AWS Certified Cloud Practitioner: Test 4 Flashcards
An organization has multiple AWS accounts and uses a mixture of on-demand and reserved instances. One account has a considerable amount of unused reserved instances. How can the organization reduce their costs? (Select TWO.)
A.Create an AWS organization configuration linking the accounts
B.Switch to using placement groups
C.Setup consolidated billing between the accounts
D.Use Spot instances instead
A.Create an AWS organization configuration linking the accounts
C.Setup consolidated billing between the accounts
Explanation:
AWS organizations allow you to consolidate multiple AWS accounts into an organization that you create and centrally manage. Unused reserved instances (RIs) for EC2 are applied across the group so the organization can utilize their unused reserved instance instead of consuming on-demand instances which will lower their costs.
CORRECT: “Create an AWS Organization configuration linking the accounts” is the correct answer.
CORRECT: “Setup consolidated billing between the accounts” is the correct answer.
INCORRECT: “Use Spot instances instead” is incorrect. Spot instance pricing is variable so it is not guaranteed to lower the cost and it is not suitable for workloads that cannot be unexpectedly terminated by AWS.
INCORRECT: “Redeem their reserved instances” is incorrect. You cannot redeem your reserved instances. You can sell them on the AWS marketplace, however.
INCORRECT: “Switch to using placement groups” is incorrect. Using placement groups will not lower their costs.
Which AWS service enables hybrid cloud storage between on-premises and the AWS Cloud?
A.Amazon Elastic File System (EFS)
B.Amazon CloudFront
C.Amazon S3 Cross Region Replication (CRR)
D.AWS Storage Gateway
D.AWS Storage Gateway
Explanation
The AWS Storage Gateway service enables hybrid cloud storage between on-premises environments and the AWS Cloud. It seamlessly integrates on-premises enterprise applications and workflows with Amazon’s block and object cloud storage services through industry standard storage protocols.
CORRECT: “AWS Storage Gateway” is the correct answer.
INCORRECT: “Amazon S3 Cross Region Replication (CRR)” is incorrect. Amazon S3 CRR is used for copying data from one S3 bucket to another S3 bucket in another region. That is not an examples of hybrid cloud.
INCORRECT: “Amazon Elastic File System (EFS)” is incorrect. Amazon EFS is not a hybrid cloud storage solution. With EFS you can mount file systems from on-premises servers, however it does not offer a local cache or method of moving data into the cloud.
INCORRECT: “Amazon CloudFront” is incorrect. Amazon CloudFront is a content delivery network. It is used to get content closer to users, it is not a hybrid cloud storage solution.
Which of the advantages of cloud listed below is most closely addressed by the capabilities of AWS Auto Scaling?
A.Stop guessing about capacity
B.Benefit from massive economies of scale
C.GO global in minutes
D.Stop spending money running and maintaining data centers
A.Stop guessing about capacity
Explanation:
AWS Auto Scaling helps you to adapt to the demand for you application and scale up and down as needed. This means you don’t have to guess capacity upfront as you can provision what you need and allows Auto Scaling to manage the scaling.
CORRECT: “Stop guessing about capacity” is the correct answer.
INCORRECT: “Benefit from massive economies of scale” is incorrect. This is a cost advantage of cloud.
INCORRECT: “Stop spending money running and maintaining data centers” is incorrect. This is a cost advantage of moving to cloud.
INCORRECT: “Go global in minutes” is incorrect. This is a benefit of deploying cloud services globally.
What are two components of Amazon S3? (Select TWO.) A.Block devices B.Directories C.Buckets D.Objects E.File systems
C.Buckets
D.Objects
Explanation:
Amazon S3 is an object-based storage system that is accessed using a RESTful API over HTTP(S). It consists of buckets, which are root level folders, and objects, which are the files, images etc. that you upload
The terms directory, file system and block device do not apply to Amazon S3.
CORRECT: “Buckets” is a correct answer.
CORRECT: “Objects” is also a correct answer.
INCORRECT: “Directories” is incorrect as explained above.
INCORRECT: “Block devices” is incorrect as explained above.
INCORRECT: “File systems” is incorrect as explained above.
When performing a total cost of ownership (TCO) analysis between on-premises and the AWS Cloud, which factors are only relevant to on-premises deployments? (Select TWO.) A.Facility operatings costs B.Hardware procurement teams C.Database administration D.Application licensing E.Operating system licensing
A.Facility operatings costs
B.Hardware procurement teams
Explanation:
Facility operations and hardware procurement costs are something you no longer need to pay for in the AWS Cloud. These factors therefore must be included as an on-premise cost so you can understand the cost of staying in your own data centers.
Database administration, operating system licensing and application licensing will still be required in the AWS Cloud.
CORRECT: “Hardware procurement teams” is a correct answer.
CORRECT: “Facility operations costs” is also a correct answer.
INCORRECT: “Operating system licensing” is incorrect as these are factors that are relevant to both on-premise and the cloud.
INCORRECT: “Database administration” is incorrect as these are factors that are relevant to both on-premise and the cloud.
INCORRECT: “Application licensing” is incorrect as these are factors that are relevant to both on-premise and the cloud.
Which AWS service should be used to create a billing alarm? A.Amazon CloudWatch B.AWS Trusted Advisor C.AWS CloudTrail D.Amazon QuickSight
A.Amazon CloudWatch
Explanation:
You can monitor your estimated AWS charges by using Amazon CloudWatch. When you enable the monitoring of estimated charges for your AWS account, the estimated charges are calculated and sent several times daily to CloudWatch as metric data.
Billing metric data is stored in the US East (N. Virginia) Region and represents worldwide charges. This data includes the estimated charges for every service in AWS that you use, in addition to the estimated overall total of your AWS charges.
The alarm triggers when your account billing exceeds the threshold you specify. It triggers only when actual billing exceeds the threshold. It doesn’t use projections based on your usage so far in the month.
CORRECT: “Amazon CloudWatch” is the correct answer.
INCORRECT: “AWS Trusted Advisor” is incorrect. AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices.
INCORRECT: “AWS CloudTrail” is incorrect. CloudTrail logs API activity, not performance or billing metrics.
INCORRECT: “Amazon QuickSight” is incorrect. Amazon QuickSight is a fast, cloud-powered business intelligence service that makes it easy to deliver insights to everyone in your organization.
Which of the following are advantages of the AWS Cloud? (Select TWO.)
A.AWS Manages the maintenance of the cloud infrastrucuture
B.AWS manages capacity planning for physical servers
C.AWS manages the development of applications on AWS
D.AWS manages cost planning for virtual servers
E.AWS manages the security of applications built on AWS
A.AWS Manages the maintenance of the cloud infrastrucuture
B.AWS manages capacity planning for physical servers
Explanation:
AWS is responsible for security of the AWS Cloud as well as capacity planning and maintenance of the AWS infrastructure. This includes physical infrastructure such as data centers, servers, storage systems, and networking equipment.
CORRECT: “AWS manages the maintenance of the cloud infrastructure” is a correct answer.
CORRECT: “AWS manages capacity planning for physical servers” is also a correct answer.
INCORRECT: “AWS manages the security of applications built on AWS” is incorrect. This is the responsibility of the customer.
INCORRECT: “AWS manages the development of applications on AWS” is incorrect. This is the responsibility of the customer.
INCORRECT: “AWS manages cost planning for virtual servers” is incorrect. This is the responsibility of the customer.
What is the most cost-effective Amazon S3 storage tier for data that is not often accessed but requires high availability? A.Amazon S3 Standard B.Amazon GLacier C.Amazon S3 Standard-IA D.Amazon S3 One Zone-IA
C.Amazon S3 Standard-IA
Explanation:
S3 Standard-IA is for data that is accessed less frequently, but requires rapid access when needed. S3 Standard-IA offers the high durability, high throughput, and low latency of S3 Standard with 99.9% availability
CORRECT: “Amazon S3 Standard-IA” is the correct answer.
