AWS Certified Cloud Practitioner Practice Exam (2) Flashcards
What is the AWS service that enables you to manage all of your AWS accounts from a single master account? A.Amazon Config B.AWS WAF C.AWS Trusted Advisor D.AWS Organizations
D.AWS Organizations
Explanation
AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.
AWS Organizations enables the following capabilities:
1- Automate AWS account creation and management
2- Consolidate billing across multiple AWS accounts
3- Govern access to AWS services, resources, and regions
4- Centrally manage access policies across multiple AWS accounts
5- Configure AWS services across multiple accounts
The other options are incorrect:
“AWS Trusted Advisor” is incorrect. AWS Trusted Advisor offers a rich set of best practice checks and recommendations across five categories: cost optimization; security; fault tolerance; performance; and service limits.
“Amazon Config” is incorrect. Amazon Config is used to record and evaluate configurations of your AWS resources.
“AWS WAF” is incorrect. AWS WAF is a AWS web application firewall that helps protect your web applications.
Which of the following AWS offerings is a MySQL-compatible relational database service that can scale capacity automatically based on demand? A.Amazon EDS for SQL server B.Amazon Aurora C.Amazon Neptune D.Amazon RDS for PostgreSQl
B.Amazon Aurora
Explanation
Amazon Aurora is a MySQL and PostgreSQL compatible relational database built for the cloud, that combines the performance and availability of high-end commercial databases with the simplicity and cost-effectiveness of open source databases. Aurora is up to five times faster than standard MySQL databases and three times faster than standard PostgreSQL databases. It provides the security, availability, and reliability of commercial-grade databases at 1/10th the cost. Aurora is fully managed by Amazon Relational Database Service (RDS), which automates time-consuming administration tasks like hardware provisioning, database setup, patching, and backups.
Amazon Aurora features "Amazon Aurora Serverless" which is an on-demand, auto-scaling configuration for Amazon Aurora (MySQL-compatible and PostgreSQL-compatible editions), where the database will automatically start up, shut down, and scale capacity up or down based on your application's needs.
The other options are incorrect:
“Amazon RDS PostgreSQL” is incorrect. Amazon RDS PostgreSQL is used to run PostgreSQL databases NOT MySQL databases.
“Amazon RDS for SQL Server “ is incorrect. Amazon RDS for SQL Server is used to run Microsoft SQL Server databases NOT MySQL databases.
Amazon Neptune is incorrect. Amazon Neptune is a graph database service.
How are AWS customers billed for Linux-based Amazon EC2 usage?
A.EC2 instances will be billed on one hour increments, with a minimum of one day
B.EC2 instances will be billed on one minute increments, with a minimum of one hour
C.EC2 instances will be billed on one second increments, with a minimum of one minute
D.EC2 instances will be billed on one day increments, with a minimum of one month
C.EC2 instances will be billed on one second increments, with a minimum of one minute
Explanation:
Explanation
Pricing is per instance-hour consumed for each instance, from the time an instance is launched until it is terminated or stopped. Each partial instance-hour consumed will be billed per-second (minimum of 1 minute) for Linux or Ubuntu Instances and as a full hour for all other instance types.
Examples for Linux\Ubuntu based instances:
1- If you run a Linux instance for 4 seconds or 20 seconds or 59 seconds, you will be charged for one minute. (this is what we mean by minimum of 1 minute)
2- If you run a Linux instance for 1 minute and 3 seconds, you will be charged for 1 minute and 3 seconds.
3- If you run a Linux instance for 3 hours, 25 minutes and 7 seconds, you will be charged for 3 hours, 25 minutes and 7 seconds.
Examples for non-Linux\Ubuntu instances:
1- If you run an instance for 4 seconds or 20 seconds or 59 seconds, you will be charged for one hour.
2- If you run an instance for 1 minute and 3 seconds, you will be charged for one hour.
3- If you run an instance for 3 hours, 25 minutes and 7 seconds, you will be charged for 4 hours.
