Certified Cloud Practitioner CLF-C02 Questions

Question 1

You need to create a highly available application in the cloud. How can you accomplish this?

1) Make sure that resources are using one Availability Zone (AZ)
2) Make sure that resources are utilizing multiple Availability Zones (AZ)
3) Make sure to use a private deployment model.
4) Make sure to secure the root user.

Answer 1

2) Using multiple AZs provides high availablity and fault tolerance.

Question 2

Which service category is not offered by AWS?

1) Developer Tools
2) Compute
3) Database
4) Data Center

Answer 2

4) Data Centers, there are some services that provide hardware you can use locally, but there is no category called Data Center.

Question 3

You need to deploy your cloud environment across AWS and your on-premises data center using Direct Connect. Which cloud deployment model can accomplish this?

1) Private
2) Hybrid
3) Public
4) On-premises

Answer 3

2) Hybrid models bridge public and private resources using a secure connection supported by Direct Connect.

Question 4

Which of the following CANNOT be used to access your AWS resources?

1) Multi-factor authentication (MFA)
2) Application code
3) The AWS Command Line Interface (CLI)
4) Software Development Kits (SDKs)

Answer 4

1) MFA is important to utilize for secure authentication and added security, but it does not provide access to AWS resources all alone.

Question 5

You are verifying the latency of a newly released website. You notice it is loading really quickly. What type of latency would this be?

1) High latency
2) Low latency
3) Medium latency
4) Elastic latency

Answer 5

2) Low latency is what you want for your website, as it means your end-users are able to access it very quickly.

Question 6

You have just had your whole AWS account deleted by an attacker. You are creating a new AWS account. How can you ensure that the same thing will not happen again?

1) Change your password frequently
2) Use a stronger password
3) Seek them out and get justice
4) Enable multifactor authentication (MFA) on the root user

Answer 6

4) This should be the first thing you do when you create your AWS account as it will protect the root user, which has more power than other users.

Question 7

You are paying a monthly subscription to a company to host your website. Which cloud computing model is this an example of?

1) Software as a service
2) Platform as a service
3) Infrastructure as a Service
4) Cloud as a service

Answer 7

3) IaaS is like the building blocks that you can rent.

Question 8

You need to implement low latency. What can you utilize to achieve this?

1) Availability Zones (AZs) and/or Regions
2) Data Centers and/or Regions
3) Local Zones and/or Edge Locations
4) Local Zones and EC2

Answer 8

3) Local Zones extend Regions to provide milisecond latencies, while Edge Locations provide caching near end-users.

Question 9

Which of the following statements is true?

1) One of the pillars of the Well-Architected Framework is Renewability
2) There are four pillars in the Well-Architected Framework
3) The AWS Well-Architected Framework maps out the AWS Regions.
4) There are six pillars in the Well-Architected Framework

Answer 9

4) There are six pillars, they are:
Security
Cost Optimization
Reliability
Performance Effciency
Operational Excellence
Sustainability

Question 10

Which of the following are considered advantages of the cloud?

1) Hybrid models
2) Local Zones
3) Going global in minutes
4) Software as a service

Answer 10

3) An advantage of the cloud is the ability to launch resources anywhere in the world at a click of a button.

Question 11

You need to utilize a service that allows users to reach application servers over the mobile network. Which service provides this ability?

1) Wavelength
2) Batch
3) Outposts
4) Lightsail

Answer 11

1) Wavelength allows users to reach applications without leaving the 5G mobile network.

Question 12

You are explaining to a newly hired team member how to connect to an EC2 instance. Which is not a way to connect to EC2 instance?

1) AWS Management Console
2) Secure Shell (SSH)
3) EC2 Instance Connect (EIC)
4) Lambda

Answer 12

4) Lambda is a compute service used for short tasks under 15 minutes

Question 13

You need to launch a test environment quickly. Which service can accomplish this?

1) Lightsail
2) EC2
3) Lambda
4) Wavelength

Answer 13

1) Lightsail can quickly launch small projects like a test envrioment or preconfigured WordPress websites.

Question 14

You need to send out 50,000 newsletters by email today. How can you limit the number of messages sent at one time efficiently?

1) Use Batch
2) Use Lambda
3) Use Outposts
4) Use EC2

Answer 14

1) Batch can break up the 50,000 messages into batches to send them without causing any issues.

Question 15

You have been tasked with improving the availability of your application and curb costs when peak hours subside. What can you implement to accomplish this?

1) An additional EC2 instance in a different Availability Zone (AZ)
2) An Elastic Load Balancer
3) Auto Scaling
4) Compute Optimizer

Answer 15

3) Auto Scaling improves availability by utilizing multiple Availability Zones and can help curb costs as it can scale down when demand subsides.

Question 16

You need to suggest the cheapest pricing option for EC2 instances. There are no requirements that need to be met. What pricing option can you suggest?

1) On-Demand
2) Reserved Instances
3) Spot Instances
4) Savings Plans

Answer 16

3) Spot Instances are the chepest pricing option for EC2 as long as the workload can be interrupted and start and stop times will not affect users in a negative way.

Question 17

Which of the following statements is NOT true?

1) Fargate is NOT a serverless service.
2) Amazon EC2 provides secure and resizable compute capacity in the cloud
3) AWS Savings Plan offers a flexible pricing model.
4) AWS Batch provides fully managed batch processing at any scale.

Answer 17

1) Fargate is considered serverless as it is a fully managed container management service. Fargate manages containers while allowing you to focus on their managemnt as opposed to managing the instances themeselves.

Question 18

Which of the following statements is NOT true?

1) AWS Fargate is serverless
2) With AWS Lambda, you pay only for the compute time you consume
3) Elastic Container Service (ECS) and Elastic Kubernates Service (EKS) support Kubernetes
4) Amazon Lightsails is a cloud platform offering you everything you need to build an application or website

Answer 18

3) Only Elastic Kubernates Service (EKS) supports Kubernetes

Question 19

You have been tasked with deploying a database and hosting a web application. What service can you select to achieve both?

1) Elastic Load Balancer
2) Elastic Compute Cloud
3) Lambda
4) Elastic Container Registry

Answer 19

2) Elastic Compute Cloud (EC2) can be used to deploy a database that you control and it can also be used to host a web application.

Question 20

You need to ensure that the load balancer you select can support extreme performance and TCP protocol. Which load balancer can meet these requirements?

1) Classic Load Balancer
2) Gateway Load Balancer
3) Network Load Balancer
4) Application Load Balancer

Answer 20

3) Network Load Balancers include TCP, UDP, and TLS listeners and supporrt extreme perforamnce needs.

Question 21

What feature of Amazon S3 allows you to manage user access to specific buckets and objects?

1) Cross-Region Replication
2) Bucket policies
3) S3 Versioning
4) EBS snapshots

Answer 21

2) Bucket policies are used to manage permissions and user access to specific buckets and obects.

Question 22

What is a key feature of Amazon S3?

1) Offers fully managed file systems
2) Provides block-level storage for EC2
3) Serves as a virtual tape library
4) Stores objects in the cloud with high durability

Answer 22

4) S3 is known for its high durability and availability for object storage.

Question 23

Which storage class should you choose for data that is accessed infrequently, but must be retained and accessed quickly when needed, at a lower cost?

1) S3 Glacier
2) S3 Standard
3) S3 One Zone-IA
4) S3 Standard-IA

Answer 23

4) S3 Standard-IA is designed for infrequent access but requires rapid retrieval when accessed.

Question 24

Which EC2 storage option is best suited for temporary storage of information that changes frequently, such as buffers, caches, or scratch data?

1) Amazon EFS
2) Instance store
3) Amazon EBS
4) AWS Storage Gateway

Answer 24

2) Instance stores provide ephemeral storage ideal for temporary, high-IOPS workloads.

Question 25

Which of the following is a primary use case for AWS Backup? 1) Providing a hybrid cloud storage service 2) Managing file shares for Windows workloads 3) Storing data for infrequent access 4) Automating and centralizing backups across AWS services

Answer 25

4) AWS Backup provides a centralized way to manage backups across AWS services.

Question 26

What does AWS Storage Gateway's Tape Gateway offer? 1) Archiving data as virtual tapes 2) File storage directly in S3 3) High-performance file systems 4) Block storage for EC2

Answer 26

1) Tape Gateway enables archiving in the cloud as virtual tapes.

Question 27

Which of the following is a durable, block-level storage solution designed for use with Amazon EC2 instances? 1) AWS Storage Gateway 2) Amazon Glacier 3) Amazon EBS 4) Amazon S3

Answer 27

3) EBS provides persistent, block-level storage volumes for use with EC2 instances.

Question 28

Which type of Amazon EBS volume offers the highest performance for mission-critical low-latency or high-throughput workloads? 1) Cold HDD 2) Throughput Optimized HDD 3) General Purpose SSD 4) Provisioned IOPS SSD

Answer 28

4) Provisioned IOPS SSD offers the highest performance for mission-critical low-latency or high-throughput workloads.

Question 29

What is Amazon FSx primarily used for? 1) Providing fully managed third-party file systems 2) Automating and managing backups across AWS services 3) Connecting on-premises storage with AWS Cloud 4) Encrypting data in transit and at rest

Answer 29

1) FSx provides fully managed file systems, like Windows File Server and Lustre.

Question 30

What is the primary role of an internet gateway in an Amazon VPC? 1) To automatically scale resources within the VPS based on traffic 2) To encrypt data stored within the VPC 3) To enable communication between instances in the VPC and the internet 4) To act as a virtual firewall protecting the VPC from unauthorized access

Answer 30

3) The primary role of an intenet gateway is to facilitate communication between instances in the VPC and the internet

Question 31

What feature of Amazon Route 53 helps to manage traffic for your application based on various criteria, such as geographic location? 1) Amazon CloudFront 2) Traffic flow 3) Amazon Elastic Load Balancing 4) AWS Global Accelerator

Answer 31

2) Route 53 traffic flow is a feature of Amazon Route 53 that allows you to manage how traffic is routed to your application

Question 32

What is the primary function of security groups in an Amazon VPC? 1) To encrypt data stored in the cloud 2) To provide managed database services 3) To automatically scale resources based on traffic 4) To act as a virtual firewall for EC2 instances, controlling inbound and outbound traffic

Answer 32

4) Security groups act as virtual firewalls for EC2 instances, controlling inbound and outbound traffic.

