AWS Academy Machine Learning Module 2

Q1. What are the advantages of cloud computing over computing on-premises?

Answer:

All of the above

Q2. What is the pricing model that enables AWS customers to pay for resources on an
as-needed basis?

Answer:

Pay as you go
Q3. Which of these is not a cloud deployment

Answer:

System administration as a service

Q4. True of False? AWS owns and maintains the network-connected hardware required for
application services, while you provision and use what you need.

Answer:

True
Q5. Which of these is not a benefit of cloud computing over on-premises computing?

Answer:

Pay for racking, stacking, and powering services

Q6. Which of the following are not benefits of AWS Cloud computing?

Answer:

High Latency

Multiple procurement cycles

Q7. Which of the following is a compute service? (Select the best answer)

Answer:

Amazon EC2

Q8. True or False? Cloud Computing provides a simple way to access servers, storage,
databases, and a broad set of application services over the internet. You own the
network-connected hardware required for these services and Amazon Web Services
provisions what you need.

Answer:

False
Q9. Economics of Scale result from_______

Answer:

having hundreds of thousands of customers aggregated in cloud

AWS Academy Cloud Foundation Module 2 Quiz Answers

Q1. Which Statement describes Machine Learning ?

A. The Scientific study of algorithms and statistical models to perform tasks by using
inference instead of instructions.

B. The Creation of machines that can perform tasks that human would typically perform

C. The Compilation of a large set of rules that cover every Possible outcome.

D. A set of instruction that describe how to achieve a desired outcome.

Answer:

[ A ] The Scientific study of algorithms and statistical models to perform tasks by using
inference instead of instructions.

For certain services like Amazon Elastic Compute Cloud (Amazon EC2) and Amazon
Relational Database Service (Amazon RDS), you can invest in reserved capacity. What
options are available for Reserved Instances?

Answer:
AURI
NURI
PURI
Q2. Where can a customer go to get more details about Amazon Elastic Compute Cloud
(Amazon EC2) billing activity that took the place 3 months ago?

Answer:
AWS Cost Explorer

Q3. True or false? To receive the discounted rate associated with Reserved Instances, you
must make a full, upfront payment for the term of the agreement

Answer:
False
Q4. There is no charge for which of the following?

Answer:
Inbound data transfer (with some exceptions)
Data transfer between services within the same AWS Reg

Q5. What are the four support plans offered by AWS Support?

Answer:
Basic, Developer, Business, Enterprise
Q6. What AWS tool compares the cost of running your application in an on-premises data
center to AWS?

Answer:
Total Cost of Ownership (TCO) calculator

Q7. As AWS grows, the cost of doing business is reduced and savings are
passed back to the

customer with lower pricing. What is this optimization called?

Answer:
Economics of scale
Q8. True or false? AWS offers a variety of services at no charge, for example, Amazon
Virtual Private Cloud (Amazon VPC), AWS Identity and Access Management (IAM),
Consolidated Billing, AWS Elastic Beanstalk, automatic scaling, AWS Ops Works and AWS
CloudFormation. However, you might be charged for other AWS services that you use in
conjunction with these services

Answer:
True

Q9. When are free data transfers applicable across AWS?

Answer:
Free inbound data transfer for Amazon Elastic Computer Cloud (Amazon EC2) instances
Free outbound data transfer between AWS services within the same Region
Q10. True of false? Unlimited services are available with the AWS Free Tier to new AWS
customers for 12 months following their AWS sign-up date.

Answer:
False
AWS Academy Cloud Foundation Module 3 Quiz Answers | AWS Global
Infrastructure Overview

Q1. Which component of the AWS Global Infrastructure does Amazon CloudFront use to
ensure low-latency delivery? (Select the best answer)

A. AWS Regions
B. AWS Edge locations
C. AWS Availability Zone
D. Amazon virtual private cloud (Amazon VPC)

Answer:
B. AWS Edge locations

Q2. You can run applications and workloads from a region closer to the end users to ______
latency.

