AWS CERTIFIED SOLUTIONS ARCHITECT
FINAL TEST PAPER UPDATED COMPLETE
QUESTIONS AND CORRECT ANSWERS
●● AWS Cloud Use Cases
Answer: -Enables you to build sophisticated, scalable applications
-Applicable to a diverse set of industries
-Use Cases include:
Enterprise IT, Backup & Storage, Big Data Analytics, host a website,
create a backend for mobile & social apps, entire gaming service,
endless options.
McDonalds, Netflix, Activision, 21st century fox
●● AWS regions
Answer: -Regions all around the world
-Names can be us-east- I, eu-west-3...
-A region is a cluster of data centers
-Most AWS services are region
●● How to choose an AWS region?
,Answer: -Compliance with data governance and legal requirements: data
never leaves a region without your explicit permission
-Proximity to customers: reduced latency
-Available services within a region
-Pricing
●● AWS availability zone
Answer: -Each region has many availability zones. Usually 3, min is 3,
max is 6.
Ex:
ap-southeast-2a
ap-southeast-2b
ap-southeast-2c
There are more than in case of destruction. Each availability zone is their
own discrete data center and connected with high bandwidth, ultra-low
latency networking.
●● AWS Points of Presence (Edge Locations)
Answer: Amazon has 400+ points of presence, 10+ regional caches, in
90+ cities across 40+ countries.
Content is delivered to end users with lower latency
,●● AWS Global Services
Answer: -Identity and Access Management (IAM)
-Route 53 (DNS service)
-CloudFront (Content Delivery Network)
-WAF (Web Application Firewall)
●● Most AWS services are region-scoped:
Answer: -Amazon EC2 (infrastructure as a service)
-Elastic beanstalk (Platform as a service)
-Lambda (Function as a service)
-Rekognition (Software as a service)
●● IAM: Users and Groups
Answer: IAM = Identity and Access Management, Global service
Root account created by default, shouldn't be used or shared.
Users instead - people within your organization and can be.
Groups only contain users and can belong to multiple groups. EX:
Grouped as "Group: Developers" or "Group: Operations"
●● IAM: Permissions
, Answer: Users or groups can be assigned JSON documents called
policies. These policies define the permissions of the users.
In AWS you apply the least privilege principle.
●● IAM Policies structure
Answer: Consists of:
-Version: Policy language version, always include "2012-I0-I7"
-ID (optional)
-Statement: one or more individual statements
---Consists of: Sid: an identifier for the statement (optional)
---Effect: whether the statement allows or denies access (Allow, Deny)
---Principle: account/user to which policy applied to
---Action: List of actions this policy allows or denies
---Resources: list of resources to which actions apply to
---Condition: Conditions for when this policy is in effect (optional)
●● IAM defense 15.****
Answer: 1. IAM Password Policy Allows users to edit their own
passwords, etc.
2. MFA - Device options:
FINAL TEST PAPER UPDATED COMPLETE
QUESTIONS AND CORRECT ANSWERS
●● AWS Cloud Use Cases
Answer: -Enables you to build sophisticated, scalable applications
-Applicable to a diverse set of industries
-Use Cases include:
Enterprise IT, Backup & Storage, Big Data Analytics, host a website,
create a backend for mobile & social apps, entire gaming service,
endless options.
McDonalds, Netflix, Activision, 21st century fox
●● AWS regions
Answer: -Regions all around the world
-Names can be us-east- I, eu-west-3...
-A region is a cluster of data centers
-Most AWS services are region
●● How to choose an AWS region?
,Answer: -Compliance with data governance and legal requirements: data
never leaves a region without your explicit permission
-Proximity to customers: reduced latency
-Available services within a region
-Pricing
●● AWS availability zone
Answer: -Each region has many availability zones. Usually 3, min is 3,
max is 6.
Ex:
ap-southeast-2a
ap-southeast-2b
ap-southeast-2c
There are more than in case of destruction. Each availability zone is their
own discrete data center and connected with high bandwidth, ultra-low
latency networking.
●● AWS Points of Presence (Edge Locations)
Answer: Amazon has 400+ points of presence, 10+ regional caches, in
90+ cities across 40+ countries.
Content is delivered to end users with lower latency
,●● AWS Global Services
Answer: -Identity and Access Management (IAM)
-Route 53 (DNS service)
-CloudFront (Content Delivery Network)
-WAF (Web Application Firewall)
●● Most AWS services are region-scoped:
Answer: -Amazon EC2 (infrastructure as a service)
-Elastic beanstalk (Platform as a service)
-Lambda (Function as a service)
-Rekognition (Software as a service)
●● IAM: Users and Groups
Answer: IAM = Identity and Access Management, Global service
Root account created by default, shouldn't be used or shared.
Users instead - people within your organization and can be.
Groups only contain users and can belong to multiple groups. EX:
Grouped as "Group: Developers" or "Group: Operations"
●● IAM: Permissions
, Answer: Users or groups can be assigned JSON documents called
policies. These policies define the permissions of the users.
In AWS you apply the least privilege principle.
●● IAM Policies structure
Answer: Consists of:
-Version: Policy language version, always include "2012-I0-I7"
-ID (optional)
-Statement: one or more individual statements
---Consists of: Sid: an identifier for the statement (optional)
---Effect: whether the statement allows or denies access (Allow, Deny)
---Principle: account/user to which policy applied to
---Action: List of actions this policy allows or denies
---Resources: list of resources to which actions apply to
---Condition: Conditions for when this policy is in effect (optional)
●● IAM defense 15.****
Answer: 1. IAM Password Policy Allows users to edit their own
passwords, etc.
2. MFA - Device options:
