AWS Cloud Practitioner (Pool 1/3)

Question 1

Which of the following can be attached to EC2 Instances to store data

A) Amazon Glacier
B) Amazon EBS Volumes
C) Amazon EBS Snapshots
D) Amazon SQS

Answer 1

B) Amazon EBS Volumes

An Amazon EBS volume is a durable, block-level storage device that you can attach to a single EC2 instance. You can use EBS volumes as primary storage for data that requires frequent updates, such as the system drive for an instance or storage for a database application.

For more information on EBS Volumes, please refer to the below URL:
https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumes.html

Question 2

Which of the following networking components can be used to host EC2 resources in the AWS Cloud?

A) AWS Trusted Advisor
B) AWS VPC
C) AWS Elastic Load Balancer
D) AWS Autoscaling

Answer 2

B) AWS VPC

Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you’ve defined. This virtual network closely resembles a traditional network that you’d operate in your own data center, with the benefits of using the scalable infrastructure of AWS.

For more information on
AWS VPC, please refer to the below URL: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html

Question 3

Your company is planning to host resources in the AWS Cloud. They want to use services which can be used to decouple resources hosted on the cloud. Which of the following services can help fulfil this requirement?

A) AWS EBS Volumes
B) AWS EBS Snapshots
C) AWS Glacier
D) AWS SQS

Answer 3

D) AWS SQS

Amazon Simple Queue Service (Amazon SQS) offers a reliable, highly-scalable hosted queue for storing messages as they travel between applications or microservices. It moves data between distributed application components and helps you decouple these components.

For more information on AWS SQS, please refer to the below URL: https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/Welcome.html

Question 4

Which of the following components of the CloudFront service can be used to distribute contents to users across the globe?

A) Amazon VPC
B) Amazon Regions
C) Amazon Availability Zones
D) Amazon Edge Locations

Answer 4

D) Amazon Edge Locations

Amazon CloudFront is a web service that speeds up distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. CloudFront delivers your content through a worldwide network of data centers called edge locations.

For more information on Amazon CloudFront, please refer to the below URL: http://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/Introduction.html

Question 5

Your company is planning to move to the AWS Cloud. You need to give a presentation on the cost perspective when moving existing resources to the AWS Cloud. When it comes to Amazon EC2, which of the following is an advantage when it comes to the cost perspective?

A) Having the ability of automated backups of the EC2 instance, so that you don’t need to worry about the maintenance costs.
B) The ability to choose low cost AMI’s to prepare the instances.
C) The ability to only pay for what you use.
D) Ability to tag instances to reduce the overall cost.

Answer 5

C) The ability to only pay for what you use.

One of the advantages of EC2 Instances is the per second billing concept. This is given in the AWS documentation also With per-second billing, you pay for only what you use. It takes cost of unused minutes and seconds in an hour off of the bill, so you can focus on improving your applications instead of maximizing usage to the hour. Especially, if you manage instances running for irregular periods of time, such as dev/testing, data processing, analytics, batch processing and gaming applications, can benefit.

For more information on EC2 Pricing, please refer to the below URL: https://aws.amazon.com/ec2/pricing/

Question 6

Your company is planning on moving to the AWS Cloud. Once the movement to the Cloud is complete, they want to ensure that the right security settings are put in place. Which of the below tools can assist from a Security compliance. Choose 2 answers from the options given below?

A) AWS Inspector
B) AWS Trusted Advisor
C) AWS Support
D) AWS Kinesis

Answer 6

A) AWS Inspector
B) AWS Trusted Advisor

An online resource to help you reduce cost, increase performance, and improve security by optimizing your AWS environment, Trusted Advisor provides real time guidance to help you provision your resources following AWS best practices The AWS Inspector can inspect EC2 Instances against common threats.

For more information on the AWS Trusted Advisor, please refer to the below URL: https://aws.amazon.com/premiumsupport/trustedadvisor/ https://docs.aws.amazon.com/inspector/latest/userguide/inspector_introduction.html

Question 7

There is a requirement to collect important metrics from AWS RDS and EC2 Instances. Which of the following services can help fulfil this requirement?

A) Amazon CloudFront
B) Amazon CloudSearch
C) Amazon CloudWatch
D) Amazon Config

Answer 7

C) Amazon CloudWatch

Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, set alarms, and automatically react to changes in your AWS resources.

For more information on AWS CloudWatch, please refer to the below URL: https://aws.amazon.com/cloudwatch/

Question 8

Which of the following services can provide a complete audit trail of all AWS services used within an account?

A) AWS Trusted Advisor
B) Amazon EC2 instance usage report
C) Amazon CloudWatch
D) AWS CloudTrail Logs

Answer 8

D) AWS Cloud Trail Logs

Using CloudWatch trail , one can monitor all the API activity conducted on all AWS services. The AWS Documentation additionally mentions the following AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.

For more information on AWS Cloudtrail, please refer to the below URL: https://aws.amazon.com/cloudtrail/

Question 9

Which of the following service is most useful when a Disaster Recovery method is triggered in AWS?

A) Amazon Route 53
B) Amazon SNS
C) Amazon SQS
D) Amazon Inspector

Answer 9

A) Amazon Route 53

Route 53 is a domain name system service by AWS. When a Disaster does occur , it can be easy to switch to secondary sites using the Route53 service. The AWS Documentation additionally mentions the following Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. It is e to give developers and businesses an extremely reliable and cost effective way to route end users to Internet applications by translating names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other. Amazon Route 53 is fully compliant with IPv6 as well

For more information on AWS Route53, please refer to the below URL: https://aws.amazon.com/route53/

Question 10

Which of the following can be used to work with AWS services in a programmatic manner?

A) AWS Powershell
B) AWS Bash
C) AWS CLI
D) AWS Console

Answer 10

C) AWS CLI

It allows developers to easily work with the various AWS resources programmatically.

For more information on the various programming tools available for AWS, please refer to the below URL: https://aws.amazon.com/tools/

Question 11

When designing a system, you use the principle of design for failure and nothing will fail”. Which of the following services/features of AWS can assist in supporting this design principle. Choose 3 answers from the options given below?

A) Availability Zones
B) Regions
C) Elastic Load Balancer
D) Pay as you go

Answer 11

A) Availability Zones
B) Regions
C) Elastic Load Balancer

Each AZ is a set of one or more data centers. By deploying your AWS resources to multiple Availability zones , you are designing with failure with mind. So if one AZ were to go down , the other AZ’s would still be up and running and hence your application would be more fault tolerant. For disaster recovery scenarios , one can move or make resources run in other regions And finally one can use the Elastic Load Balancer to distribute load to multiple backend instances within a particular region.

For more information on AWS Regions and AZ’s, please refer to the below URL: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html

Question 12

Currently your organization has an operational team that takes care of ID management in their on-premise data center. They now also need to manage users and groups created in AWS. Which of the following AWS tools would they need to use for performing this management function?

A) AWS Config
B) AWS Cloud Trail
C) AWS Key Management Service (AWS KMS)
D) AWS Identity and Access Management (AWS IAM)

Answer 12

D) AWS Identity and Access Management (AWS IAM)

The AWS documentation mentions the following AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. You use IAM to control who is authenticated (signed in) and authorized (has permissions) to use resources.

For more information on AWS IAM, please refer to the below URL: http://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html

Question 13

You have a DEV-OPS team in your current organization structure. They are keen to know if there is any service available in AWS which can be used to manage infrastructure as code. Which of the following can be met with such a requirement?

A) Using AWS Cloudformation
B) Using AWS Config
C) Using AWS Inspector
D) Using AWS trusted Advisor

Answer 13

A) Using AWS Cloudformation

The AWS documentation mentions the following AWS CloudFormation is a service that helps you model and set up your Amazon Web Services resources so that you can spend less time managing those resources and more time focusing on your applications that run in AWS. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CloudFormation takes care of provisioning and configuring those resources for you. You don’t need to individually create and configure AWS resources and figure out what’s dependent on what; AWS CloudFormation handles all of that.

For more information on AWS Cloudformation, please refer to the below URL: https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html

Question 14

Which of the following services is a fully managed, petabyte-scale data warehouse service in the AWS cloud?

A) Amazon Redshift
B) Amazon DynamoDB
C) Amazon ElastiCahe
D) Amazon Aurora

Answer 14

A) Amazon Redshift

The AWS documentation mentions the following Amazon Redshift is a fully managed, petabyte-scale data warehouse service in the cloud. You can start with just a few hundred gigabytes of data and scale to a petabyte or more. This enables you to use your data to acquire new insights for your business and customers.

For more information on AWS Redshift, please refer to the below URL: http://docs.aws.amazon.com/redshift/latest/mgmt/welcome.html

Question 15

Which of the following is the responsibility of AWS according to the Shared Security Model? Choose 3 answers from the options given below?

A) Managing AWS Identity and Access Management
B) Securing Edge locations
C) Monitoring physical locations
D) Implementing service organization control (SOC standards)

Answer 15

B) Securing Edge locations
C) Monitoring physical locations
D) Implementing service organization control (SOC standards)

The responsibility of AWS includes the following 1) Securing edge locations 2) Monitoring physical device security 3) Implementing service organization Control (SOC) standards.

For more information on AWS Shared Responsibility Model, please refer to the below URL: https://aws.amazon.com/compliance/shared-responsibility-model/

Question 16

Your company has just started using the resources on the AWS Cloud. They want to get an idea on the costs being incurred so far for the resources being used. How can this be achieved?

A) By going to the Amazon EC2 dashboard. Here you can see the costs of the running EC2 resources.
B) By using the AWS Cost and Usage reports explorer. Here you can see the running and forecast costs.
C) By using the AWS Trusted Advisor dashboard. This dashboard will give you all the costs.
D) By using the AWS Cloud Trail logs.

Answer 16

B) By using the AWS Cost and Usage reports explorer. Here you can see the running and forecast costs.

