AWS Cloud Practioner Flashcards
When storing sensitive company data in Amazon S3, which security best practices should customers follow?
Enable S3 server-side encryption on S3 bucket.
What benefits does Amazon EC2 provide overusing non-cloud servers? (Select TWO.)
- Inexpensive
- Elastic web-scale computing
Which tool enables you to visualize your usage patterns over time and to identify your underlying cost drivers?
- AWS Cost Explorer
AWS Trusted Advisor provides real-time guidance on what characteristics of an AWS account? (Select TWO.)
- Security best practices
- Cost optimization
Which of the following statements is correct in relation to consolidated billing? (Select TWO.) #2
- The paying account is independent and cannot access resources of other accounts.
- One bill is provided per AWS organization
Which types of pricing policies does AWS offer? (Select TWO.)
- Save when you reserve
- Pay-as-you-go
Which Amazon S3 storage classes should be used for storing data for long time periods when immediate access is not required at the LOWEST cost? (Select TWO.)
- Amazon S3 Glacier
- Amazon S3 Glacier Deep Archive
What method can you use to take a backup of an Amazon EC2 instance using AWS tools?
- Take a snapshot to capture the point-in-time state of the instance
Which benefit of the AWS Cloud eliminates the need for users to try estimating future infrastructure usage?
- Elasticity of the AWS Cloud
Which service allows you to automatically expand and shrink your application in response to demand?
- Amazon EC2 Auto Scaling
Which AWS service is primarily used for software version control?
- AWS CodeCommit
What benefits are provided by Amazon CloudFront? (Select TWO.) #2
- Content is cached at Edge Locations for fast distribution to customers
- Built-in Distributed Denial of Service (DDoS) attack protection
Which service can be used to help you to migrate databases to AWS quickly and securely?
- AWS Database Migration Service (DMS)
A company recently took up an Enterprise-level AWS Support plan and has a question relating to their AWS account. Who is the primary point of contact they should direct the question to?
- AWS Concierge Support team
Which AWS service can be used to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PC?
- Elastic Transcoder
A company would like to maximize their potential volume and Reserved Instance discounts across multiple accounts and also apply service control policies on member accounts. Which service or tool can they use to gain these benefits?
- AWS Organizations
Which feature of Amazon Rekognition can assist with saving time?
- Identification of objects in images and videos
What is the most cost-effective support plan that should be selected to provide at most a 1-hour response time for a production system failure?
- Business
Which benefits can an organization achieve by deploying AWS Global Accelerator? (Select TWO.)
- Improves the availability of applications on AWS
- Decreased latency to reach applications deployed on AWS
What advantages do you get from using the AWS cloud? (Select TWO.) #2
- Stop guessing about capacity
- Trade capital expense for variable expense
What can you use to quickly connect your office securely to your Amazon VPC?
- AWS managed VPN
Which of the following is a principle of good AWS Cloud architecture design?
- Implement loose coupling
Under the AWS shared responsibility model what is the customer responsible for? (Select TWO.)
- Configuration of security groups
- Encryption of customer data
Which feature of AWS allows you to deploy a new application for which the requirements may change over time?
- Elasticity
A company plans to deploy a global commercial application on Amazon EC2 instances. The deployment solution should be designed with the highest redundancy and fault tolerance. Based on this situation, how should the EC2 instances be deployed?
- Across multiple Availability Zones in two AWS Regions
Which services can be used for asynchronous integration between application components? (Select TWO.)
- Amazon SQS
- AWS Step Functions
Which services are involved in reducing application latency and increasing performance for end users? (Select TWO.)
- Amazon CloudFront
- Amazon ElastiCache
Which AWS service is used to enable multi-factor authentication?
- AWS IAM
Which AWS service can an organization use to automate operational tasks on EC2 instances using existing Chef cookbooks?
- AWS OpsWorks
What are two ways that moving to an AWS cloud can benefit an organization? (Select TWO.)
- Stop guessing about capacity
- Increase speed and agility
When a customer deploys a database on Amazon RDS, what is the customer responsible for?
- Controlling network access through security groups
Under the AWS shared responsibility model, what are the customer’s responsibilities? (Select TWO.) #2
- Data integrity Authentication
- Security of data in transit
Which service allows you to run code as functions without needing to provision or manage servers?
- AWS Lambda
Which of the following types of recommendation does AWS Trusted Advisor provide? (Select TWO.)
- Cost optimization
- Performance
Which items can be configured from within the VPC management console? (Select TWO.)
- Subnets
- Security Groups
What strategy can assist with allocating metadata to AWS resources for cost tracking and visibility?
- Tagging
Which service can be used to track the CPU usage of an EC2 instance?
- Amazon Cloudwatch
Which AWS services can be used to connect the AWS Cloud and on-premises resources? (Select TWO.)
- AWS Direct Connect
- AWS Managed VPN
An AWS customer wishes to purchase unused Amazon EC2 capacity at a discounted rate. Which pricing plan should they choose?
- Spot Instances
Under the shared responsibility model, what are examples of shared controls? (Select TWO.)
- Configuration Management
- Patch Management
Which service supports the resolution of public domain names to IP addresses or AWS resources?
- Amazon Route 53
Which AWS storage technology can be considered a “virtual hard disk in the cloud”?
- Amazon Elastic Block Storage (EBS) volume
Which service can be used for building and integrating loosely-coupled, distributed applications?
- Amazon SNS
Which service records API activity on your account and delivers log files to an Amazon S3 bucket?
- AWS CloudTrail
Which AWS service allows you to connect to storage from on-premise servers using standard file protocols?
- Amazon EFS
What advantages does deploying Amazon CloudFront provide? (Select TWO.)
- Reduced latency
- Improved performance for end users
A company stores copies of backups on Amazon S3 and requires rapid access but low resiliency. Which storage class is optimized for these requirements?
- Amazon S3 One Zone-Infrequent Access
What is the scope of a VPC within a region?
- Spans all Availability Zones within the region
For which services does Amazon not charge customers? (Select TWO.)
theres two of these
- AWS CloudFormation
- Amazon VPC
Which AWS service can be used to generate encryption keys that can be used to encrypt data? (Select TWO.)
- AWS CloudHSM
- AWS Key Management Service (AWS KMS)