AWS Cloud Architecting: Module 11 Knowledge Check – Automating Your Architecture

Posted by


Automation is at the heart of building a scalable and resilient cloud architecture. Module 11 of the AWS Academy Cloud Architecting curriculum focuses on how to leverage tools like AWS CloudFormation and AWS Quick Starts to automate the deployment and management of your resources.

Here is your comprehensive guide to the Module 11 Knowledge Check, including all questions, options, and the reasoning behind each answer.


1. Reasons to Use Automation for Provisioning Resources

Question: Which are reasons to use automation to provision resources? (Select TWO.)

  • Options:
    • Lack of version control with manual processes
    • Automation requirement for high availability
    • Greater expense with manual processes
    • Automation requirement for creating some resources
    • Alignment with the reliability design principle
  • Correct Answers:
    1. Lack of version control with manual processes
    2. Alignment with the reliability design principle
  • Why: With automation, you can introduce version control to control updates and track version history, which is not possible with manual processes. Automation also aligns with the reliability design principle, which requires the use of automation to manage change and ensure consistency.

2. Benefits of Infrastructure as Code (IaC)

Question: Which are benefits of using infrastructure as code (IaC) over manual processes? (Select TWO.)

  • Options:
    • Propagate updates from a single environment to all environments.
    • Automate system-wide security scans.
    • Protect environments from deletion.
    • Manage all account users.
    • Deploy environments with configuration consistency.
  • Correct Answers:
    1. Propagate updates from a single environment to all environments.
    2. Deploy environments with configuration consistency.
  • Why: With IaC, you can deploy environments with consistency and propagate updates across environments. IaC also aligns with the reliability design principle, which requires the use of automation to manage change.

3. Quickly Setting Up a Secure Implementation

Question: A cloud architect wants to quickly set up a secure implementation of an Amazon FSx for Windows File Server that follows AWS best practices. Which solution should they use?

  • Options:
    • AWS CloudFormation Designer
    • An AWS CloudFormation template that was downloaded from the internet
    • An Amazon Machine Image (AMI) on AWS Marketplace
    • An AWS Quick Start
  • Correct Answer: An AWS Quick Start
  • Why: AWS solutions architects and AWS Partners build Quick Starts to help you deploy popular technologies on AWS. They are based on AWS best practices for security and high availability.

4. What is Amazon CodeWhisperer?

Question: What is Amazon CodeWhisperer?

  • Options:
    • An integrated development environment (IDE)
    • A template for rapid application deployment
    • A set of automated reference architectures
    • An artificial intelligence (AI)-powered coding companion
  • Correct Answer: An artificial intelligence (AI)-powered coding companion
  • Why: Amazon CodeWhisperer is an AI-powered code generator that integrates with your IDE to provide real-time code suggestions.

5. Reasons to Use Amazon CodeWhisperer

Question: Which are reasons to use Amazon CodeWhisperer? (Select TWO.)

  • Options:
    • Accelerate coding tasks.
    • Write compliance tests.
    • Enhance application security.
    • Share open-source code.
    • Automate for high availability.
  • Correct Answers:
    1. Accelerate coding tasks.
    2. Enhance application security.
  • Why: With Amazon CodeWhisperer, you can accelerate coding tasks and enhance application security. Automation aligns with the reliability design principle, which requires the use of automation to manage change.

6. What is AWS CloudFormation?

Question: What is AWS CloudFormation?

  • Options:
    • An AWS service that you can use to create, model, and manage AWS resources
    • A template that describes your infrastructure
    • A description of best practices for designing an AWS implementation
    • A package of all the information that is needed to launch an Amazon EC2 instance
  • Correct Answer: An AWS service that you can use to create, model, and manage AWS resources
  • Why: AWS CloudFormation provides a simplified way to model, create, and manage a collection of AWS resources. It enables you to treat infrastructure as code.

7. What is AWS CloudFormation Designer?

Question: What is AWS CloudFormation Designer?

  • Options:
    • A collection of reusable templates
    • A source code repository for AWS CloudFormation templates
    • A graphical design interface for creating AWS CloudFormation templates
    • A tool for automating deployments
  • Correct Answer: A graphical design interface for creating AWS CloudFormation templates
  • Why: You can use AWS CloudFormation Designer to author AWS CloudFormation templates in the AWS Management Console.

8. Handling Deployment-Specific Differences in CloudFormation

Question: Which option can be used to accomplish deployment-specific differences in an AWS CloudFormation template?

  • Options:
    • Use conditions.
    • Use drift detection.
    • Use change sets.
    • Use AWS CloudFormation Designer.
  • Correct Answer: Use conditions.
  • Why: You can use conditions to configure different environments from the same template. This allows for deployment-specific environments that are otherwise configured identically.

9. Previewing Changes in CloudFormation

Question: Which option is a good way to preview changes before implementing them in AWS CloudFormation Designer?

  • Options:
    • Visually inspect the template.
    • Run Update Stack.
    • Run Detect Drift.
    • Create a change set.
  • Correct Answer: Create a change set.
  • Why: By creating a change set, you can see the changes to the template before you apply them.

10. Identifying Manual Changes to a CloudFormation Stack

Question: Which option is a good way to know which resources in an application environment were manually modified if the environment was created by running an AWS CloudFormation stack?

  • Options:
    • Run a comparison in AWS CloudFormation Designer on the stack.
    • Run a change set on the stack.
    • Run drift detection on the stack.
    • Run conditions on the stack.
  • Correct Answer: Run drift detection on the stack.
  • Why: By running drift detection, you can compare the current stack to the expected template configuration to identify where manual changes were made.

Summary Checklist

Automation GoalRecommended Service/Feature
Treating Infrastructure as CodeAWS CloudFormation
Deploying with Best PracticesAWS Quick Starts
AI-Powered Coding AssistanceAmazon CodeWhisperer
Authoring Templates GraphicallyAWS CloudFormation Designer
Previewing Stack UpdatesChange Sets
Detecting Manual Resource ChangesDrift Detection

Check out the full video walkthrough here: YouTube Link


Leave a Reply

Your email address will not be published. Required fields are marked *