AWS CCP 6 Flashcards
What type of cloud computing service type do AWS Elastic Beanstalk and Amazon RDS correspond to?
- IaaS
- PaaS
- SaaS
- Hybrid
- PaaS
Which types of scaling policies are available when using AWS Auto Scaling? (choose 2)
- Simple scaling
- Deferred scaling
- Agile scaling
- Step scaling
- Warm scaling
- Simple scaling
4. Step scaling
Which type of Elastic Load Balancer only distributes traffic using the TCP protocol information?
- Application Load Balancer (ALB)
- Network Load Balancer (NLB)
- Classic Load Balancer (CLB)
- No load balancers operate at the TCP level
- Network Load Balancer (NLB)
How can a company configure automatic, asynchronous copying of objects in Amazon S3 buckets across regions?
- This is done by default by AWS
- By configuring multi-master replication
- Using cross-region replication
- Using lifecycle actions
- Using cross-region replication
A web server is being maliciously targeted, how a systems administrator deny access from a list of known attacker IP addresses? (choose 2)
- Using a local firewall such as iptables
- Using a rule on the Internet Gateway
- Using a Security Group deny rule
- Using a Network ACL deny rule
- Through VPC route table configuration
- Using a local firewall such as iptables
4. Using a Network ACL deny rule
How can a Solutions Architect reduce the latency between end-users and applications or content? (choose 2)
- Deploy applications in multiple AZs
- Deploy applications in regions closest to the end-users
- Use S3 Transfer Acceleration to improve application performance
- Use Amazon CloudFront to cache content closer to end-users
- Use larger EC2 instance types for the applications
- Deploy applications in regions closest to the end-users
4. Use Amazon CloudFront to cache content closer to end-users
What is an example of scaling vertically?
- AWS Auto Scaling adding more EC2 instances
- AWS Lambda adding concurrently executing functions
- Increasing the instance size with Amazon RDS
- Adding read replicas to an Amazon RDS database
- Increasing the instance size with Amazon RDS
To reduce cost, which of the following services support reservations? (choose 2)
- Amazon ElastiCache
- Amazon CloudFormation
- Amazon RedShift
- AWS Elastic Beanstalk
- Amazon S3
- Amazon ElastiCache
3. Amazon RedShift
Which of the following is not a best practice for protecting the root user of an AWS account?
- Don’t share the root user credentials
- Enable MFA
- Remove administrative permissions
- Lock away the AWS root user access keys
- Remove administrative permissions
Which AWS database service is a SQL database that supports complex queries and joins?
- Amazon DynamoDB
- Amazon ElastiCache
- Amazon SimpleDB
- Amazon RDS
- Amazon RDS
You are evaluating AWS services that can assist with creating scalable application environments. Which of the statements below best describes the Elastic Load Balancer service?
- Helps you ensure that you have the correct number of Amazon EC2 instances available to handle the load for your application
- A highly available and scalable Domain Name System (DNS) service
- Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
- A network service that provides an alternative to using the Internet to connect customers’ on-premise sites to AWS
- Automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses
What are two of the core concepts related to Amazon SNS? (choose 2)
- Topics
- Conversations
- Subscriptions
- Templates
- Tables
- Topics
3. Subscriptions
What types of rules can be defined in a security group? (choose 2)
- Inbound
- Deny
- Tags
- Outbound
- Stateful
- Inbound
4. Outbound
A Solutions Architect needs to design a cloud-native application architecture using AWS services. What is a typical use case for Amazon Simple Queue Service (SQS)?
- Providing fault tolerance for EC2 instances
- Co-ordination of work items between different human and non- human workers
- Decoupling application components to ensure that there is no dependency on the availability of a single component
- Running serverless processes as functions
- Decoupling application components to ensure that there is no dependency on the availability of a single component
Which AWS technology enables you to group resources that share one or more tags?
- Tag groups
- Organization groups
- Resource groups
- Consolidation groups
- Resource groups
Which AWS security tool uses an agent installed in EC2 instances and assesses applications for vulnerabilities and deviations from best practices?
