CSA Practice Exam UPDATED Study
ACTUAL QUESTIONS AND CORRECT
ANSWERS
Custom metrics that you can set up on CloudWatch(not default) - CORRECT
ANSWER - Memory utilization
- Disk swap utilization
- Disk space utilization
- Page file utilization
- Log collection
Metrics included in CloudWatch - CORRECT ANSWER CPU Utilization
• identifies the processing power required to run an application upon a selected instance.
Network Utilization
• identifies the volume of incoming and outgoing network traffic to a single instance.
Disk Reads metric
• used to determine the volume of the data the application reads from the hard disk of the
instance. This can be used to determine the speed of the application.
write-once-read-many (WORM) model - CORRECT ANSWER S3 Object Lock
(Object Versioning feature must also be enabled for Object Lock)
With a ElastiCache cluster, you have to secure the session data in the portal by requiring them
to enter a password before they are granted permission to execute Redis commands. -
CORRECT ANSWER Authenticate the users using Redis AUTH by creating a new
Redis Cluster with both the
--transit-encryption-enabled
--auth-token parameters
,enabled.
AWS Storage Gateway - CORRECT ANSWER Primarily used to integrate your on-
premises network to AWS
but not for migrating your applications
Amazon EFS - CORRECT ANSWER only supports Linux workloads
EBS - CORRECT ANSWER primarily used as block storage for EC2 instances
DynamoDB stream - CORRECT ANSWER Ordered flow of information about
changes to items in an Amazon DynamoDB table
When you enable a stream on a table, DynamoDB captures information about every
modification to data items in the table.
Whenever an application creates, updates, or deletes items in the table, DynamoDB Streams
writes a stream record with the primary key attribute(s) of the items that were modified.
A *stream record* contains information about a data modification to a single item in a
DynamoDB table. You can configure the stream so that the stream records capture additional
information, such as the "before" and "after" images of modified items.
Amazon DynamoDB is integrated with AWS Lambda so that you can create triggers—pieces
of code that automatically respond to events in DynamoDB Streams. With triggers, you can
build applications that react to data modifications in DynamoDB tables.
Remember that the DynamoDB Stream feature is not enabled by default
,AWS Transfer for SFTP - CORRECT ANSWER enables you to easily move your file
transfer workloads that use the Secure Shell File Transfer Protocol (SFTP) to AWS without
needing to modify your applications or manage any SFTP servers.
To get started with AWS Transfer for SFTP (AWS SFTP) you create an SFTP server and map
your domain to the server endpoint, select authentication for your SFTP clients using service-
managed identities, or integrate your own identity provider, and select your Amazon S3
buckets to store the transferred data.
Your existing users can continue to operate with their existing SFTP clients or applications.
Data uploaded or downloaded using SFTP is available in your Amazon S3 bucket, and can be
used for archiving or processing in AWS.
Default termination policy for EC2 Instances - CORRECT ANSWER Oldest instances
terminated first
1. If there are instances in multiple Availability Zones, choose the Availability Zone with the
most instances and at least one instance that is not protected from scale in. If there is more
than one Availability Zone with this number of instances, choose the Availability Zone with
the instances that use the oldest launch configuration.
2. Determine which unprotected instances in the selected Availability Zone use the oldest
launch configuration. If there is one such instance, terminate it.
3. If there are multiple instances to terminate based on the above criteria, determine which
unprotected instances are *closest to the next billing hour*. (This helps you maximize the use
of your EC2 instances and manage your Amazon EC2 usage costs.) If there is one such
instance, terminate it.
4. If there is more than one unprotected instance closest to the next billing hour, choose one
of these instances at random.
, AWS Database Migration Service (AWS DMS) - CORRECT ANSWER A cloud
service that makes it easy to migrate relational databases, data warehouses, NoSQL
databases, and other types of data stores. (works with Oracle)
Integrates with RDS
You can use AWS DMS to migrate your data into the AWS Cloud or between combinations
of cloud and on-premises setups. AWS DMS can help migrate on-premises databases to the
AWS Cloud.
With AWS DMS, you can perform one-time migrations, and you can replicate ongoing
changes to keep sources and targets in sync.
If you want to migrate to a different database engine, you can use the AWS Schema
Conversion Tool (AWS SCT) to translate your database schema to the new platform. You
then use AWS DMS to migrate the data.
AWS Elastic Beanstalk - CORRECT ANSWER reduces management complexity
without restricting choice or control.
You simply upload your application, and Elastic Beanstalk automatically handles the details
of capacity provisioning, load balancing, scaling, and application health monitoring.
Elastic Beanstalk supports applications developed in Go, Java, .NET(microsoft), Node.js,
PHP, Python, and Ruby.
When you deploy your application, Elastic Beanstalk builds the selected supported platform
version and provisions one or more AWS resources, such as Amazon EC2 instances, to run
your application.