The AWS documentation mentions the following on AWS Cost Reports Cost Explorer is a free tool that you can use to view your costs. You can view data up to the last 13 months, forecast how much you are likely to spend for the next three months, and get recommendations for what Reserved Instances to purchase.

For more information on AWS Cost Reports, please refer to the below URL: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-explorer-what-is.html

Question 17

By default who from the below roles has complete administrative control over all resources in the respective AWS account?

A) AWS Support Teams
B) AWS Account Owner
C) AWS Security Teams
D) AWS Technical Account Manager (TAM)

Answer 17

B) AWS Account Owner

The entire of control of data within an AWS account is with the Account Owner.

For more information on AWS Account identifiers, please refer to the below URL: http://docs.aws.amazon.com/general/latest/gr/acct-identifiers.html

Question 18

Your design team is planning to design an application that will be hosted on the AWS Cloud. One of their main non-functional requirements is given below. Reduce inter-dependencies so failures do not impact other components. Which of the following concepts does this requirement relate to?

A) Integration
B) Decoupling
C) Aggregation
D) Segregation

Answer 18

B) Decoupling

The entire concept of decoupling components is to ensure that the different components of an applications can be managed and maintained separately. If all components are tightly coupled then when one component goes down , the entire application would do down. Hence it is always a better design practice to decouple application components.

For more information on a decoupled architecture, please refer to the below URL: http://whatis.techtarget.com/definition/decoupled-architecture

Question 19

Which of the following can be used to increase the fault tolerance of an application?

A) Deploying resources across multiple Edge locations
B) Deploying resources across multiple VPC’s
C) Deploying resources across multiple Availability Zones
D) Deploying resources across multiple AWS Accounts

Answer 19

C) Deploying resources across multiple Availability Zones

Each AZ is a set of one or more data centers. By deploying your AWS resources to multiple Availability zones , you are designing with failure with mind. So if one AZ were to go down , the other AZ’s would still be up and running and hence your application would be more fault tolerant.

For more information on AWS Regions and AZ’s, please refer to the below URL: http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html

Question 20

Which of the following security requirements are managed by AWS? Select 3 answers from the options given below?

A) Password Policies
B) User Permissions
C) Physical Security
D) Disk Disposal
E) Hardware Patching

Answer 20

C) Physical Security
D) Disk Disposal
E) Hardware Patching

As per the Shared Responsibility model , the Patching of the underlying hardware and physical security of AWS resources is the responsibility of AWS. For more information on AWS Shared Responsibility Model, please refer to the below URL: https://aws.amazon.com/compliance/shared-responsibility-model/ Disk disposal: Storage Device Decommissioning When a storage device has reached the end of its useful life, AWS procedures include a decommissioning process that is designed to prevent customer data from being exposed to unauthorized individuals. AWS uses the techniques detailed in DoD 5220.22-M (“National Industrial Security Program Operating Manual “) or NIST 800-88 (“Guidelines for Media Sanitization”) to destroy data as part of the decommissioning process. All decommissioned magnetic storage devices are degaussed and physically destroyed in accordance with industry-standard practices.

For more information on Disk disposal, please refer to the below URL: https://d0.awsstatic.com/whitepapers/aws-security-whitepaper.pdf

Question 21

Which of the following terms relate to creating systems that scale to the required capacity based on changes in demand?

A) Disaster Recovery
B) Elasticity
C) Decoupling
D) Aggregation

Answer 21

B) Elasticity

The concept of Elasticity is the means of an application having the ability to scale up and scale down based on demand. An example of such a service is the Autoscaling service.

For more information on AWS Autoscaling service, please refer to the below URL: https://aws.amazon.com/autoscaling/

Question 22

Your company is planning to offload some of the batch processing workloads on to AWS. These jobs can be interrupted and resumed at any time. Which of the following instance types would be the most cost effective to use for this purpose?

A) On-Demand
B) Spot
C) Full Upfront Reserved
D) Partial Upfront Reserved

Answer 22

B) Spot

Spot Instances are a cost-effective choice if you can be flexible about when your applications run and if your applications can be interrupted. For example, Spot Instances are well-suited for data analysis, batch jobs, background processing, and optional tasks.

For more information on AWS Spot Instances, please refer to the below URL: http://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html

Question 23

Which of the following needs a user name and password to access AWS resources?

A) AWS Management Console
B) AWS Application Programming Interface (API)
C) AWS Software Deployment Kits (SDK)
D) AWS CLI

Answer 23

A) AWS Management Console

The AWS Management console allows you to access and manage Amazon Web Services through a simple and intuitive web-based user interface.

For more information on AWS console, please refer to the below URL: https://aws.amazon.com/console/

Question 24

Your company is planning to use the AWS Cloud. But there is a management decision that resources need to split department wise. And the decision is tending towards managing multiple AWS accounts. Which of the following would help in effective management and also provide an efficient costing model?

A) AWS Organizations
B) Dev Pay
C) AWS trusted Advisor
D) AWS Cost Explorer

Answer 24

A) AWS Organizations

AWS Organizations offers policy-based management for multiple AWS accounts. With Organizations, you can create groups of accounts and then apply policies to those groups. Organizations enables you to centrally manage policies across multiple accounts, without requiring custom scripts and manual processes.

