AWS CERTIFIED CLOUD PRACTITIONER EXAM QUESTIONS AND ANSWERS GRADED A+
Which AWS service uses Puppet to automate how EC2 instances are
configured? ANS >> AWS Ropeworks - AWS Ropeworks is a configuration
management service that provides managed instances of Chef and
Puppet. Chef and Puppet are automation platforms that allow you to
use code to automate the configurations of your servers. Ropeworks
lets you use Chef and Puppet to automate how servers are configured,
deployed, and managed across your Amazon EC2 instances or on-
premises compute environments.
What is the feature of Amazon RDS that performs automatic failover
when the primary database fails to respond? ANS >> RDS Multi-AZ: When
you enable Multi-AZ, Amazon Relational Database Service (Amazon
RDS) maintains a redundant and consistent standby copy of your data. If
you encounter problems with the primary copy, Amazon RDS
automatically switches to the standby copy (or to a read replica in the
case of Amazon Aurora) to provide continued availability to the data.
The two copies are maintained in different Availability Zones (AZ’s),
hence the name "multi-AZ." Each AZ runs on its own physically distinct,
independent infrastructure, and is engineered to be highly reliable.
,Having separate Availability Zones greatly reduces the likelihood that
both copies will concurrently be affected by most types of disturbances.
What can you use to assign permissions directly to an IAM user? ANS >>
IAM Policy - A policy is an object in AWS that, when associated with an
identity or resource, defines their permissions. AWS evaluates these
policies when an IAM principal (user or role) makes a request.
Permissions in the policies determine whether the request is allowed or
denied.
Each policy consists of:
1- Principal:
Who needs access.
2- Action:
What action to allow or deny.
3- Resource:
Which resource to allow or deny the action on.
4- Effect:
What will be the effect when the user requests access - either allow or
deny.
5- Condition:
Which conditions must be present for the policy to take effect. For
example, you might allow access only to the specific S3 buckets if the
user is connecting from a specific IP range or has used multi-factor
authentication at login.
,You have just set up your AWS environment and have created six IAM
user accounts for the DevOps team. What is the AWS recommendation
when granting permissions to these IAM accounts? ANS >> Apply the
Principle of Least Privilege - he Principle of Least Privilege (Polyp, also
known as the principle of minimal privilege or the principle of least
authority) requires that in a particular abstraction layer of a computing
environment, every module (such as a process, a user, or a program,
depending on the subject) must be able to access only the information
and resources that are necessary for its legitimate purpose. For
example, a user account for the sole purpose of creating backups does
not need to install software: hence, it has rights only to run backup and
backup-related applications. Any other privileges, such as installing new
software, are blocked.
What are some key benefits of using AWS CloudFormation? (Choose
TWO) ANS >> 1) It allows you to model your entire infrastructure in just a
text file
2)It automates the provisioning and updating of your infrastructure in a
safe and controlled manner.
1- CloudFormation allows you to model your entire infrastructure in a
text file. This template becomes the single source of truth for your
infrastructure. This helps you to standardize infrastructure components
used across your organization, enabling configuration compliance and
faster troubleshooting.
2- AWS CloudFormation provisions your resources in a safe, repeatable
manner, allowing you to build and rebuild your infrastructure and
applications, without having to perform manual actions or write custom
, scripts. CloudFormation takes care of determining the right operations
to perform when managing your stack, and rolls back changes
automatically if errors are detected.
3- Codifying your infrastructure allows you to treat your infrastructure
as just code. You can author it with any code editor, check it into a
version control system, and review the files with team members before
deploying into production.
4- CloudFormation allows you to model and provision, in an automated
and secure manner, all the resources needed for your applications
across all regions and accounts.
Which service allows you to install and run custom relational database
software? ANS >> EC2 - If an AWS customer needs full control over a
database, AWS provides a wide range of Amazon EC2 instances - with
different hardware characteristics - on which they can install and run
their custom relational database software.
If EC2 is used instead of RDS to run a relational database, the customer
is responsible for managing everything related to this database
Server-based services vs. Serverless services ANS >> Server-based
services include: Amazon EC2, Amazon RDS, Amazon Redshift and
Amazon EMR.
Serverless services include: AWS Lambda, AWS Faregate, Amazon SNS,
Amazon SQS and Amazon DynamoDB.
