Cloud Computing Capstone (D342)

Correct Answer

A. An EC2 instance running on a physical host reserved for the exclusive use of a single AWS account

Explanation

An EC2 dedicated instance runs on hardware that is physically isolated to a single AWS account. This means that the instance runs on a host dedicated only to that account, providing additional isolation from instances launched by other AWS accounts. However, it still shares the underlying host hardware with other instances from the same account. This option emphasizes physical isolation at the host level rather than virtualization or configuration control.

Why other options are wrong

B. An EC2 instance running on a physical host reserved for and controlled by a single AWS account

This is incorrect because this description matches a "Dedicated Host," not a "Dedicated Instance." While Dedicated Hosts provide physical isolation, Dedicated Instances are still virtual instances that share the underlying host with other instances from the same AWS account.

C. An EC2 AMI that can be launched only on an instance within a single AWS account

This is incorrect because this option is describing a restriction based on the use of Amazon Machine Images (AMIs), not an EC2 instance type. Dedicated instances are related to the physical hardware, not the AMI itself.

D. An EC2 instance optimized for a particular compute role

This is incorrect because this option refers to EC2 instance types like Compute Optimized or Memory Optimized, which are designed for specific compute roles. Dedicated instances refer specifically to how instances are hosted, not their role optimization.

Correct Answer

B. Certain services may be limited or unavailable in specific regions

Explanation

Cloud services may vary across different regions due to local regulations, infrastructure availability, and demand. Some AWS services may be available only in specific regions, while others may be limited or unavailable altogether in certain regions. This is due to the way AWS prioritizes its infrastructure rollout and service deployment based on regional needs.

Why other options are wrong

A. New features are uniformly available across all regions

This is incorrect because new features may be rolled out in select regions first before being made available globally. AWS often prioritizes certain regions based on customer demand and compliance needs.

C. All regions receive updates and new services simultaneously

This is incorrect because not all regions receive updates and new services at the same time. Rollouts may occur in phases, with some regions receiving new services earlier than others.

D. Regional availability has no impact on service performance

This is incorrect because regional availability can significantly impact service performance. The physical distance between regions can affect latency, and the specific infrastructure and services available in a region can influence the overall performance of cloud services.

Correct Answer

A. Policies

Explanation

IAM Policies are JSON documents in AWS that define permissions for AWS resources. These documents specify what actions are allowed or denied on specific resources, and they are assigned to IAM roles, users, or groups to grant or restrict access to AWS services.

Why other options are wrong

B. Roles

This is incorrect because roles in IAM are used to define a set of permissions that can be assumed by users or services. Roles are assigned to entities (users, applications, or services) but do not define what those entities can or cannot do. Policies are what define those permissions.

C. Rights

This is incorrect because "rights" is not a term used in IAM in AWS. The correct term for defining what actions can be performed on resources is "permissions," which are specified through IAM Policies.

D. Users

This is incorrect because users in IAM are entities that are assigned permissions through roles or policies. While users are the ones who perform actions, it is IAM Policies that define what actions they can or cannot perform.

Correct Answer

B. A physical location around the world where data centers are clustered

Explanation

An AWS Region is a geographic area that consists of multiple, isolated locations known as Availability Zones. These regions are designed to provide fault tolerance, high availability, and scalability, while also helping customers meet data residency and compliance requirements. Each region has its own set of services, and customers can choose regions to deploy their resources based on factors like latency, cost, and compliance.

Why other options are wrong

A. A broad set of global, cloud-based products that include compute, storage, and databases

This description refers to the overall AWS offering, not a specific AWS Region. AWS provides a variety of services within each region.

C. One or more discrete data centers with redundant power, networking, and connectivity

This describes an Availability Zone, not an entire AWS Region. An Availability Zone is a physical location within a region, but a region contains multiple Availability Zones.



D. A service that developers use to build applications that deliver latencies of single-digit milliseconds to users

This refers to AWS Global Accelerator or Amazon CloudFront, which provide low-latency content delivery and network routing, but it does not describe an AWS Region.

Correct Answer

B. The services a user has access to and the last time those services were utilized

Explanation

IAM Access Advisor provides detailed insights into the AWS services a user has access to and the last time those services were used. This allows administrators to track whether a user is actively using certain AWS services and helps in identifying unused permissions that can be revoked for better security and cost management.

Why other options are wrong

A. A list of all users in the account

This option is incorrect because IAM Access Advisor does not provide a list of all users in the account. Instead, it focuses on tracking the services that a particular user has accessed. A list of all users would be available in the IAM dashboard under the "Users" section.