For more information on the AWS Organizations, please refer to the below URL: https://aws.amazon.com/organizations/

Question 25

Which of the following can be used as an additional layer of security to using a user name and password when logging into the AWS Console?

A) Multi Factor Authentication (MFA)
B) Secondary Password
C) Root access privileges
D) Secondary user name

Answer 25

A) Multi Factor Authentication (MFA)

AWS Multi-Factor Authentication (MFA) is a simple best practice that adds an extra layer of protection on top of your user name and password.

For more information on the AWS MFA, please refer to the below URL: https://aws.amazon.com/iam/details/mfa/

Question 26

Which AWS Cloud service helps in quick deployment of resources which can make use of different programming languages such as .Net and Java?

A) AWS Elastic Beanstalk
B) AWS Elastic Compute Cloud (Amazon EC2)
C) AWS VPC
D) AWS SQS

Answer 26

A) AWS Elastic Beanstalk

AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker on familiar servers such as Apache, Nginx, Passenger, and IIS.

For more information on enabling AWS Elastic beanstalk, please refer to the below URL: https://aws.amazon.com/elasticbeanstalk/?p=tile

Question 27

Your company handles a crucial ecommerce application. This application needs to have an uptime of at least 99.5%. There is a decision to move the application to the AWS Cloud. Which of the following deployment strategies can help build a robust architecture for such an application?

A) Deploying the application across multiple VPC’s
B) Deploying the application across multiple Regions
C) Deploying the application across Edge locations
D) Deploying the application across multiple subnets

Answer 27

B) Deploying the application across multiple Regions

Businesses are using the AWS cloud to enable faster disaster recovery of their critical IT systems without incurring the infrastructure expense of a second physical site. The AWS cloud supports many popular disaster recovery (DR) architectures from “pilot light” environments that may be suitable for small customer workload data center failures to “hot standby” environments that enable rapid failover at scale. With data centers in Regions all around the world, AWS provides a set of cloud-based disaster recovery services that enable rapid recovery of your IT infrastructure and data.

For more information on enabling AWS Disaster Recovery, please refer to the below URL: https://aws.amazon.com/disaster-recovery/

Question 28

Which of the following initiatives from AWS helps organizations reduce the overall expenditure for IT companies when they host resources on the AWS Cloud?

A) They decommission older hardware
B) They continually reduce the cost of Cloud Computing
C) They use better security mechanisms so you don’t have to think about security at all.
D) They allow deployment of multiple resources

Answer 28

CHECK B)

The AWS Documentation mentions the following AWS continues to lower the cost of cloud computing for its customers. In 2014, AWS has reduced the cost of compute by an average of 30%, storage by an average of 51% and relational databases by an average of 28%. AWS continues to drive down the cost of your IT infrastructure.

For more information on this, please refer to the below URL: https://aws.amazon.com/economics/learn-more/

Question 29

You are planning on deploying a video based application onto the AWS Cloud. These videos will be accessed by users across the world. Which of the below services can help stream the content in an efficient manner to the users across the globe?

A) Amazon SES
B) Amazon Cloudtrail
C) Amazon CloudFront
D) Amazon S3

Answer 29

C) Amazon CloudFront

Amazon CloudFront is a web service that gives businesses and web application developers an easy and cost effective way to distribute content with low latency and high data transfer speeds. Like other AWS services, Amazon CloudFront is a self-service, pay-per-use offering, requiring no long term commitments or minimum fees. With CloudFront, your files are delivered to end-users using a global network of edge locations.

For more information on CloudFront, please visit the Link: https://aws.amazon.com/cloudfront/

Question 30

Which of the following is a fully managed NoSQL database service available in AWS?

A) AWS DynamoDB
B) AWS RDS
C) AWS Redshift
D) AWS MongoDB

Answer 30

A) AWS DynamoDB

Amazon DynamoDB is a fast and flexible NoSQL database service for all applications that need consistent, single-digit millisecond latency at any scale. It is a fully managed cloud database and supports both document and key-value store models. Its flexible data model, reliable performance, and automatic scaling of throughput capacity, makes it a great fit for mobile, web, gaming, ad tech, IoT, and many other applications.

For more information on DynamoDB, please visit the Link: https://aws.amazon.com/dynamodb/

Question 31

Which of the following storage options is best when you want to store archive data?

A) Amazon Storage Gateway
B) Amazon Glacier
C) Amazon EBS
D) Amazon S3

Answer 31

B) Amazon Glacier

Amazon Glacier is a secure, durable, and extremely low-cost cloud storage service for data archiving and long-term backup. It is designed to deliver 99.999999999% durability, and provides comprehensive security and compliance capabilities that can help meet even the most stringent regulatory requirements.

For more information on Amazon Glacier, please visit the Link: https://aws.amazon.com/glacier/

Question 32

If there is a requirement to host EC2 Instances in the AWS Cloud wherein the utilization is guaranteed to be consistent for a long period of time, which of the following would you utilize to ensure costs are minimized?

