‫Okay so I hope your tried with me to answer the questions,
‫let's see what are the correct answers.
‫So why is AWS more economical than traditional data centers
‫for applications with varying compute workloads?
‫So option one EC2 costs are billed on a monthly basis.
‫Yes that is true,
‫but it's not going to be more economical.
‫Users retain full administrative access
‫to their EC2 instance,
‫that's also true,
‫but it's also true on traditional data centers,
‫so it's not gonna be more economical.
‫Amazon EC2 instances can be launched on demand when needed,
‫that is true, and it's going to be more economical
‫because that means that we can launch them
‫and terminate them when we need as well,
‫and that's going to bring us cost saving,
‫and this is something that we cannot do easily
‫on data centers,
‫or if we do that on data centers,
‫the hardware we still have
‫and we still pay for.
‫And finally users can permanently run
‫through enough instances to handle peak workload,
‫yep, that's true,
‫but again it's not going to be more economical.
‫So option C in this example is the right answer.
‫Now question two is a simple find the right service for us,
‫so which AWS service would simplify the migration
‫of a database in AWS,
‫and to be honest, it's very easy,
‫it's answer B
‫because the name is Database Migration Service, or DMS,
‫but we have also seen this DMS service in the course,
‫so quite an easy question
‫and honestly you will get questions like this
‫in the actual exam.
‫Okay yet another question
‫where we choose the right service.
‫So which offering enables users to find, buy,
‫and immediately start using software solutions
‫in their AWS environment?
‫So Config no because it allows us
‫to get the configuration in the bucket
‫and to look at compliance rules.
‫OpsWorks is for manage chefs and puppets.
‫The SDK is a software development kit
‫and this is not a service,
‫this used to integrate the AWS operations
‫into a programming language,
‫so by elimination we can go into the Marketplace,
‫but yes we've seen the Marketplace,
‫and we've seen that on the Marketplace,
‫you can buy AMIs, you can buy containers,
‫you can buy solutions directly from it,
‫and use them in your environment right away.
‫Okay, question four,
‫which networking service enables a company
‫to create a virtual network within AWS,
‫so again it is for you to find the right service
‫to understand what it is,
‫so it is the VPC, Virtual Private Cloud,
‫because from the VPC we can differentiate virtual network,
‫and then we characterize our subnets,
‫and within the subnets we can create EC2 instances.
‫Config we've seen what it was,
‫Route 53 is going to be a DNS service,
‫and Direct Connect is used
‫to privately connect your on-premise data center to AWS.
‫That takes about a month,
‫but it is going to be a private physical connection.
‫Okay good so it seems
‫like we are covering everything pretty easily.
‫Now which of the following is an responsibility of AWS
‫under the shared responsibility model?
‫So this is something you're going to get a lot on the exam.
‫On my exam I think I got four or five questions
‫around the shared responsibility model,
‫so this is good to remember that AWS is responsible
‫for the security of the cloud,
‫and you are responsible for the security in the cloud.
‫So we are asked about what is the responsibility of AWS
‫in this situation.
‫So configuring third-party applications,
‫well it says third-party, so it's not gonna be
‫for AWS too so I'll eliminate that.
‫Maintaining physical hardware,
‫yes that is a responsibility of AWS
‫because it is something we do not have access to.
‫It is their responsibility to create the hardware
‫to maintain the servers
‫and the storage et cetera, et cetera.
‫Securing application access and data.
‫This is our responsibility,
‫okay we are given the tools,
‫but configuring the security groups,
‫encrypting data is our responsibility,
‫and finally managing the guest operating systems
‫is also our responsibility,
‫so whenever we create an EC2 instance,
‫it's up to us to update it in a timely manner
‫to make sure that it is protected against vulnerabilities.
‫Okay good.
‫Now question six.
‫Which component of the global infrastructure
‫does CloudFront use to ensure low-latency delivery?
‫So CloudFront is a global service,
‫so we're looking at something
‫that's going to be all around the world,
‫and it's not going to be Regions,
‫because CloudFront is more than that,
‫it is using Edge locations or points of presence.
‫We have over 200 of them around the world,
‫so it's not gonna be regions,
‫it is definitely Edge locations.
‫It is not AZ, and it is not a VPC,
‫and that is really a structure of this one.
‫Okay good.
‫Question seven, so
‫how would a system administrator add an additional layer
‫of login security to a user's Management Console?
‫So here there is a service we've never seen before,
‫which is Amazon Cloud Directory,
‫but again I say that if we haven't seen a service,
‫it's probably intended on me not
‫to show you that service
‫because it's not going to be a correct answer,
‫so we can safely rule that out.
‫Then Audit IAM roles is not going to help.
‫IAM roles are going to be affected,
‫for example for EC2 instances.
‫They're meant to be used by either services themselves.
‫But here we are concerned
‫with a login of a user,
‫so user's end roles are different,
‫and so I have to rule out this answer.
‫Now we know
‫that multi-factor authentication is a security guideline
‫and we know that whenever we log in using a user account
‫that has MFA,
‫then we have to have another code to accept our login,
‫and so this is the additional layer we're looking for.
‫And CloudTrail is not going to be right for this time.
‫CloudTrail is just to log API calls in your account.
‫Okay next, so which service can identify the user
‫that made the API call
‫when an Amazon EC2 instance is terminated?
‫So that is a classic question,
‫and we just saw the answer,
‫it is going to be CloudTrail,
‫because CloudTrail keeps a history
‫of all the API calls made within your accounts.
‫It's not going to be Trusted Advisor
‫because Trusted Advisor is here
‫to give you advice on security, performance,
‫customization, service limits and so on.
‫It's not going to be X-Ray.
‫X-Ray is a service to do distributed tracing.
‫And IAM is just going to give you information
‫about your users,
‫but not going to give you information
‫about the API calls made by your users.
‫Okay.
‫Question nine, which service would be used
‫to send alerts based on CloudWatch alarms.
‫Well we know
‫that CloudWatch alarms can have three destinations.
‫Number one, it could be a SNS topic,
‫which is here.
‫Number two, it could be an O2 scaling group,
‫to scale the O2 scaling group up or down,
‫or number three, it could be an EC2 action,
‫for example to reboot an EC2 instance,
‫or to rescue it in case it is impaired.
‫So this is definitely going to be SNS,
‫and not CloudTrail, not Trusted Advisor,
‫and not Route 53.
‫And then finally, where can the user find information
‫about prohibited action
‫on the AWS infrastructure?
‫Well for this we have to look at the Acceptable Use Policy,
‫and the name is pretty obvious
‫about what the question is and what the service is.
‫It's not going to be the Billing Console,
‫it's going to be for money.
‫It's not going to be IAM,
‫because on IAM we just manage users.
‫So that's it, you can see the exam do have actually a bunch
‫of straightforward questions,
‫asking you to find the right service,
‫and so for this exam,
‫I wanted to give you the knowledge
‫about all these services,
‫so that you could confidently answer the questions,
‫one by one.
‫So that's it, I hope you liked it,
‫and then I will see you to practice
‫in the entire practice exam in this course.
‫I will see you in the next lecture.