AWS 3 Flashcards

1
Q

Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud?
A. Compute instances can be launched and terminated as needed to optimize costs.
B. Compute costs can be viewed in the AWS Billing and Cost Management console.
C. Users retain full administrative access to their compute instances.
D. Users can optimize costs by permanently running enough instances at peak load.

A

A. Compute instances can be launched and terminated as needed to optimize costs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.)
A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
B. AWS is designed for high availability, which eliminates user downtime.
C. AWS eliminates the need for on-premises IT staff.
D. AWS uses economies of scale to continually reduce prices.
E. AWS offers a single pricing model for Amazon EC2 instances.

A

A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
D. AWS uses economies of scale to continually reduce prices.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which AWS service monitors AWS accounts for security threats?
A. Amazon GuardDuty
B. AWS Secrets Manager
C. Amazon Cognito
D. AWS Certificate Manager (ACM)

A

A. Amazon GuardDuty

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which benefit is included with an AWS Enterprise Support plan?
A. AWS Partner Network (APN) support at no cost.
B. Designated support from an AWS technical account manager (TAM)
C. On-site support from AWS engineers
D. AWS managed compliance as code with AWS Config

A

B. Designated support from an AWS technical account manager (TAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which task does AWS perform automatically?
A. Encrypt data that is stored in Amazon DynamoDB.
B. Patch Amazon EC2 instances.
C. Encrypt user network traffic.
D. Create TLS certificates for users’ websites.

A

A. Encrypt data that is stored in Amazon DynamoDB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which AWS service or tool can a company use to visualize, understand, and manage AWS spending and usage over time?
A. AWS Trusted Advisor
B. Amazon CloudWatch
C. Cost Explorer
D. AWS Budgets

A

C. Cost Explorer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources.Which AWS service or feature can be used to meet these requirements?
A. AWS Local Zones
B. Availability Zones
C. AWS Outposts
D. AWS Wavelength Zones

A

C. AWS Outposts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

A company requires an isolated environment within AWS for security purposes.Which action can be taken to accomplish this?
A. Create a separate Availability Zone to host the resources.
B. Create a separate VPC to host the resources.
C. Create a placement group to host the resources.
D. Create an AWS Direct Connect connection between the company and AWS.

A

B. Create a separate VPC to host the resources.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which AWS service is a highly available and scalable DNS web service?
A. Amazon VPC
B. Amazon CloudFront
C. Amazon Route 53
D. Amazon Connect

A

C. Amazon Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which of the following is an AWS best practice for managing an AWS account root user?
A. Keep the root user password with the security team.
B. Enable multi-factor authentication (MFA) for the root user.
C. Create an access key for the root user.
D. Keep the root user password consistent for compliance purposes.

A

B. Enable multi-factor authentication (MFA) for the root user.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
A. EC2 key pairs
B. AWS Systems Manager Session Manager
C. AWS Identity and Access Management (IAM)
D. Network ACLs

A

B. AWS Systems Manager Session Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?
A. No upfront payment
B. Hourly on-demand payment
C. Partial upfront payment
D. All upfront payment

A

D. All upfront payment

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.Which best practice for cost governance does this example show?
A. Resource controls
B. Cost allocation
C. Architecture optimization
D. Tagging enforcement

A

C. Architecture optimization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

A company would like to host its MySQL databases on AWS and maintain full control over the operating system, database installation, and configuration.Which AWS service should the company use to host the databases?
A. Amazon RDS
B. Amazon EC2
C. Amazon DynamoDB
D. Amazon Aurora

A

B. Amazon EC2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

How does the AWS global infrastructure offer high availability and fault tolerance to its users?
A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and are interconnected with low-latency networks and redundant power supplies.
B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic location.
C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions.
D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.

A

D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency networking and redundant power supplies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances.Which benefit of the AWS Cloud does this example illustrate?
A. High availability
B. Elasticity
C. Reliability
D. Global reach

A

B. Elasticity

17
Q

Which AWS service or feature is used to send both text and email messages from distributed applications?
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Email Service (Amazon SES)
C. Amazon CloudWatch alerts
D. Amazon Simple Queue Service (Amazon SQS)

A

A. Amazon Simple Notification Service (Amazon SNS)

18
Q

A user is able to set up a master payer account to view consolidated billing reports through:
A. AWS Budgets.
B. Amazon Macie.
C. Amazon QuickSight.
D. AWS Organizations.