Per-second billing is available for instances launched in:
- On-Demand, Reserved and Spot forms
- All regions and Availability Zones
- Amazon Linux and Ubuntu
Which of the following is equivalent to a user name and password and is used to authenticate your programmatic access to AWS services and APIs? A.Instance Password B.Key Pairs C.Access Keys D.MFA
C.Access Keys
Explanation:
C.Access Keys
Which of the following AWS services is designed with native Multi-AZ fault tolerance in mind? (Choose TWO) A.Amazon DynamoDB B.Amazon Simple Storage Service C.Amazon Redshift D.AWS Snowball E.Amazon EBS
A.Amazon DynamoDB
B.Amazon Simple Storage Service
Explanation:
The Multi-AZ principle involves deploying an AWS resource in multiple Availability Zones to achieve high availability for that resource.
DynamoDB automatically spreads the data and traffic for your tables over a sufficient number of servers to handle your throughput and storage requirements, while maintaining consistent and fast performance. All of your data is stored on solid-state disks (SSDs) and is automatically replicated across multiple Availability Zones in an AWS Region, providing built-in fault tolerance in the event of a server failure or Availability Zone outage.
Amazon S3 provides durable infrastructure to store important data and is designed for durability of 99.999999999% of objects. Data in all Amazon S3 storage classes is redundantly stored across multiple Availability Zones (except S3 One Zone-IA).
The other options are incorrect:
“Amazon Redshift” is incorrect. Currently, Amazon Redshift only supports Single-AZ deployments.
“AWS Snowball” is incorrect. AWS Snowball is a data transport solution that accelerates moving terabytes to petabytes of data into and out of AWS using storage devices designed to be secure for physical transport.
“Amazon EBS” is incorrect. Amazon EBS volume data is replicated across multiple servers within the same Availability Zone.
Note:
Amazon EFS data is redundantly stored across multiple Availability Zones providing better durability compared to EBS volumes.
Which of the following EC2 instance purchasing options supports the Bring Your Own License (BYOL) model for almost every BYOL scenario? A.Dedicated Hosts B.Dedicated Instances C.On-demand Instances D.Reserved Instances
A.Dedicated Hosts
Explanation:
You have a variety of options for using new and existing Microsoft software licenses on the AWS Cloud. By purchasing Amazon Elastic Compute Cloud (Amazon EC2) or Amazon Relational Database Service (Amazon RDS) license-included instances, you get new, fully compliant Windows Server and SQL Server licenses from AWS. The BYOL model enables AWS customers to use their existing server-bound software licenses, including Windows Server, SQL Server, and SUSE Linux Enterprise Server.
Your existing licenses may be used on AWS with Amazon EC2 Dedicated Hosts, Amazon EC2 Dedicated Instances or EC2 instances with default tenancy using Microsoft License Mobility through Software Assurance.
Dedicated Hosts provide additional control over your instances and visibility into Host level resources and tooling that allows you to manage software that consumes licenses on a per-core or per-socket basis, such as Windows Server and SQL Server. This is why most BYOL scenarios are supported through the use of Dedicated Hosts, while only certain scenarios are supported by Dedicated Instances.
The other options are incorrect:
“Dedicated Instances” is incorrect. Dedicated Hosts is recommended for most BYOL scenarios for the reasons we mentioned above.
“On-demand Instances” and “Reserved Instances” are incorrect. On-demand instance and Reserved instances don’t support the Bring Your Own License (BYOL) model.
Which of the following services allows you to run containerized applications on a cluster of EC2 instances? A.Amazon ECS B.AWS Data Pipeline C.AWS Personal Health Dashboard D.AWS Cloud9
A.Amazon ECS
Explanation:
Amazon Elastic Container Service (Amazon ECS) is a highly scalable, high-performance container orchestration service that supports Docker containers and allows you to easily run and scale containerized applications on AWS. Amazon ECS eliminates the need for you to install and operate your own container orchestration software, manage and scale a cluster of virtual machines, or schedule containers on those virtual machines.
The other options are incorrect.
AWS Data Pipeline is incorrect. AWS Data Pipeline is a web service that makes it easy to schedule regular data movement and data processing activities in the AWS cloud.
AWS Cloud9 is incorrect. AWS Cloud9 is a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser. It includes a code editor, debugger, and terminal.