INCORRECT: “Amazon S3 Standard” is incorrect as this class will cost more and is designed for data that requires regular access.
INCORRECT: “Amazon S3 One Zone-IA” is incorrect. S3 One Zone-IA is for data that is accessed less frequently, but requires rapid access when needed. Unlike other S3 Storage Classes which store data in a minimum of three Availability Zones (AZs), S3 One Zone-IA stores data in a single AZ and offers lower availability.
INCORRECT: “Amazon Glacier” is incorrect. Glacier is a data archiving solution so not suitable for a storage tier that requires infrequent access.
Which Amazon EC2 pricing option provides significant discounts for fixed term contracts? A.Dedicated instances B.Reserved instances C.Spot instances D.Dedicated hosts
B.Reserved instances
Explanation:
Reserved instances provide significant discounts, up to 75% compared to On-Demand pricing, by paying for capacity ahead of time.
CORRECT: “Reserved Instances” is the correct answer.
INCORRECT: “Spot Instances” is incorrect. Spot Instances allow you to purchase spare computing capacity with no upfront commitment at discounted hourly rates. This is not used for long-term requirements.
INCORRECT: “Dedicated Instances” is incorrect. Dedicated Instances are Amazon EC2 instances that run in a VPC on hardware that’s dedicated to a single customer.
INCORRECT: “Dedicated Hosts” is incorrect. Dedicated hosts are EC2 servers dedicated to a single customer.
Which service can be used to assign a policy to a group? A.AWS IAM B.Amazon Cognito C.AWS Shield D.AWSn STS
A.AWS IAM
Explanation:
IAM is used to securely control individual and group access to AWS resources. Groups are collections of users and have policies attached to them. You can use IAM to attach a policy to a group
CORRECT: “AWS IAM” is the correct answer.
INCORRECT: “Amazon Cognito” is incorrect. Amazon Cognito is used for authentication using mobile apps
INCORRECT: “AWS STS” is incorrect. The AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-privilege credentials for IAM users or for users that you authenticate (federated users)
INCORRECT: “AWS Shield” is incorrect. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards applications running on AWS.
Which team is available to support AWS customers on an Enterprise support plan with account issues? A.AWS Concierge B.AWS Technical Account Manager C.AWS Technical support D.AWS Billing and Accounts
A.AWS Concierge
Explanation:
Included as part of the Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize in working with enterprise accounts.
CORRECT: “AWS Concierge” is the correct answer.
INCORRECT: “AWS Technical Support” is incorrect as this is not the name of the team.
INCORRECT: “AWS Billing and Accounts” is incorrect as the Support Concierge Team fulfil this role.
INCORRECT: “AWS Technical Account Manager” is incorrect. The Technical Account Manager provides expert monitoring and optimization for your environment and coordinates access to other programs and experts.
Which of the following can be assigned to an IAM user? (Select TWO.)
A.A password for access to the management console
B.An SSL/TLS certificate
C.An access key ID and secret access key
D.A password for logging into Linux
E.A key pair
A.A password for access to the management console
C.An access key ID and secret access key
Explanation:
An IAM user is an entity that represents a person or service. Users can be assigned an access key ID and secret access key for programmatic access to the AWS API, CLI, SDK, and other development tools and a password for access to the management console.
CORRECT: “An access key ID and secret access key” is the correct answer.
CORRECT: “A password for access to the management console” is the correct answer.
INCORRECT: “An SSL/TLS certificate” is incorrect. You cannot assign an SSL/TLS certificate to a user.
INCORRECT: “A key pair” is incorrect. Key pairs are used with Amazon EC2 as a method of using public key encryption to securely access EC2 instances.
INCORRECT: “A password for logging into Linux” is incorrect. You cannot assign an IAM user with a password for logging into a Linux instance.
Which of the below are components that can be configured in the VPC section of the AWS management console? (Select TWO.) A.DNS records B.EBS Volumes C.Endpoints D.Subnet E.Elastic Load balancer
C.Endpoints
D.Subnet
Explanation:
You can configure subnets and endpoints within the VPC section of AWS management console.
