AWS CCP 2 Flashcards
Which AWS service gives you centralized control over the encryption keys used to protect your data?
- AWS STS
- AWS KMS
- AWS DMS
- Amazon EBS
- AWS KMS
How can a security compliance officer retrieve AWS compliance documentation such as a SOC 2 report?
- Using AWS Artifact
- Using AWS Trusted Advisor
- Using AWS Inspector
- Using the AWS Personal Health Dashboard
- Using AWS Artifact
Which items should be included in a TCO analysis comparing on-premise to AWS Cloud? (choose 2)
- Firewall management
- Application licensing
- Compute hardware
- Data center security
- Operating system patching
- Compute hardware
4. Data center security
Which service provides visibility into user activity by recording actions taken on your account?
- Amazon CloudWatch
- Amazon CloudFormation
- Amazon CloudTrail
- Amazon CloudHSM
- Amazon CloudTrail
Which of the facts below are accurate in relation to AWS Regions? (choose 2)
- Each region consists of 2 or more availability zones
- Each region consists of a collection of VPCs
- Each region is designed to be completely isolated from the other Amazon Regions
- Regions have direct, low-latency, high throughput and redundant network connections between each other
- Regions are Content Delivery Network (CDN) endpoints for CloudFront
- Each region consists of 2 or more availability zones
3. Each region is designed to be completely isolated from the other Amazon Regions
Which AWS service provides elastic web-scale cloud computing allowing you to deploy operating system instances?
- Amazon EBS
- AWS Lambda
- Amazon RDS
- Amazon EC2
- Amazon EC2
You need to ensure you have the right amount of compute available to service demand. Which AWS service can automatically scale the number of EC2 instances for your application?
- Amazon Elastic Load Balancer
- Amazon Elasticache
- AWS Auto Scaling
- AWS RedShift
- AWS Auto Scaling
Which configuration changes are associated with scaling vertically? (choose 2)
- Adding additional EC2 instances through Auto Scaling
- Adding additional hard drives to a storage array
- Adding a larger capacity hard drive to a server
- Distributed processing
- Changing an EC2 instance to a type that has more CPU and RAM
- Adding a larger capacity hard drive to a server
5. Changing an EC2 instance to a type that has more CPU and RAM
What are two ways an AWS customer can reduce their monthly spend? (choose 2)
- Turn off resources that are not being used
- Use more power efficient instance types
- Reserve capacity where suitable
- Be efficient with usage of Security Groups
- Reduce the amount of data ingress charges
- Turn off resources that are not being used
3. Reserve capacity where suitable
Which AWS services can be utilized at no cost? (choose 2)
- Identity and Access Management (IAM)
- Amazon VPC
- Amazon S3
- Amazon CloudFront 5. Amazon RedShift
- Identity and Access Management (IAM)
2. Amazon VPC
Which types of AWS resource can be launched from a Golden Image? (choose 2)
- Amazon DynamoDB tables
- Amazon EC2 instances
- AWS Lambda functions
- Amazon RDS instances
- Amazon S3 objects
- Amazon EC2 instances
4. Amazon RDS instances
Using AWS terminology, which items can be created in an Amazon S3 bucket? (choose 2)
- Folders
- Files
- Tables
- Objects
- Queues
- Folders
4. Objects
What are two ways of connecting to an Amazon VPC from an on-premise data center? (choose 2)
- VPC Peering
- Direct Connect
- VPN CloudHub
- Internet Gateway
- VPC Router
- Direct Connect
3. VPN CloudHub
Which of the below is Amazon’s proprietary RDS database?
- MariaDB
- MySQL
- DynamoDB
- Aurora
- Aurora
A new user is unable to access any AWS services, what is the most likely explanation?
- The user needs to login with a key pair
- The services are currently unavailable
- By default, new users are created without access to any AWS services
- The default limit for user logons has been reached
- By default, new users are created without access to any AWS services
Which of the following compliance programs allows the AWS environment to process, maintain, and store protected health information?
- ISO 27001
- PCI DSS
- HIPAA
- SOC 1
- HIPAA
Which of the following services does Amazon Route 53 provide? (choose 2)
- Domain registration
- Route tables
- Domain Name Service (DNS)
- Auto Scaling
- Load balancing
- Domain registration
3. Domain Name Service (DNS)
Which file format is used to write AWS Identity and Access Management (IAM) policies?
- DOC
- XML
- JBOD
- JSON
- JSON
Which of the following are valid types of Reserved Instance? (choose 2)
- Convertible RI
- Discounted RI
- Scheduled RI
- Long-Term RI
- Special RI
- Convertible RI
3. Scheduled RI
At what level is a Network ACL applied?
- Instance level
- Region level
- Availability Zone level
- Subnet level
- Subnet level
An architect needs to compare the cost of deploying an on-premise web server and an EC2 instance on the AWS cloud. Which tool can be used to assist the architect?
- AWS Cost Explorer
- AWS Budgets
- AWS TCO Calculator
- AWS Simple Monthly Calculator
- AWS TCO Calculator
Which AWS service provides preconfigured virtual private servers (instances) that include everything required to deploy an application or create a database?