AWS Personal Health Dashboard is incorrect. AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. While the Service Health Dashboard displays the general status of AWS services, Personal Health Dashboard gives you a personalized view into the performance and availability of the AWS services underlying your AWS resources. With Personal Health Dashboard, alerts are triggered by changes in the health of AWS resources, giving you event visibility, and guidance to help quickly diagnose and resolve issues.
What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment? (Choose TWO) A.Amazon Comprehend B.AWS X-Ray C.AWS Transit Gateway D.AWS Config E.AWS CloudTrail
D.AWS Config
E.AWS CloudTrail
Explanation:
Change management is defined as “the Process responsible for controlling the Lifecycle of all Changes. The primary objective of Change Management is to enable beneficial changes to be made, with minimum disruption to IT Services.
Despite all of the investments in software and hardware, an erroneous configuration or misstep in a process can frequently undo these efforts and lead to failure.
AWS Config and AWS CloudTrail are change management tools that help AWS customers audit and monitor all resource and configuration changes in their AWS environment
Customers can use AWS Config to answer “What did my AWS resource look like?” at a point in time. Customers can use AWS CloudTrail to answer “Who made an API call to modify this resource?” For example, a customer can use the AWS Management Console for AWS Config to detect that the security group “Production-DB” was incorrectly configured in the past. Using the integrated AWS CloudTrail information, they can pinpoint which user misconfigured the “Production-DB” security group. In brief, AWS Config provides information about the changes made to a resource, and AWS CloudTrail provides information about who made those changes. These capabilities enable customers to discover any misconfigurations, fix them, and protect their workloads from failures.
The other options are incorrect:
“AWS Transit Gateway” is incorrect. AWS Transit Gateway is a network transit hub that customers can use to interconnect their virtual private clouds (VPCs) and their on-premises networks. AWS transit gateway simplifies how customers interconnect all of their VPCs, across thousands of AWS accounts and into their on-premises networks.
“AWS X-Ray” is incorrect. AWS X-Ray is a debugging service that helps developers understand how their application and its underlying services are performing to identify and troubleshoot the root cause of performance issues and errors.
“Amazon Comprehend” is incorrect. Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to find meaning and insights in text. Customers can use Amazon Comprehend to identify the language of the text, extract key phrases, places, people, brands, or events, understand sentiment about products or services, and identify the main topics from a library of documents. The source of this text could be web pages, social media feeds, emails, or articles. Amazon Comprehend is fully managed, so there are no servers to provision, and no machine learning models to build, train, or deploy.
Which of the following describes the payment model that AWS makes available for customers that can commit to using Amazon EC2 over a one or 3-year term to reduce their total computing costs? A.Pay as you go B.Pay less as AWS grows C.Save when you reserve D.Pay less by using more
C.Save when you reserve
Explanation:
For Customers that can commit to using EC2 over a 1 or 3-year term, it is better to use Amazon EC2 Reserved Instances. Reserved Instances provide a significant discount (up to 75%) compared to On-Demand instance pricing.
The other options are incorrect:
“Pay as you go” is incorrect. Reserved Instances provide a significant discount (up to 75%) compared to On-Demand (pay-as-you-go) instance pricing.
“Pay less as AWS grows” is incorrect. Pay less as AWS grows refers to the discounts that you get over time as AWS grows. This sometimes called “AWS Economies of Scale”. For example, AWS has reduced the per GB storage price of S3 by 80% since the service was first introduced in 2006.
“Pay less by using more” is incorrect. “Pay less by using more” means that you get volume based discounts and as your usage increases. For services such as S3, pricing is tiered, meaning the more you use, the less you pay per GB.
What are the default security credentials that are required to access the AWS management console for an IAM user account? A.A user name and password B.Security tokens C.MFA D.Access Keys
A.A user name and password
Explanation
The AWS Management Console allows you to access and manage Amazon Web Services through a simple and intuitive web-based user interface. You can only access the AWS management console if you have a valid user name and password.
The other options are incorrect:
“MFA” is incorrect. MFA is an additional layer of security (i.e. not required).
