AWS Certified Cloud Practitioner - Practice Exam (CLF-C01) - 4

When you pay a subscription fee to a hosting company to serve your website on an instance you manage, which cloud computing model are you using? - correct answerInfrastructure as a Service (IaaS) IaaS offers building blocks that can be rented. When you pay a web hosting fee, you're using IaaS. A developer has developed a 3-tier web application that will be deployed directly on Amazon EC2. The developer is considering deploying the application to more than one Availability Zone. What advantages does this deployment approach offer? - correct answerIncrease in responsiveness when load balancing is used If 1 Availability Zone is constrained, the instances in another Availability Zone can handle the traffic. Enhances resiliency, allowing the application to recover from failure due to load Resilient/fault-tolerant systems recover quickly and minimize application downtime. If 1 instance fails, another instance in a different Availability Zone can handle the request. Improves the availability of the application If 1 Availability Zone is completely destroyed, you will still have a completely functional web application running in a different Availability Zone. Which of the following is a shared control of the AWS shared responsibility model? - correct answerAwareness and training Shared controls are elements of the shared responsibility model where both AWS and the customer have shared responsibilities within their own contexts. Awareness and training is a shared control, since AWS trains AWS employees, but a customer must train their own employees. Which of the following best describes a system that will remain operational even in the event of a component failure? - correct answerFault tolerant A fault-tolerant system will remain operational even in the event of a component failure. A small startup is configuring its AWS Cloud environment. Which AWS service will allow grouping these users together and applying permissions to them as a group? - correct answerAWS IAM IAM allows you to control access to your AWS services and resources. What does a developer need in order to log in to an EC2 instance via SSH from their local machine? - correct answerPrivate key A key pair, consisting of a private key and a public key, is a set of security credentials you use to prove your identity when connecting to an instance. You store the private key locally typically as a pem file. SSH client An SSH client is a program that allows establishing a secure connection from your local laptop to an EC2 instance. ublic key A key pair, consisting of a private key and a public key, is a set of security credentials you use to prove your identity when connecting to an instance. Amazon EC2 stores the public key. What is the recommended way to give your applications running in EC2 permission to other AWS resources? - correct answerCreate an IAM role with appropriate permissions and assign it to the instance. You should use IAM roles wherever possible to enable applications running on EC2 instances to access other AWS resources. This is the most secure method to do so. Which of the following are programmatic access types enabling users to interact with AWS services? - correct answerAPI calls IAM users can make API calls for programmatic access to AWS services AWS SDKs