Which AWS service uses Puppet to automate how EC2 instances are
configured? ANS >> AWS Ropeworks - AWS Ropeworks is a configuration
management service that provides managed instances of Chef and
Puppet. Chef and Puppet are automation platforms that allow you to
use code to automate the configurations of your servers. Ropeworks
lets you use Chef and Puppet to automate how servers are configured,
deployed, and managed across your Amazon EC2 instances or on-
premises compute environments.
What is the feature of Amazon RDS that performs automatic failover
when the primary database fails to respond? ANS >> RDS Multi-AZ: When
you enable Multi-AZ, Amazon Relational Database Service (Amazon
RDS) maintains a redundant and consistent standby copy of your data. If
you encounter problems with the primary copy, Amazon RDS
automatically switches to the standby copy (or to a read replica in the
case of Amazon Aurora) to provide continued availability to the data.
The two copies are maintained in different Availability Zones (AZ’s),
hence the name "multi-AZ." Each AZ runs on its own physically distinct,
independent infrastructure, and is engineered to be highly reliable.
,Having separate Availability Zones greatly reduces the likelihood that
both copies will concurrently be affected by most types of disturbances.
What can you use to assign permissions directly to an IAM user? ANS >>
IAM Policy - A policy is an object in AWS that, when associated with an
identity or resource, defines their permissions. AWS evaluates these
policies when an IAM principal (user or role) makes a request.
Permissions in the policies determine whether the request is allowed or
denied.
Each policy consists of:
1- Principal:
Who needs access.
2- Action:
What action to allow or deny.
3- Resource:
Which resource to allow or deny the action on.
4- Effect:
What will be the effect when the user requests access - either allow or
deny.
5- Condition:
Which conditions must be present for the policy to take effect. For
example, you might allow access only to the specific S3 buckets if the
user is connecting from a specific IP range or has used multi-factor
authentication at login.
,You have just set up your AWS environment and have created six IAM
user accounts for the DevOps team. What is the AWS recommendation
when granting permissions to these IAM accounts? ANS >> Apply the
Principle of Least Privilege - he Principle of Least Privilege (Polyp, also
known as the principle of minimal privilege or the principle of least
authority) requires that in a particular abstraction layer of a computing
environment, every module (such as a process, a user, or a program,
depending on the subject) must be able to access only the information
and resources that are necessary for its legitimate purpose. For
example, a user account for the sole purpose of creating backups does
not need to install software: hence, it has rights only to run backup and
backup-related applications. Any other privileges, such as installing new
software, are blocked.
What are some key benefits of using AWS CloudFormation? (Choose
TWO) ANS >> 1) It allows you to model your entire infrastructure in just a
text file
2)It automates the provisioning and updating of your infrastructure in a
safe and controlled manner.
1- CloudFormation allows you to model your entire infrastructure in a
text file. This template becomes the single source of truth for your
infrastructure. This helps you to standardize infrastructure components
used across your organization, enabling configuration compliance and
faster troubleshooting.
2- AWS CloudFormation provisions your resources in a safe, repeatable
manner, allowing you to build and rebuild your infrastructure and
applications, without having to perform manual actions or write custom
, scripts. CloudFormation takes care of determining the right operations
to perform when managing your stack, and rolls back changes
automatically if errors are detected.
3- Codifying your infrastructure allows you to treat your infrastructure
as just code. You can author it with any code editor, check it into a
version control system, and review the files with team members before
deploying into production.
4- CloudFormation allows you to model and provision, in an automated
and secure manner, all the resources needed for your applications
across all regions and accounts.
Which service allows you to install and run custom relational database
software? ANS >> EC2 - If an AWS customer needs full control over a
database, AWS provides a wide range of Amazon EC2 instances - with
different hardware characteristics - on which they can install and run
their custom relational database software.
If EC2 is used instead of RDS to run a relational database, the customer
is responsible for managing everything related to this database
Server-based services vs. Serverless services ANS >> Server-based
services include: Amazon EC2, Amazon RDS, Amazon Redshift and
Amazon EMR.
Serverless services include: AWS Lambda, AWS Faregate, Amazon SNS,
Amazon SQS and Amazon DynamoDB.