- AWS CloudFormation
- Amazon Lightsail
- Amazon ECS
- AWS Lambda
- Amazon Lightsail
Which AWS service protects against common exploits that could compromise application availability, compromise security or consume excessive resources?
- AWS WAF
- AWS Shield
- Security Group
- Network ACL
- AWS WAF
A Solutions Architect is launching a new EC2 instance that will be a web- server. Which EBS volume type provides a good balancer of price and performance and can be used as a system boot volume?
- Cold HDD (sc1)
- Throughput Optimized (st1)
- General Purpose (gp2)
- Provisioned IOPS (io1)
- General Purpose (gp2)
Which Amazon S3 storage tier provides does not include a data retrieval fee and has an availability SLA of 99.99%?
- S3 Standard
- S3 Standard-IA
- S3 One Zone-IA
- Amazon Glacier
- S3 Standard
An organization would like to run managed desktops on the AWS cloud using the Windows 10 operating system. Which service can deliver these requirements?
- Amazon EC2
- Amazon Workspaces
- Amazon SWF
- Amazon does not provide desktop services
- Amazon Workspaces
How can an organization assess applications for vulnerabilities and deviations from best practice?
- Use AWS Artifact
- Use AWS Inspector
- Use AWS Shield
- Use AWS WAF
- Use AWS Inspector
Which of the following is NOT one of the five AWS Trusted Advisor categories?
- Cost Optimization
- Performance
- Security
- Application transformation
- Application transformation
A company is planning to migrate some resources into the cloud. What factors need to be considered when determining the cost of the AWS Cloud? (choose 2)
- The number of VPCs created
- The number of servers migrated into EC2
- The number of IAM users created
- The amount of egress data per month
- The amount of ingress data per month
- The number of servers migrated into EC2
4. The amount of egress data per month
What features does Amazon RDS provide to deliver scalability, availability and durability? (choose 2)
- Multi-AZ
- Read Replicas
- DB mirroring
- Clustering
- Multi-Subnet
- Multi-AZ
2. Read Replicas
Which of the following are AWS recommended best practices in relation to IAM? (choose 2)
- Assign permissions to users
- Create individual IAM users
- Embed access keys in application code
- Enable MFA for all users
- Grant least privilege
- Create individual IAM users
5. Grant least privilege
What is an example of using loose coupling when designing an information system?
- Synchronous replication
- Proprietary interfaces
- DNS name usage
- Monolithic application architecture
- DNS name usage
An architect wants to find a tool for consistently deploying the same resources through a templated configuration. Which AWS service can be used?
- AWS Elastic Beanstalk
- AWS CodeBuild
- AWS CodeDeploy
- AWS CloudFormation
- AWS CloudFormation
Which of the following security operations tasks must be performed by AWS customers? (choose 2)
- Collecting syslog messages from physical firewalls
- Issuing data center access keycards
- Installing security updates on EC2 instances
- Enabling multi-factor authentication (MFA) for privileged users
- Installing security updates for server firmware
- Installing security updates on EC2 instances
4. Enabling multi-factor authentication (MFA) for privileged users
At which layers of the OSI model do the different types of Elastic Load Balancers operate? (choose 2)
- Network Load Balancer at layer 4
- Classic Load Balancer at layer 3
- Application Load Balancer at layer 7
- Network Load Balancer at layer 3
- Application Load Balancer at layer 4
- Network Load Balancer at layer 4
3. Application Load Balancer at layer 7
Which AWS service can be used to host a static website?
- Amazon S3
- Amazon EBS
- AWS Lambda
- Amazon EFS
- Amazon S3
What type of storage is provided by Amazon EBS?
- Block
- File
- Object
- Relational
- Block
What type of database is fully managed and can be scaled without incurring downtime?
- Amazon RDS
- Amazon S3
- Amazon DynamoDB
- Amazon ElastiCache
- Amazon DynamoDB
A manager needs to keep a check on his AWS spend. How can the manager setup alarms that notify him when his bill reaches a certain amount?
- Using CloudWatch
- Using AWS Trusted Advisor
- Using CloudTrail
- By notifying AWS support
- Using CloudWatch
Which AWS support plans provide support via email, chat and phone? (choose 2)
- Basic
- Developer
- Business
- Enterprise
- Global
- Business
4. Enterprise
Which of the following services allow root level access to the operating system? (choose 2)
- Amazon ElastiCache
- Amazon EC2
- Amazon SQS
- Amazon EMR
- Amazon SWF
- Amazon EC2
4. Amazon EMR
You need to implement a hosted queue for storing messages in transit between application servers. Which service should you use?
- Amazon SWF
- Amazon SNS
- Amazon SQS
- Amazon DynamoDB
- Amazon SQS
Which configuration changes are associated with scaling horizontally? (choose 2)
- Adding additional EC2 instances through Auto Scaling
- Adding a larger capacity hard drive to a server
- Changing the DB instance class on an RDS DB
- Adding additional hard drives to a storage array
- Changing an EC2 instance to a type that has more CPU and RAM
- Adding additional EC2 instances through Auto Scaling
4. Adding additional hard drives to a storage array
Which AWS construct provides you with your own dedicated virtual network in the cloud?