EBS volumes and ELB must be configured in the EC2 section of the AWS management console and DNS records must be configured in Amazon Route 53.
CORRECT: “Subnet” is a correct answer.
CORRECT: “Endpoints” is also a correct answer.
INCORRECT: “EBS volumes” is incorrect as explained above.
INCORRECT: “DNS records” is incorrect as explained above.
INCORRECT: “Elastic Load Balancer” is incorrect as explained above.
Which of the following is an advantage of cloud computing compared to deploying your own infrastructure on-premise?
A.Ability to choose bespoke infrastructure configurations
B.Spending using a CAPEX model
C.Paying only for what you use
D.Flexibility to choose your own hardware
C.Paying only for what you use
Explanation:
With AWS you only pay for what you use. However, you cannot choose your own hardware/infrastructure and the payment model is operational (OPEX) not capital (CAPEX).
CORRECT: “Paying only for what you use” is the correct answer.
INCORRECT: “Flexibility to choose your own hardware” is incorrect as explained above.
INCORRECT: “Spend using a CAPEX model” is incorrect as explained above.
INCORRECT: “Ability to choose bespoke infrastructure configurations” is incorrect as explained above.
How are AWS Lambda functions triggered? A.Metrics B.Counters C.Events D.Schedules
C.Events
Explanation
AWS Lambda lets you run code as functions without provisioning or managing server. Lambda-based applications (also referred to as serverless applications) are composed of functions triggered by events.
For instance, you can trigger a Lambda function to run when an object is uploaded to an Amazon S3 bucket or a message is added to an Amazon SQS queue.
CORRECT: “Events” is the correct answer.
INCORRECT: “Schedules” is incorrect as functions are triggered by events.
INCORRECT: “Metrics” is incorrect as functions are triggered by events.
INCORRECT: “Counters” is incorrect as functions are triggered by events
What does an organization need to do in Amazon IAM to enable user access to services being launched in new region?
A.Create new user accounts in the new region
B.Update the user accounts to allows access from another region
C.Enable global mode in IAM to provision the required access
D.Nothing, IAM is global
D.Nothing, IAM is global
Explanation:
IAM is used to securely control individual and group access to AWS resources. IAM is universal (global) and does not apply to regions.
CORRECT: “Nothing, IAM is global” is the correct answer.
INCORRECT: “Enable global mode in IAM to provision the required access” is incorrect as you do not need to do anything to use IAM globally.
INCORRECT: “Update the user accounts to allow access from another region” is incorrect as you don’t need to update user accounts.
INCORRECT: “Create new user accounts in the new region” is incorrect as IAM is global.
Which of the following are architectural best practices for the AWS Cloud? (Select TWO.)
A.Deploy into multiple Availability Zones
B.Deploy into a single availability zone
C.Design for fault tolerance
D.Create monolithic architectures
E.Close coupling
A.Deploy into multiple Availability Zones
C.Design for fault tolerance
Explanation
It is an architectural best practice to deploy your resources into multiple availability zones and design for fault tolerance. These both ensure that if resources or infrastructure fails, your application continues to run.
CORRECT: “Deploy into multiple Availability Zones” is a correct answer.
CORRECT: “Design for fault tolerance” is also a correct answer.
INCORRECT: “Deploy into a single availability zone” is incorrect. You should not deploy all of your resources into a single availability zone as any infrastructure failure will take down access to your resources.
INCORRECT: “Close coupling” is incorrect. Close coupling is not an architectural best practice – loose coupling is. With loose coupling you reduce interdependencies between components of an application and often put a middle layer such as a message bus between components.
INCORRECT: “Create monolithic architectures” is incorrect. You should not create monolithic architectures. With monolithic architectures you have a single instance running multiple components of the application, if any of these components fails, your application fails. It is better to design microservices architectures where components are spread across more instances.
What does an organization need to do to move to another AWS region?
