AWS Cloud Practitioner (Pool 3/3) Flashcards
Which of the following storage mechanisms can be used to store messages effectively which can be used across distributed systems?
A) Amazon Glacier
B) Amazon EBS Volumes
C) Amazon EBS Snapshots
D) Amazon SQS
D) Amazon SQS
AWS SQS Amazon Simple Queue Service (Amazon SQS) offers a reliable, highly-scalable hosted queue for storing messages as they travel between applications or microservices. It moves data between distributed application components and helps you decouple these components.
For more information on AWS SQS, please refer to the below URL: https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/Welcome.html
You are exploring what services AWS has off-hand. You have a large number of data sets that need to be processed. Which of the following services can help fulfil this requirement?
A) EMR
B) S3
C) Glacier
D) Storage Gateway
A) EMR
Amazon EMR helps you analyse and process vast amounts of data by distributing the computational work across a cluster of virtual servers running in the AWS Cloud. The cluster is managed using an open-source framework called Hadoop. Amazon EMR lets you focus on crunching or analysing your data without having to worry about time-consuming setup, management, and tuning of Hadoop clusters or the compute capacity they rely on.
For more information on AWS EMR, please refer to the below URL: http://docs.amazonaws.cn/en_us/aws/latest/userguide/emr.html
Which one of the following features is normally present in all of AWS Support plans?
A) A 24*7 access to Customer Support
B) Access to all features in the Trusted Advisor
C) Technical Account Manager
D) A dedicated support person
A) A 24*7 access to Customer Support
This is given in the AWS Documentation For more information on AWS Support plans, please refer to the below URL: https://aws.amazon.com/premiumsupport/compare-plans/
You are planning to serve a web application on the AWS Platform by using EC2 Instances. Which of the below principles would you adopt to ensure that even if some of the EC2 Instances crash, you still have a working application?
A) Using a scalable system
B) Using an Elastic system
C) Using a regional system
D) Using a fault tolerant system
D) Using a fault tolerant system
A fault tolerant system is one that ensures that the entire system works as expected even there are issues.
For more information on designing fault tolerant applications in AWS, please refer to the below URL: https://aws.amazon.com/whitepapers/designing-fault-tolerant-applications/
Which of the following options would entice a company to use AWS over an on-premises data center? Choose 2 answers from the options given below:
A) Having access to free and unlimited storage
B) Having access to unlimited physical servers
C) Having highly available infrastructure
D) Ability to use resources on demand
C) Having highly available infrastructure
D) Ability to use resources on demand
The entire advantage of the AWS Cloud or any cloud system is the ability to have a highly available infrastructure and to use resources on demand.
For more information on advantages on using AWS, please refer to the below URL: https://aws.amazon.com/application-hosting/benefits/
What AWS service has built-in DDoS mitigation?
A) CloudTrail
B) EC2
C) CloudFront
D) CloudWatch
C) CloudFront
CloudFront also integrates with AWS WAF, a web application firewall that helps protect web applications from common web exploits, and AWS Shield, a managed DDoS protection service that safeguards web applications running on AWS.
For more information on AWS CloudFront, please refer to the below URL: https://aws.amazon.com/cloudfront/details/
You have 2 accounts in your AWS account. One for the Dev and the other for QA. All are part of consolidated billing. The master account has purchased 3 Reserved Instances. The Dev department is currently using 2 Reserved Instances. The QA team is planning on using 3 instances which are of the same instance type. What is the pricing tier of the instances that can be used by the QA Team?
A) No reserved and 3 on-demand
B) 1 reserved and 2 on-demand
C) 2 reserved and 1 on-demand
D) 2 reserved and no on-demand
CHECK B) 1 reserved and 2 on-demand
Since all are a part of consolidating billing, the pricing of reserved instances can be shared by All. And since 2 are already used by the Dev team , another one can be used by the QA team. The rest of the instances can be on-demand instances.
For more information on AWS Reserved instances, please refer to the below URL: https://aws.amazon.com/ec2/pricing/reserved-instances/
Which of the following are right principles when designing cloud based systems. Choose 2 answers from the options below?
A) Build tightly-coupled components
B) Build loosely-coupled components
C) Assume everything will fail
D) Use as many services as possible
B) Build loosely-coupled components
C) Assume everything will fail
Always build components which are loosely coupled. This is so that even if one component does fail, the entire system does not fail. Also if you build with the assumption that everything will fail, then you will ensure that the right measures are taken to build a highly available and fault tolerant system.