Although MFA is not required to access IAM user accounts, it is recommended to set it up for all of your IAM users. With MFA enabled, when a user signs in to an AWS Management Console, they will be prompted for their user name and password (the first factor—what they know), as well as for an authentication code from their AWS MFA device (the second factor—what they have). Taken together, these multiple factors provide increased security for your AWS account settings and resources. It is also recommended that you set an IAM Account Password Policy on your AWS account to specify complexity requirements and mandatory rotation periods for your IAM users' passwords.
You can configure an IAM Account Password Policy to do these things:
1- Set a minimum password length.
2- Require specific character types, including uppercase letters, lowercase letters, numbers, and non-alphanumeric characters. Be sure to remind your users that passwords are case sensitive.
3- Allow all IAM users to change their own passwords.
4- Require IAM users to change their password after a specified period of time (enable password expiration).
5- Prevent IAM users from reusing previous passwords.
6- Force IAM users to contact an account administrator when the user has allowed his or her password to expire.
Important Note: The IAM Account Password Policy is an account-level setting that applies to all IAM users, excluding the root user. You can not apply a password policy to a single IAM user.
“Access keys” is incorrect. Access keys are long-term credentials that can be used to sign programmatic requests to AWS.
“Security tokens” is incorrect. Security tokens are temporary credentials that can also be used to interact with AWS resources programmatically
Sarah has deployed an application in the Northern California (us-west-1) region. After examining the application’s traffic, she notices that about 30% of the traffic is coming from Asia. What can she do to reduce latency for the users in Asia?
A.Recreate the website content
B.Create a CDN using CloudFronyt, so that content is cached at Edge Locations close to and in Asia
C.Replicate the current resources across multiple Availabiblity Zones within the same region
D.Migrate the application to a hosting provider in Asia
B.Create a CDN using CloudFronyt, so that content is cached at Edge Locations close to and in Asia
Explanation
CloudFront is AWS's content delivery network (CDN) service. Amazon CloudFront employs a global network of edge locations and regional edge caches that cache copies of your content close to your end-users. Amazon CloudFront ensures that end-user requests are served by the closest edge location. As a result, end-user requests travel a short distance, reducing latency and improving the overall performance.
The other options are incorrect:
“Migrate the application to a hosting provider in Asia” is incorrect. AWS now can deal with most of the customers’ requirements. Whatever your problem is you can find a solution.
“Recreate the website content” is incorrect. There is no relation between the website content and the traffic that comes to the web application.
“Replicate the current resources across multiple Availability Zones within the same region” is incorrect. This will only help if the replication is done in a region located in or close to Asia.
What does Amazon Elastic Beanstalk provide?
A.A PaaS Solution to automate application deployment
B.A NoSQL database service
C.A Compute engine for Amazon ECS
D.A scalable file storage solution for use with AWS and on-premise servers
A.A PaaS Solution to automate application deployment
Explanation
AWS Elastic Beanstalk is an application container on top of Amazon Web Services. Elastic Beanstalk makes it easy for developers to quickly deploy and manage applications in the AWS Cloud. Developers simply upload their application code, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring.
The other options are incorrect. AWS Elastic Beanstalk is not a database, compute engine nor storage service, AWS Elastic Beanstalk uses proven AWS features and services, such as Amazon EC2, Amazon RDS, Elastic Load Balancing, Auto Scaling, Amazon S3, and Amazon SNS, to create an environment that runs your application.
Your application has recently experienced significant global growth, and international users are complaining of high latency. What is the AWS characteristic that can help improve your international users’ experience? A.Data durability B.Global reach C.High availability D.Elasticity
B.Global reach
Explanation:
With AWS, you can deploy your application in multiple regions around the world. The user will be redirected to the Region that provides the lowest possible latency and the highest performance. You can also use the CloudFront service that uses edge locations (which are located in most of the major cities across the world) to deliver content with low latency and high performance to your global users.
The other options are incorrect:
“High availability” is incorrect. High Availability can be achieved by deploying your application in multiple Availability Zones within a single Region. If one Availability Zone goes down, the others can handle user requests. This may not reduce latency to your international users. In other words, the application will be available for them all the time, but with high latency.
“Elasticity” is incorrect. Elasticity refers to the ability of a system to scale the underlying resources up when demand increases (to maintain performance), or scale down when demand decreases (to reduce costs). This option does not indicate whether your resources will be deployed in a single Region or multiple Regions.