- AWS Trusted Advisor
- AWS Personal Health Dashboard
- AWS TCO Calculator
- AWS Inspector
- AWS Inspector
You need to provision a single EBS volume that is 500 GiB in size and needs to support 20,000 IOPS. Which EBS volume type will you select?
- General Purpose SSD
- Provisioned IOPS SSD
- Throughput Optimized HDD
- Cold HDD
- Provisioned IOPS SSD
What is the easiest way to store a backup of an EBS volume on Amazon S3?
- Write a custom script to copy the data into a bucket
- Use S3 lifecycle actions to backup the volume
- Create a snapshot of the volume
- Use Amazon Kinesis to process the data and store the results in S3
- Create a snapshot of the volume
Which AWS storage service is accessed using the Network File System (NFS) protocol?
- Amazon EBS
- Amazon S3
- Amazon Instance Store
- Amazon EFS
- Amazon EFS
Which of the statements below do not characterize cloud computing?
- Cloud computing is the on-demand delivery of compute power
- With cloud computing you get to benefit from massive economies of scale
- Cloud computing allows you to swap variable expense for capital expense
- With cloud computing you can increase your speed and agility
- Cloud computing allows you to swap variable expense for capital expense
What are the advantages of running a database service such as Amazon RDS in the cloud versus deploying on-premise? (choose 2)
- You have full control of the operating system and can install your own operational tools
- Scalability is improved as it is quicker to implement and there is an abundance of capacity
- You can use any database software you like, allowing greater flexibility
- High availability is easier to implement due to built-in functionality for deploying read replicas and multi-AZ
- There are no costs for replicating data between DBs in different data centers or regions
- Scalability is improved as it is quicker to implement and there is an abundance of capacity
- High availability is easier to implement due to built-in functionality for deploying read replicas and multi-AZ
A Solutions Architect is looking for a way to use standard templates for describing and provisioning their infrastructure resources on AWS. Which AWS service can be used in this scenario?
- Amazon SNS
- AWS Auto Scaling
- AWS Elastic Beanstalk
- AWS CloudFormation
- AWS CloudFormation
Which type of Elastic Load Balancer allows you to route traffic to instances based on the URL path of the HTTP header?
- Application Load Balancer (ALB)
- Network Load Balancer (NLB)
- Classic Load Balancer (CLB)
- This is not supported with any type of ELB
- Application Load Balancer (ALB)
What can be used to automatically invoke an AWS Lambda function? (choose 2)
- Changes to an Amazon S3 bucket
- Creation of an IAM user
- An EC2 instance is terminated
- Messages added to an Amazon SQS queue
- Data is written to an Amazon EBS volume
- Changes to an Amazon S3 bucket
4. Messages added to an Amazon SQS queue
Which of the following are pillars from the five pillars of the AWS Well- Architected Framework? (Choose 2)
- Resilience
- Operational excellence
- Confidentiality
- Economics
- Performance efficiency
- Operational excellence
5. Performance efficiency
Up to what layer of the OSI model does AWS Web Application Firewall operate?
- Layer 3
- Layer 4
- Layer 5
- Layer 7
- Layer 7
What do you need to log into the AWS console?
- User name and password
- Key pair
- Access key and secret ID
- Certificate
- User name and password
Your manager has asked you to explain the benefits of using IAM groups. Which of the below statements are valid benefits? (choose 2)
- You can restrict access to the subnets in your VPC
- Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users
- Provide the ability to create custom permission policies
- Enables you to attach IAM permission policies to more than one user at a time
- Provide the ability to nest groups to create an organizational hierarchy
- Groups let you specify permissions for multiple users, which can make it easier to manage the permissions for those users
- Enables you to attach IAM permission policies to more than one user at a time
Which of the authentication options below can be used to authenticate using AWS APIs? (choose 2)
- Key pairs
- Access keys
- Server passwords
- Security groups
- Server certificates
- Access keys
4. Server certificates
When using Amazon Kinesis Data Streams, where can a consumer store their results? (choose 2)
- Amazon S3
- Amazon RDS
- Amazon DynamoDB
- Amazon ECS
- Amazon EBS
- Amazon S3
3. Amazon DynamoDB
A company wants to use their on-premise Active Directory service to authenticate with applications on the AWS cloud. Which AWS service can be used to connect their on-premise AD to AWS?
