AWS CCP 4 Flashcards
Which open-source technology allows you to build and deploy distributed applications inside of software containers?
- Docker
- Jenkins
- Puppet
- Chef
- Docker
Which of the advantages of cloud listed below is most closely addressed by the capabilities of AWS Auto Scaling?
- Benefit from massive economies of scale
- Stop guessing about capacity
- Stop spending money running and maintaining data centers
- Go global in minutes
- Stop guessing about capacity
What does an organization need to do in Amazon IAM to enable user access to services being launched in new region?
- Update the user accounts to allow access from another region
- Create new user accounts in the new region
- Enable global mode in IAM to provision the required access
- Nothing, IAM is global
- Nothing, IAM is global
What do Amazon S3 objects consist of? (choose 2)
- Key
- Userdata
- Value
- ARN
- AMI
- Key
3. Value
Which type of EBS volume should you choose for an application that requires 12,000 IOPS from a single volume?
- General Purpose SSD
- Provisioned IOPS SSD
- Throughput Optimized HDD
- Cold HDD
- Provisioned IOPS SSD
Which type of Amazon Route 53 record set should be used to map a zone apex record to an Amazon Elastic Load Balancer?
- A
- AAAA
- CNAME
- Alias
- Alias
What is the most cost-effective Amazon S3 storage tier for data that is not often accessed but requires high durability?
- Amazon S3 Standard
- Amazon S3 Standard-IA
- Amazon S3 One Zone-IA
- Amazon Glacier
- Amazon S3 One Zone-IA
Which types of root storage devices are available for Amazon EC2 instances? (choose 2)
- EFS file system
- EBS volume
- S3 Bucket
- Instance Store
- RAM
- EBS volume
4. Instance Store
Which of the following are supported event sources for AWS Lambda? (choose 2)
- Amazon S3
- Amazon EC2
- Amazon DynamoDB
- Amazon RedShift
- AWS Direct Connect
- Amazon S3
3. Amazon DynamoDB
Which Amazon EC2 pricing option provides significant discounts for fixed term contracts?
- Reserved Instances
- Dedicated Instances
- Dedicated Hosts
- Spot Instances
- Reserved Instances
Which type of Amazon Route 53 routing policy allows you to specify a numerical value per IP address, totalling 100, that favors addresses with higher values?
- Latency based
- Failover
- Weighted
- Geo-location
- Weighted
Which statement is correct in relation to the AWS Shared Responsibility Model?
- Customers are responsible for security of the cloud
- AWS are responsible for encrypting customer data
- Customers are responsible for patching storage systems
- AWS are responsible for the security of regions and availability zones
- AWS are responsible for the security of regions and availability zones
Which Amazon RDS deployment type is best used to enable fault tolerance in the event of the failure of an availability zone?
- Multiple Availability Zones
- Multiple Regions
- Read Replicas
- Write Replicas
- Multiple Availability Zones
Which AWS service lets you add user sign up, sign-in and access control to web and mobile apps?
- AWS Directory Service
- AWS Cognito
- AWS Artifact
- AWS CloudHSM
- AWS Cognito
Which of the options below are recommendations in the reliability pillar of the well-architected framework? (choose 2)
- Test recovery procedures
- Manually recover from failure
- Scale vertically using big systems
- Stop guessing about capacity
- Manage change in manual processes
- Test recovery procedures
4. Stop guessing about capacity
Which AWS service is a Natural Language Processing (NLP) service that uses machine learning to find insights and relationships in text?
- Amazon Transcribe
- Amazon Comprehend
- Amazon Rekognition
- Amazon Sagemaker
- Amazon Comprehend
Which of the following can be assigned to an IAM user? (choose 2)
- An access key ID and secret access key
- A password for logging into Linux
- A password for access to the management console
- A key pair
- An SSL/TLS certificate
- An access key ID and secret access key
3. A password for access to the management console
Which Amazon namespace is used to uniquely identify AWS resources?
- AMI
- API
- ARN
- ACL
- ARN
Which Amazon EC2 billing option allows gives you low cost, maximum flexibility, no upfront costs or commitment, and you only pay for what you use?
- Reserved Instances
- Spot Instances
- Dedicated Host
- On-Demand Instances
- On-Demand Instances
What is the difference between an EBS volume and an Instance store?
- EBS volumes are object storage devices whereas Instance store volume are block based
- Instance store volumes are ephemeral whereas EBS volumes are persistent storage
- Instance store volumes can be used with all EC2 instance types whereas EBS cannot
- EBS volumes are file-level storage devices whereas Instance store volumes are object-based
- Instance store volumes are ephemeral whereas EBS volumes are persistent storage
Which of the below are valid use cases for using AWS services to implement real-time auditing? (choose 2)
- Use Amazon Inspector to monitor for compliance
- Use Amazon CloudWatch for monitoring API calls
- Use Amazon CloudTrail to monitor application performance 4. Use AWS IAM to store log files
- Use AWS Lambda to scan log files
- Use Amazon Inspector to monitor for compliance
5. Use AWS Lambda to scan log files
Which Compute service should be used for running a Linux operating system upon which you will install custom software?
- Amazon ECS
- Amazon EC2
- AWS Lambda
- Amazon EKS
- Amazon EC2
What is the scope of an Amazon Virtual Private Cloud (VPC)?
- It spans multiple subnets
- It spans a single CIDR block
- It spans all Availability Zones in all regions
- It spans all Availability Zones within a region
- It spans all Availability Zones within a region
Which of the below are valid options within the VPC Wizard? (choose 2)
- VPC with Two Public Subnets
- VPC with Private Subnets
- VPC with a Single Public Subnet
- VPC with Public and Private Subnets and Hardware VPN Access
- VPC with a Private Subnet Only and Software VPN Access
- VPC with a Single Public Subnet
4. VPC with Public and Private Subnets and Hardware VPN Access
Which type of AWS Storage Gateway can be used to backup data with popular backup software?
- File Gateway
- Volume Gateway
- Gateway Virtual Tape Library
- Backup Gateway
- Gateway Virtual Tape Library
Which type of security control can be used to deny network access from a specific IP address?
- Security Group
- Network ACL
- AWS WAF
- AWS Shield
- Network ACL