A. Increase
B. Decrease

Answer:
[ B ] Decrease
Q3. True / False? Networking, storage, compute and databases are examples of service
categories that AWS offers.

Answer:
True

Q4. Which of these statements about Availability Zones is not true? (Select the best answer)

A. Availability Zones are designed for fault isolation

B. Availability Zones are made up of one or more data centers
C. Availability zones are connected to each other using high-speed private links
D. A data center can be used for more than one availability zone

Answer:
[ D ] A data center can be used for more than one availability zone
Q5. What is true about Regions (Choose two)

A. They are the physical locations of your customers

B. All regions are located in one specific geographic area
C. A region is a physical location that has multiple availability zones
D. Physical location has multiple availability zones
E. Each region is located in a separate geographic area

Answer:

A region is a physical location that has multiple availability zones

E. Each region is located in a separate geographic area

Q6. Which of the following are geographic areas that host two or more Availability Zones?
(Select the best answer)

A. AWS Origin
B. AWS Regions
C. Compute Zones
D. Edge Locations

Answer:
AWS Regions
Q7. _____ means the infrastructure has built-in component redundancy and _____ means
that resources dynamically adjust to increases or decreases in capacity requirements.

A. No human intervention, fault-tolerant

B. Fault-tolerant, no human intervention
C. Elastic and scalable, fault-tolerant
D. Elastic and scalable, no human intervention
E. Fault-tolerant, elastic and scalable

Answer:
[ E ] Fault-tolerant, elastic and scalable

Q8. True or False? Availability Zones within a region are connected through low-latency
links.

Answer:
True
Q9. AWS highly recommends provisioning your compute resources across _____ availability
zones.

A. All
B. No
C. Multiple
D. Single

Answer:
Multiple

Q10. True or False? Edge locations are only located in the same general area as regions.

Answer:
False
AWS Cloud Security
Q1. What is the AWS Shared Security Model?

Answer:

AWS is responsible for protecting the infrastructure that runs all the services that are offered
in the AWS Cloud. This infrastructure is composed of the hardware, software, networking,
and facilities that run the AWS Cloud services. "Security of the cloud"
The customer is responsible for the encryption of data at rest and data in transit. The
customer should also ensure that the network is configured for security and that security
credentials and logins are managed safely. "Security in the cloud"
Based on the question select the answer, If the question asks like this,
In the shared responsibility model, AWS is responsible for providing what ?
The answer for this question will be Security of the cloud.

Q2. In the shared responsibility model, which of the following are examples of
" Security in the cloud" ?

A. Compliance with compute security standards and regulations.

B. Physical security of the facilities in which the service operates.

C. Security group configurations.

D. Encryption of the data at rest and data in transit.

E. Protecting the global infrastructure.

Answer:

C. Security group configurations.

D. Encryption of the data at rest and data in transit.

Q3. Which of the following is the responsibility of AWS under the AWS shared responsibility
model? (Select the best answer).

A. Configuring third party applications.

B. Maintaining physical hardware.
C. Security application access and data.
D. Managing custom Amazon machine images (AMI's).

Answer:
Maintaining physical hardware.
Q4. When creating an AWS Identity and Access Management (IAM) policy, what are the two
types of access that can be granted to a user? (Choose two).

A. Institutuional Access.
B. Authorized Access.
C. Programmatic Access.
D. AWS Management Console Access.
E. Administrative Root Access.

Answer:
C. Programmatic Access.
E. AWS Management Console Access.

Q5. True or false? AWS organizations enables you to consolidate multiple aws accounts so
that
you centrally manage them.

True.
False.

Answer:
True.
Q6. Which of the following are best practices to secure your account using aws identity and
access management? (Choose 2).

A. Provide users with default administrative privileges.

B. Leave unused and unnecessary users and credentials in place.
C. Manage access to AWS resources.
D. Avoid using IAM groups to grant the same access permissions to multiple users.
E. Define fine-grained access rights.

