Cloud Guru Knowledge Check Flashcards by Meredith Kaiser

Which of the following CANNOT be used to access your AWS resources?

a. The AWS Command Line Interface (CLI)

b. Software Development Kits (SDKs)

c. Multi-factor authentication (MFA)

d. Application code

c. Multi-factor authentication (MFA)

How well did you know this?

Not at all

Perfectly

You have just had your whole AWS account deleted by an attacker. You are creating a new AWS account. How can you ensure that the same thing will not happen again?

a. Use a stronger password.

b. Change your password frequently.

c. Enable multi-factor authentication (MFA) on the root user.

d. Seek them out and get justice.

c. Enable multi-factor authentication (MFA) on the root user.

How well did you know this?

Not at all

Perfectly

Which service category is not offered by AWS?

a. Compute

b. Data Center

c. Database

d. Developer Tools

b. Data Center

How well did you know this?

Not at all

Perfectly

You need to deploy your cloud environment across AWS and your on-premises data center using Direct Connect. Which cloud deployment model can accomplish this?

a. Private

b. Hybrid

c. On-premises

d. Public

b. Hybrid

How well did you know this?

Not at all

Perfectly

You need to implement low latency. What can you utilize to achieve this?

a. Availability Zones (AZs) and/or Regions

b. Local Zones and/or Edge Locations

c. Local Zones and EC2

d. Data Centers and/or Regions

b. Local Zones and/or Edge Locations

How well did you know this?

Not at all

Perfectly

You are paying a monthly subscription to a company to host your website. Which cloud computing model is this an example of?

a. Platform as a Service

b. Software as a Service

c. Infrastructure as a Service

d. Cloud as a Service

c. Infrastructure as a Service

How well did you know this?

Not at all

Perfectly

Which of the following are considered advantages of the cloud?

a. Software as a Service

b. Hybrid models

c. Local Zones

d. Going global in minutes

How well did you know this?

Not at all

Perfectly

You are verifying the latency on a newly released website. You notice it is loading really quickly. What type of latency would this be?

a. High latency

b. Elastic latency

c. Low latency

d. Medium latency

c. Low latency

How well did you know this?

Not at all

Perfectly

You need to create a highly available application in the cloud. How can you accomplish this?

a. Make sure to use a private deployment model.

b. Make sure that resources are utilizing multiple Availability Zones (AZs).

c. Make sure that resources are using one Availability Zone (AZ).

d. Make sure to secure the root user.

b. Make sure that resources are utilizing multiple Availability Zones (AZs).

How well did you know this?

Not at all

Perfectly

You need to create a highly available application in the cloud. How can you accomplish this?

a. Make sure to use a private deployment model.

b. Make sure that resources are utilizing multiple Availability Zones (AZs).

c. Make sure that resources are using one Availability Zone (AZ).

d. Make sure to secure the root user.

c. Make sure that resources are using one Availability Zone (AZ).

How well did you know this?

Not at all

Perfectly

You need to send out 50,000 newsletters by email today. How can you limit the number of messages sent at one time efficiently?

a. Use Batch

b. Use Lambda

c. Use EC2

d. Use Outposts

a. Use Batch

How well did you know this?

Not at all

Perfectly

You have been tasked with improving the availability of your application and curb costs when peak hours subside. What can you implement to accomplish this?

a. An Elastic Load Balancer

b. Compute Optimizer

c. An additional EC2 instance in a different Availability Zone (AZ)

d. Auto Scaling

How well did you know this?

Not at all

Perfectly

You have been tasked with deploying a database and hosting a web application. What service can you select to achieve both?

a. Elastic Load Balancer

b. Elastic Compute Cloud

c. Lambda

d. Elastic Container Registry

b. Elastic Compute Cloud

How well did you know this?

Not at all

Perfectly

Which of the following statements is NOT true?

a. Fargate is NOT a serverless service.

b. AWS Batch provides fully managed batch processing at any scale.

c. AWS Savings Plan offers a flexible pricing model.

d. Amazon EC2 provides secure and resizeable compute capacity in the cloud.

a. Fargate is NOT a serverless service.

How well did you know this?

Not at all

Perfectly

You need to utilize a service that allows users to reach application servers over the mobile network. Which service provides this ability?

a. Batch

b. Wavelength

c. Lightsail

d. Outposts

b. Wavelength

How well did you know this?

