Adrian Cantrill SAA-C03
Comprehensive Questions
(Frequently Tested) with Verified
Answers Graded A+
Professional Academic Assistance Services
Services Offered
• Proctored Exam Assistance
• Online Class Management (Full Course Support)
• Exam Preparation & Study Materials
• Assignments and Coursework Support
• Essay and Research Paper Writing
• Discussion Posts & Responses
• Editing and Proofreading
• Confidential Academic Consultation
Helping Students Achieve Academic Excellence
What is an A record? - Answer: The A record is the most important DNS
record type. The "A" in A record stands for "address." An A record
shows the IP address for a specific hostname or domain. The A record
only supports IPV4 addresses.
,True or False: You can use a NAT Gateway for port forwarding or as a
bastion host by changing its configuration in its operating system. -
Answer: False. You cannot log into the operating system of a NAT
Gateway because it is an AWS managed service. However, you can use
a NAT Instance for port forwarding and as a bastion host.
True or False: NAT instances are EC2 instances and can therefore filter
traffic using NACLs on the subnet the instance is in or security groups
directly associated with the instance. - Answer: True
True or False: NAT Gateways support security groups and NACLs. -
Answer: False. NAT Gateways only support NACLs. They DO NOT
support security groups. NAT instances support both NACLs and
security groups.
True or False: NAT is required for IPv6 - Answer: False. IPv6 does not
require NAT. All IPv6 addresses in Amazon are publicly routable.
True or False: NAT Gateways do not work with IPv6. - Answer: True
What is the IPv6 default route? (i.e. all traffic) - Answer: ::/0
Which type of S3 encryption shows as AES256? - Answer: SSE-S3
,Which S3 Storage class is suitable for data which is easily replaced
(choose the most cost effective)? - Answer: S3 One-Zone-IA
Which Object class in S3 is ideal for uncertain access and low admin
overhead? - Answer: S3 Intelligent-Tiering
What is the cheapest S3 storage class for important data which need to
be retained for long periods and is rarely accessed? - Answer: S3
Glacier
Which steps are required to allow an S3 bucket to operate as a website
(choose all which apply) - Answer: Upload web files
Set index and error documents
Enable static web hosting
Disable block public access settings
Add a bucket policy
What S3 feature allows objects storage classes to be changed and
objects deleted automatically? - Answer: S3 Lifecycle policies
What is the default limit of the number of S3 buckets in an AWS
account? - Answer: 100
How large can an object in S3 be? - Answer: 5 TB
, What are the limitations in terms of how many objects can be added to
an S3 bucket? - Answer: An unlimited number of objects can be added
to an S3 bucket
What S3 feature needs to be enabled to allow Cross-Region Replication
(CRR)? - Answer: Versioning
What S3 feature can be used to grant external accounts access to an S3
bucket? - Answer: Resource Policies
Which type of encryption allows for role separation where an S3 Full
Admin might not be able to decrypt objects? - Answer: SSE-KMS
Which type of encryption is where AWS perform encryption operations
but DON'T hold any keys? - Answer: SSE-C
What type of encryption means AWS perform the encryption
operations and handle key creation & management? - Answer: SSE-S3
What feature is required to allow CRR to function? - Answer:
Versioning
What happens when an object is deleted in a bucket with versioning
enabled? - Answer: A delete marker is added.
Comprehensive Questions
(Frequently Tested) with Verified
Answers Graded A+
Professional Academic Assistance Services
Services Offered
• Proctored Exam Assistance
• Online Class Management (Full Course Support)
• Exam Preparation & Study Materials
• Assignments and Coursework Support
• Essay and Research Paper Writing
• Discussion Posts & Responses
• Editing and Proofreading
• Confidential Academic Consultation
Helping Students Achieve Academic Excellence
What is an A record? - Answer: The A record is the most important DNS
record type. The "A" in A record stands for "address." An A record
shows the IP address for a specific hostname or domain. The A record
only supports IPV4 addresses.
,True or False: You can use a NAT Gateway for port forwarding or as a
bastion host by changing its configuration in its operating system. -
Answer: False. You cannot log into the operating system of a NAT
Gateway because it is an AWS managed service. However, you can use
a NAT Instance for port forwarding and as a bastion host.
True or False: NAT instances are EC2 instances and can therefore filter
traffic using NACLs on the subnet the instance is in or security groups
directly associated with the instance. - Answer: True
True or False: NAT Gateways support security groups and NACLs. -
Answer: False. NAT Gateways only support NACLs. They DO NOT
support security groups. NAT instances support both NACLs and
security groups.
True or False: NAT is required for IPv6 - Answer: False. IPv6 does not
require NAT. All IPv6 addresses in Amazon are publicly routable.
True or False: NAT Gateways do not work with IPv6. - Answer: True
What is the IPv6 default route? (i.e. all traffic) - Answer: ::/0
Which type of S3 encryption shows as AES256? - Answer: SSE-S3
,Which S3 Storage class is suitable for data which is easily replaced
(choose the most cost effective)? - Answer: S3 One-Zone-IA
Which Object class in S3 is ideal for uncertain access and low admin
overhead? - Answer: S3 Intelligent-Tiering
What is the cheapest S3 storage class for important data which need to
be retained for long periods and is rarely accessed? - Answer: S3
Glacier
Which steps are required to allow an S3 bucket to operate as a website
(choose all which apply) - Answer: Upload web files
Set index and error documents
Enable static web hosting
Disable block public access settings
Add a bucket policy
What S3 feature allows objects storage classes to be changed and
objects deleted automatically? - Answer: S3 Lifecycle policies
What is the default limit of the number of S3 buckets in an AWS
account? - Answer: 100
How large can an object in S3 be? - Answer: 5 TB
, What are the limitations in terms of how many objects can be added to
an S3 bucket? - Answer: An unlimited number of objects can be added
to an S3 bucket
What S3 feature needs to be enabled to allow Cross-Region Replication
(CRR)? - Answer: Versioning
What S3 feature can be used to grant external accounts access to an S3
bucket? - Answer: Resource Policies
Which type of encryption allows for role separation where an S3 Full
Admin might not be able to decrypt objects? - Answer: SSE-KMS
Which type of encryption is where AWS perform encryption operations
but DON'T hold any keys? - Answer: SSE-C
What type of encryption means AWS perform the encryption
operations and handle key creation & management? - Answer: SSE-S3
What feature is required to allow CRR to function? - Answer:
Versioning
What happens when an object is deleted in a bucket with versioning
enabled? - Answer: A delete marker is added.