For more information on a well architected framework, please refer to the below URL: https://d0.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf
Which of the following AWS services can assist you with cost optimization?
A) AWS Shield
B) AWS Inspector
C) AWS WAF
D) AWS Trusted Advisor
D) AWS Trusted Advisor
An online resource to help you reduce cost, increase performance, and improve security by optimizing your AWS environment, Trusted Advisor provides real time guidance to help you provision your resources following AWS best practices.
For more information on the Trusted Advisor, please refer to the below URL: https://aws.amazon.com/premiumsupport/trustedadvisor/
Which of the following is the amount of storage that can be stored in the Simple Storage Service?
A) 1 TB
B) 5 TB
C) 1 PB
D) Virtually Unlimited Storage
D) Virtually Unlimited Storage
Amazon S3 provides a simple web service interface that you can use to store and retrieve any amount of data, at any time, from anywhere on the web.
For more information on AWS S3, please refer to the below URL: https://aws.amazon.com/s3/faqs/
Which services allow the customer to retain full administrative privileges of the underlying virtual infrastructure?
A) Amazon EC2
B) Amazon S3
C) Amazon Lambda
D) DynamoDB
A) Amazon EC2
All of the other services are all managed by AWS as serverless components. Only you have complete control over the EC2 service.
For more information on AWS EC2, please refer to the below URL: https://aws.amazon.com/ec2/
Which of the following AWS services should you use to migrate an existing database to AWS?
A) AWS Lambda
B) AWS Storage Gateway
C) AWS DMS
D) Snowball
C) AWS DMS
AWS Database Migration Service helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. The AWS Database Migration Service can migrate your data to and from most widely used commercial and open-source databases.
For more information on AWS DMS, please refer to the below URL: https://aws.amazon.com/dms/
You have a mission-critical application which must be globally available at all times. If this is the case, which of the below deployment mechanisms would you employ?
A) Deployment to multiple Edge Locations
B) Deployment to multiple Availability Zones
C) Deployment to multiple Data Centers
D) Deployment to multiple Regions
D) Deployment to multiple Regions
Regions represent different geographic locations and is best to host your application across multiple regions for Disaster Recovery.
For more information on AWS Regions, please refer to the below URL: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html
Which of the following can be used to protect against Ddos attacks. Choose 2 answers from the options given below:
A) AWS EC2
B) AWS ELB
C) AWS Shield
D) AWS Shield Advanced
C) AWS Shield
D) AWS Shield Advanced
AWS Shield - All AWS customers benefit from the automatic protections of AWS Shield Standard, at no additional charge. AWS Shield Standard defends against most common, frequently occurring network and transport layer DDoS attacks that target your web site or applications AWS Shield Advanced - For higher levels of protection against attacks targeting your web applications running on Amazon EC2, Elastic Load Balancing (ELB), CloudFront, and Route 53 resources, you can subscribe to AWS Shield Advanced. AWS Shield Advanced provides expanded DDoS attack protection for these resources.
For more information on AWS Shield, please refer to the below URL: https://docs.aws.amazon.com/waf/latest/developerguide/ddos-overview.html
Which of the following is a serverless compute offering from AWS?
A) AWS EC2
B) AWS Lambda
C) AWS SNS
D) AWS SQS
B) AWS Lambda
AWS Lambda is a compute service that lets you run code without provisioning or managing servers. AWS Lambda executes your code only when needed and scales automatically, from a few requests per day to thousands per second.
For more information on AWS Lambda, please refer to the below URL: https://docs.aws.amazon.com/lambda/latest/dg/welcome.html
Which of the following allows you to carve out a portion of the AWS Cloud?
A) AWS Subnets
B) VPC
C) AWS Regions
D) AWS Availability Zones
B) VPC
Amazon Virtual Private Cloud (Amazon VPC) enables you to launch AWS resources into a virtual network that you’ve defined. This virtual network closely resembles a traditional network that you’d operate in your own data center, with the benefits of using the scalable infrastructure of AWS.
For more information on AWS VPC, please refer to the below URL: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Introduction.html
In order to predict the cost of moving resources from on-premise to the cloud, which of the following can be used?
A) AWS Inspector
B) AWS TCO
C) AWS WAF
D) AWS Trusted Advisor
B) AWS TCO
The AWS TCO calculator makes it easy to estimate your savings when comparing the cloud to an on-premises or colocation environment. Use the TCO calculator to get detailed reports and insights into the cost components that make AWS a viable alternative to lower your costs.
For more information on the economics of AWS, please refer to the below URL: https://aws.amazon.com/economics/
What is the concept of an AWS region?