Not at all

Perfectly

You are explaining to a newly hired team member how to connect to an EC2 instance. Which is not a way to connect to an EC2 instance?

a. Secure Shell (SSH)

b. AWS Management Console

c. EC2 Instance Connect (EIC)

d. Lambda

How well did you know this?

Not at all

Perfectly

You need to ensure that the load balancer you select can support extreme performance and TCP protocol. Which load balancer can meet these requirements?

a. Application Load Balancer

b. Gateway Load Balancer

c. Classic Load Balancer

d. Network Load Balancer

How well did you know this?

Not at all

Perfectly

You need to suggest the cheapest pricing option for EC2 instances. There are no requirements that need to be met. What pricing option can you suggest?

a. Reserved Instances

b. Savings Plans

c. On-Demand

d. Spot Instance

How well did you know this?

Not at all

Perfectly

You need to launch a test environment quickly. Which service can accomplish this?

a. Lightsail

b. EC2

c. Lambda

d. Wavelength

a. Lightsail

How well did you know this?

Not at all

Perfectly

Which of the following statements is NOT true?

a. Amazon Lightsail is a cloud platform offering you everything you need to build an application or website.

b. Elastic Container Service and Elastic Kubernetes Service support Kubernetes.

c. With AWS Lambda, you pay only for the compute time you consume.

d. AWS Fargate is serverless.

b. Elastic Container Service and Elastic Kubernetes Service support Kubernetes.

How well did you know this?

Not at all

Perfectly

Which storage class should you choose for data that is accessed infrequently, but must be retained and accessed quickly when needed, at a lower cost?

a. S3 One Zone-IA

b. S3 Glacier

c. S3 Standard

d. S3 Standard-IA

How well did you know this?

Not at all

Perfectly

Which S3 storage class is designed for data that is accessed less frequently, but requires rapid access when needed?

a. S3 Intelligent-Tiering

b. S3 One Zone-IA

c. S3 Glacier

d. S3 Standard-IA

How well did you know this?

Not at all

Perfectly

What is Amazon FSx primarily used for?

a. Connecting on-premises storage with AWS Cloud

b. Providing fully managed third-party file systems

c. Automating and managing backups across AWS services

d. Encrypting data in transit and at rest

b. Providing fully managed third-party file systems

How well did you know this?

Not at all

Perfectly

What does AWS Storage Gateway’s Tape Gateway offer?

a. Block storage for EC2

b. High-performance file systems

c. Archiving data as virtual tapes

d. File storage directly in S3

c. Archiving data as virtual tapes

How well did you know this?

Not at all

Perfectly

Which EC2 storage option is best suited for temporary storage of information that changes frequently, such as buffers, caches, or scratch data? a. Instance store b. Amazon EBS c. AWS Storage Gateway d. Amazon EFS

a. Instance store

What feature of Amazon S3 allows you to manage user access to specific buckets and objects? a. EBS snapshots b. Cross-Region Replication c. Bucket policies d. S3 Versioning

c. Bucket policies

Which of the following is a durable, block-level storage solution designed for use with Amazon EC2 instances? a. Amazon EBS b. Amazon Glacier c. Amazon S3 d. AWS Storage Gateway

a. Amazon EBS

What is a key feature of Amazon S3? a. Offers fully managed file systems b. Serves as a virtual tape library c. Provides block-level storage for EC2 d. Stores objects in the cloud with high durability

d. Stores objects in the cloud with high durability

Which type of Amazon EBS volume offers the highest performance for mission-critical low-latency or high-throughput workloads? a. Cold HDD b. Throughput Optimized HDD c. General Purpose SSD d. Provisioned IOPS SSD

d. Provisioned IOPS SSD

Which of the following is a primary use case for AWS Backup? a. Managing file shares for Windows workloads b. Providing a hybrid cloud storage service c. Automating and centralizing backups across AWS services d. Storing data for infrequent access

c. Automating and centralizing backups across AWS services

Which feature is unique to AWS Database Migration Service (DMS a. Automatic scaling for database storage. b. Built-in data analytics capabilities. c. Continuous data replication during migration. d. In-memory data caching.

c. Continuous data replication during migration.

