CCP Flashcards

1
Q

What Amazon Web Services are considered global?

Amazon CloudFront
Amazon Machine Images (AMIs)
Amazon Elastic Compute Cloud (Amazon EC2)
AWS Identity and Access Management (IAM)
Amazon Route 53

A

CloudFront, IAM, Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which Amazon Web Service would help reduce latency on image downloads?

Amazon CloudFront
Amazon CloudWatch
Amazon Elastic Compute Cloud (Amazon EC2)
Amazon Elastic Block Store (Amazon EBS)
Amazon Simple Storage Service (Amazon S3)

A

CloudFront

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Where should images used for websites be stored?

 Amazon CloudFront
 Amazon DynamoDB
 Amazon Elastic Block Store (Amazon EBS)
 Amazon Glacier
 Amazon Simple Storage Service (Amazon S3)
A

Amazon Simple Storage Service (S3)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which CLI output is the most readable by a person and would be used to show customers results of images searches?

Command
JavaScript Object Notation (JSON)
Text
Table

A

Table

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which CLI command should be used to check all the permissions needed to run the image archive?

–dry-run
–-filter
–output
–query

A

–dry–run

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which services could be used to provide notifications to customers?

Amazon Machine Images (AMIs)
Amazon Elastic Compute Cloud (Amazon EC2)
AWS Lambda
Amazon Simple Notification Service (Amazon SNS)
Amazon Lightsail

A

Lambda, Simple Notification Service (SNS)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What would prevent network traffic going into a database storing customer information?

AWS Identity and Access Management (IAM)
Network access control lists (network ACLs)
Security groups
All of the above
None of the above

A

Network Access Control Lists (ACL’s)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Who is responsible for securing financial data held by an AWS customer?

 AWS
 AWS customer
 AWS customers customer
 Third-party application host
 All of the above
 None of the above
A

The AWS customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What IP provides metadata service for all instances associated with the mobile app?

  1. 127.255.255
  2. 255.255.255
  3. 254.169.254
  4. 254.255.255
A

169.254.169.254

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

At what point does user data run when provisioning an instance?

Creation
Deployment
Initialization
Termination

A

Initialisation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What EC2 instance would be best practise for a customer only needing access to one region?

 Dedicated
 Ephemeral
 On-Demand
 Reserved
 Spot
A

On-Demand

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which feature supports customers receiving real time messages without additional requests to the server being made?

 Health checks
 Operational  monitoring
 Request tracing
 Sticky sessions
 WebSockets
A

WebSockets

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What failover configuration of Route 53 would support website availability for the majority of the time, even if they are unhealthy?

Active-active failover
Active-passive failover
Active-active-passive failover
Mixed failover configurations

A

Active-Active Failover

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What 3 functions does Route 53 provide for a website?

Completes health checks of the resource to ensure it can be reached.
Configures the best route for automatic scaling to a resource.
Registers domain names.
Routes traffic to the website based on the domain name that is entered.
Hosting for the website located in different Edge Locations.

A

Completes health checks of the resource, registers domain names, routes traffic to website based on domain name

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which solution would be most ideal for a company wanting to minimize dependencies on cloud service provider, needing secure access only 1 day a month?

 Hybrid
 On-premises
 Serverless
 Internet of Things (IoT)
 Containers
A

Serverless

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What EC2 instance should be used with Lambda for the most economic benefit while maintaining security?

 Dedicated
 Ephemeral
 On-Demand
 Reserved
 Spot
A

Spot

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which streaming service could be used to analyse data that can be used for future applications?

 Amazon Cognito
 AWS Lambda
 Amazon Kinesis
 AWS OpsWorks
 Amazon Redshift
A

Kinesis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How many IAM policies support AWS Lambda authentication?

One
Two
Three
Four

A

Two

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What DynamoDB attribute can store name-value pair collections enclosed in {}?

 Binary type
 List type
 Map type
 Metadata tags
 String data
A

Map types

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which database solution would be most cost effective and ideal choice for storing customer personal data indefinitely?

 Amazon Aurora
 Amazon DynamoDB
 Amazon ElastiCache
 Amazon Neptune
 Amazon Redshift
A

Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which database should be used to track monthly session data which will then be used to develop more cost efficient enhancements?

 Amazon Aurora
 Amazon DynamoDB
 Amazon ElastiCache
 Amazon Neptune
 Amazon Redshift
A

DynamoDB

22
Q

What type of network connection should be used to allow applications to securely share data between each other?

 Dedicated Instances
 Dedicated Hosts
 AWS Direct Connect
 Internet gateway
 VPC peering
A

VPC Peering

23
Q

What storage solution would be best for 24/7 random accessibility?

Amazon Elastic Block Store (Amazon EBS)
Amazon Glacier
Amazon Simple Storage Service (Amazon S3)
Amazon S3 STANDARD Infrequent Access (IA)
Amazon S3 Reduced Redundancy Storage (Amazon S3-RRS)

A

Standard Infrequent Access

24
Q

There has suddenly been an increase in cost of Amazon S3, and a slow down for any PUT and DELETE requests, what could be the issue?

Amazon EC2 Auto Scaling has not been enabled
Cross-origin resource sharing (CORS) configuration has not been enabled
Elastic Load Balancing (ELB) has not been enabled
Versioning has been enabled

A

Versioning has been enabled

25
Q

What step should be taken to reconfigure a storage gateway that has encountered a read and write failure but the cache disk is still useable?

 Create a new gateway
 Delete the disk from the gateway
 Mount the cache disks to an ephemeral drive
 Reconnect the gateway
 Shut down the gateway
A

Reconnect the gateway

26
Q

What are some tag restrictions?