C. The total number of IAM roles in the account

This is incorrect because IAM Access Advisor does not report the total number of IAM roles in the account. The number of roles can be found by navigating to the IAM roles section, but Access Advisor is specifically designed to monitor user permissions, not roles.

D. A summary of billing information for the user

This is incorrect because IAM Access Advisor does not provide billing information for users. Billing information is managed separately through the AWS Billing and Cost Management dashboard.

Correct Answer

A. On-demand delivery of compute power, database, storage, applications via the internet

Explanation

Cloud computing refers to the on-demand delivery of a wide range of computing services, including storage, applications, and computing power, over the internet. Rather than owning and maintaining physical data centers or servers, users can access these resources through the cloud, paying only for what they use. This model provides scalability, flexibility, and reduced costs for organizations, making it one of the most widely adopted technological innovations in modern IT infrastructure.

Why other options are wrong

B. Directory usage

This is incorrect because directory usage refers to managing user directories and services like LDAP (Lightweight Directory Access Protocol) or Active Directory. It is unrelated to the core concept of cloud computing, which is about the on-demand provision of IT resources.

C. Energy availability via cell towers

This is incorrect because energy availability via cell towers does not relate to the definition of cloud computing. Cloud computing is about accessing IT resources via the internet, not about energy distribution.

D. Networking of computer systems for coordination between companies

This is incorrect because while networking of computer systems is part of the broader IT infrastructure, it does not define cloud computing. Cloud computing specifically refers to the on-demand availability of computing resources over the internet, not merely the coordination of computer systems.

Correct Answer

C. Data transfer OUT pricing model

Explanation

The Data Transfer OUT pricing model specifically charges users based on the amount of data they transfer out of AWS services to the internet. AWS charges for data that exits the AWS network, which includes the traffic going from AWS to end-users over the internet. This pricing model is separate from other services like compute or storage, which have different cost structures.

Why other options are wrong

A. Compute pricing model

This is incorrect because the Compute pricing model focuses on charges related to using compute resources, such as EC2 instances, and does not cover data transfer out of the cloud. Data transfer is a separate billing aspect.

B. Storage pricing model

This is incorrect because the Storage pricing model pertains to the cost of storing data in AWS services like S3, EBS, or Glacier. It does not focus on data transfer, especially data leaving the AWS cloud.

D. Reserved instance pricing model

This is incorrect because Reserved Instance pricing involves committing to a certain usage level of instances (e.g., EC2) for a predefined period, typically offering discounted rates. It does not pertain to data transfer costs.

Correct Answer

B. To ensure high availability and fault tolerance for applications

Explanation

AWS Availability Zones (AZs) are designed to enhance the availability and fault tolerance of applications by providing multiple, physically separate data centers within a region. These AZs are connected via low-latency links, allowing applications to be distributed across multiple zones for redundancy and fault tolerance. If one AZ experiences issues, the application can failover to another AZ, ensuring minimal downtime and improved availability.

Why other options are wrong

A. To provide a single point of failure for applications

This is incorrect because AWS Availability Zones are designed to avoid a single point of failure. The purpose of AZs is to increase reliability, not introduce failure points.

C. To limit the geographical distribution of data centers

This is incorrect because AWS Availability Zones are designed to increase the geographical distribution of data centers within a region, allowing for better redundancy and fault tolerance. They are not meant to limit geographical distribution.

D. To reduce the cost of cloud services

This is incorrect because the primary purpose of Availability Zones is not to reduce costs. They are intended to improve availability, fault tolerance, and reliability of applications, though they can indirectly help manage costs by optimizing resource usage.

Correct Answer

B. Data must remain within a specified geographic region unless explicitly authorized for transfer.

Explanation

The principle of data residency ensures that data is stored and processed within a specific geographic location to comply with local laws and regulations. Many countries have data residency laws that require certain types of data, such as personal or financial information, to remain within their borders unless the data transfer is explicitly authorized. This principle helps businesses comply with data protection and privacy laws.

Why other options are wrong

A. Data can be freely transferred across regions without restrictions.

This is incorrect because transferring data across regions is often restricted by compliance and legal requirements. Many countries and regions impose regulations that limit where data can be transferred or stored, especially when it involves sensitive information.

C. Data residency is irrelevant to compliance and legal requirements.

This is incorrect because data residency is highly relevant to compliance and legal requirements. Many laws, such as the GDPR in the European Union, mandate that data must stay within certain geographic areas unless specific conditions are met.

D. Data can only be stored in public clouds to ensure accessibility.

This option is incorrect because data can be stored in various types of clouds (public, private, or hybrid), and the principle of data residency does not mandate the use of public clouds. The key concern is where the data is physically located, not the type of cloud used.