A) Reserved Instances
B) On-demand instances
C) Spot instances
D) Regular instances

Answer 32

A) Reserved Instances

When you have instances that will be used continuously and throughout the year, the best option is to buy reserved instances. By buying reserved instances, you are actually allocated an instance for the entire year or the duration you specify with a reduced cost.

For more information on Reserved Instances, please visit the Link: https://aws.amazon.com/ec2/pricing/reserved-instances/

Question 33

Which of the following services helps provide a dedicated connection from on-premise infrastructure to resources hosted in the AWS Cloud?

A) AWS VPC
B) AWS VPN
C) AWS Direct Connect
D) AWS Subnets

Answer 33

C) AWS Direct Connect

AWS Direct Connect makes it easy to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your datacentre, office, or colocation environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.

For more information on AWS Direct Connect, please visit the Link: https://aws.amazon.com/directconnect/?p=tile

Question 34

Which of the following is not a category recommendation given by the AWS Trusted Advisor?

A) Security
B) High Availability
C) Cost Optimization
D) Performance
E) Fault tolerance

Answer 34

B) High Availability

Screenshot in AWS Doc shows what services the Trusted Advisor Dashboard offers.

For more information on the AWS Trusted Advisor, please visit the Link: https://aws.amazon.com/premiumsupport/trustedadvisor/

Question 35

A company is deploying a two-tier, highly available web application to AWS. The application needs a storage layer to store artefacts such as photos and videos. Which of the following services can be used as the underlying storage mechanism?

A) Amazon EBS volume
B) Amazon S3
C) Amazon EC2 instance state
D) Amazon RDS instance

Answer 35

B) Amazon S3

Amazon S3 is the default storage service that should be considered for companies. If provides durable storage for all static content.

For more information on AWS S3, please visit the Link: https://aws.amazon.com/s3/

Question 36

When giving permission to users via the AWS Identity and Access Management tool , which of the following principles should be applied when granting permissions?

A) Principle of least privilege
B) Principle of greatest privilege
C) Principle of most privilege
D) Principle of lower privilege

Answer 36

A) Principle of least privilege

The principle means giving a user account only those privileges which are essential to perform its intended function. For example, a user account for the sole purpose of creating backups does not need to install software: hence, it has rights only to run backup and backup-related applications.

For more information on principle of least privilege, please refer to the following Link: https://en.wikipedia.org/wiki/Principle_of_least_privilege

Question 37

Which of the below mentioned services is equivalent to hosting virtual servers on an on-premise location?

A) AWS IAM
B) AWS Server
C) AWS EC2
D) AWS Regions

Answer 37

C) AWS EC2

Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, resizable compute capacity in the cloud. It is designed to make web-scale cloud computing easier for developers.

For more information on AWS EC2, please refer to the following Link: https://aws.amazon.com/ec2/

Question 38

You have a set of EC2 Instances hosted on the AWS Cloud. The EC2 Instances are hosting a web application. If you get a DDos attack from the internet which of the following can help in reducing the overall threat to your EC2 Instances? Choose 2 answers from the options given below:

A) Usage of Security Groups
B) Usage of AWS Config
C) Usage of Access Control Lists
D) Usage of Internet Gateway

Answer 38

A) Usage of Security Groups
C) Usage of Access Control Lists

A security group acts as a virtual firewall for your instance to control inbound and outbound traffic A network access control list (ACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets.

For more information on Security Groups, please refer to the following Link: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_SecurityGroups.html For more information on Network Access Control Lists, please refer to the following Link: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html

Question 39

Your company currently uses VM Templates to spin up virtual machines on their on-premise infrastructure. Which of the following can be used in a similar way to spin up EC2 instances on the AWS Cloud?

A) EBS Volumes
B) EBS Snapshots
C) Amazon Machines Images
D) Amazon VMWare

Answer 39

C) Amazon Machines Images

An Amazon Machine Image (AMI) provides the information required to launch an instance, which is a virtual server in the cloud. You specify an AMI when you launch an instance, and you can launch as many instances from the AMI as you need. You can also launch instances from as many different AMIs as you need.

For more information on Amazon Machine Images, please refer to the following Link: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/AMIs.html

Question 40

Which of the below cannot be used to get data onto Amazon Glacier?

A) AWS Glacier APIs
B) AWS Console
C) AWS Glacier SDK
D) AWS S3 Lifecycle Policies

Answer 40

B) AWS Console

Note that the AWS Console cannot be used to upload data onto Glacier. The console can only be used to create a Glacier vault which can be used to upload the data.

For more information on uploading data onto Glacier, please refer to the following Link: https://docs.aws.amazon.com/amazonglacier/latest/dev/uploading-an-archive.html

Question 41

Your company is planning to pay for an AWS Support plan. They have the following requirements as far as the support plan goes:

• 24x7 access to Cloud Support Engineers via email, chat & phone
• A response time of less than 1 hour for any critical faults

Which of the following plans will suffice keeping in mind the cost factor?