Answer:
C. Manage access to AWS resources.
E. Define fine-grained access rights.

Q7. Which of the following should be done by the AWS account root user?
(Select the best answer).
A. Secure access for applications.
B. Integrate with other AWS services.
C. Change granular permissions.
D. Change the AWS support plan.

Answer:
D. Change the AWS support plan.

Q8. After initial login, what does AWS recommend as the best practice for the AWS account
root user?

A. Delete the AWS account root user.

B. Revoke all permissions on the AWS account root user.
C. Restrict permission on the AWS account root user.
D. Delete the access keys of the AWS account root user.

Answer:
D. Delete the access keys of the AWS account root user.
Q9. How would a system administrator add an additional layer of login security to a user's
AWS management console?

A. Use Amazon Cloud Directory.

B. Audit AWS Identity and Access Management (IAM) roles.
C. Enable multi-factor authentication.
D. Enable AWS CloudTrail.

Answer:
Enable multi-factor authentication.

Q10. True or false? AWS key management service (AWS KMS) enables you to assess,
audit,
and evaluate the configurations of your AWS resources.

True.
False.

Answer:
False.
AWS Academy Cloud Foundation Module 5 Quiz Answers

Q1. Which AWS networking service enables a company to create a virtual network within
AWS

A. AWS Config
B. Amazon Route 53
C. AWS Direct Connect
D. Amazon VPC

Answer:
D. Amazon VPC

Q2. With Amazon Virtual Private Cloud (Amazon VPC), what is the smallest size subnet you
can have in a VPC?

A. /28
B. /30
C. /24
D. /26

Answer:
A. /28
Q3. With Amazon Virtual Private Cloud (Amazon VPC), what is the maximum size IP
address range you can have in a VPC?

A. /28
B. /16
C. /30
D. /24

Answer:
B. /16

Q4. You need to allow resources in a private subnet to access the internet. Which of the
following must be present to enable this access?

A. Network access control lists

B. Security groups
C. NAT gateway
D. Route tables

Answer:
C. NAT gateway
Q5. Which AWS networking service enables a company to create a virtual network within
AWS?

A. Amazon Virtual Private Cloud (Amazon VPC)

B. AWS Direct Connect
C. Amazon Route 53
D. AWS Config

Answer:
A. Amazon VPC

Q7. T/F, Private subnets have direct access to the internet.

Answer:
False
Q8. Which component of AWS Global Infrastructure does Amazon CloudFront use to ensure
low-latency deliver?

A. AWS Regions
B. AWS Availability Zones
C. AWS edge locations
D. Amazon Virtual Private Cloud (Amazon VPC)

Answer:
C. AWS edge locations

Q9. Which of the following is an optional security control that can be applied at the subnet
layer of a VPC?

A. Network ACL
B. Security group
C. Web application firewall
D. Firewall

Answer:
A. Network ACL
Q10. What happens when you use Amazon Virtual Private Cloud (Amazon VPC) to create a
new VPC?

A. Three subnets are created by default in one Availability Zone

B. A main route table is created by default
C. Three subnets are created by default: one for each Availability Zone
D. An internet gateway is created by default.

Answer:
B. A main route table is created by default

Q11. Which of the following can be used to protect Amazon Elastic Compute Cloud
(Amazon EC2) instances hosted in AWS?

A. Internet Gateway
B. All of the above
C. AMI
D. Security group

Answer:
D. Security group

Q12. You are a solutions architect who works at a large retail company that is migrating its
existing infrastructure to AWS. You recommend that they use a custom VPC. When you
create a VPC, you assign it to an IPv4 Classless Inter-Domain Routing (CIDR) block of
10.0.1.0/24 (which has 256 total IP addresses). How many IP addresses are available?

A. 251
B. 256
C. 246
D. 250

Answer:

A. 251

The subnet has 256 IP addresses but only 251 are available because 5 are reserved.