“Data durability” is incorrect. Durability refers to the ability of a system to assure data is stored and data remains consistent in the system as long as it is not changed by legitimate access. This means that data should not become corrupted or disappear due to a system malfunction. Durability is used to measure the likelihood of data loss. For example, assume you have confidential data stored in your Laptop. If you make a copy of it and store it in a secure place, you have just improved the durability of that data. It is much less likely that all copies will be simultaneously destroyed.
Data durability can be achieved by replicating data across multiple Availability Zones within a single Region. For example, the S3 Standard Tier is designed for 99.999999999% durability. This means that if you store 100 billion objects in S3, you will lose one object at most.
Which of the below is a best-practice when building applications on AWS?
A.Use IAM policies to maintain performance
B.Strengthen physical security by applying the principle of least privilege
C.ENsure that the application runs on hardware from trusted vendors
D.Decouple the components of the application so that they run independently
D.Decouple the components of the application so that they run independently
Explanation
An application should be designed in a way that reduces interdependencies between its components. A change or a failure in one component should not cascade to other components. If the components of an application are tightly-coupled (interconnected) and one component fails, the entire application will also fail. Amazon SQS and Amazon SNS are powerful tools that help you build loosely-coupled applications. SQS and SNS can be integrated together to decouple application components so that they run independently, increasing the overall fault tolerance of the application.
Understanding how SQS and SNS services work is not required for the Cloud Practitioner level, but let’s just take a simple example, let say you have two components in your application, Component A & Component B. Component A sends messages (jobs) to component B to process. Now, what happens if component A sends a large number of messages at the same time? Component B will fail, and the entire application will fail. SQS act as a middleman, receives and stores messages from component A, and component B pull and process messages at its own pace. This way, both components run independently from each other.
The other options are incorrect:
“Ensure that the application runs on hardware from trusted vendors” is incorrect. Choosing a specific hardware vendor is not available in AWS.
“Use IAM policies to maintain performance” is incorrect. There is no relation between IAM policies and performance. IAM policies are used to grant users permission to perform specific actions on AWS.
“Strengthen physical security by applying the principle of least privilege” is incorrect. Physical security is the sole responsibility of AWS.
Additional information:
AWS provides physical data center access only to approved employees. All employees who need data center access must first apply for access and provide a valid business justification. These requests are granted based on the principle of least privilege, where requests must specify to which layer of the data center the individual needs access, and are time-bound. Requests are reviewed and approved by authorized personnel, and access is revoked after the requested time expires.
The principle of least privilege does not only apply to control physical access. AWS customers should also apply this principle when granting permissions to IAM users. In other words, AWS customers should grant IAM users only the permissions they need to perform a task and nothing more.
Which of the following aspects of security are managed by AWS? (Choose TWO)
A.HArdware patching
B.Access permissions
C.VPC security
D.Securing global physical infrastructure
E.Encryption of EBS volumes
A.HArdware patching
D.Securing global physical infrastructure
Explanation
AWS is continuously innovating the design and systems of its data centers to protect them from man-made and natural risks. For example, at the first layer of security, AWS provides a number of security features depending on the location, such as security guards, fencing, security feeds, intrusion detection technology, and other security measures.
According to the Shared Responsibility model, patching of the underlying hardware is the AWS’ responsibility. AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.
The other options are incorrect:
“VPC security” is incorrect. The configuration and security of the VPC are customer’s responsibilities.
“Encryption of EBS volumes” is incorrect. The customer is responsible for encrypting their data on EBS either on the client side or on the server side.
“Access permissions” is incorrect. The customer is responsible for managing the IAM permissions.
Additional information:
IAM permissions let the customer specify access to AWS resources. Permissions are granted to IAM entities (users, groups, and roles) and by default these entities start with no permissions. In other words, IAM entities can do nothing in AWS until you grant them your desired permissions. To give entities permissions, you can attach a policy that specifies the type of access, the actions that can be performed, and the resources on which the actions can be performed.
AWS has created a large number of Edge Locations as part of its Global Infrastructure. Which of the following is NOT a benefit of using Edge Locations?