A) Basic
B) Developer
C) Business
D) Enterprise

Answer 41

D) Enterprise

The Enterprise support plan has support time less than 15 minutes for Business-critical system down.

For more information on the support plans, please refer to the following Link: https://aws.amazon.com/premiumsupport/compare-plans/

Question 42

Which of the following are features of an edge location. Choose 3 answers from the options given below?

A) Distribute content to users
B) Cache common issues
C) Distribute load across multiple resources
D) Use in conjunction with the CloudFront Service

Answer 42

A) Distribute content to users
B) Cache common issues
D) Use in conjunction with the CloudFront Service

Amazon CloudFront employs a global network of edge locations and regional edge caches that cache copies of your content close to your viewers. Amazon CloudFront ensures that end-user requests are served by the closest edge location. As a result, viewer requests travel a short distance, improving performance for your viewers. For files not cached at the edge locations and the regional edge caches, Amazon CloudFront keeps persistent connections with your origin servers so that those files can be fetched from the origin servers as quickly as possible.

For more information on CloudFront and Edge locations, please refer to the following Link: https://aws.amazon.com/cloudfront/details/

Question 43

Which of the following storage options provides the option of Lifecycle policies that can be used to move objects to archive storage?

A) Amazon S3
B) Amazon Glacier
C) Amazon Storage Gateway
D) Amazon EBS

Answer 43

A) Amazon S3

Lifecycle configuration enables you to specify the lifecycle management of objects in a bucket. The configuration is a set of one or more rules, where each rule defines an action for Amazon S3 to apply to a group of objects. These actions can be classified as follows:
· Transition actions {in which you define when objects transition to another storage class. For example, you may choose to transition objects to the STANDARD_IA (IA, for infrequent access) storage class 30 days after creation, or archive objects to the GLACIER storage class one year after creation.
· Expiration actions {in which you specify when the objects expire. Then Amazon S3 deletes the expired objects on your behalf}.

For more information on AWS Object Lifecycle management, please visit the Link: https://aws.amazon.com/s3/

Question 44

Which of the following features of Amazon RDS allows for better availability of databases. Choose 2 answers from the options given below?

A) VPC Peering
B) Multi-AZ
C) Read Replica’s
D) Multi-Region

Answer 44

B) Multi-AZ
D) Multi-Region

If you are looking to use replication to increase database availability while protecting your latest database updates against unplanned outages, consider running your DB instance as a Multi-AZ deployment. You can use Multi-AZ deployments and Read Replicas in conjunction to enjoy the complementary benefits of each. You can simply specify that a given Multi-AZ deployment is the source DB instance for your Read Replica(s). That way you gain both the data durability and availability benefits of Multi-AZ deployments and the read scaling benefits of Read Replicas.

For more information on AWS Reserved Instances, please visit the Link: https://aws.amazon.com/ec2/pricing/reserved-instances/

Question 45

There is a requirement hosting a set of servers in the Cloud for a short period of 6 months. Which of the following types of instances should be chosen to be cost effective?

A) Spot Instances
B) On-Demand
C) No Upfront costs Reserved
D) Partial Upfront costs Reserved

Answer 45

B) On-Demand

Since the requirement is just for 3 months, then the best cost effective option is to use On-Demand Instances.

For more information on AWS On-Demand Instances pricing, please visit the Link: https://aws.amazon.com/ec2/pricing/on-demand/

Question 46

Which of the following from AWS can be used to transfer petabytes of data from on-premise locations to the AWS Cloud?

A) AWS Import/Export
B) AWS EC2
C) AWS Snowball
D) Transfer

Answer 46

C) AWS Snowball

Snowball is a petabyte-scale data transport solution that uses secure appliances to transfer large amounts of data into and out of the AWS cloud. Using Snowball addresses common challenges with large-scale data transfers including high network costs, long transfer times, and security concerns. Transferring data with Snowball is simple, fast, secure, and can be as little as one-fifth the cost of high-speed Internet.

For more information on AWS Snowball , please visit the Link: https://aws.amazon.com/snowball/?p=tile

Question 47

When working with the AWS Cloud which of the following are headaches you don’t need to worry about? Choose 2 answers from the options given below:

A) Having complete control over the physical infrastructure, so you don’t have to worry about what AWS is doing?
B) Having the pay as you go model, so you don’t have to worry if you are burning costs for non-running resources.
C) No upfront costs
D) Having no need to worry about security.

Answer 47

B) Having the pay as you go model, so you don’t have to worry if you are burning costs for non-running resources.
C) No upfront costs

With AWS , some of the benefits you have is the “Pay as you go model” and not having the need to pay upfront for using AWS resources.

For more information on some of the benefits of moving to the AWS Cloud , please visit the Link: https://aws.amazon.com/application-hosting/benefits/

Question 48

Your company wants to move an existing Oracle database to the AWS Cloud. Which of the following services can help facilitate this move?

A) AWS Database Migration Service
B) AWS VM Migration Service
C) AWS Inspector
D) AWS Trusted Advisor

Answer 48

A) AWS Database Migration Service

AWS Database Migration Service helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. The AWS Database Migration Service can migrate your data to and from most widely used commercial and open-source databases.