Question 33

What is the primary function of a CDN like Amazon CloudFront? 1) To offer virtual server capabilities 2) To deliver content globally with low latency and high transfer speeds 3) To provide direct, private connections to AWS 4) To manage databases in the cloud

Answer 33

2) The primary function of a CDN like CloudFront is to deliver content globally with low latency and high transfer speeds.

Question 34

What scenario best utilizes AWS Global Accelerator? 1) To optimize global application performance by routing user traffic through AWS's global network 2) For deploying serverless applications 3) To store data in a distributed manner across multiple regions 4) To manage cloud resources effectively

Answer 34

1) AWS Global Accelerator optimizes global applications' performance by routing user traffic through AWS's optimized network paths.

Question 35

What is a primary use case for AWS VPN? 1) To enhance storage capacity of applications 2) For direct physical connections to AWS 3) To accelerate content delivery using a global network 4) For secure, encrypted connectivity over the public internet

Answer 35

4) The primary use case for AWS VPN is to provide secure, encrypted connectivity over the public internet.

Question 36

What is the main role of DNS services like Amazon Route 53? 1) To automatically deploy cloud applications 2) To provide a managed data warehousing service 3) To encrypt data communications in the cloud 4) To route end users to applications running on AWS

Answer 36

4) DNS services like Amazon Route 53 route end users to applications running on AWS by resolving domain names to IP addresses.

Question 37

What is the primary purpose of Amazon Virtual Private Cloud (VPC)? 1) To automatically scale web applications? 2) To provide a dedicated physical server for storage 3) To offer a direct database connection service 4) To create a logically isolated section of the AWS cloud for AWS resources

Answer 37

4) Amazon VPC allows users to create a logically isolated section of the AWS cloud for deploying AWS resources.

Question 38

When is AWS Direct Connect the preferred choice to VPN? 1) For a cost-effective solution for smaller data loads 2) When a high-capacity, dedicated data transfer path is needed 3) When creating serverless applications 4) For quick and flexible setup for temporary connections

Answer 38

2) AWS Direct Connect is preferred when high-capacity, dedicated data transfer paths are needed.

Question 39

Which feature is a key aspect of Amazon Route 53? 1) Managing DNS records and routing internet traffic to the appropriate location 2) Offering global content delivery solutions 3) Providing virtual servers for applications 4) Serving as a virtual tape library for backups

Answer 39

1) A key aspect of Amazon Route 53 is managing DNS records and routing ineternet traffic to the appropriate location.

Question 40

Which of the following SQS configurations is generally recommended for most use cases, and why? 1) Long polling is recommended for most use cases, because it only returns a response when a message is in the queue or the timeout is reached. This avoids paying for a lot of empty responses. 2) Short polling is recommended for most use cases, because a response is returned immediately even if no messages are in the queue. 3) Short polling is recommended for most use cases, because it only returns a response when a message is in the queue or the timeout is reached. This avoids paying for a lot of empty responses. 4) Long polling is recommended for most use cases, because it guarantees that messages are processed in the order that they were received and that no duplicates will be introduced.

Answer 40

1) Long polling is recommended for most use cases, because it only returns a response when a message is in the queue or the timeout is reached. This helps avoid paying for empty responses, and is the most cost-effective option.

Question 41

Which of the following is the correct description of a loose coupling in relation to an application? 1) If one part of the application fails, it could bring the whole system down. 2) Application components can be connected to each other but are not dependent on each other 3) Different parts of the system are highly dependent on each other. 4) Application components are segregated and communication between components is not allowed.

Answer 41

2) With loose coupling, application components can be connected to each other but are not dependent on each other.

Question 42

Which AWS service can be used to centrally store and version control your application source code, binaries, and libraries? 1) Elastic File System 2) CodeCommit 3) CodeBuild 4) CodePipeline

Answer 42

2) AWS CodeCommit is a fully-managed source control service that hosts secure Git-based repositories. It makes it easy for teams to collaborate on code in a secure and highly scalable ecosystem.

Question 43

Which AWS service can be used to compile source code, run tests, and also package code? 1) CodePipeline 2) CodeDeploy 3) CodeCommit 4) CodeBuild

Answer 43

4) CodeBuild is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy.

Question 44

Which service allows you to practice Infrastructure as Code by provisioning your AWS resources via scripted templates? 1) AWS Elastic Beanstalk 2) AWS Lambda 3) AWS Marketplace 4) AWS CloudFormation

Answer 44

4) CloudFormation allows you to provision your AWS resources via scripted templates.

Question 45

Which AWS service can be used to automatically install your application code onto EC2, on-premises systems, and Lambda? 1) CodeCommit 2) X-Ray 3) CodeDeploy 4) CodeBuild

Answer 45

3) CodeDeploy is a deployment service that automates application deployments to Amazon EC2 instances, on-premises instances, serverless Lambda functions, or Amazon ECS services.

Question 46

Which of the following practices allows multiple developers working on the same application to merge code changes frequently, without impacting each other, and enables the identification of bugs early on in the release process? 1) Continuous Delivery 2) Continuous Development 3) Continuous Integration 4) Continuous Deployment

Answer 46

3) Continuous Integration (CI) is the practice of merging all developers' working copies to a shared repository frequently, preferably several times a day. One of the key benefits of integrating regularly is that you can detect errors quickly and locate them more easily. As each change introduced is typically small, pinpointing the specific change that introduced a defect can be done quickly.

Question 47

Which AWS service is used to help you build event-driven applications that respond to state changes triggered by AWS services like EC2? 1) CloudFormation 2) EventBridge 3) X-Ray 4) Step Functions

Answer 47

2) EventBridge is a service that can help you build event-driven applications that respond to state changes triggered by AWS services like EC2. For instance, an EC2 instance might change state from running to rebooting.

Question 48

Which AWS service can send both text and email messages from your applications? 1) Simple Queue Service (SQS) 2) Simple Notification Service (SNS) 3) Simple Messenger Service (SMS) 4) Simple Email Service (SES)

Answer 48

2) Simple Notification Service (SNS) allows you to send emails and text messages from your distributed applications.

Question 49

Which of the following AWS services provides a browser-based shell with the AWS CLI pre-installed? 1) AWS CodeCommit 2) AWS Cloud9 3) AWS CloudShell 4) AWS CodeBuild

Answer 49

3) AWS CloudShell is a browser-based shell with the AWS CLI pre-installed.

Question 50

Your company has moved to AWS so it can use "Infrastructure as Code" You would like to have the ability to provision AWS infrastructure in a consistent and repeatable way. Which service should you use to achieve this? 1) Elastic Beanstalk 2) CodeCommit 3) CloudWatch 4) CloudFormation

Answer 50

4) CloudFormation is AWS's go-to Infrastructre-as-Code solution.

Question 51

Which of the following AWS services can be used to visualize and orchestrate a serverless application? 1) X-Ray 2) CloudFormation 3) Elastic Beanstalk 4) Step Functions

Answer 51

4) Step Functions are a great way to visualize your serverless application. They automatically trigger and track each step in a process, and log the state of each step, so you can track what went wrong, and where.

Question 52

Which developer tool allows you to write code within your web browser? 1) Amazon CloudWatch 2) AWS CloudFormation 3) AWS CloudTrail 4) AWS Cloud9

Answer 52

4) Cloud9 is an integrated development environment (IDE) that allows you to write code within your web browser.

Question 53

Which of the following are true statements about Simple Queue Service (SQS)? 1) It is a service that only allows a single component to add messages to a queue. 2) It is a service that transfers messages in an unencrypted manner. 3) SQS is limited to a maximum message size of 64KB. 4) Standard queues do not guarantee that the exact order of messages will be preserved

Answer 53

4) SQS tries to process messages based on first-in/first-out, but the order is only guaranteed with SQS FIFO queues.

Question 54

Which of the following AWS services can be used to quickly and easily deploy a Java web application, including provisioning the EC2 instances needed to run the application, configuring an Elastic Load Balancer, and even installing Apache Tomcat? 1) Elastic Beanstalk 2) CodeBuild 3) CodePipeline 4) CodeDeploy

Answer 54

1) Elastic Beanstalk can be used to quickly and easily deploy a Java web application, including provisioning the EC2 instances needed to run the application, configuring an Elastic Load Balancer, and even installing Apache Tomcat. Elastic Beanstalk supports applications that use the following technologies: Java, .NET, PHP, Node.js, PHP, Python, Ruby, Go, Apache Tomcat, Docker, and more.

Question 55

Which service could you recommend to a developer to automate the software release process? 1) CodeBuild 2) CodeCommit 3) CodePipeline 4) Cloud9

Answer 55

3) CodePipeline is a developer tool that allows you to continuously automate the software release process.

Question 56

Which of the following is an artifact repository that makes it easy for developers to find approved software packages they need to build their applications? 1) CodePipeline 2) CodeArtifact 3) CodeDeploy 4) CodeBuild

Answer 56

2) AWS CodeArtifact is an artifact repository service that makes it easy for organizations to securely store, publish, and share software packages used in their software developmnent process.

Question 57

Which AWS service provides an end-to-end view of requests as they travel through a distributed application, and can be used to troubleshoot connectivity and performance issues? 1) Step Functions 2) CloudFormation 3) Elastic Beanstalk 4) X-Ray

Answer 57

4) X-Ray

Question 58

You would like to send marketing information to your customers with details of product launches and discount codes. Which service will allow you to send HTML-formatted emails? 1) Amazon Simple Notification Service (SNS) 2) Amazon Simple Email Service (SES) 3) Simple Storage Service (S3) 4) Amazon Simple Queue Service (SQS)

Answer 58

2) SES allows you to send plaintext and HTML-formatted emails from your applications. It is ideal for marketing campaigns and professional emails.

Question 59

Which service can be used to decouple the components of an application? 1) CodeCommit 2) Simple Queue Service (SQS) 3) X-Ray 4) CloudFormation

Answer 59

2) Simple Queue Service (SQS) can be used to decouple the components of an application. By exchanging messages using SQS, components are not dependent on one another and do not expect an immediate response. Removing dependencies between application components allows different parts of the application to fail without bringing down the whole application.

Question 60

Which of the following are suitable to store in CodeArtifact? 1) Compiled applications 2) All of these are suitable 3) Libraries 4) Deployable packages

Answer 60

2) CodeArtifact is a fully managed artifact repository service that makes it easy for organizations of any size to securely store, publish, and share software packages used in their software development process. This includes everything needed to build your application, including libraries, deployable packages, compiled applications, and documentation relating to your application.