- Simple AD
- AD Connector
- IAM Connector
- RADIUS
- AD Connector
Which type of Elastic Load Balancer only distributes traffic using the HTTP, and HTTPS protocol information?
- Application Load Balancer (ALB)
- Network Load Balancer (NLB)
- Classic Load Balancer (CLB)
- No load balancers operate at the TCP level
- Application Load Balancer (ALB)
A company is currently running containers using Docker and Kubernetes. The company are interested in consuming a managed Kubernetes service so they don’t need to maintain their own implementation. Which AWS service can they use?
- Amazon ECS
- Amazon EC2
- Amazon EKS
- Amazon EBS
- Amazon EKS
You need to connect your company’s on-premise network into AWS and would like to establish an AWS managed VPN service. Which of the following configuration items needs to be setup in your company side of the connection?
- A Virtual Private Gateway
- A Customer Gateway
- A Network Address Translation device
- A Firewall
- A Customer Gateway
How can you deploy your EC2 instances so that if a single data center fails you still have instances available?
- Across regions
- Across subnets
- Across Availability Zones
- Across VPCs
- Across Availability Zones
When using an Application Load Balancer (ALB), what protocols can be selected for instance health checks? (choose 2)
- HTTP
- SSL
- HTTPS
- TCP
- ICMP
- HTTP
3. HTTPS
How can a systems administrator specify a script to be run on an EC2 instance during launch?
- Metadata
- User Data
- Run Command
- AWS Config
- User Data
How can a company facilitate the sharing of data over private connections between two accounts they own within a region?
- Create an internal ELB
- Create a subnet peering connection
- Create a VPC peering connection
- Configure matching CIDR address ranges
- Create a VPC peering connection
Which AWS support plans provide 24x7 access to customer service?
- Basic
- Business
- Developer
- All plans
- All plans
What advantages does the AWS cloud provide in relation to cost? (choose 2)
- Fine-grained billing
- One-off payments for on-demand resources
- Ability to turn off resources and not pay for them
- Enterprise licensing discounts
- Itemized power costs
- Fine-grained billing
3. Ability to turn off resources and not pay for them
Which of the following are NOT features of AWS IAM? (choose 2)
- Shared access to your AWS account
- Logon using local user accounts
- Identity federation
- PCI DSS compliance
- Charged for what you use
- Logon using local user accounts
5. Charged for what you use
Which HTTP code indicates a successful upload of an object to Amazon S3
- 200
- 300
- 400
- 500
- 200
Which of the following records are captured by Amazon CloudTrail? (choose 2)
- The identity of the API caller
- The CPU usage of the instance
- Custom metrics generated by applications
- The request parameters
- Billing information
- The identity of the API caller
4. The request parameters
Which AWS database service is schema-less and can be scaled dynamically without incurring downtime?
- Amazon RDS
- Amazon Aurora
- Amazon RedShift
- Amazon DynamoDB
- Amazon DynamoDB
Under the AWS Shared Responsibility Model, who is responsible for what? (choose 2)
- Customers are responsible for compute infrastructure
- AWS are responsible for network and firewall configuration
- Customers are responsible for networking traffic protection
- AWS are responsible for networking infrastructure
- Customers are responsible for edge locations
- Customers are responsible for networking traffic protection
- AWS are responsible for networking infrastructure
When using Amazon RDS with Read Replicas, which of the deployment options below are valid? (choose 2)
- Within an Availability Zone
- Cross-edge location
- Cross-subnet
- Cross-data center
- Cross-Availability Zone
- Within an Availability Zone
5. Cross-Availability Zone
What do you need to create to specify how your AWS Auto Scaling Group scales and shrinks?