Amazon DynamoDB is best suited for which scenario? a. Traditional transactional processing. b. Data warehousing. c. Unstructured data with flexible data models. d. Structured data with complex queries.

c. Unstructured data with flexible data models.

Amazon RDS differs from Amazon DynamoDB in that RDS: a. Is used for real-time analytics b. Supports NoSQL data models. c. Offers in-memory data storage. d. Provides managed relational database services.

d. Provides managed relational database services.

AWS SCT is primarily used for what purpose? a. Real-time data processing. b. Schema conversion in database migration. c. Database backup and restoration. d. Data encryption and security.

b. Schema conversion in database migration.

What is a key advantage of using Amazon DynamoDB for web applications? a. Traditional relational data modeling. b. Low-latency data access. c. High transactional processing. d. Automatic data warehousing.

b. Low-latency data access.

What feature distinguishes Amazon RDS from other database services? a. It's used for real-time analytics. b. It primarily focuses on in-memory data storage. c. It is a managed relational database service. d. It is a NoSQL database service.

c. It is a managed relational database service.

Which AWS service offers an in-memory database? a. Amazon MemoryDB for Redis. b. AWS Database Migration Service. c. Amazon RDS. d. Amazon DynamoDB.

a. Amazon MemoryDB for Redis.

For which use case is Amazon MemoryDB most suitable? a. Real-time analytics and caching. b. Structured query processing. c. Long-term data storage. d. High-capacity data warehousing

a. Real-time analytics and caching.

What is the primary use of AWS Database Migration Service (DMS)? a. To migrate databases with minimal downtime. b. To enhance database performance. c. For real-time data analytics. d. To convert relational databases into NoSQL databases

To migrate databases with minimal downtime.

Which AWS service is a fully managed graph database? a. Amazon MemoryDB b. Amazon DynamoDB c. Amazon RDS d. Amazon Neptune

d. Amazon Neptune

Which of the following AWS services can be used to visualize and orchestrate a serverless application? a. Step Functions b. X-Ray c. Elastic Beanstalk d. CloudFormation

a. Step Functions

Which AWS service is used for notifications and messaging? a. Simple Notification Service (SNS) b. Extensible Messaging and Presence Protocol (XMPP) c. CloudWatch Messaging Tool d. Short Message Service (SMS)

a. Simple Notification Service (SNS)

Which service can be used to decouple the components of an application? a. X-Ray b. SQS c. CodeCommit d. CloudFormation

b. SQS

Which of the following AWS services can be used to quickly and easily deploy a Java web application, including provisioning the EC2 instances needed to run the application, configuring an Elastic Load Balancer, and even installing Apache Tomcat? a. CodeBuild b. CodePipeline c. Elastic Beanstalk d. CodeDeploy

c. Elastic Beanstalk

Which AWS service can send both text and email messages from your applications? a. Simple Queue Service (SQS) b. Simple Notification Service (SNS) c. Simple Email Service (SES) d. Simple Messenger Service

b. Simple Notification Service (SNS)

Which AWS service is used to help you build event-driven applications that respond to state changes triggered by AWS services like EC2? a. EventBridge b. Step Functions c. CloudFormation d. X-Ray

a. EventBridge

Which of the following is the correct description of a loose coupling in relation to an application? a. Different parts of the system are highly dependent on each other. b. Application components can be connected to each other but are not dependent on each other. c. If one part of the application fails, it could bring the whole system down. d. Application components are segregated and communication between components is not allowed.

b. Application components can be connected to each other but are not dependent on each other.

Which of the following are true statements about Simple Queue Service (SQS)? a. It is a service that transfers messages in an unencrypted manner. b. It is a service that only allows a single component to add messages to a queue. c. SQS is limited to a maximum message size of 64 KB. d. Standard queues do not guarantee that the exact order of messages will be preserved.

d. Standard queues do not guarantee that the exact order of messages will be preserved.

