Cloud Practitioner General Flashcards

Which IAM entity provides temporary credentials and is best practice for granting EC2 instances access to AWS services?

Answer: IAM role

An IAM role grants temporary credentials and is the recommended way to give EC2 instances access to other AWS services.

What is the recommended practice regarding the AWS account root user?

Answer: Lock it away and enable MFA, using IAM users instead

The root user should be secured with MFA and rarely used; daily tasks should use IAM users or roles.

Which AWS service helps you centrally manage and govern multiple AWS accounts?

Answer: AWS Organizations

AWS Organizations lets you centrally manage billing and governance across multiple AWS accounts.

Which service provides DDoS protection automatically for all AWS customers at no additional cost?

Answer: AWS Shield Standard

AWS Shield Standard provides automatic, no-cost protection against common DDoS attacks for all customers.

Which AWS Well-Architected Framework pillar focuses on the ability to recover from failures and meet demand?

Answer: Reliability

The Reliability pillar covers a workload's ability to recover from failures and dynamically meet demand.

A company wants object storage that is durable, scalable, and accessed over the internet via APIs. Which service fits best?

Answer: Amazon S3

Amazon S3 provides highly durable, scalable object storage accessible via web APIs.

Which billing tool lets you set custom cost or usage thresholds and receive alerts when they are exceeded?

Answer: AWS Budgets

AWS Budgets lets you define cost and usage limits and sends alerts when thresholds are crossed.