A.Just start deploying resources in the additional region
B.Apply for another AWS account in that region
C.Submit an application to extend their account to the additional region
D.Create a separate IAM account for that region
A.Just start deploying resources in the additional region
Explanation:
You don’t need to do anything except start deploying resources in the new region. With the AWS cloud you can use any region around the world at any time. There is no need for a separate account, and IAM is a global service.
CORRECT: “Just start deploying resources in the additional region” is the correct answer.
INCORRECT: “Create a separate IAM account for that region” is incorrect as IAM is a global service.
INCORRECT: “Apply for another AWS account in that region” is incorrect as you can use IAM across Regions and do not need another account.
INCORRECT: “Submit an application to extend their account to the additional region” is incorrect as you do not need to extend accounts across Regions.
Which services can be used for asynchronous integration between application components? (Select TWO.) A.AWS Route 53 B.Amazon SQS C.Amazon EC2 Auto Scaling D.AWS CloudFormation E,Amazon Step Functions
B.Amazon SQS
E,Amazon Step Functions
Explanation:
Asynchronous integration is a form of loose coupling between services. This model is suitable for any interaction that does not need an immediate response and where an acknowledgement that a request has been registered will suffice.
Amazon Simple Queue Service (SQS) and Amazon Step Functions both provide asynchronous integration. SQS provides a durable message bus and Step Functions is an orchestrated workflow service.
Amazon EC2 Auto Scaling helps with horizontal scaling of your EC2 instances. This is not an example of asynchronous integration.
AWS CloudFormation automates the deployment of infrastructure based on templates.
AWS Route 53 is a DNS service that resolves domain names to IP addresses.
Which AWS service lets you add user sign up, sign-in and access control to web and mobile apps? A.AWS Artifact B.AWS CloudHSM C.Amazon Cognito D.AWS Directory Service
C.Amazon Cognito
Explanation:
Amazon Cognito lets you add user sign-up, sign-in, and access control to your web and mobile apps quickly and easily. Amazon Cognito scales to millions of users and supports sign-in with social identity providers, such as Facebook, Google, and Amazon, and enterprise identity providers via SAML 2.0.
CORRECT: “AWS Cognito” is the correct answer.
INCORRECT: “AWS Artifact” is incorrect. AWS Artifact is your go-to, central resource for compliance-related information that matters to you.
INCORRECT: “AWS CloudHSM” is incorrect. AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud
INCORRECT: “AWS Directory Service” is incorrect. AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD, enables your directory-aware workloads and AWS resources to use managed Active Directory in the AWS Cloud.
What is the scope of an Amazon Virtual Private Cloud (VPC)?
A.It spans all Availability Zones within a region
B.It spans multiple subnets
C.It spans a single CIDR block
D.it spans all availability zones in all regions
A.It spans all Availability Zones within a region
Explanation:
A virtual private cloud (VPC) is a virtual network dedicated to your AWS account. A VPC spans all the Availability Zones in the region.
CORRECT: “It spans all Availability Zones within a region” is the correct answer.
INCORRECT: “It spans a single CIDR block” is incorrect. You can have multiple CIDR blocks in a VPC.
INCORRECT: “It spans multiple subnets” is incorrect. An Amazon VPC spans AZs, subnets are created within AZs
INCORRECT: “It spans all Availability Zones in all regions” is incorrect as it is within a single Region.
The ability to horizontally scale Amazon EC2 instances based on demand is an example of which concept? A.Economy of scale B.Agility C.High availability D.Elasticity
D.Elasticity
Explanation:
Elasticity is the ability to dynamically adjust the capacity of a service or resource based on demand. Scaling can be vertical (e.g. increase instance size) or horizontal (e.g. add more EC2 instances).
CORRECT: “Elasticity” is the correct answer.
INCORRECT: “Economy of scale” is incorrect. This refers to pricing benefits based on AWS purchasing large amounts of resources.
INCORRECT: “High availability” is incorrect. This is an example of resilience.
INCORRECT: “Agility” is incorrect. This is an example of flexibility and speed of implementation.
