Elasticity is the ability to acquire resources as demand grows and release them as it falls, often automatically with EC2 Auto Scaling, so you do not pay for idle capacity. Buying ahead for the peak is the traditional capacity guessing that the cloud avoids. Moving to a larger instance is vertical scaling, and surviving a zone failure is high availability.
Question 2 of 10 · Security and Compliance
What does encryption in transit protect?
Encryption in transit, typically TLS, protects data as it moves between clients, services and Regions so it cannot be read or altered if intercepted. Data on EBS volumes, in S3 and in backup vaults is stored data, protected by encryption at rest. Keys in AWS KMS are protected by KMS itself and are the means of encryption, not the data it protects in transit.
Question 3 of 10 · Cloud Technology and Services
Which interface lets you manage AWS from the command line?
The AWS Command Line Interface (CLI) lets you manage AWS services by typing commands in a terminal and is easy to script. The Management Console and the mobile application are graphical interfaces, and the SDKs let you call AWS APIs from code written in languages such as Python or Java.
Question 4 of 10 · Billing, Pricing and Support
How can Reserved Instances be paid to maximize the discount?
Reserved Instances can be paid all upfront, partially upfront or with no upfront payment, over a one- or three-year term; the more you pay upfront and the longer the term, the larger the discount. All upfront on a three-year term therefore gives the deepest discount. Paying monthly with nothing upfront, paying partially upfront, or choosing a one-year term all give smaller savings in exchange for flexibility.
Question 5 of 10 · Cloud Concepts
What does serverless mean?
Serverless services such as AWS Lambda and Fargate run code without you provisioning or managing servers, scaling automatically and charging for use. Renting servers by the hour is ordinary EC2, and AWS hardware on your own site is AWS Outposts. Servers still exist in serverless computing; AWS simply manages them for you.
Question 6 of 10 · Security and Compliance
What does IAM control?
AWS Identity and Access Management controls authentication and authorization: which users, groups and roles exist and which actions they may perform on which resources, through policies. Network traffic to an instance is controlled by security groups and network ACLs, API call history is recorded by AWS CloudTrail, and encryption keys are managed in AWS KMS.
Question 7 of 10 · Cloud Technology and Services
Which service runs code without provisioning servers?
AWS Lambda runs code in response to events without you provisioning or managing servers, scaling automatically and billing for compute time used. Amazon EC2 and Amazon Lightsail give you virtual servers to provision and maintain, and Elastic Beanstalk provisions EC2 instances on your behalf to run your application.
Question 8 of 10 · Billing, Pricing and Support
What is the main cost advantage of the cloud for variable workloads?
For variable workloads, elastic capacity lets you scale down when demand drops and pay only for what you use, rather than paying for peak capacity all the time. A fixed price or the same monthly charge would ignore that variability, and committing to peak capacity, even at a discount, means paying for capacity you leave idle in quiet periods.
Question 9 of 10 · Cloud Concepts
What is a hybrid cloud?
A hybrid deployment connects cloud resources with existing on-premises infrastructure so they work together, for example through AWS Direct Connect or a VPN. Running everything in the cloud is a cloud-native (all-in) deployment, and running virtualization and management tools in your own data center is an on-premises or private cloud deployment. Using two public providers is usually called multicloud.
Question 10 of 10 · Security and Compliance
Which AWS service detects threats by analyzing account and network logs?
Amazon GuardDuty continuously analyzes sources such as CloudTrail events, VPC Flow Logs and DNS logs to detect threats like compromised credentials or instances. Amazon Inspector scans workloads for software vulnerabilities, Amazon Macie finds sensitive data in S3, and AWS Config tracks resource configuration against rules.
0 of 10
Cloud Concepts
Security and Compliance
Cloud Technology and Services
Billing, Pricing and Support
Which domains cost you the points? Members see a breakdown by domain and a study plan built from it.