For more information on AWS Database migration, please refer to the below URL: https://aws.amazon.com/dms/

Question 49

Which of the following features of AWS RDS allows for offloading reads of the database?

A) Cross region replication
B) Creating Read Replicas
C) Using Snapshots
D) Using Multi-AZ feature

Answer 49

B) Creating Read Replicas

You can reduce the load on your source DB Instance by routing read queries from your applications to the read replica. Read replicas allow you to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads.

For more information on Read Replicas, please refer to the below URL: https://aws.amazon.com/rds/details/read-replicas/

Question 50

Which of the following terms refers to another geographic location in AWS?

A) Availability Zone
B) Data Center
C) Region
D) Edge location

Answer 50

C) Region

Regions correspond to different geographic locations in AWS.

For more information on Regions and Availability Zones in AWS, please refer to the below URL: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html

Question 51

A company wants to have a database hosted on AWS. As much as possible they want to have control over the database itself. Which of the following would be an ideal option for this?

A) Using the AWS DynamoDB service
B) Using the AWS RDS service
C) Hosting the database on an EC2 instance
D) Using the Amazon Aurora service

Answer 51

C) Hosting the database on an EC2 instance

If you want a self-managed database, that means you want complete control over the database engine and the underlying infrastructure. In such a case you need to host the database on an EC2 Instance.

For more information on EC2 Instances, please refer to the below URL: https://aws.amazon.com/ec2/

Question 52

A company currently has an application which consists of a .Net layer which connects to a MySQL database. They now want to move this application onto AWS. They want to make use of all AWS features such as high availability and automated backups. Which of the following would be an ideal database in AWS to migrate to for this requirement?

A) Aurora
B) DynamoDB
C) An EC2 instance with MySQL installed
D) An EC2 instance with Aurora installed

Answer 52

A) Aurora

Amazon Aurora (Aurora) is a fully managed, MySQL- and PostgreSQL-compatible, relational database engine. It combines the speed and reliability of high-end commercial databases with the simplicity and cost-effectiveness of open-source databases. It delivers up to five times the throughput of MySQL and up to three times the throughput of PostgreSQL without requiring changes to most of your existing applications.

For more information on Amazon Aurora, please refer to the below URL: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Aurora.Overview.html

Question 53

Which of the following statements are FALSE when it comes to elasticity? Choose 2 answers from the options given below:

A) Diverting traffic to instances based on the demand
B) Diverting traffic to instances with the least load
C) Diverting traffic to across multiple regions
D) Diverting traffic to instances with higher capacity

Answer 53

C) Diverting traffic to across multiple regions
D) Diverting traffic to instances with higher capacity

The concept of Elasticity is the means of an application having the ability to scale up and scale down based on demand. An example of such a service is the Autoscaling service.

For more information on AWS Autoscaling service, please refer to the below URL: https://aws.amazon.com/autoscaling/

Question 54

Which of the following services relates the concept of distributing traffic to multiple EC2 Instances?

A) Autoscaling
B) Elastic Load Balancer
C) VPC
D) Subnets

Answer 54

B) Elastic Load Balancer

A load balancer distributes incoming application traffic across multiple EC2 instances in multiple Availability Zones. This increases the fault tolerance of your applications. Elastic Load Balancing detects unhealthy instances and routes traffic only to healthy instances.

For more information on the Elastic Load Balancer service, please refer to the below URL: https://docs.aws.amazon.com/elasticloadbalancing/latest/classic/introduction.html

Question 55

Which of the following services relates the concept of scaling up resources based on demand?

A) Autoscaling
B) Elastic Load Balancer
C) VPC
D) Subnets

Answer 55

A) Autoscaling

AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. Using AWS Auto Scaling, it’s easy to setup application scaling for multiple resources across multiple services in minutes.

For more information on the Auto Scaling service, please refer to the below URL: https://aws.amazon.com/autoscaling/

Question 56

A company is planning to migrate their existing AWS Services to the Cloud. Which of the following would help them do a cost benefit analysis of moving to the AWS Cloud?

A) AWS TCO Calculator
B) AWS Config
C) AWS Cost Explorer
D) AWS Consolidating billing

Answer 56

A) AWS TCO Calculator

Use this calculator to compare the cost of running your applications in an on-premises or colocation environment to AWS. Describe your on-premises or colocation configuration to produce a detailed cost comparison with AWS.

For more information on the TCO Calculator, please refer to the below URL: https://awstcocalculator.com/

Question 57

Which of the following does AWS perform on its behalf for EBS volumes to make it less prone to failure?

A) Replication of the volume across Availability Zones
B) Replication of the volume in the same Availability Zone
C) Replication of the volume across Regions
D) Replication of the volume across Edge locations

Answer 57

B) Replication of the volume in the same Availability Zone

When you create an EBS volume in an Availability Zone, it is automatically replicated within that zone to prevent data loss due to failure of any single hardware component.