Which Compute service should be used for running a Linux operating system upon which you will install custom software? A.Amazon EC2 B.Amazon ECS C.AMazon EKS D.AWS Lambda
A.Amazon EC2
Explanation:
Amazon EC2 should be used when you need access to a full operating system instance that you can manage.
Amazon Elastic Container Service (ECS) and Amazon Elastic Container Service for Kubernetes (EKS) are used for running software containers, not full operating system instances.
AWS Lambda runs code as functions in response to events.
CORRECT: “Amazon EC2” is the correct answer.
INCORRECT: “Amazon ECS” is incorrect as explained above.
INCORRECT: “Amazon EKS” is incorrect as explained above.
INCORRECT: “AWS Lambda” is incorrect as explained above.
How can consolidated billing within AWS Organizations help lower overall monthly expenses?
A.By providing a consolidated view of monthly billing across multiple accounts
B.By leveraging service control policies (SOP) for centralized service management
C.By automating the creation of new accounts through APIs
D.By pooling usage across multiple accounts to achieve a pricing tier discount
D.By pooling usage across multiple accounts to achieve a pricing tier discount
Explanation
You can use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a master (payer) account that pays the charges of all the member (linked) accounts.
Consolidated billing has the following benefits:
- One bill – You get one bill for multiple accounts.
- Easy tracking – You can track the charges across multiple accounts and download the combined cost and usage data.
- Combined usage – You can combine the usage across all accounts in the organization to share the volume pricing discounts, Reserved Instance discounts, and Savings Plans. This can result in a lower charge for your project, department, or company than with individual standalone accounts.
- No extra fee – Consolidated billing is offered at no additional cost.
CORRECT: “By pooling usage across multiple accounts to achieve a pricing tier discount” is the correct answer.
INCORRECT: “By providing a consolidated view of monthly billing across multiple accounts” is incorrect. This is useful, but doesn’t lower costs.
INCORRECT: “By automating the creation of new accounts through APls” is incorrect as this does not lower costs.
INCORRECT: “By leveraging service control policies (SCP) for centralized service management” is incorrect. SCPs are used for controlling the API actions you can use, not for lowering costs.
What is the benefit of using fully managed services compared to deploying 3rd party software on EC2?
A.Improved security
B.Reduced operational overhead
C.You dont need to backup your data
D.You have greater control and flexibility
B.Reduced operational overhead
Explanation:
Fully managed services reduce your operational overhead as AWS manage not just the infrastructure layer but the service layers above it. Examples are Amazon Aurora and Amazon ElastiCache where the database is managed for you.
CORRECT: “Reduced operational overhead” is the correct answer.
INCORRECT: “You don’t need to back-up your data” is incorrect. You do still need to backup your data. For instance, with Amazon ElastiCache it’s up to you to configure backups to S3.
INCORRECT: “Improved security” is incorrect. Security is not necessarily improved by managing your own software stack. AWS are extremely good at securing their services and there is arguably less chance that they will expose vulnerabilities than a customer who deploys their own applications.
INCORRECT: “You have greater control and flexibility” is incorrect. You do not have greater control and flexibility with fully managed services. AWS take more responsibility for providing the service and you therefore have fewer options. For example you may not be able to configure the performance parameters of a database as you’d like to or use your own backup or operational software.
Which tool can be used to provide real time guidance on provisioning resources following AWS best practices? A.AWS Inspector B.AWS Simple Monthly Calculator C.AWS Trusted Advisor D.AWS Personal Health Dashboard
C.AWS Trusted Advisor
Explanation:
Trusted Advisor is an online resource that helps to reduce cost, increase performance and improve security by optimizing your AWS environment. Trusted Advisor provides real time guidance to help you provision your resources following best practices.
CORRECT: “AWS Trusted Advisor” is the correct answer.
INCORRECT: “AWS Simple Monthly Calculator” is incorrect. The AWS Simple Monthly Calculator helps you to estimate the cost of using AWS services.
INCORRECT: “AWS Inspector” is incorrect. Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS
INCORRECT: “AWS Personal Health Dashboard” is incorrect. AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you.