Question 61

Which of the following enables you to transport 100PB of data to AWS using a shipping container pulled by a truck? 1) Snowball Edge 2) Snowmobile 3) Application Migration Service 4) Schema Conversion Tool

Answer 61

2) Snowmobile enables you to transport extremely large amounts of data to AWS. For instance, each Snowmobile supports transporting up to 100 PB of data stored in a shipping container pulled by a truck.

Question 62

Which of the following is a physical data transfer solution that is small, portable, military grade, fits in a backpack, and could be used to transfer 10 TB of data to AWS? 1) DataSync 2) Snowmobile 3) Snowcone 4) Transfer Family

Answer 62

3) Snowcone is a small, rugged, military-grade data transfer device that is used to let you process and transfer data to AWS. It is designed for environments that lack consistent network bandwidth or connectivity.

Question 63

Your company needs to migrate all applications to AWS; however, you currently have no accurate inventory and nobody has a record of deployed applications, operating system versions, or networking requirements. Which AWS service can be used to help create an inventory so that you can start planning your migration? 1) Snowball Edge 2) AWS DataSync 3) Application Discovery Service 4) Application Migration Service

Answer 63

3) Application Discovery Service is used to automatically create an inventory of your systems, including details of installed applications, operating system versions, and inbound/outbound network communications.

Question 64

You have 20 PB of data to transfer from your legacy application to AWS storage. Which service is designed to let you migrate data to AWS at petabyte scale? 1) Transfer Family 2) Snowmobile 3) Database Migration Service 4) DataSync

Answer 64

2) Snowmobile is a data transfer solution designed for migrating 10 PB or more to AWS.

Question 65

You are planning a large migration of 500 physical servers to AWS. Which service can be used to orchestrate and track progress of the migration? 1) Transfer Family 2) Migration Hub 3) Database Migration Service 4) Schema Conversion Tool

Answer 65

2) Migration Hub is a service that integrates with Application Discovery Service, Application Migration Service, and Database Migration Service, to orchestrate and track migrations of multiple servers to AWS.

Question 66

You need to find a way to allow a third-party application to copy files to an S3 bucket that you own. The application uses SFTP to transfer files. Which AWS service would enable you to configure this? 1) Transfer Family 2) DataSync 3) Snowball Family 4) Migration Hub

Answer 66

1) Transfer Family is a service that provides file sharing and transfer, enabling external parties to transfer files to and from your AWS storage. Multiple protocols are supported, including SFTP, AS2, FTPS, and FTP.

Question 67

You have a large Oracle database running on physical servers located in your data center. Which service can you use to migrate this database to run in AWS? 1) Application Discovery Tool 2) Schema Conversion Tool 3) Database Migration Service 4) RDS

Answer 67

3) Database Migration Service is used to migrate databases to AWS.

Question 68

You have 200 TB of data stored in your data center that needs to be securely copied to S3. Which of the following should you use to efficiently move the data to AWS? 1) Use Database Migration Service to transfer the data. 2) Transfer the data over the internet using HTTPS. 3) Use AWS Snowball to move the data 4) Configure a VPN between your data center and AWS to securely transfer the data.

Answer 68

3) AWS Snowball is suitable for moving terabytes of data from your on-premises data center to AWS. Snowball is designed to let you transfer datasets of 10 TB or more.

Question 69

You have a large Oracle database that you would like to move to AWS. Your CFO has mandated that the company must not commission any more Oracle databases and has requested that you move this database to PostgreSQL. How can you meet this requirement? 1) Use the Database Migration Service to migrate the database to PostgreSQL 2) Use AWS DataSync to migrate the data to a new RDS for PostgreSQL database 3) Use the Schema Conversion Tool to convert the database to PostgreSQL 4) Use the Application Migration Service to convert the database to PostgreSQL

Answer 69

3) The Schema Conversion Tool is used to convert from one database schema to another.

Question 70

Which service is an automated lift-and-shift service, used to migrate applications running on physical servers, virtual servers, other cloud providers, and other AWS accounts or Regions? 1) Snowball Edge 2) Application Migration Service 3) Database Migration Service 4) Transfer Family

Answer 70

2) Application Migration Service is used to migrate applications running on physical servers, virtual servers, other cloud providers, and other AWS accounts or regions.

Question 71

Which AWS service is a business analytics service that lets you create dashboards to visualize your data so that you can make better business decisions? 1) Amazon Athena 2) Amazon QuickSight 3) Amazon OpenSearch 4) Amazon Lex

Answer 71

2) QuickSight is a business analytics service that lets you make better decisions based on your data. It enables you to easily build dashboards to help visualize your data.

Question 72

You need to query data stored in S3 using standard SQL queries. Which of the following AWS services will enable you to do this? 1) Amazon Kendra 2) EMR 3) Athena 4) RedShift Serverless

Answer 72

3) Athena is an interactive query service for data in S3. It enables you to query data stored in S3 using standard SQL.

Question 73

Which of the following AWS services can be used to provide custom search functionality for your application, enabling users to search .doc and .ppt documents using natural language? 1) Athena 2) Lex 3) Polly 4) Kendra

Answer 73

4) Kendra is a service that provides custom search functionality, enabling users to search .doc, .ppt, .PDF, HTML, XML, and CSV documents using natural language.

Question 74

Which AWS service captures, transforms, and loads data continuously into data stores? 1) AWS Glue 2) SageMaker 3) Kinesis Data Fire hose 4) QuickSight

Answer 74

3) Kineses Data Fire hose captures, transforms, and loads data continuously into data stores.

Question 75

Which AWS service lets you build, train, and deploy machine learning models in the cloud? 1) SageMaker 2) Polly 3) Lex 4) Kendra

Answer 75

1) SageMaker is a service that is designed to let you build, train, and deploy machine learning models in the cloud.

Question 76

You are looking for a fully managed Elasticsearch solution that can be used to analyze application logs that are stored in S2 and CloudWatch Logs. Which of the following should you select? 1) Amazon Lex 2) Amazon OpenSearch 3) Amazon QuickSight 4) Amazon Kinesis

Answer 76

2) OpenSearch is a fully managed Elasticsearch service that is based on open-source technology. Common use cases include log analytics, application monitoring, security analytics, and business data analytics. OpenSearch can ingest data from CloudWatch Logs, S3, and DynamoDB.

Question 77

You are building an application that will be used to analyze customer spending patterns. Your application relies on data from third parties in the retail and financial services sector. Which of the following services can be used to securely exchange and use data provided by third parties on a subscription bases? 1) Amazon OpenSearch 2) AWS Data Exchange 3) RedShift Serverless 4) Athena

Answer 77

2) AWS Data Exchange is a service that allows you to securely exchange and use data provided by third parties on a subscription basis.

Question 78

You would like to use Apache Kafka to process a continuous stream of data that you need to track and analyze in real-time. You are looking for a fully managed service to avoid building and maintaining your own Kafka platform. Which AWS service can you use? 1) Amazon Kinesis 2) AWS Data Exchange 3) Amazon SageMaker 4) Amazon MSK (Managed Streaming for Apache Kafka)

Answer 78

4) Amazon MSK (Managed Streaming for Apache Kafka) is a fully managed Apache Kafka service that can be used to process a continuous stream of data in real-time.

Question 79

Which AWS service can be used to extract text and data from documents, including extracting drivers licenses number or passport numbers to help verify the identity of loan applicants? 1) Amazon Textract 2) Amazon Transcribe 3) Amazon Comprehend 4) Amazon Polly

Answer 79

1) Amazon Textract is a service that is designed to extract text and information from documents.

Question 80

You would like to use deep learning technology to add natural-sounding speech to your website so that the contents of certain web pages can be read out load to help people who are visually impaired. Which AWS service can you use to implement this? 1) Amazon Transcribe 2) Amazon Translate 3) Polly 4) Lex

Answer 80

Polly is a text-to-speech service that can be used to add natural-sounding speech to your applications, including reading out blog posts and websites.

Question 81

Your genomics application generates a large amount of unstructured and semi-structured data. You now require a Big Data solution so that you can process the data to identify patterns and trends, using open-source technologies like Apache Spark and Apache Hive. Which of the following services would you recommend? 1) AWS Glue 2) Amazon MSK (Managed Streaming for Apache Kafka) 3) Amazon EMR (Elastic MapReduce) 4) Amazon Athena

Answer 81

3) Amazon EMR (Elastic MapReduce) is a fully managed Big Data solution that supports open-source technologies like Apache Spark, Apache Hive, Presto, and Hadoop.

Question 82

Which AWS service could you use to easily build a conversational chatbot to answer frequently asked support questions? 1) Kendra 2) Polly 3) Lex 4) Textract

Answer 82

3) Lex is a service that is designed to let you easily build a conversational chatbot.

Question 83

Which AWS service can be used to create a data catalog and perform ETL (Extract, Transform, and Load) on your data so that it can be used by your data analytics and machine learning applications? 1) RedShift 2) Amazon MSK (Managed Streaming for Kafka) 3) AWS Glue 4) Amazon OpenSearch

Answer 83

3) AWS Glue is an ETL service that prepares your data for analytics and Machine Learning. It catalogs your data as well as performs Extract, Transform, and Load functions.

Question 84

Which service allows you to most easily convert an existing application into a cloud-hosted Software-as-a-Service 1) Amazon Connect 2) AppStream 3) WorkSpaces 4) AppSpaces

Answer 84

2) AppStream will handle hosting, scaling, and user management for your application and help you convert it into a SaaS product for your employees or customers.

Question 85

What does AWS Config do? 1) AWS Config allows you to set up account-wide rules and detect non-compliant resources. 2) AWS Config allows you to take automated actions on large groups of cloud resources. 3) AWS Config allows you to set up account-wide rules and enforce compliance by disallowing the creation of non-compliant resources. 4) AWS Config allows you to audit non-compliant resources and generate audit reports.

Answer 85

1) Config leverages pre-defined or custom rules to alert administrators when non-compliant resources are detected.

Question 86

Which service allows you to create dashboards where you visualize metrics produced by services and applications on AWS? 1) AWS Health Dashboard 2) Trusted Advisor 3) Amazon CloudWatch 4) Amazon CloudTrail

Answer 86

3) CloudWatch collects data in real time that can be viewed in a dashboard

Question 87

Which service will notify you about service events, outages, planned changes, and account notifications? 1) Trusted Advisor 2) CloudWatch Alarms 3) Systems Manager 4) AWS Health Dashboard

Answer 87

4) AWS Health Dashboard will give you a view of all outages across AWS, as well as a personal dashboard that displays only those services and Regions that are relevant to your cloud resources.

