Architecting on AWS Certification Equipment Maintenance & Calibration 4

Question 1

A company must decommission thousands of S3 objects older than 365 days to reduce storage costs while retaining newer objects indefinitely. Which feature handles this automatically?

Accepted Answer

S3 Lifecycle policies with Expiration actions

Answer

S3 Lifecycle Expiration actions automatically delete objects after a configured number of days, eliminating the need for manual cleanup scripts.

Question 2

An architect needs to validate that all newly launched EC2 instances comply with a CIS benchmark before they serve production traffic. Which service can scan AMIs and running instances for security benchmark compliance?

Accepted Answer

Amazon Inspector

Answer

Amazon Inspector automatically assesses EC2 instances and container images against security benchmarks and CVE databases, providing findings with severity scores.

Question 3

During a planned ECS cluster maintenance event, tasks must be gracefully stopped before the underlying EC2 instances are drained. Which ECS feature controls the grace period for in-flight task shutdown?

Accepted Answer

ECS task stopTimeout in the task definition

Answer

The stopTimeout field in an ECS task definition specifies how long ECS waits for a task to exit gracefully before forcibly stopping it.

Question 4

A DevOps team wants CloudFormation stacks to automatically detect and report configuration drift without manual intervention. What is the most scalable way to trigger drift detection across dozens of stacks periodically?

Accepted Answer

EventBridge rule triggering a Lambda function that calls the CloudFormation drift detection API

Answer

An EventBridge scheduled rule can invoke a Lambda function that calls the CloudFormation DetectStackDrift API across all stacks, providing automated, serverless periodic drift detection.

Question 5

A production Aurora cluster must undergo minor version upgrades with zero downtime. Which Aurora feature allows applying upgrades without interrupting read/write operations?

Accepted Answer

Aurora Zero-Downtime Patching (ZDP)

Answer

Aurora Zero-Downtime Patching preserves existing connections and in-flight transactions during minor version upgrades, enabling maintenance with no observable downtime.

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Practice Test

Architecting on AWS Certification Equipment Maintenance & Calibration 4