Considering that the Lambda function is storing sensitive database and API credentials, how
can this information be secured to prevent other developers in the team, or anyone, from
seeing these credentials in plain text? - CORRECT ANSWER create your own AWS
ACTUAL QUESTIONS AND CORRECT
ANSWERS
Custom metrics that you can set up on CloudWatch(not default) - CORRECT
ANSWER - Memory utilization
- Disk swap utilization
- Disk space utilization
- Page file utilization
- Log collection
Metrics included in CloudWatch - CORRECT ANSWER CPU Utilization
• identifies the processing power required to run an application upon a selected instance.
Network Utilization
• identifies the volume of incoming and outgoing network traffic to a single instance.
Disk Reads metric
• used to determine the volume of the data the application reads from the hard disk of the
instance. This can be used to determine the speed of the application.
write-once-read-many (WORM) model - CORRECT ANSWER S3 Object Lock
(Object Versioning feature must also be enabled for Object Lock)
With a ElastiCache cluster, you have to secure the session data in the portal by requiring them
to enter a password before they are granted permission to execute Redis commands. -
CORRECT ANSWER Authenticate the users using Redis AUTH by creating a new
Redis Cluster with both the
--transit-encryption-enabled
--auth-token parameters
,enabled.
AWS Storage Gateway - CORRECT ANSWER Primarily used to integrate your on-
premises network to AWS
but not for migrating your applications
Amazon EFS - CORRECT ANSWER only supports Linux workloads
EBS - CORRECT ANSWER primarily used as block storage for EC2 instances
DynamoDB stream - CORRECT ANSWER Ordered flow of information about
changes to items in an Amazon DynamoDB table
When you enable a stream on a table, DynamoDB captures information about every
modification to data items in the table.
Whenever an application creates, updates, or deletes items in the table, DynamoDB Streams
writes a stream record with the primary key attribute(s) of the items that were modified.
A *stream record* contains information about a data modification to a single item in a
DynamoDB table. You can configure the stream so that the stream records capture additional
information, such as the "before" and "after" images of modified items.
Amazon DynamoDB is integrated with AWS Lambda so that you can create triggers—pieces
of code that automatically respond to events in DynamoDB Streams. With triggers, you can
build applications that react to data modifications in DynamoDB tables.
Remember that the DynamoDB Stream feature is not enabled by default
,AWS Transfer for SFTP - CORRECT ANSWER enables you to easily move your file
transfer workloads that use the Secure Shell File Transfer Protocol (SFTP) to AWS without
needing to modify your applications or manage any SFTP servers.
To get started with AWS Transfer for SFTP (AWS SFTP) you create an SFTP server and map
your domain to the server endpoint, select authentication for your SFTP clients using service-
managed identities, or integrate your own identity provider, and select your Amazon S3
buckets to store the transferred data.
Your existing users can continue to operate with their existing SFTP clients or applications.
Data uploaded or downloaded using SFTP is available in your Amazon S3 bucket, and can be
used for archiving or processing in AWS.
Default termination policy for EC2 Instances - CORRECT ANSWER Oldest instances
terminated first
1. If there are instances in multiple Availability Zones, choose the Availability Zone with the
most instances and at least one instance that is not protected from scale in. If there is more
than one Availability Zone with this number of instances, choose the Availability Zone with
the instances that use the oldest launch configuration.
2. Determine which unprotected instances in the selected Availability Zone use the oldest
launch configuration. If there is one such instance, terminate it.
3. If there are multiple instances to terminate based on the above criteria, determine which
unprotected instances are *closest to the next billing hour*. (This helps you maximize the use
of your EC2 instances and manage your Amazon EC2 usage costs.) If there is one such
instance, terminate it.
4. If there is more than one unprotected instance closest to the next billing hour, choose one
of these instances at random.
, AWS Database Migration Service (AWS DMS) - CORRECT ANSWER A cloud
service that makes it easy to migrate relational databases, data warehouses, NoSQL
databases, and other types of data stores. (works with Oracle)
Integrates with RDS
You can use AWS DMS to migrate your data into the AWS Cloud or between combinations
of cloud and on-premises setups. AWS DMS can help migrate on-premises databases to the
AWS Cloud.
With AWS DMS, you can perform one-time migrations, and you can replicate ongoing
changes to keep sources and targets in sync.
If you want to migrate to a different database engine, you can use the AWS Schema
Conversion Tool (AWS SCT) to translate your database schema to the new platform. You
then use AWS DMS to migrate the data.
AWS Elastic Beanstalk - CORRECT ANSWER reduces management complexity
without restricting choice or control.
You simply upload your application, and Elastic Beanstalk automatically handles the details
of capacity provisioning, load balancing, scaling, and application health monitoring.
Elastic Beanstalk supports applications developed in Go, Java, .NET(microsoft), Node.js,
PHP, Python, and Ruby.
When you deploy your application, Elastic Beanstalk builds the selected supported platform
version and provisions one or more AWS resources, such as Amazon EC2 instances, to run
your application.
Considering that the Lambda function is storing sensitive database and API credentials, how
can this information be secured to prevent other developers in the team, or anyone, from
seeing these credentials in plain text? - CORRECT ANSWER create your own AWS