- IAM Policy
- Scaling Plan
- Scaling Policy
- Launch Configuration
- Scaling Policy
Your manager has asked you to explain some of the security features available in the AWS cloud. How can you describe the function of Amazon CloudHSM?
- It is a Public Key Infrastructure (PKI)
- It provides server-side encryption for S3 objects
- It can be used to generate, use and manage encryption keys in the cloud
- it is a firewall for use with web applications
- It can be used to generate, use and manage encryption keys in the cloud
Which AWS Glacier data access option retrieves data from an archive in 1- 5 minutes?
- Standard
- Express
- Accelerated
- Expedited
- Expedited
With which AWS Storage Gateway Volume Gateway configuration is data stored on-premise and asynchronously backed up to Amazon S3?
- Cached volume mode
- File gateway mode
- Stored volume mode
- VTL mode
- Stored volume mode
Which type of AWS database is ideally suited to analytics using SQL queries?
- Amazon DynamoDB
- Amazon RedShift
- Amazon RDS
- Amazon S3
- Amazon RedShift
When using Identity and Access Management (IAM) what is the process of gaining access to a resource?
- First you authenticate, then you are authorized, and then you gain access
- First you are authorized, then you authenticate, and then you gain access
- First you authenticate, then you gain access, and then you are authorized
- With IAM you do not need to authenticate or be authorized
- First you authenticate, then you are authorized, and then you gain access
Which AWS service makes it easy to coordinate the components of distributed applications as a series of steps in a visual workflow?
- Amazon SWF
- AWS Step Functions
- Amazon SNS
- Amazon SES
- AWS Step Functions
A Solutions Architect is creating the business process workflows associated with an order fulfilment system. Which AWS service can assist with coordinating tasks across distributed application components?
- Amazon STS
- Amazon SQS
- Amazon SWF
- Amazon SNS
- Amazon SWF
Which types of servers can be migrated using the AWS Server Migration Service? (choose 2)
- OpenStack VMs
- VMware vSphere VMs
- Oracle VMs
- Hyper-V VMs
- Azure Instances
- VMware vSphere VMs
4. Hyper-V VMs
Which billing and account management service can be used by businesses to sell applications they have built on the AWS cloud?
- Amazon Payments
- Amazon AppPay
- Amazon DevPay
- Amazon Billing
- Amazon DevPay
Which AWS service is designed to be used for operational analytics?
- Amazon EMR
- Amazon Athena
- Amazon QuickSight
- Amazon Elasticsearch Service
- Amazon Elasticsearch Service
You need to connect your company’s on-premise network into AWS and would like to establish an AWS managed VPN service. Which of the following configuration items needs to be setup on the Amazon VPC side of the connection?
- A Virtual Private Gateway
- A Customer Gateway
- A Network Address Translation device
- A Firewall
- A Virtual Private Gateway
Where are Amazon EBS snapshots stored?
- On an Amazon EBS instance store
- On an Amazon EFS filesystem
- Within the EBS block store
- On Amazon S3
- On Amazon S3
Which type of Elastic Load Balancer distributes traffic using the TCP, SSL, HTTP and HTTPS protocol information?
- Application Load Balancer (ALB)
- Network Load Balancer (NLB)
- Classic Load Balancer (CLB)
- No load balancers operate at the TCP level
- Classic Load Balancer (CLB)
What locations can be used for storing Amazon CloudWatch log files? (choose 2)
- Amazon EBS
- Amazon CloudWatch Logs
- Amazon Storage Gateway
- Splunk
- Amazon CloudTrail
- Amazon CloudWatch Logs
4. Splunk
How many snapshots are required in order to restore an Amazon EBS volume?
- The most recent snapshot only
- The first and most recent snapshot
- All snapshots
- The first snapshot only
- The most recent snapshot only
To which destinations can Amazon S3 NOT send event notifications? (choose 2)
- DynamoDB Table
- SNS Topics
- SQS Queue
- CloudWatch
- Lambda functions
- DynamoDB Table
4. CloudWatch
Which type of scaling does AWS Auto Scaling provide?
- Vertical
- Linear
- Horizontal
- Incremental
- Horizontal