A

D. AWS Organizations.

19
Q

According to the AWS shared responsibility model, which task is the customer’s responsibility?
A. Maintaining the infrastructure needed to run AWS Lambda
B. Updating the operating system of Amazon DynamoDB instances
C. Maintaining Amazon S3 infrastructure
D. Updating the guest operating system on Amazon EC2 instances

A

D. Updating the guest operating system on Amazon EC2 instances

20
Q

A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited operational knowledge to perform the migration.Which AWS service supports this use case?
A. Amazon EC2
B. Amazon Lightsail
C. Amazon S3
D. AWS Lambda

A

B. Amazon Lightsail

21
Q

A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each application.What can the company do to meet this requirement?
A. Set up invoiced billing.
B. Use AWS Artifact.
C. Set budgets in Cost Explorer.
D. Create cost allocation tags.

A

D. Create cost allocation tags.

22
Q

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?
A. Vertical scaling
B. Manual failure recovery
C. Testing recovery procedures
D. Changing infrastructure manually

A

C. Testing recovery procedures

23
Q

A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database software.Which AWS service can be used to accomplish this?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift

A

B. Amazon DynamoDB

24
Q

Which task is an AWS responsibility when a workload is running in Amazon RDS?
A. Creating the database table
B. Updating the database schema
C. Installing the database engine
D. Dropping the database records

A

C. Installing the database engine

25
Q

A development team wants to publish and manage web services that provide REST APIs.Which AWS service will meet this requirement?
A. AWS App Mesh
B. Amazon API Gateway
C. Amazon CloudFront
D. AWS Cloud Map

A

B. Amazon API Gateway

26
Q

A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.Which AWS service should the company use to build this capability?
A. Amazon SageMaker
B. Amazon Textract
C. Amazon Rekognition
D. Amazon Comprehend

A

C. Amazon Rekognition

27
Q

Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
B. Database software patches
C. Operating system patches
D. Operating system installations.

A

D. Operating system installations.

28
Q

A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated. The data needs to be available for retrieval within seconds.Which S3 storage class meets these requirements MOST cost-effectively?
A. S3 Standard
B. S3 One Zone-Infrequent Access (S3 One Zone-IA)
C. S3 Standard-Infrequent Access (S3 Standard-IA)
D. S3 Glacier

A

C. S3 Standard-Infrequent Access (S3 Standard-IA)

29
Q

An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload increase in a cost- effective manner.Which AWS Cloud features will help the company meet this requirement? (Choose two.)
A. Cross-Region workload deployment
B. Pay-as-you-go pricing
C. Built-in AWS CloudTrail audit capabilities
D. Auto Scaling policies
E. Centralized logging

A

B. Pay-as-you-go pricing
D. Auto Scaling policies

30
Q

Which AWS service helps developers use loose coupling and reliable messaging between microservices?
A. Elastic Load Balancing
B. Amazon Simple Notification Service (Amazon SNS)
C. Amazon CloudFront
D. Amazon Simple Queue Service (Amazon SQS)

A

D. Amazon Simple Queue Service (Amazon SQS)

31
Q

A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The company must abide by regional regulatory requirements.Which AWS service or program should the company use to determine which AWS services meet the regional requirements?
A. AWS Audit Manager
B. AWS Shield
C. AWS Compliance Program
D. AWS Artifact

A

C. AWS Compliance Program

32
Q

A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.Which AWS service will meet this requirement?
A. Amazon Cognito
B. AWS Security Hub
C. AWS Shield
D. AWS WAF

A

A. Amazon Cognito

33
Q

A company needs an Amazon EC2 instance for a rightsized database server that must run constantly for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Standard Reserved Instance
B. Convertible Reserved Instance
C. On-Demand Instance
D. Spot Instance

A

A. Standard Reserved Instance