A.Edge locations are used by CloudFlare to distribute traffic across multiple instances to reduce latency
B.Edge locations are used by CloudFront to improve your end users experience when uploading files
C.Edge locations are used by CloudFront to cache the most recent responses
D.Edge locations are used by CloudFront to distributed content to global users with low latency
A.Edge locations are used by CloudFlare to distribute traffic across multiple instances to reduce latency
Explanation:
AWS Edge Locations are not used to distribute traffic. Edge Locations are used in conjunction with the CloudFront service to cache common responses and deliver content to end-users with low latency.
With Amazon CloudFront, your users can also benefit from accelerated content uploads. As the data arrives at an edge location, data is routed to AWS storage services over an optimized network path. The AWS service that is used to distribute load is the AWS Elastic Load Balancing (ELB) service.
Under the Shared Responsibility Model, which of the following controls do customers fully inherit from AWS? (Choose TWO) A.Environmental controls B.Patch management controls C.Physical controls D.Awareness & Training E.Database controls
A.Environmental controls
C.Physical controls
Explanation:
AWS is responsible for physical controls and environmental controls. Customers inherit these controls from AWS.
As mentioned in the AWS Shared Responsibility Model page, Inherited Controls are controls which a customer fully inherits from AWS such as physical controls and environmental controls.
As a customer deploying an application on AWS infrastructure, you inherit security controls pertaining to the AWS physical, environmental and media protection, and no longer need to provide a detailed description of how you comply with these control families.
For example: Let’s say you have built an application in AWS for customers to securely store their data. But your customers are concerned about the security of the data and ensuring compliance requirements are met. To address this, you assure your customer that “our company does not host customer data in its corporate or remote offices, but rather in AWS data centers that have been certified to meet industry security standards.” That includes physical and environmental controls to secure the data, which is the responsibility of Amazon. Companies do not have physical access to the AWS data centers, and as such, they fully inherit the physical and environmental security controls from AWS.
What is the AWS service\feature that takes advantage of Amazon CloudFront’s globally distributed edge locations to transfer files to S3 with higher upload speeds?
A.AWS Snowball
B.S3 Transfer Accerleration
C.AWS Snowmobile
D.AWS WAF
B.S3 Transfer Accerleration
Explanation
Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.
The other options are incorrect:
“AWS Snowball” is incorrect. AWS Snowball is a petabyte-scale data transport solution that uses devices designed to be secure to transfer large amounts of data into and out of the AWS Cloud.
“AWS WAF” is incorrect. AWS WAF refers to the AWS Web Application Firewall service.
“AWS Snowmobile” is incorrect. AWS Snowmobile is an Exabyte-scale data transfer service used to move extremely large amounts of data to AWS.
What are the Amazon RDS features that can be used to improve the availability of your database? (Choose TWO) A.Read Replicas B.Edge Locations C.Automatic Patching D.AWS Regions E.Multi-AZ Deployment
A.Read Replicas
E.Multi-AZ Deployment
Explanation:
In a Multi-AZ deployment, Amazon RDS automatically provisions and maintains a synchronous standby replica in a different Availability Zone. The primary DB instance is synchronously replicated across Availability Zones to a standby replica to provide data redundancy, eliminate I/O freezes, and minimize latency spikes during system backups. Running a DB instance with high availability can enhance availability during planned system maintenance, and help protect your databases against DB instance failure and Availability Zone disruption.
Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances. This feature makes it easy to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads. You can create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read throughput.
Read replicas provide a complementary availability mechanism to Amazon RDS Multi-AZ Deployments. You can promote a read replica if the source DB instance fails. You can also replicate DB instances across AWS Regions as part of your disaster recovery strategy. This functionality complements the synchronous replication, automatic failure detection, and failover provided with Multi-AZ deployments.
The other options are incorrect:
“Edge Locations” is incorrect. Edge Locations are not a feature of Amazon RDS. Edge locations are used by the CloudFront service to distribute content globally.
“Automatic patching” is incorrect. The purpose of patching is to resolve functionality issues, improve security or add new features.