Keys and values are case-sensitive in a tag
Maximum tags per group is 20
Tag keys can start with aws:
Tag key length between 1 – 128 Unicode characters
Tag value length maximum of 256 Unicode characters

A

Case sensitive

Key length has to be between 1-128

Value length has to be max 256 characters

Cannot include the characters AWS

27
Q

What is the file extension of a CloudTrail log?

.aws
.gz
.log
.png

A

.gz

28
Q

What should be done if AWS config cannot access data because of an invalid AWS IAM role?

Enable all features in AWS Organizations
Enable AWS Config in the source account
Integrate AWS Config and AWS Organizations through an application programming interface (API)
Select or create a valid IAM role
Wait out the data aggregation delay

A

Create / Select a new IAM role

29
Q

What CloudWatch metric will provide information on the number of bytes written to all instance store volumes available to that instance?

DiskReadBytes
DiskWriteBytes
DiskReadOps
DiskWriteOps

A

DiskWriteBytes

30
Q

What describes the sole security responsibilities of the AWS customer that can be supported with by evidence from monitoring?

Customer-stored data
Hardware and software at or below the hypervisor level
Network logins
Patch management at the infrastructure level
Resource access

A

Customer-stored data

Network logins

Resource access

31
Q

What IAM tag and tag condition ley should be applied to control new employees ability to complete tasks based on identity?

aws:PrincipalTag/key-name
aws:RequestTag/key-name
aws:TagKeys
iam:ResourceTag/key-name
tagManager=true

A

aws:PrincipalTag/key-name

32
Q

What is AWS trusted advisor?

A

A customer service which provides cloud performance monitoring and security

33
Q

Which is an AWS IAM policy that is supported by tag-based conditions?

Ability to allocate costs to a user
Limit Amazon Elastic Compute Cloud (Amazon EC2) application programming interface (API) calls to only development environments
Organize resources by group
Run automated start/stop scripts during business hours only

A

Limit EC2 API calls to only development environments

34
Q

What tags are used during automation?

 Confidentiality
 Cost Center/Business Unit
 Date/Time
 Opt in/Opt out
 Version
A

Date / Time

Opt in / Opt out

35
Q

What is the maximum number of outputs that can be declared per CloudFormation template?

 80
 100
 200
 40
 60
A

200

36
Q

What should be specified if a service role has been defined with the respective roles policy?

A template that defines a service role without any dependencies
An IAM Role Policy that acts as a Service Role
An IAM Role Policy that acts as a Resource Role
An IAM User Policy that acts as a Service Role
The resources that will use the role; also, a policy dependency must be added

A

The resource that will use the role, policies must be dependant

37
Q

What template section would provide additional information about the template, and would come after the description?

 Conditions
 Metadata
 Outputs
 Resources
 Parameters
A

Metadata

38
Q

What actions can be took if the number of instances on your account has reached maximum?

 Create the instance again
 Delete excess instances
 Launch a different type of instance
 Place the instance in another account
 Request a limit increase
A

Request an limit increase

Delete access instances

39
Q

What steps would need to be taken to change an EBS volume from gp2 to io1?

Make a soft limit request with AWS.
Create a new Amazon Elastic Block Store (Amazon EBS) volume.
Delete the old volume.
Take a snapshot of the Amazon Elastic Block Store (Amazon EBS) volume.
Change the setting of the Amazon Elastic Block Store (Amazon EBS)volume so that it scales.

A

Delete the old EBS volume

Create a new EBS volume

Take a snapshot of the old EBS volume

40
Q

What type of connectivity solution should be used to send log data to CloudWatch Logs without going through the internet?

Interface VPC endpoint
AWS VPN CloudHub
Gateway VPC endpoint
NAT instance

A

Interface VPC endpoint

41
Q

Which of the following AWS services has encryption enabled by default?

CloudTrail
EFS
EBS
S3

A

EBS

42
Q

Which of the following AWS services support reservations to optimize costs?

Lambda 
EC2 Instances
DynamoDB
DocumentDB 
RDS
S3
A

EC2 Instances

DynamoDB

RDS

43
Q

What AWS resource can reduce costs and increase workload performance?

AWS Compute Optimizer
AWS Systems Manager
AWS Budgets
AWS Cost Explorer

A

AWS Compute Optimizer

44
Q

AWS Shield provides DDoS attack prevention for which resources?

Amazon Route 53
Amazon API Gateway
AWS Global Accelerator
AWS Elastic Beanstalk
AWS CloudFormation
A

AWS Global Accelerator

Amazon Route 53

45
Q

Which of the following AWS services should be used to automatically distribute incoming traffic across multiple targets?

AWS Elastic Beanstalk
Amazon Elasticsearch
AWS Auto Scaling
AWS Elastic Load Balancing

A

AWS Elastic Load Balancing

46
Q

What are advantages of cloud computing?

Benefit from massive economies of scale
Spend money on building and maintaining data centres
Trade capital expense for variable expense
Trade variable expense for capital expense
Allocate a few months of planning for your infrastructure capacity needs
Go global in minutes and deploy applications in multiple regions around the world with just a few clicks

A

Benefit from massive economies of scale

Trade capital expense for variable expense

Go global in minutes and deploy applications in multiple regions around the world with just a few clicks

47
Q

Which of the following is the MOST cost-effective option to purchase an EC2 Reserved Instance?

No upfront payment option with standard 1-year term
Partial upfront payment option with standard 1-year term
No upfront payment option with standard 3-years term
Partial upfront payment option with standard 3-years term

A

Partial upfront payment option with standard 3-years term

48
Q

What is an AWS region?

A

A geographically distinct location

49
Q

How many Availability Zones does each region have?

A

At least 2

50
Q

What is an edge location?

A

A datacentre owned by a AWS partner which is directly connected to the AWS network