Question 88

How can you receive a notification when CPU utilization of your EC2 instance reaches 90%? 1) Create a CloudWatch alarm that triggers when CPU utilization reaches 90% 2) Create a CloudTrail Alarm that triggers when CPU utilization reaches 90% 3) Systems Manger automatically tracks PU utilization and will notify administrators when it exceeds 90% of any given instance 4) Trusted Advisor will automatically generate a recommendation when CPU utilization of your EC2 instance reaches 90%

Answer 88

1) CloudWatch alarms can be used to send notifications or trigger automated events when metrics reach defined thresholds.

Question 89

What can you use to group and visualize AWS resources by project, environment, or application? 1) Tags 2) Trusted Advisor 3) CloudTrail 4) Audit Manager

Answer 89

1) Applying tags to your resources can help you group and visualize them on CloudWatch or System Manager.

Question 90

How long are CloudWatch Logs stored by default? 1) 10 years 2) Indefinitely 3) 30 days 4) 24 hours

Answer 90

2) Unless otherwise specified, CloudWatch logs will be stored indefinitely.

Question 91

What feature can be used to analyze your workloads and generate action plans to help you achieve more reliable and cost-effective architecture? 1) The Well-Architected Tool 2) Systems Manager 3) Audit Manager 4) AWS Config

Answer 91

1) The Well-Architected Tool helps you use the Well-Architected Framework as a set of lenses through which to analyze your workloads. You can use it to learn about the Well-Architected Framework and generate action plans to bring your architectures into alignment with it.

Question 92

Which service provides account-wide recommendations around cost optimization, service limits, and security best practices? 1) CloudWatch Alarms 2) Trusted Advisor 3) AWS Health Dashboard 4) Amazon Connect

Answer 92

2) Trusted Advisor uses AWS Config rules to determine if you are following best practices, and it provides a prioritized list of recommendations.

Question 93

Which of the following is NOT a function of AWS Audit Manager? 1) Find root causes of noncompliance and generate reports 2) Use pre-built frameworks to help you meet industry-specific security and configuration standards. 3) Centralize audit data from AWS config and various security services 4) Generate insights and recommendations to help you adhere to the Well-Architected Framework.

Answer 93

4) This is more applicable to the Well-Architected Tool

Question 94

You want to give your EC2-based application access to secrets such as database credentials and passwords, and you want those credentials to rotate automatically. Which service should you use? 1) Secrets Manager 2) Parameter Store 3) Attach a role-based policy to the EC2 instance to give it access to an S3 bucket containing the secrets 4) Cloud HSM

Answer 94

1) Secrets Manger allows you to programmatically access encrypted secrets as well as enables automatic secret rotation.

Question 95

A regulator has requested documentation that proves your AWS solutions can meet GDPR compliance. What service can help with this? 1) AWS Control Tower 2) Security Hub 3) AWS Cloud Security 4) AWS Artifact

Answer 95

4) AWS Artifact is a free self-service portal that provides access to compliance reports.

Question 96

What can you use to assign granular permissions to users, roles, and groups? 1) IAM Policies 2) Security Token Service (STS) 3) KMS 4) Config Rules

Answer 96

1) IAM Policies define granular access permissions for any principle.

Question 97

Which of the following best describes the principle of least privilege? 1) Always enable multifactor authentication on the root user. 2) You should only use managed services to avoid operational overhead. 3) You should grant only permissions needed to complete a task 4) You should limit the number of IAM users in your account to only those strictly essential.

Answer 97

3) Limiting permissions to only those necessary will prevent accidental resource provisioning, and limit the blast radius in the event of a security breach.

Question 98

What is the easiest way to ensure that your S3 objects are encrypted at rest? 1) Encrypt the data at rest by applying KMS managed keys. 2) Encrypt the S3 bucket with Secrets Manager 3) S3 buckets are server-side encrypted by default with SSE-S3 managed keys. 4) User Certificate Manager to provision SSL/TLS certificates to encrypt the S3 bucket.

Answer 98

3) S3 buckets are encrypted by default upon creation.

Question 99

Your company wants to use machine learning to assist in the monitoring of sensitive data such as PII (Personally identifiable information) in their S3 buckets. How can they most easily achieve this? 1) Use Macie 2) Enable Detective 3) S3 automatically scans for and detects sensitive information such as PII. 4) Enable GuardDuty

Answer 99

1) Macie uses machine learning (ML) and pattern matching to discover and help you protect your sensitive data.

Question 100

Which AWS service will protect your AWS resources from DDoS attacks? 1) Network firewall 2) AWS WAF 3) Security Hub 4) AWS Shield

Answer 100

4) Shield is purpose-built to dynamically detect and mitigate DDoS attacks.

Question 101

Your company has decided to split its workloads into multiple AWS accounts, but it still wants to be able to take advantage of consolidated billing. How can it accomplish this? 1) Use AWS Organizations to manage multiple accounts 2) Isolate the workloads by using tags 3) Use IAM Identity Center to centrally manage AWS account access 4) Use Security Hub to centralize billing findings in one account

Answer 101

1) AWS Organizations allows you to connect multiple accounts to a management account, take advantage of consolidated billing, and enable centralized resources and security monitoring.

Question 102

Your company wants to leverage machine learning to automatically detect security events across your AWS environment. How can they achieve this with the lowest operational overhead? 1) Enable GuardDuty 2) Enable Detective 3) Enable Amazon Inspector 4) Trusted Advisor

Answer 102

1) GuardDuty is an intelligent threat detection service that can dynamically detect threats across your AWS account or Organization.

Question 103

Which service can be used to scan for network and software vulnerabilities on your EC2 instances? 1) Trusted Advisor 2) GuardDuty 3) Inspector 4) Detective

Answer 103

3) Inspector provides automated and continual vulnerability management at scale.

Question 104

Which of the following is NOT a benefit of AWS Organizations? 1) Automate best practices for multi-account management. 2) Consolidated Billing 3) Centralize budgets and cost analysis in your multi-account environment. 4) Share Reserved Instance capacity across your Organization

Answer 104

1) AWS Organizations is the core service to achieve multi-account AWS environments, but AWS Control Tower is the service responsible for automating best practices.

Question 105

Your company has a batch workload that has to run at some point during the last week of each month, though the exact timing is flexible. It is designed to run on EC2 instances. It does not harm completion of the batch process if an instance starts or stops unexpectedly. How can you achieve the most cost savings for this workload? 1) Use Scheduled Reserved Instances 2) Use Spot Instances 3) Use Convertible Reserved Instances 4) Use Standard Reserved Instances

Answer 105

2) Spot Instances can provide compute discounts of up to 90%, but these instances are only available when AWS has a surplus of available compute. This is the perfect scenario for utilizing Spot Instances. You can scale them out when they are needed, and the process is not harmed if the instances stop unexpectedly.

Question 106

Which S3 storage class allows you to take advantage of cost-saving storage classes, even if you're not sure how often your objects will be accessed? 1) S3 Lifecycle Management 2) S3 Storage Lens 3) S3 Standard 4) S3 Intelligent Tiering

Answer 106

4) S3 Intelligent Tiering can automatically move objects to cost-effective storage classes, which is great for cost savings when you have unknown access frequencies.

Question 107

Your company has a business-critical application running on EC2 instances that must always be running. This workload is known and constant, and will not change in upcoming years. What is the best way to reduce the cost of these instances? 1) Use Standard Reserved Instances 2) Use Convertible Reserved Instances 3) Use Spot Instances 4) Use Scheduled Reserved Instances

Answer 107

1) Use Standard Reserved Instances - You can reserve Ec2 instances of a particular instance type in 1 or 3 year contracts to reduce cost by up to 72%. This is perfect for known and constant workloads that run 24/7.

Question 108

Which S3 storage class is best for objects that are accessed extremely infrequently (once per quarter or less), but still require millisecond retrieval time? 1) Glacier Deep Archive 2) Glacier Flexible Retrieval 3) S3 Standard-IA 4) Glacier Instant Retrieval

Answer 108

4) Glacier Instant Retrieval provides storage up to 68% cheaper than S3 Standard-IA, specifically for use cases where you are accessing the data only once or twice per year.

Question 109

Your company wants to do extremely detailed analysis of cloud costs broken down by account, service, product, environment, and team, among other custom categories. How can they achieve this? 1) Create resource groups using tags and do detailed cost analysis with Cost Explorer. 2) Create resource groups using tags and do detailed cost analysis with data from Cost and Usage Reports. 3) Group resources for each custom category into individual AWS accounts and do detailed cost analysis with Cost Explorer. 4) Group resources for each custom category into individual AWS accounts and do detailed cost analysis with data from Cost and Usage Reports.

Answer 109

2) Cost and Usage Reports give super granular cloud cost data broken down by account, service, and resource groups.

Question 110

Which billing service should be used to provide a dashboard that includes projections of this month's AWS spending by service? 1) Pricing Calculator 2) Cost and Usage Reports 3) Cost Explorer 4) AWS Budgets

Answer 110

3) In Cost Explorer, you can create dashboards that help you project and monitor your actual AWS costs.

Question 111

Which of the following is NOT one of the six advantages of cloud computing? 1) Benefit from massive economies of scale 2) Stop guessing capacity 3) Minimize the cost of compute 4) Trade fixed expense for variable expense

Answer 111

3) Minimize the cost of compute. If you own your own servers, compute is free. But cloud is often less expensive when you account for the Total Cost of Ownership (TCO), which includes things like server maintenance, utilities, and disaster recovery.

Question 112

Which of the following statements about the Business Support plan is true? 1) It is the cheapest support plan that includes guidance from Technical Account Managers 2) It is the cheapest support plan that includes receiving guidance from AWS Support 3) It is the cheapest support plan that includes the full set of Trusted Advisor checks, as well as 24/7 access to the phone or chat support team. 4) It is the cheapest support plan that includes white glove, concierge-like billing support

Answer 112

3) At $100/month, the Business Support plan is the cheapest plan that includes the full set of Trusted Advisor checks and 24/7 access to phone and chat support teams. These features are also available in Enterprise On-Ramp and Enterprise support plans.