“AWS Regions” is incorrect. AWS Regions are not a feature of Amazon RDS. AWS Regions are separate geographic areas around the world that AWS uses to provide its Cloud Services, including Regions in North America, South America, Europe, Asia Pacific, and the Middle East. Choosing a specific AWS Region depends on its proximity to end-users, data sovereignty, and costs.
An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products?
A.Network Access Control Lists
B.Amazon RDS
C.Amazon EMR
D.AWS Identity and Access management
D.AWS Identity and Access management
Explanation:
AWS Identity and Access Management (IAM) is a web service for securely controlling access to AWS services. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users and applications can access.
The other options are incorrect:
“Amazon RDS” is incorrect. Amazon RDS is relational database service.
“Network Access Control Lists” is incorrect. Network Access Control Lists is a VPC feature that allows you to control traffic at the subnet level.
“Amazon EMR” is incorrect. Amazon EMR is used to run and Scale Apache Spark, Hadoop, HBase, Presto, Hive, and other Big Data Frameworks.
A company is developing a new application using a microservices framework. The new application is having performance and latency issues. Which AWS Service should be used to troubleshoot these issues?
A.Amazon Inspector
B.AWS CodePipeline
C.AWS CloudTrail
D.AWS X-Ray
D.AWS X-Ray
Explanation:
AWS X-Ray helps developers analyze and debug distributed applications in production or under development, such as those built using microservice architecture. With X-Ray, you can understand how your application and its underlying services are performing so you can identify and troubleshoot the root cause of performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components. You can use X-Ray to analyze both applications in development and in production, from simple three-tier applications to complex microservices applications consisting of thousands of services.
The other options are incorrect:
“AWS CodePipeline” is incorrect. AWS CodePipeline is a fully managed continuous delivery service that helps you automate your release pipelines for fast and reliable application and infrastructure updates.
“AWS Inspector” is incorrect. Amazon Inspector helps you to identify security vulnerabilities as well as deviations from security best practices in applications NOT for troubleshooting performance issues.
“AWS CloudTrail” is incorrect. CloudTrail is a service that allows you to track all users’ actions that are taken in your AWS account.
Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose TWO)
A.Configuring Access Control Lists (ACLs) B.Installing software on EC2 instances C.Hardware maintenance D.Creating hypervisors E.Monitoring network performance
C.Hardware maintenance
D.Creating hypervisors
Explanation:
AWS is responsible for items such as the physical security of its data centers, creating hypervisors, replacement of old disk drives, and patch management of the infrastructure.
The customers are responsible for items such as building application schema, analyzing network performance, configuring security groups and network ACLs and encrypting their data.
Which of the following services will help businesses ensure compliance in AWS?
A.CloudFront
B.CloudWatch
C.CloudTrail
D.CloudEndure
C.CloudTrail
Explanation:
AWS CloudTrail is designed to log all actions taken in your AWS account. This provides a great resource for governance, compliance, and risk auditing.
The other options are incorrect:
CloudFront is incorrect. Amazon CloudFront is a content delivery network (CDN) service.
CloudEndure is incorrect. CloudEndure Migration simplifies the process of migrating applications from physical, virtual, and cloud-based infrastructure, ensuring that they are fully operational in any AWS Region without compatibility issues.
CloudWatch is incorrect. Amazon CloudWatch is used to monitor the utilization of AWS resources. CloudWatch provides you with data and actionable insights to monitor your applications, understand and respond to system-wide performance changes, and get a unified view of operational health.
What is the AWS service that provides you the highest level of control over the underlying virtual infrastructure?
A.Amazon Redshift
B.Amazon DynamoDB
C.Amazon EC2
D.Amazon RDS
C.Amazon EC2
Explanation:
Amazon EC2 provides you the highest level of control over your virtual instances, including root access and the ability to interact with them as you would any machine.
The other options are incorrect:
Amazon DynamoDB, Amazon RDS, and Amazon Redshift belong to the AWS-managed services. The AWS-managed services automate time-consuming administration tasks such as hardware provisioning, software setup, patching and backups. It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need.
Which of the following procedures will help reduce your Amazon S3 costs?