For more information on EBS Volumes, please refer to the below URL: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSVolumes.html

Question 58

You have a set of developers that need to use .Net to call AWS Services. Which of the following tools can be used to achieve this purpose?

A) AWS SDK
B) AWS Console
C) AWS CLI
D) AWS IAM

Answer 58

A) AWS SDK

The AWS SDK can be plugged in for various programming languages. Using the SDK you can then call the required AWS services.

For more information on the various tools available in AWS, please refer to the below URL: https://aws.amazon.com/tools/

Question 59

You have an EC2 Instance in development that interacts with the Simple Storage Service. The EC2 Instance is going to be promoted to the production environment. Which of the following features should be used for secure communication between the EC2 Instance and the Simple Storage Service.

A) IAM Users
B) IAM Roles
C) Groups
D) IAM Policies

Answer 59

B) IAM Roles

The AWS Documentation mentions the following An IAM role is similar to a user, in that it is an AWS identity with permission policies that determine what the identity can and cannot do in AWS. However, instead of being uniquely associated with one person, a role is intended to be assumable by anyone who needs it. Also, a role does not have standard long-term credentials (password or access keys) associated with it. Instead, if a user assumes a role, temporary security credentials are created dynamically and provided to the user.

For more information on IAM Roles, please refer to the below URL: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles.html

Question 60

Which of the following can be used to view one bill when you have multiple AWS Accounts?

A) Consolidating billing
B) Combined billing
C) Cost Explorer
D) IAM

Answer 60

A) Consolidating billing

You can use the consolidated billing feature in AWS Organizations to consolidate payment for multiple AWS accounts or multiple AISPL accounts. With consolidated billing, you can see a combined view of AWS charges incurred by all of your accounts. You also can get a cost report for each member account that is associated with your master account. Consolidated billing is offered at no additional charge.

For more information on Consolidated billing, please refer to the below URL: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html

Question 61

Your company is planning to host a large ecommerce application on the AWS Cloud. One of their major concerns is Internet attacks such as DDos attacks. Which of the following services can help mitigate this concern? Choose 2 answers from the options given below:

A) CloudFront
B) AWS Shield
C) AWS EC2
D) AWS Config

Answer 61

A) CloudFront
B) AWS Shield

One of the first techniques to mitigate DDoS attacks is to minimize the surface area that can be attacked thereby limiting the options for attackers and allowing you to build protections in a single place. We want to ensure that we do not expose our application or resources to ports, protocols or applications from where they do not expect any communication. Thus, minimizing the possible points of attack and letting us concentrate our mitigation efforts. In some cases, you can do this by placing your computation resources behind Content Distribution Networks (CDNs) or Load Balancers and restricting direct Internet traffic to certain parts of your infrastructure like your database servers. In other cases, you can use firewalls or Access Control Lists (ACLs) to control what traffic reaches your applications.

For more information on DDos attack prevention, please refer to the below URL: https://aws.amazon.com/shield/ddos-attack-protection/

Question 62

Which of the following services is a serverless compute service in AWS?

A) AWS EC2
B) AWS Config
C) AWS Lambda
D) AWS Opswork

Answer 62

C) AWS Lambda

AWS Lambda is a compute service that lets you run code without provisioning or managing servers. AWS Lambda executes your code only when needed and scales automatically, from a few requests per day to thousands per second.

For more information on AWS Lambda, please refer to the below URL: https://docs.aws.amazon.com/lambda/latest/dg/welcome.html

Question 63

Which of the following are services where you don’t need to manage the underlying Infrastructure? Choose 2 answers from the options given below:

A) DynamoDB
B) EC2
C) Simple Storage Service
D) AWS Authenticating

Answer 63

A) DynamoDB
C) Simple Storage Service

The Simple Storage service and DynamoDB are services where you don’t need to manage the underlying infrastructure.

For more information on AWS S3 and DynamoDB, please refer to the below URL: https://aws.amazon.com/s3/ https://aws.amazon.com/dynamodb/

Question 64

Which of the following disaster recovery deployment mechanisms has the highest downtime?

A) Pilot Light
B) Warm Standby
C) Multi site
D) Backup and Restore

Answer 64

D) Backup and Restore

The snapshot from the AWS Documentation shows the spectrum of the Disaster recovery methods. If you go to the further end of the spectrum you have the least time for downtime for the users.

For more information on Disaster recovery techniques, please refer to the below URL: https://aws.amazon.com/blogs/aws/new-whitepaper-use-aws-for-disaster-recovery/

Question 65

Which of the following services allows you to analyse EC2 Instances against pre-defined security templates to check for vulnerabilities?

A) AWS Trusted Advisor
B) AWS Inspector
C) AWS WAF
D) AWS Shield

Answer 65

B) AWS Inspector

Amazon Inspector enables you to analyse the behaviour of your AWS resources and helps you to identify potential security issues. Using Amazon Inspector, you can define a collection of AWS resources that you want to include in an assessment target. You can then create an assessment template and launch a security assessment run of this target.

For more information on AWS Inspector, please refer to the below URL: https://docs.aws.amazon.com/inspector/latest/userguide/inspector_introduction.html