcomes when using the AWS Cloud. We work together with your team and your chosen member of the AWS Partner Network (APN) to execute your enterprise cloud computing initiatives. Our team provides assistance through a collection of offerings which help you achieve specific outcomes related to enterprise cloud adoption. We also deliver ... [2] Commented [MC6]: C “APN Consulting Partners are professional services firms that help customers of all types and sizes design, architect, build, migrate, and manage their workloads and applications on AWS, accelerating their journey to the cloud.” --INCORRECT ANSWERS-... [3] 6. Distributing workloads across multiple Availability Zones supports which cloud architecture design principle? • A. Implement automation. • B. Design for agility. • C. Design for failure. • D. Implement elasticity. 7. Which AWS services can host a Microsoft SQL Server database? (choose two) • A. Amazon EC2 • B. Amazon Relational Database Service (Amazon RDS) • C. Amazon Aurora • D. Amazon Redshift • E. Amazon S3 Commented [MC7]: C Using multiple-AZs removes single points of failure, which is part of design for failure (part of ‘Reliability Design Principles and Best Practices’) Each Availability Zone is engineered to be independent from failures in other Availability Zones. An example of a implementation designed for failure: A fleet of application servers can be distributed across multiple Availability Zones and be attached to ELB. When the EC2 instances of a particular Availability Zone fail their health checks, ELB stops sending traffic to those nodes. ... [4] Commented [MC8]: A, B 8. Which of the following inspects AWS environments to find opportunities that can save money for users and also improve system performance? • A. AWS Cost Explorer • B. AWS Trusted Advisor • C. Consolidated billing • D. Detailed billing EC2 can run any database RDS can use Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and Microsoft SQL Server. --INCORRECT ANSWERS— Aurora only supports MySql and PostgreSQL Commented [MC9]: B 9. Which of the following Amazon EC2 pricing models allow customers to use existing serverbound software licenses? • A. Spot Instances • B. Reserved Instances • C. Dedicated Hosts • D. On-Demand Instances “AWS Trusted Advisor is an application that draws upon best practices learned from AWS' aggregated operational history of serving hundreds of thousands of AWS customers. Trusted Advisor inspects your AWS environment and makes recommendations for saving money, improving system performance, or closing security gaps.” Commented [MC10]: C 10. Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Choose two.) • A. High availability • B. Shared security model • C. Elasticity • D. Pay-as-you-go pricing • E. Reliability “A Dedicated Host is a physical EC2 server dedicated for your use. Dedicated Hosts can help you reduce costs by allowing you to use your existing server-bound software licenses, including Windows Server, SQL Server, and SUSE Linux Enterprise Server (subject to your license terms), and can also help you meet compliance requirements.” Commented [MC11]: C, D “6 Advantages of Cloud Computing --Trade capital expense for variable expense (Pay-as-yougo model - make payment based on usage only) --Benefit from massive economies of scale --Stop guessing about capacity (i.e. elasticity makes it feasible to add/remove required resources as needed) --Increased speed and agility --Stop spending money running and maintaining data centres ... [5]