A.Use the right combination of storage classes based on different use cases
B.Move all the data stored in S3 standard to EBS
C.Use the Import/Export feature to move old files automatically to Amazon Glacier
D.Pick the right Availability Zone for your S3 bucket
A.Use the right combination of storage classes based on different use cases
Explanation:
Amazon S3 offers a range of storage classes designed for different use cases. These include S3 Standard for general-purpose storage of frequently accessed data; S3 Intelligent-Tiering for data with unknown or changing access patterns; S3 Standard-Infrequent Access (S3 Standard-IA) and S3 One Zone-Infrequent Access (S3 One Zone-IA) for long-lived, but less frequently accessed data; and Amazon S3 Glacier (S3 Glacier) and Amazon S3 Glacier Deep Archive (S3 Glacier Deep Archive) for long-term archive and digital preservation.
The other options are incorrect:
“Move all the data stored in S3 standard to EBS” is incorrect. EBS is a block-level storage service that is significantly more expensive than S3.
“Pick the right Availability Zone for your S3 bucket” is incorrect. You don’t have the option to store objects on a specific AZ. You can only choose the AWS Region in which you want your S3 buckets to reside.
Additional information:
In general, AWS prices for a resource may change based on the AWS Region where it is created, NOT based on Availability Zones within the same Region.
“Use the Import/Export feature to move old files automatically to Amazon Glacier” is incorrect. Moving old data automatically to Amazon Glacier will help reduce your Amazon S3 costs, but this can be done using Amazon S3 lifecycle policies, NOT the Import/Export feature. In order to reduce your Amazon S3 costs, you should create a lifecycle policy to automatically move old (or infrequently accessed) files to less expensive storage tiers, or to automatically delete them after a specified duration.
Which of the following activities may help reduce your AWS monthly costs?
A.Deploying your AWS resources across multiple Availability Zones
B.Removing all of your Cost Allocation Tags
C.Using the AWS Network Load Balancer (NLB) to load balance the incoming HTTP requests
D.Enabling Amazon EC2 Auto Scaling for all of your workloads
D.Enabling Amazon EC2 Auto Scaling for all of your workloads
Explanation:
Amazon EC2 Auto Scaling monitors your applications and automatically adjusts capacity (up or down) to maintain steady, predictable performance at the lowest possible cost.
The other options are incorrect:
“Removing all of your Cost Allocation Tags” is incorrect. A tag is a label that you or AWS assigns to an AWS resource. Each tag consists of a key and a value. For each resource, each tag key must be unique, and each tag key can have only one value. You can use tags to organize your resources (by project, team, …etc.), and cost allocation tags to track your AWS costs on a detailed level. After you activate cost allocation tags, AWS uses the cost allocation tags to organize your resource costs on your cost allocation report, to make it easier for you to categorize and track your AWS costs. Removing all of your Cost Allocation Tags will not help reduce your AWS monthly costs.
“Deploying your AWS resources across multiple Availability Zones” is incorrect. Deploying your AWS resources across multiple Availability Zones can help increase your application’s availability and fault-tolerance.
“Using the AWS Network Load Balancer (NLB) to load balance the incoming HTTP requests” is incorrect. This option is incorrect for two reasons:
1st: Load Balancing does not reduce costs, Elastic Load Balancing automatically distributes incoming application traffic evenly across multiple targets, such as Amazon EC2 instances, containers, and Lambda functions, and helps you gain more consistent application performance.
2nd: The recommended Load Balancer for HTTP traffic is the AWS Application Load Balancer, NOT the AWS Network Load Balancer.
Additional information:
Elastic Load Balancing supports four types of load balancers (Application Load Balancer, Network Load Balancer, Gateway Load Balancer, and Classic Load Balancer). You can select the appropriate load balancer based on your application needs.
1- If you need to load balance HTTP\HTTPS requests, AWS recommends using the Application Load Balancer.
2- For network/transport protocols (layer4 – TCP, UDP) load balancing, and for extreme performance/low latency applications, AWS recommends using Network Load Balancer.
3- To manage and distribute traffic across multiple third-party virtual appliances, AWS recommends using the Gateway Load Balancer.
4- If you have an existing application built within the EC2-Classic network, you should use a Classic Load Balancer.