Question 113

Which AWS service helps match you with AWS Certified freelancers and consultants? 1) AWS IQ 2) AWS Professional Services 3) AWS Activate 4) AWS Managed Services

Answer 113

1) AWS IQ can help you find AWS Certified freelancers and consultants.

Question 114

You want to use an Amazon EC2 instance for a batch processing workload. What would be the best Amazon EC2 instance type to use? 1) General purpose 2) Memory optimized 3) Compute optimized 4) Storage optimized

Answer 114

3) Compute optimized

Question 115

What are the contract length options for Amazon EC2 Reserved Instances? (Select two) 1) 1 year 2) 2 years 3) 3 years 4) 4 years 5) 5 years

Answer 115

1 and 3 years

Question 116

You have a workload that will run for a total of 6 months and can withstand interruptions. What would be the most cost-efficient Amazon EC2 purchasing option? 1) Reserved Instance 2) Spot Instance 3) Dedicated Instance 4) On-Demand Instance

Answer 116

2) Spot Instance Reserved Instances require a 1 or 3 year contract Dedicated Instances run on a VPC on dedicated hardware and have a higher cost On-Demand requires a minimum contract length and costs more than Spot instances

Question 117

Which process is an example of Elastic Load Balancing? 1) Ensuring that no single Amazon EC2 instance has to carry the full workload on its own 2) Removing unneeded Amazon Ec2 instances when demand is low 3) Adding a second Amazon EC2 instance during an online store's popular sale 4) Automatically adjusting the number of Amazon EC2 instances to meet demand

Answer 117

1) Elastic Load Balancing is the AWS service that automatically distributes incoming application traffic across multiple resources, such as Amazon EC2 instances. This helps to ensure that no single resource becomes overutilized.

Question 118

You want to deploy and manage containerized applications. Which service should you use? 1) AWS Lambda 2) Amazon Simple Notification Service (Amazon SNS) 3) Amazon Single Queue Service (Amazon SQS) 4) Amazon Elastic Kubernetes Service (Amazon EKS)

Answer 118

4) Amazon EKS is a fully managed Kubernetes service. Kubernetes is open-source software that enables you to deploy and manage containerized applications at scale.

Question 119

Which statement is TRUE for the AWS global infrastructure? 1) A Region consists of a single Availability Zone 2) An Availability Zone consists of two or more Regions 3) A Region consists of three or more Availability Zones 4) An Availability Zone consists of a single Region.

Answer 119

3) Each Region has at least 3 Availability Zones within it.

Question 120

Which factors should be considered when selecting a Region? (Select two) 1) Compliance with data governance and legal requirements 2) Proximity to your customers 3) Access to 24/7 technical support 4) Ability to assign custom permissions to different users 5) Access to the AWS Command Line Interface (AWS CLI)

Answer 120

1 & 2

Question 121

Which statement best describes Amazon CloudFront? 1) A service that enables you to run infrastructure in a hybrid cloud approach 2) A serveries compute engine for containers 3) A service that enables you to send and receive messages components through a queue 4) A global content delivery service

Answer 121

4) Amazon CloudFront is a content delivery service. It uses a network of edge locations to cache content and delivery content to customers all over the world. When content is cached, it is stored locally as a copy. This content might be video files, photos, webpages, and so on.

Question 122

Which site does Amazon CloudFront use to cache copies of content for faster delivery to users at any location? 1) Region 2) Availability Zone 3) Edge location 4) Origin

Answer 122

3) Edge locations

Question 123

Which action can you perform with AWS Outposts? 1) Automate actions for AWS services and applications through scripts 2) Access wizards and automated workflows to perform tasks in AWS services 3) Develop AWS applications in supported programming languages 4) Extend AWS infrastructure and services to different locations, including your on-premises data center.

Answer 123

4) AWS Outposts allows you to extend AWS infrastructure and services to different locations, including your on-premises data center.

Question 124

Your company has an application that uses Amazon EC2 instances to run the customer-facing website and Amazon RDS database instances to store customers' personal information. How should the developer configure the VPC according to best practices? 1) Place the Amazon EC2 instances in a private subnet and the Amazon RDS database instances in a public subnet. 2) Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet. 3) Place the Amazon EC2 instances and the Amazon RDS database instances in a public subnet. 4) Place the Amazon EC2 instances and the Amazon RDS database instances in a private subnet.

Answer 124

2) Place the Amazon EC2 instances in a public subnet and the Amazon RDS databases instances in a private subnet. A subnet is a section of a VPC in which you can group resources based on security or operational needs. Subnets can be public or private. Public subnets contain resources that need to be accessible by the public, such as an online store’s website. Private subnets contain resources that should be accessible only through your private network, such as a database that contains customers’ personal information and order histories.

Question 125

Which component can be used to establish a private dedicated connection between your company's data center and AWS? 1) Private subnet 2) DNS 3) AWS Direct Connect 4) Virtual private gateway

Answer 125

3) AWS Direct Connect

Question 126

Which statement best describes security groups? 1) They are stateful and deny all inbound traffic by default 2) They are stateful and allow all inbound traffic by default 3) They are stateless and deny all inbound traffic by default 4) They are stateless and allow all inbound traffic by default

Answer 126

1) Security groups are stateful. This means that they use previous traffic patterns and flows when evaluating new requests for an instance. By default, security groups deny all inbound traffic, but you can add custom rules to fit your operational and security needs.

Question 127

Which component is used to connect a VPC to the internet? 1) Public subnet 2) Edge location 3) Security Group 4) Internet gateway

Answer 127

4) Internet gateway

Question 128

Which service is used to manage the DNS records for domain names? 1) Amazon Virtual Private Cloud 2) AWS Direct Connect 3) Amazon CloudFront 4) Amazon Route 53

Answer 128

4) Amazon Route 53 is a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications that host in AWS. Another feature of Route 53 is the ability to manage the DNS records for domain names. You can transfer DNS records for existing domain names managed by other domain registrars. You can also register new domain names directly in Route 53.

Question 129

Which Amazon S3 storage classes are optimized for archival data? (Select two) 1) Amazon S3 Standard 2) Amazon S3 Glacier Flexible Retrieval 3) Amazon S3 Intelligent-Tiering 4) Amazon S3 Standard-IA 5) Amazon S3 Glacier Deep Archive

Answer 129

2 & 5

Question 130

Which statement or statements are TRUE about Amazon EBS volumes and Amazon EFS file systems? 1) EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones. 2) EBS volumes store data across multiple Availability Zones. Amazon EFS file systems store data within a single Availability Zone. 3) EBS volumes and Amazon EFS file systems both store data within a single Availability Zone 4) EBS volumes and Amazon EFS file systems both store data across multiple Availability Zones

Answer 130

1) EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones. An EBS volume must be located in the same Availability Zone as the Amazon EC2 instance to which it is attached. Data in an Amazon EFS file system can be accessed concurrently from all the Availability Zones in the Region where the file system is located.

Question 131

You want to store data in an object storage service. Which AWS service is best for this type of storage? 1) Amazon Managed Blockchain 2) Amazon Elastic File System (Amazon EFS) 3) Amazon Elastic Block Store (Amazon EBS) 4) Amazon Simple Storage Service (Amazon S3)

Answer 131

4) Amazon S3

Question 132

Which statement best describes Amazon DynamoDB? 1) A service that enables you to run relational database in the AWS Cloud 2) A serverless key-value database service 3) A service that you can use to migrate relational databases, nonrelational databases, and other types of data stores 4) An enterprise-class relational database.

Answer 132

2) A serverless key-value database service. Amazon DynamoDB is a key-value database service. It is serverless, which means that you do not have to provision, patch, or manage server

Question 133

Which service is used to query and analyze data across a data warehouse? 1) Amazon Redshift 2) Amazon Neptune 3) Amazon DocumentDB 4) Amazon ElasticCache

Answer 133

1) Amazon Redshift. Amazon Redshift is a data warehousing service that you can use for big data analytics. Use Amazon Redshift to collect data from many sources and help you understand relationships and trends across your data.

Question 134

Which statement best describes an IAM policy? 1) An authentication process that provides an extra layer of protection for your AWS account 2) A document that grants or denies permission to AWS services and resources 3) An identity that you can assume to gain temporary access to permissions 4) The identity that is established when you first create an AWS account

Answer 134

2) A document that grants or denies permissions to AWS services and resources. IAM policies provide you with the flexibility to customize users’ levels of access to resources. For instance, you can allow users to access all the Amazon S3 buckets in your AWS account or only a specific bucket.

Question 135

An employee requires temporary access to create several Amazon S3 buckets. Which option would be the best choice for this task? 1) AWS account root user 2) IAM group 3) IAM role 4) Service control policy (SCP)

Answer 135

3)IAM role. An IAM role is an identity that you can assume to gain temporary access to permissions. When someone assumes an IAM role, they abandon all permissions that they had under a previous role and assume the permissions of the new role. IAM roles are ideal for situations in which access to services or resources needs to be granted temporarily instead of long-term.

Question 136

Which statement best describes the principle of least privilege? 1) Adding an IAM user into at least one IAM group 2) Checking a packet's permissions against an access control list 3) Granting only the permissions that are needed to perform specific tasks 4) Performing a denial-of-service attack that originates from at least one device

Answer 136

3) Granting only the permissions that are needed to perform specific job tasks. When you grant permissions by following the principle of least privilege, you prevent users or roles from having more permissions than needed to perform specific job tasks. For example, cashiers in the coffee shop should be given access to the cash register system. As a best practice, grant IAM users and roles a minimum set of permissions and then grant additional permissions as needed.

Question 137

Which service helps protect your applications against distributed denial-of-service (DDoS) attacks? 1) Amazon GuardDuty 2) Amazon Inspector 3) AWS Artifact 4) AWS Shield

Answer 137

4) AWS Shield. As network traffic comes into your applications, AWS Shield uses a variety of analysis techniques to detect potential DDoS attacks in real time and automatically mitigates them.

Question 138

Which task can AWS Key Management Service (AWS KMS) perform? 1) Configure multifactor authentication (MFA) 2) Update the AWS account root user password 3) Create cryptographic keys 4) Assign permission to users and groups

Answer 138

3) Create cryptographic keys. AWS Key Management Service (AWS KMS) enables you to perform encryption operations through the use of cryptographic keys. A cryptographic key is a random string of digits used for locking (encrypting) and unlocking (decrypting) data. You can use AWS KMS to create, manage, and use cryptographic keys. You can also control the use of keys across a wide range of services and in your applications.