- Amazon Workspaces
- Amazon EC2
- Amazon IAM
- Amazon VPC
- Amazon VPC
Which AWS network element allows you to assign a static IPv4 address to an EC2 instance?
- Public IP
- Elastic IP
- Static IP
- Dynamic IP
- Elastic IP
An architect is creating a scalable application using AWS Auto Scaling. What needs to be created to enable a working configuration? (choose 2)
- Create a listener
- Create an Auto Scaling group
- Create a launch configuration
- Create a target group
- Create a listener rule
- Create an Auto Scaling group
3. Create a launch configuration
A Solutions Architect is designing an application stack that will be highly elastic. What AWS services can be used that don’t require you to make any capacity decisions upfront? (choose 2)
- AWS Lambda
- Amazon EC2
- Amazon S3
- Amazon RDS
- DynamoDB
- AWS Lambda
3. Amazon S3
Which AWS service can assist with coordinating tasks across distributed application components?
- Amazon STS
- Amazon SQS
- Amazon SWF
- Amazon SNS
- Amazon SWF
What kinds of routing policies are available in Amazon Route 53? (choose 2)
- Simple
- Failback
- Fault tolerant
- Latency
- Shortest Path First
- Simple
4. Latency
An application stores images which will be retrieved infrequently, but must be available for retrieval immediately. Which is the most cost-effective storage option that meets these requirements?
- Amazon Glacier with expedited retrievals
- Amazon S3 Standard-Infrequent Access
- Amazon EFS
- Amazon S3 Standard
- Amazon S3 Standard-Infrequent Access
What components can be managed in the Virtual Private Cloud (VPC) management console? (choose 2)
- Subnets
- Elastic Load Balancers
- Auto Scaling
- IP CIDR
- Snapshots
- Subnets
4. IP CIDR
Which services are managed at a regional (rather than global) level? (choose 2)
- Amazon CloudFront
- Amazon Route 53
- Amazon S3
- Amazon EC2
- AWS IAM
- Amazon S3
4. Amazon EC2
What are the names of two types of AWS Storage Gateway? (choose 2)
- S3 Gateway
- File Gateway
- Block Gateway
- Gateway Virtual Tape Library
- Cached Gateway
- File Gateway
4. Gateway Virtual Tape Library
To connect an on-premises network to an Amazon VPC using an Amazon Managed VPN connection, which components are required? (choose 2)
- VPC Router
- Virtual Private Gateway
- NAT Instance
- Direct Connect
- Customer Gateway
- Virtual Private Gateway
5. Customer Gateway
Which AWS service can be used to run Docker containers?
- AWS Lambda
- Amazon ECR
- Amazon ECS
- Amazon AMI
- Amazon ECS
How can you apply metadata to an EC2 instance that categorizes it according to its purpose, owner or environment?
- Labels
- Tags
- Hostname
- Stickers
- Tags
Which tool can be used to create and manage a selection of AWS services that are approved for use on AWS?
- AWS Service Catalog
- AWS OpsWorks
- Amazon Cloud Directory
- AWS Organizations
- AWS Service Catalog
Which services are involved with security? (choose 2)
- AWS CloudHSM
- AWS DMS
- AWS KMS
- AWS SMS
- Amazon ELB
- AWS CloudHSM
3. AWS KMS
What is a Resource Group?
- A collection of resources within a VPC
- A collection of resources that share one or more tags
- A collection of services within a category
- A collection of services within a region
- A collection of resources that share one or more tags
What are the benefits of using the AWS Managed Services? (choose 2)
- Alignment with ITIL processes
- Managed applications so you can focus on infrastructure
- Baseline integration with ITSM tools
- Designed for small businesses
- Support for all AWS services
- Alignment with ITIL processes
3. Baseline integration with ITSM tools
Which database engines are supported by Amazon RDS? (choose 2)
- DynamoDB
- SQL Server
- ElastiCache
- Aurora
- MongoDB
- SQL Server
4. Aurora
What categories of Amazon Machine Image (AMI) are available? (choose 2)
- Community AMIs
- Enterprise AMIs
- AWS Marketplace AMIs
- Shared AMIs
- Partner AMIs
- Community AMIs
3. AWS Marketplace AMIs
Which statements are true about Amazon EBS volumes? (choose 2)
- You can attach EBS volumes to multiple instances
- EBS volumes must be in the same AZ as the instances they are attached to
- You can attach multiple EBS volumes to an instance
- EBS volume data is ephemeral and is lost when an instance is stopped
- EBS volumes are object storage
- EBS volumes must be in the same AZ as the instances they are attached to
- You can attach multiple EBS volumes to an instance
Virtual servers such as EC2 instances are examples of services delivered under which cloud model?
- IaaS
- PaaS
- DBaaS
- SaaS
- IaaS
To optimize pricing or ensure capacity is available reservations can be applied to which of the following services? (choose 2)
- Amazon EC2
- AWS Lambda
- Amazon EBS
- Amazon RDS
- Amazon S3
- Amazon EC2
4. Amazon RDS