A) It is a collection of Edge locations
B) It is a collection of compute capacity
C) It is a geographical area divided into Availability Zones
D) It is the same as an Availability Zone
C) It is a geographical area divided into Availability Zones
A region is a geographical area divided into Availability Zones. Each region contains at least two Availability Zones.
For more information on AWS regions and availability zones, please refer to the below URL: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html
In AWS, which security aspects are the customer’s responsibility? Choose 4 answers from the options given below:
A) Security Group and ACL (Access Control List) settings
B) Decommissioning storage devices
C) Patch management on the EC2 instance’s Operating System
D) Lifecycle management of IAM credentials
E) Controlling physical access to compute resources
F) Encryption of EBS (Elastic Block Storage) volumes
A) Security Group and ACL (Access Control List) settings
C) Patch management on the EC2 instance’s Operating System
D) Lifecycle management of IAM credentials
F) Encryption of EBS (Elastic Block Storage) volumes
AWS Doc shows the snapshot of the AWS Shared Responsibility Model.
For more information on the Shared Responsibility Model, please refer to the below URL: https://aws.amazon.com/compliance/shared-responsibility-model/
Which of the following can be used to manage identities in AWS?
A) AWS Config
B) AWS IAM
C) AWS Trusted Advisor
D) AWS
B) AWS IAM
AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. You use IAM to control who is authenticated (signed in) and authorized (has permissions) to use resources.
For more information on AWS IAM, please refer to the below URL: https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html
Which of the following is a best practice when working with permissions in AWS?
A) Ensure the least privilege access is used
B) Use the root account credentials
C) Don’t use IAM user and groups
D) Ensure the highest privilege access is used
A) Ensure the least privilege access is used
When you create IAM policies, follow the standard security advice of granting least privilege—that is, granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks.
For more information on AWS IAM Best practices, please refer to the below URL: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
What is the ability provided by AWS to enable very fast, easy, and secure transfers of files over long distances between your client and your Amazon S3 bucket?
A) File Transfer
B) HTTP Transfer
C) S3 Acceleration
D) Transfer Acceleration
D) Transfer Acceleration
Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.
For more information on AWS S3 transfer acceleration, please refer to the below URL: https://docs.aws.amazon.com/AmazonS3/latest/dev/transfer-acceleration.html
When working on the costing for on-demand EC2 instances , which are the following attributes which determine the costing of the EC2 Instance. Choose 3 answers from the options given below:
A) Instance Type
B) AMI Type
C) region
D) Edge location
A) Instance Type
B) AMI Type
C) region
If you see the snapshot from the EC2 on-demand pricing page, you can see the different components that make up the pricing.
For more information on AWS Ec2 On-demand pricing, please refer to the below URL: https://aws.amazon.com/ec2/pricing/on-demand/
A company wants to utilize AWS storage. For them low storage cost is paramount, the data is rarely retrieved, and data retrieval times of several hours are acceptable for them. What is the best storage option to use?
A) AWS Glacier
B) AWS S3 Reduced Redundancy Storage
C) EBS backed storage connected to EC2
D) AWS CloudFront
A) AWS Glacier
Amazon Glacier is a storage service optimized for infrequently used data, or “cold data.” The service provides durable and extremely low-cost storage with security features for data archiving and backup. With Amazon Glacier, you can store your data cost effectively for months, years, or even decades.
For more information on AWS Glacier, please refer to the below URL: https://aws.amazon.com/documentation/glacier/
What are characteristics of Amazon S3? Choose 2 answers from the options given below:
A) S3 allows you to store objects of virtually unlimited size
B) S3 allows you to store unlimited amounts of data
C) S3 should be used to host a relational database
D) Objects are directly accessible via a URL
B) S3 allows you to store unlimited amounts of data
D) Objects are directly accessible via a URL
Each object does have a limitation in S3, but you can store virtually unlimited amounts of data. Also each object gets a directly accessible URL.
For more information on AWS S3, please refer to the below URL: https://aws.amazon.com/s3/faqs/
What is the AWS service provided which provides a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability?
A) AWS RDS
B) DynamoDB
C) Oracle DS
D) Elastic Map Reduce
B) DynamoDB
DynamoDB is a fully managed NoSQL offering provided by AWS. It is now available in most regions for users to consume. The link provides the full details on the product.
For more information on AWS DynamoDB, please refer to the below URL: http://docs.aws.amazon.com/amazondynamodb/latest/developerguide/Introduction.html