Question 139

Which actions can you perform using Amazon CloudWatch (Select two) 1) Monitor your resources' utilization and performance 2) Receive real-time guidance for improving your AWS environment 3) Compare your infrastructure to AWS best practices in five categories 4) Access metrics from a single dashboard 5) Automatically detect unusual account activity

Answer 139

1 & 4 Monitor your resources’ utilization and performance Access metrics from a single dashboard

Question 140

Which service enables you to review the security of your Amazon S3 bucket by checking for open access permissions? 1) Amazon CloudWatch 2) AWS CloudTrail 3) AWS Trusted Advisor 4) Amazon GuardDuty

Answer 140

3) AWS Trusted Advisor. AWS Trusted Advisor is a web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices. The inspection includes security checks, such as Amazon S3 buckets with open access permissions.

Question 141

Which categories are included in the AWS Trusted Advisor dashboard? (Select two) 1) Reliability 2) Performance 3) Scalability 4) Elasticity 5) Fault tolerance

Answer 141

2 & 5 Performance Fault tolerance AWS Trusted Advisor continuously inspects your AWS environment and provides best practice recommendations across five categories: cost optimization, performance, security, fault tolerance, and service limits.

Question 142

Which action can you perform with consolidated billing? 1) Review how much cost your predicated AWS usage will incur by the end of the month. 2) Create an estimate for the cost of your use cases on AWS 3) Combine usage across accounts to receive volume pricing discounts 4) Visualize and manage your AWS costs and usage over time

Answer 142

3) Combine usage across accounts to receive volume pricing discounts.

Question 143

Which pricing tool is used to visualize, understand, and manage your AWS costs and usage over time? 1) AWS Pricing Calculator 2) AWS Budgets 3) AWS Cost Explorer 4) AWS Free Tier

Answer 143

3) AWS Cost Explorer. AWS Cost Explorer includes a default report of the costs and usage for your top five cost-accruing AWS services. You can apply custom filters and groups to analyze your data. For example, you can view resource usage at the hourly level.

Question 144

Which pricing tool enablers you to receive alerts when your service usage exceeds a threshold that you have defined? 1) Billing dashboard in the AWS Management Console 2) AWS Budgets 3) AWS Free Tier 4) AWS Cost Explorer

Answer 144

2) AWS Budgets. In AWS Budgets, you can set custom alerts that will notify you when your service usage exceeds (or is forecasted to exceed) the amount that you have budgeted. Your budget can be based on costs or usage. For example, you can set an alert that will notify you when you have incurred $100.00 of costs in Amazon EC2 or 500,000 requests in AWS Lambda.

Question 145

Your company wants to receive support from an AWS Technical Account Manager (TAM). Which support plan should you choose? 1) Developer 2) Enterprise 3) Basic 4) Business

Answer 145

2) Enterprise. A Technical Account Manager (TAM) is available only to AWS customers with the Enterprise On-Ramp and Enterprise Support plans. A TAM provides guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications.

Question 146

Which service or resource is used to find third-party software that runs on AWS? 1) AWS Marketplace 2) AWS Free Tier 3) AWS Support 4) Billing dashboard in the AWS Management Console

Answer 146

1) AWS Marketplace. AWS Marketplace is a digital catalog that includes thousands of software listings from independent software vendors. You can use AWS Marketplace to find, test, and buy software that runs on AWS.

Question 147

Which Perspective of the AWS Cloud Adoption Framework helps you structure the selection and implementation of permissions? 1) Governance Perspective 2) Security Perspective 3) Operations Perspective 4) Business Perspective

Answer 147

2) Security Perspective. The Security Perspective of the AWS Cloud Adoption Framework also helps you to identify areas of non-compliance and plan ongoing security initiatives.

Question 148

Which strategies are included in the six strategies for application migrations? (Select two) 1) Revisiting 2) Retaining 3) Remembering 4) Redeveloping 5) Rehosting

Answer 148

2 & 5 Retaining Rehosting The application migration strategies are rehosting, replatforming, refactoring/re-architecting, repurchasing, retaining, and retiring.

Question 149

What is the storage capacity of AWS Snowmobile? 1) 40 PB 2) 60 PB 3) 80 PB 4) 100 PB

Answer 149

4) 100 PB. AWS Snowmobile is a service that is used for transferring up to 100 PB of data to AWS. Each Snowmobile is a 45-foot-long shipping container that is pulled by a semi-trailer truck.

Question 150

Which statement best describes Amazon Lex? 1) A service that enables you to build conversational interfaces using voice and text 2) A machine learning service that automatically extracts text and data from scanned documents 3) A document database service that supports MongoDB workloads 4) A service that enables you to identify potentially fraudulent online activities

Answer 150

1) "A service that enables you to build conversational interfaces using voice and text." In Amazon Lex, you can quickly build, test, and deploy conversational chatbots to use in your applications.

Question 151

Which pillar of the AWS Well-Architected Framework includes the ability to run workloads effectively and gain insights into their operations? 1) Cost Optimization 2) Operational Excellence 3) Performance Efficiency 4) Reliability

Answer 151

2) Operational Excellence

Question 152

What are the benefits of cloud computing? (Select two) 1) Increase speed and agility 2) Benefit from smaller economies of scale 3) Trade variable expense for upfront expense 4) Maintain infrastructure capacity 5) Stop spending money running and maintaining data centers

Answer 152

1 & 5 The two correct response options are: Increase speed and agility. Stop spending money running and maintaining data centers. The six advantages of cloud computing are: Trade upfront expense for variable expense. Benefit from massive economies of scale. Stop guessing capacity. Increase speed and agility. Stop spending money running and maintaining data centers. Go global in minutes.

Question 153

Which Amazon EC2 pricing option reduces costs when a business makes an hourly spend commitment to an instance family and Region for 1-year or 3-year term? 1) EC2 Instance Savings Plans 2) Dedicated Hosts 3) Spot Instances 4) Reserved Instances

Answer 153

1) EC2 Instance Savings Plans. EC2 Instance Savings Plans reduces compute costs by committing to a consistent hourly spend for a 1-year or 3-year term. This results in savings of up to 72% over On-Demand Instance costs. Any EC2 usage up to the commitment is charged at the discounted Savings Plan rate (for example, $10 an hour). Any EC2 usage beyond the commitment is charged at regular On-Demand Instance rates.

Question 154

Which service provides review details for user activities and API calls that have occurred within an AWS environment? 1) AWS Trusted Advisor 2) AWS CloudTrail 3) Amazon Inspector 4) Amazon CloudWatch

Answer 154

2) AWS CloudTrail. With CloudTrail, a person can view a complete history of user activity and API calls for their applications and resources. Events are typically updated in CloudTrail within 15 minutes after an API call was made. A person can filter events by specifying the time and date that an API call occurred, the user who requested the action, the type of resource that was involved in the API call, and more.

Question 155

Which service builds the workflows that are required for human review of machine learning predictions? 1) Amazon Textract 2) Amazon Aurora 3) Amazon Augmented AI 4) Amazon Lex

Answer 155

3) Amazon Augmented AI. Amazon Augmented AI (Amazon A2I) provides built-in human review workflows for common machine learning use cases, such as content moderation and text extraction from documents. With Amazon A2I, a person can also create their own workflows for machine learning models built on Amazon SageMaker or any other tools.

Question 156

Which actions can a person perform in Amazon Route 53? (Select Two) 1) Connect user requests to infrastructure in AWS and outside of AWS 2) Monitor applications and respond to system-wide performance changes 3) Automate the deployment of workloads into an AWS environment 4) Manage DNS records for domain names 5) Access AWS security and compliance reports and select online agreements

Answer 156

1 & 4 Connect user requests to infrastructure in AWS and outside of AWS. Manage DNS records for domain names. Amazon Route 53 is a DNS web service. It gives developers and businesses a reliable way to route end users to internet applications that are hosted in AWS. Additionally, businesses can transfer DNS records for existing domain names that are currently managed by other domain registrars, or register new domain names directly within Amazon Route 53.

Question 157

Which action can a person in Amazon CloudFront? 1) Deliver content to customers through a global network of edge locations 2) Provision an isolated section of the AWS Cloud to launch resources in a virtual network that a person defines 3) Run infrastructure in a hybrid cloud approach 4) Provision resources by using programming languages or a text file

Answer 157

1) Deliver content to customers through a global network of edge locations. Amazon CloudFront is a content delivery service. It uses a network of edge locations to cache content and deliver content to customers all over the world. When content is cached, it is stored locally as a copy. This content might be video files, photos, webpages, and so on.

Question 158

In the S3 Intelligent-Tiering storage class, Amazon S3 moves objects between a frequent access tier and an infrequent access tier. Which storage classes are used for these tiers? (Select two) 1) S3 Standard-IA 2) S3 One Zone-IA 3) S3 Glacier Flexible Retrieval 4) S3 Standard 5) S3 Glacier Deep Archive

Answer 158

1 & 4 S3 Standard S3 Standard-IA In the S3 Intelligent-Tiering storage class, Amazon S3 monitors objects access patterns. If an object has not accessed an object for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, S3 Standard-IA. If an object is accessed in the infrequent access tier, Amazon S3 automatically moves it to the frequent access tier, S3 Standard.

Question 159

Which tool provides automation actions for AWS services and applications through scripts? 1) Amazon QLDB 2) Amazon Redshift 3) AWS Snowball 4) AWS Command Line Interface

Answer 159

4) AWS Command Line Interface. The AWS Command Line Interface (AWS CLI) provides the capability to control multiple AWS services directly from the command line within one tool. For example, a person can use commands to start an Amazon EC2 instance, connect an Amazon EC2 instance to a specific Auto Scaling group, and more. The AWS CLI is available for users on Windows, macOS, and Linux.

Question 160

Which tool provides the capability to visualize, understand, and manage AWS costs and usage over time? 1) AWS Budgets 2) AWS Cost Explorer 3) AWS Artifact 4) AWS Pricing Calculator

Answer 160

2) AWS Cost Explorer. With AWS Cost Explorer, businesses can quickly create custom reports to analyze their AWS cost and usage data.

Question 161

Which pillar of the AWS Well-Architected Framework focuses on using computing resources in ways that meet system requirements? 1) Performance Efficiency 2) Operational Excellence 3) Security 4) Reliability

Answer 161

1) Performance Efficiency. The Performance Efficiency pillar focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.