Which developer tool allows you to write code within your web browser? a. AWS CloudFormation b. AWS Cloud9 c. AWS CloudTrail d. Amazon CloudWatch

b. AWS Cloud9

Which service allows you to practice Infrastructure as Code by provisioning your AWS resources via scripted templates? a. AWS Marketplace b. AWS Elastic Beanstalk c. AWS Lambda d. AWS CloudFormation

d. AWS CloudFormation

Which of the following enables you to transport 100 PB of data to AWS using a shipping container pulled by a truck? a. Schema Conversion Tool b. Application Migration Service c. Snowmobile d. Snowball Edge

c. Snowmobile

Which service is an automated lift-and-shift service, used to migrate applications running on physical servers, virtual servers, other cloud providers, and other AWS accounts or Regions? a. Transfer Family b. Snowball Edge c. Application Migration Service d. Database Migration Services

c. Application Migration Service

You have 200 TB of data stored in your data center that needs to be securely copied to S3. Which of the following should you use to efficiently move the data to AWS? a. Transfer the data over the internet using HTTPS. b. Use AWS Snowball to move the data. c. Use Database Migration Service to transfer the data. d. Configure a VPN between your data center and AWS to securely transfer the data.

b. Use AWS Snowball to move the data.

You need to find a way to allow a third-party application to copy files to an S3 bucket that you own. The application uses SFTP to transfer files. Which AWS service would enable you to configure this? a. DataSync b. Migration Hub c. Snowball Family d. Transfer Family

d. Transfer Family

Which of the following is a physical data transfer solution that is small, portable, military grade, fits in a backpack, and could be used to transfer 10 TB of data to AWS? a. Snowmobile b. DataSync c. Transfer Family d. Snowcone

d. Snowcone

You have a large Oracle database running on physical servers located in your data center. Which service can you use to migrate this database to run in AWS? a. Database Migration Service b. Application Discovery Tool c. RDS d. Schema Conversion Tool

a. Database Migration Service

You have a large Oracle database that you would like to move to AWS. Your CFO has mandated that the company must not commission any more Oracle databases and has requested that you move this database to PostgreSQL. How can you meet this requirement? a. Use AWS DataSync to migrate the data to a new RDS for PostgreSQL database. b. Use the Database Migration Service to migrate the database to PostgreSQL. c. Use the Schema Conversion Tool to convert the database to PostgreSQL. d. Use the Application Migration Service to convert the database to PostgreSQL. Your company need

c. Use the Schema Conversion Tool to convert the database to PostgreSQL.

You have 20 PB of data to transfer from your legacy application to AWS storage. Which service is designed to let you migrate data to AWS at petabyte scale? a. Transfer Family b. Database Migration Service c. DataSync d. Snowmobile

d. Snowmobile

Your company needs to migrate all applications to AWS; however, you currently have no accurate inventory and nobody has a record of deployed applications, operating system versions, or networking requirements. Which AWS service can be used to help create an inventory so that you can start planning your migration? a. Application Discovery Service b. Snowball Edge c. Application Migration Service d. AWS DataSync

a. Application Discovery Service

You are planning a large migration of 500 physical servers to AWS. Which service can be used to orchestrate and track progress of the migration a. Transfer Family b. Schema Conversion Tool c. Database Migration Service d. Migration Hub

d. Migration Hub

You are looking for a fully managed Elasticsearch solution that can be used to analyze application logs that are stored in S3 and CloudWatch Logs. Which of the following should you select? a. Amazon Lex b. Amazon OpenSearch c. Amazon Kinesis d. Amazon QuickSight

b. Amazon OpenSearch

Which AWS service can be used to create a data catalog and perform ETL (Extract, Transform, and Load) on your data so that it can be used by your data analytics and machine learning applications? a. Amazon OpenSearch b. Redshift c. Amazon MSK (Managed Streaming for Kafka) d. AWS Glue

d. AWS Glue

Which of the following AWS services can be used to provide custom search functionality for your application, enabling users to search .doc and .ppt documents using natural language? a. Polly b. Athena c. Lex d. Kendra

d. Kendra

Which AWS service could you use to easily build a conversational chatbot to answer frequently asked support questions? a. Textract b. Lex c. Kendra d. Polly

b. Lex

Which AWS service is a business analytics service that lets you create dashboards to visualize your data so that you can make better business decisions? a. Amazon Quicksight b. Amazon OpenSearch c. Amazon Athena d. Amazon Lex

a. Amazon Quicksight

Which AWS service captures, transforms, and loads data continuously into data stores? a. AWS Glue b. QuickSight c. SageMaker d. Kinesis Data Firehose

d. Kinesis Data Firehose

You would like to use Apache Kafka to process a continuous stream of data that you need to track and analyze in real-time. You are looking for a fully managed service to avoid building and maintaining your own Kafka platform. Which AWS service can you use? a. AWS Data Exchange b. Amazon SageMaker c. Amazon MSK (Managed Streaming for Apache Kafka) d. Amazon Kinesis

c. Amazon MSK (Managed Streaming for Apache Kafka)