Question 162

Which statement best describes Amazon GuardDuty? 1) A service that checks applications for security vulnerabilities and deviations from security best practices 2) A service that helps protect applications against Distributed Denial of Service (DDoS) attacks 3) A service that monitors network requests for web applications 4) A service that provides intelligent threat detection for AWS infrastructure and resources

Answer 162

4) A service that provides intelligent threat detection for your AWS infrastructure and resources. AWS GuardDuty identifies threats by continually monitoring the network activity and account behavior within an AWS environment.

Question 163

Which service runs containerized applications on AWS? 1) Amazon Elastic Kubernetes Service (Amazon EKS) 2) Amazon Aurora 3) Amazon Redshift 4) Amazon SageMaker

Answer 163

1) Amazon Elastic Kubernetes Service (Amazon EKS). Amazon EKS is a fully managed service that runs Kubernetes on AWS. Kubernetes is open-source software that deploys and manages containerized applications at scale. Containers provide a standard way to package an application's code and dependencies into a single object. Containers are frequently used for processes and workflows in which there are essential requirements for security, reliability, and scalability.

Question 164

Which statement best describes AWS Marketplace? 1) A resource that can answer questions about best practices and assist with troubleshooting issues 2) An online tool that inspects an AWS environment and provides real-time guidance in accordance with AWS best practices 3) A resource that provides guidance, architectural reviews, and ongoing communication with companies as they plan, deploy, and optimize there applications 4) A digital catalog that includes thousands of software listings from independent software vendors.

Answer 164

4) A digital catalog that includes thousands of listings from independent software vendors. Businesses can use AWS Marketplace to find, test, and buy software that runs on AWS.

Question 165

Which component or service establishes a dedicated private connection between an on-premises data center and virtual private cloud (VPC)? 1) Internet gateway 2) Virtual private gateway 3) Amazon CloudFront 4) AWS Direct Connect

Answer 165

4) AWS Direct Connect. AWS Direct Connect is a service that establishes a dedicated private connection between an on-premises data center and VPC. The private connection that AWS Direct Connect provides helps reduce network costs and increase the amount of bandwidth that can travel through a network.

Question 166

An application developer wants to send and receive messages between distributed application components. Which service should they use? 1) Amazon Simple Queue Service (Amazon SQS) 2) AWS Snowball 3) Amazon ElastiCache 4) Amazon Route 53

Answer 166

1) Amazon Simple Queue Service (Amazon SQS). Amazon SQS is a message queuing service. Using Amazon SQS, an application developer can send, store, and receive messages between software components at any volume size, without losing messages or requiring other services to be available. In Amazon SQS, an application sends messages into a queue. A user or service retrieves a message from the queue, processes it, and then deletes it from the queue.

Question 167

A cloud engineer wants to store data in a volume that is attached to an Amazon EC2 instance. Which service should they use? 1) Amazon Simple Storage Service (Amazon S3) 2) AWS Lambda 3) Amazon ElastiCache 4) Amazon Elastic Block Store (Amazon EBS)

Answer 167

4) Amazon Elastic Block Store (Amazon EBS). Amazon EBS provides block-level storage volumes for Amazon EC2 instances. If a person stops or terminates an Amazon EC2 instance, all the data on the attached EBS volume remains available.

Question 168

A cloud architect wants Amazon S3 to monitor object access patterns. Which storage class should they use? 1) Amazon S3 Glacier Flexible Retrieval 2) Amazon S3 Standard-IA 3) Amazon S3 One Zone-IA 4) Amazon S3 Intelligent-Tiering

Answer 168

4) Amazon S3 Intelligent-Tiering. In the Amazon S3 Intelligent-Tiering storage class, Amazon S3 monitors object access patterns. If an object has not been accessed for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, Amazon S3 Standard-IA. If an object is accessed in the infrequent access tier, Amazon S3 automatically moves it to the frequent access tier, Amazon S3 Standard.

Question 169

Which statement is TRUE for AWS Lambda? 1) To use AWS Lambda, businesses must configure the servers that run their code. 2) Businesses pay only for compute time while their code is running. 3) The first step in using AWS Lambda is provisioning a server. 4) Before using AWS Lambda, a business must prepay for their estimated compute time.

Answer 169

2) Businesses pay only for compute time while their code is running. AWS Lambda is a service that runs code without needing to provision or manage servers. While using AWS Lambda, businesses pay only for the compute time that they consume. They are charged only when their application code is running. With AWS Lambda, they can run code for virtually any type of application or backend service, all with zero administration.

Question 170

Which Support plans include access to all AWS Trusted Advisor checks? (Select two) 1) AWS Free Tier 2) Developer 3) Enterprise 4) Business 5) Basic

Answer 170

3 & 4 Enterprise Business

Question 171

Which service provides the capability to quickly deploy and scale applications on AWS? 1) AWS Outposts 2) Amazon CloudFront 3) AWS Elastic Beanstalk 4) AWS Snowball

Answer 171

3) AWS Elastic Beanstalk. Businesses upload their application, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring.

Question 172

Which statement best describes an Availability Zone? 1) A fully isolated portion of the AWS global infrastructure 2) The server from which Amazon CloudFront gets files 3) A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location 4) A separate geographical location with multiple locations that are isolated from each other

Answer 172

1) A fully isolated portion of the AWS global infrastructure. An Availability Zone is a single data center or a group of data centers within a Region. Availability Zones are located tens of miles apart from each other. This helps them to provide interconnectivity to support the services and applications that run within a Region.

Question 173

Which service consolidates and manages multiple AWS accounts from a central location? 1) AWS Key Management Service (AW KMS) 2) AWS Identity and Access Management (IAM) 3) AWS Artifact 4) AWS Organizations

Answer 173

4) AWS Organizations. In AWS Organizations, businesses centrally control permissions for their accounts by using service control policies (SCPs). Additionally, businesses can use the consolidated billing feature in AWS Organizations to combine usage and receive a single bill for multiple AWS accounts.

Question 174

Which virtual private cloud (VPC) component controls inbound and outbound traffic for Amazon EC2 instances? 1) Subnet 2) Internet gateway 3) Network access control list 4) Security group

Answer 174

4) security group. A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. By default, a security group denies all inbound traffic and allows all outbound traffic. Businesses can add custom rules to configure which traffic should be allowed or denied.

Question 175

Which migration strategy involves changing how an application is architected and developed, typically by using cloud-native features? 1) Replatforming 2) Rehosting 3) Repurchasing 4) Refactoring

Answer 175

4) Refactoring

Question 176

Which service is used to transfer up to 100 PB of data to AWS? 1) Amazon CloudFront 2) AWS Snowmobile 3) AWS DeepRacer 4) Amazon Neptune

Answer 176

2) AWS Snowmobile. AWS Snowmobile is a service that is used for transferring up to 100 PB of data to AWS. Each Snowmobile is a 45-foot-long shipping container that is pulled by a semi-trailer truck.

Question 177

Which statement best describes Elastic Load Balancing? 1) A service that provides data for monitoring applications, optimize resource utilization, and respond to system-wide performance changes 2) A service that monitors applications and automatically adds or removes capacity from resource groups in response to changing demand 3) A service that provides the capability to create, manage, and scale a distributed in-memory or cache environment in the cloud 4) A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances

Answer 177

4) A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances. A load balancer acts as a single point of contact for all incoming web traffic to an Auto Scaling group. This means that as Amazon EC2 instances are added or removed in response to the amount of incoming traffic, these requests are routed to the load balancer first and then spread across multiple resources that will handle them.

Question 178

A cloud engineer is running an Amazon EC2 instance and wants to store data in an attached resource. Their data is temporary and will not be kept long term. Which resource should they use? 1) Subnet 2) Amazon S3 bucket 3) Amazon Elastic Block Store (Amazon EBS) volume 4) Instance store

Answer 178

4) instance store. Instance stores are ideal for temporary data that does not need to be kept long term. When an Amazon EC2 instance is stopped or terminated, all the data that has been written to the attached instance store is deleted.

Question 179

An application developer wants to store data in a key-value database. Which service should they use? 1) Amazon DynamoDB 2) Amazon DocumentDB 3) Amazon Aurora 4) Amazon RDS

Answer 179

1) Amazon DynamoDB. Amazon DynamoDB is a key-value database service. A key-value database might include data pairs such as “Name: John Doe,” “Address: 123 Any Street,” and “City: Anytown”. In a key-value database, you can add or remove attributes from items in the table at any time. Additionally, not every item in the table has to have the same attributes.

Question 180

Which tasks are the responsibilities of AWS (Select Two) 1) Configuring security groups on Amazon EC2 instances 2) Configuring AWS infrastructure devices 3) Creating IAM users and groups 4) Training company employees on how to use AWS services 5) Maintaining virtualization infrastructure

Answer 180

2 & 5 The two correct response options are: Maintaining virtualization infrastructure Configuring AWS infrastructure devices

Question 181

Which AWS Trusted Advisor category includes checks for high-utilization EC2 instances? 1) Performance 2) Fault Tolerance 3) Cost Optimization 4) Security

Answer 181

1) Performance. In this category, AWS Trusted Advisor also helps improve the performance of services by providing recommendations for how to take advantage of provisioned throughput.

Question 182

Which Perspective of the AWS Cloud Adoption Framework focuses on recovering IT workloads to meet the requirements of business stakeholders? 1) Governance Perspective 2) People Perspective 3) Operations Perspective 4) Business Perspective

Answer 182

3) Operations Perspective. The Operations Perspective of the AWS Cloud Adoption Framework also includes principles for operating in the cloud by using agile best practices. The other response options are incorrect because: The Business Perspective helps moves a business from a model that separates business and IT strategies into a business model that integrates IT strategy. The People Perspective helps Human Resources (HR) employees prepare their teams for cloud adoption by updating organizational processes and staff skills to include cloud-based competencies. The Governance Perspective provides the capability to update the staff skills and organizational processes that are necessary to ensure business governance in the cloud.

Question 183

Which AWS service identifies security groups that allow unrestricted access to a user's AWS resources? 1) AWS Trusted Advisor 2) AWS Identity and Access Management (IAM) 3) Amazon CloudWatch 4) AWS CloudTrail

Answer 183

1) Trusted Advisor checks security groups for rules that allow unrestricted access to a resource. Unrestricted access increases opportunities for malicious activity, such as hacking, denial-of-service attacks, or loss of data.

Question 184

Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate? 1) Reserved Instances 2) On-Demand Instances 3) Dedicated Instances 4) Spot Instances

Answer 184

4) With Spot Instances, you can access unused EC2 capacity. Spot Instances can be discounted.

Question 185

A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3. Which AWS service can meet these requirements? 1) Amazon Inspector 2) Amazon Macie 3) Amazon GuardDuty 4) AWS Secrets Manager

Answer 185

2) Macie is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

Question 186

A company requires a relational database on AWS that records new customer orders from a website. Which AWS service or feature will meet this requirement? 1) AWS Global Accelerator 2) Amazon DynamoDB 3) Amazon Aurora 4) Amazon Elastic Block Store (Amazon EBS)

Answer 186

3) Aurora is a MySQL- and PostgreSQL-compatible relational database built for the cloud. Aurora combines the performance and availability of traditional enterprise databases with the simplicity and cost-effectiveness of open source databases.

Question 187

Which of the functionalities are characteristics of Amazon S3? (Select TWO.) 1) A Global file system 2) An object store 3) A local file store 4) A network file system 5) A durable storage system

Answer 187

2 & 5

Question 188

A company is hosting a static website from a single Amazon S3 bucket. Which AWS service will achieve lower latency and high transfer speeds? 1) AWS Elastic Beanstalk 2) Amazon DynamoDB Accelerator (DAX) 3) Amazon Route 53 4) Amazon CloudFront

Answer 188

4) CloudFront is a web service that speeds up the distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. Content is cached in edge locations. Content that is repeatedly accessed can be served from the edge locations instead of the source S3 bucket.

Question 189

A company requires an encrypted connection between the company's on-premises servers and AWS. The connection must use the company's existing internet connection. Which solution will meet these requirements? 1) AWS Direct Connect 2) Amazon Connect 3) Amazon CloudFront 4) AWS Site-to-Site VPN

Answer 189

4) Site-to-Site VPN creates an encrypted network path between your on-premises network and your AWS Cloud network. This connection between your on-premises network and your AWS Cloud network uses the internet.

Question 190

A user deploys an Amazon RDS DB instance in multiple Availability Zones. This strategy involves which pillar of the AWS Well-Architected Framework? 1) Performance efficiency 2) Reliability 3) Cost Optimization 4) Security

Answer 190

2) The reliability pillar includes the ability of a workload to perform its intended function correctly and consistently when it is expected to do so. The deployment of Amazon RDS in multiple Availability Zones supports the goal of reliability because it reduces single points of failure.

Question 191

Each department within a company has its own independent AWS account and its own payment method. The company needs to centralize departmental governance and consolidate payments. How can the company achieve these objectives by using AWS services or features? 1) Use AWS Cloud Map on each departmental account 2) Create an organization in AWS Organizations with all features enabled within one account. Invite all accounts to join the organization. 3) Use AWS Systems Manager OpsCenter 4) Use the AWS Cost and Usage Reports page of the AWS Billing and Cost Management console

Answer 191

2) Organizations provides centralized governance and billing for an AWS environment, including multiple accounts.

Question 192

A company wants to establish a consistent and private connection from the company's on-premises data center to the AWS Cloud. Which AWS service will meet these requirements? 1) AWS Client VPN 2) Amazon Connect 3) AWS Direct Connect 4) AWS Site-to-Site VPN

Answer 192

3) Direct Connect links your internal network to a Direct Connect location through a standard Ethernet fiber-optic cable. One end of the cable connects to your router. The other end of the cable connects to a Direct Connect router. AWS Direct Connect is consistent and private because your company is the only user of the cable.

Question 193

What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Select TWO.) 1) Preventing a single point of failure 2) Reducing the operational costs of the application 3) Allowing the application to serve cross-Region users with low latency 4) Increasing the availability of the application 5) Increasing the load of the application

Answer 193

1 & 4 The deployment of the EC2 instances in multiple Availability Zones prevents a single point of failure. Availability Zones are designed for physical redundancy and to provide resilience with uninterrupted performance. If you host all your instances in a single location that is affected by a failure, none of your instances would be available. Availability Zones are designed for physical redundancy and to provide resilience with uninterrupted performance.

Question 194

Which tasks are the customer's responsibility according to the AWS shared responsibility model? (Select TWO.) 1) Patch the operating system that AWS Lambda functions use 2) Install patches on Amazon RDS DB instances 3) Control physical access to the data center that contains a customer's VPC 4) Configure IAM users according to the principle of least privilege 5) Configure an Amazon S3 bucket to allow public access

Answer 194

4 & 5 AWS provides AWS Identity and Access Management (IAM) as a service. The customer defines IAM users and the access policies that apply to those users. The customer determines access permissions to S3 buckets that the customer owns.

Question 195

How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (Select TWO.) 1) By the time it takes for the Lambda function to run 2) By the number of versions of a specific Lambda function 3) By the number of requests made for a given Lambda function 4) By the programming language that is used for the Lambda function 5) By the total number of Lambda functions in an AWS account

Answer 195

1 & 3 Lambda charges are dependent on the amount of time it takes to run the code. Lambda charges are dependent on the number of requests for your Lambda functions.

Question 196

A company wants to create a learning application for students. The learning application must give students the option to choose a button to have the text read out loud to them. Which AWS machine learning service will meet this requirement? 1) Amazon Transcribe 2) Amazon Polly 3) Amazon Translate 4) Amazon Textract

Answer 196

2) Amazon Polly is a machine learning service that converts text to speech. This service provides the ability to read text out loud.

Question 197

A company has an on-premises Linux-based server with an Oracle database that runs on it. The company wants to migrate the database server to run on an Amazon EC2 instance in AWS. Which service should the company use to complete the migration? 1) AWS Database Migration Service (AWS DMS) 2) AWS Migration Hub 3) AWS Application Migration Service (AWS MGN) 4) AWS Application Discovery Service

Answer 197

3) AWS MGN is an automated lift-and-shift solution. This solution can migrate physical servers and any databases or applications that run on them to EC2 instances in AWS. It is not 1 because AWS DMS can be used to migrate data from an on-premises database to a database in AWS. However, AWS DMS does not migrate the actual server to an EC2 instance.

Question 198

Which AWS service should be used to implement encryption in transit? 1) AWS Certificate Manager (ACM) 2) AWS Resource Access Manager (AWS RAM) 3) AWS Shield 4) AWS Security Hub

Answer 198

1) ACM is a service that is used to create, store, and renew public and private SSL/TLS certificates. You can use ACM to implement encryption in transit and at rest by using a protocol, such as TLS.

Question 199

An application development team needs a solution that sends an alert to an entire development team if a quality assurance test fails on an application. Which AWS service should the application development team use to meet the requirement? 1) Amazon Connect 2) Amazon EventBridge 3) Amazon Simple Queue Service (Amazon SQS) 4) Amazon Simple Notification Service (Amazon SNS)

Answer 199

4) Amazon SNS is a service used to deliver publications to subscribers. You can use Amazon SNS to send notifications, such as mobile text messages, push notifications, or emails, to subscribers of a quality assurance test-failure topic.

Question 200

Which credential components are required to gain programmatic access to an AWS account? (Select TWO.) 1) An access key ID 2) A primary key 3) A secret access key 4) A user ID 5) A secondary Key

Answer 200

1& 3 Programmatic access requires an access key ID and a secret access key that can be assigned to an AWS user.

Question 201

What is the MINIMUM AWS Support plan that provides technical support through phone calls? 1) Enterprise 2) Business 3) Developer 4) Basic

Answer 201

2) You can call or chat with technical support by using the Business Support plan or the Enterprise Support plan. The Business Support plan is the minimum plan that provides this feature.

Question 202

What are the benefits of using the AWS Cloud for companies with customers in many countries around the world? (Select TWO.) 1) Companies can deploy applications in multiple AWS Regions to reduce latency 2) Amazon Translate automatically translates third-party websites interfaces into multiple languages 3) Amazon CloudFront has multiple edge locations around the world to reduce latency. 4) Amazon Comprehend allows users to build applications that can respond to user requests in many languages. 5) Elastic Load Balancing can distribute applications web traffic to multiple AWS Regions around the world, which reduces latency

Answer 202

1 & 3 The use of Regions around the world will improve an application's global performance and reduce latency for users. CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to global customers with low latency and high transfer speeds.

Question 203

Which of the following is true for a security group's default setting? 1) It allows all inbound traffic and blocks all outbound traffic. 2) It blocks all inbound traffic and allows all outbound traffic. 3) It allows all inbound and outbound traffic. 4) It blocks all inbound and outbound traffic.

Answer 203

2) It blocks all inbound traffic and allows all outbound traffic.

Question 204

A network access control list (network ACL) filters traffic at the Amazon EC2 instance level. True/False

Answer 204

False - A network ACL secures subnets. A security group is responsible for securing EC2 instances.

Question 205

What are the benefits of using the AWS Cloud for companies with customers in many countries around the world? (Select TWO.) 1) Companies can deploy applications in multiple AWS Regions to reduce latency 2) Amazon Translate automatically translates third-party websites interfaces into multiple languages 3) Amazon CloudFront has multiple edge locations around the world to reduce latency. 4) Amazon Comprehend allows users to build applications that can respond to user requests in many languages. 5) Elastic Load Balancing can distribute applications web traffic to multiple AWS Regions around the world, which reduces latency

Answer 205

1 & 3 The use of Regions around the world will improve an application's global performance and reduce latency for users. CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to global customers with low latency and high transfer speeds.

Question 206

Which of the following is a typical use case for Amazon S3? 1) Object storage for media hosting 2) Object storage for a boot drive 3) Block storage for an Amazon EC2 instance 4) File storage for multiple Amazon EC2 instances

Answer 206

1) Amazon S3 is an object storage service designed for large objects like media files. Because you can store unlimited objects and each individual object can be up to 5 TB, Amazon S3 is an ideal service for hosting video, photo, and music uploads.

Question 207

An organization needs a fully managed database service to build an application that requires high concurrency and connections for millions of users and millions of requests per second. Which AWS database service should the organization use? 1) Amazon Redshift 2) Amazon RDS 3) Amazon DynamoDB 4) Amazon Aurora

Answer 207

3) With Amazon DynamoDB, you can build internet-scale applications supporting user-content metadata and caches that require high concurrency and connections for millions of users and millions of requests per second.