You need to query data stored in S3 using standard SQL queries. Which of the following AWS services will enable you to do this? a. Athena b. EMR c. Amazon Kendra d. Redshift Serverless

a. Athena

Which of the following services is a data warehousing solution, designed to handle petabytes of data used for analytics processing (OLAP)? a. Redshift b. EMR c. OpenSearch d. Kinesis

a. Redshift

Which AWS service can be used to perform sentiment analysis on customer feedback data? a. Amazon Translate b. Amazon Transcribe c. Amazon Comprehend d. Amazon Textract

c. Amazon Comprehend

Which of the following best describes the principle of least privilege? a. You should limit the number of IAM users in your account to only those strictly essential. b. Always enable multi-factor authentication on the root user. c. You should only use managed services to avoid operational overhead. d. You should grant only permissions needed to complete a task.

d. You should grant only permissions needed to complete a task.

You want to give your EC2-based application access to secrets such as database credentials and passwords, and you want those credentials to rotate automatically. Which service should you use? a. Attach a role-based policy to the EC2 instance to give it access to an S3 bucket containing the secrets. b. Parameter Store c. Secrets Manager d. CloudHSM

c. Secrets Manager

Which service can be used to scan for network and software vulnerabilities on your EC2 instances? a. Detective b. GuardDuty c. Trusted Advisor d. Inspector

d. Inspector

A regulator has requested documentation that proves your AWS solutions can meet GDPR compliance. What service can help with this? a. AWS Artifact b. Security Hub c. AWS Control Tower d. AWS Cloud Security

a. AWS Artifact

Your company has decided to split its workloads into multiple AWS accounts, but it still wants to be able to take advantage of consolidated billing. How can it accomplish this? a. Use AWS Organizations to manage multiple accounts. b. Use IAM Identity Center to centrally manage AWS account access. c. Use Security Hub to centralize billing findings in one account. d. Isolate the workloads by using tags.

a. Use AWS Organizations to manage multiple accounts.

Your company wants to use machine learning to assist in monitoring for sensitive data such as PII (personally identifiable information) in their S3 buckets. How can they most easily achieve this a. S3 automatically scans for and detects sensitive information such as PII. b. Enable Detective c. Enable GuardDuty d. Use Macie

d. Use Macie

Which AWS service will protect your AWS resources from DDoS attacks? a. AWS Shield b. Network firewall c. AWS WAF d. Security Hub

a. AWS Shield

What can you use to assign granular permissions to users, roles, and groups? a. KMS b. Security Token Service (STS) c. Config Rules d. IAM Policies

d. IAM Policies

Your company want to leverage machine learning to automatically detect security events across your AWS environment. How can they achieve this with the lowest operational overhead? a. Trusted Advisor b. Enable Amazon Inspector c. Enable GuardDuty d. Enable Detective

c. Enable GuardDuty

Your company has a batch workload that has to run at some point during the last week of each month, though the exact timing is flexible. It is designed to run on EC2 instances. It does not harm the completion of the batch process if an instance starts or stops unexpectedly. How can you achieve the most cost savings for this workload? a. Use Convertible Reserved Instances. b. Use Scheduled Reserved Instances. c. Use Spot Instances. d. Use Standard Reserved Instances.

c. Use Spot Instances.

What is the easiest way to ensure that you S3 objects are encrypted at rest? a. S3 buckets are server-side encrypted by default with SSE-S3 managed keys. b. Encrypt the data at rest by applying KMS managed keys. c. Encrypt the S3 bucket with Secrets Manager. d. Use Certificate Manager to provision SSL/TLS certificates to encrypt the S3 bucket.

a. S3 buckets are server-side encrypted by default with SSE-S3 managed keys.

Which AWS service helps match you with AWS Certified freelancers and consultants? a. AWS Managed Services b. AWS Professional Services c. AWS IQ d. AWS Activate

c. AWS IQ

Which billing service should be used to provide a dashboard that includes projections of this month's AWS spending by service? a. Cost Explorer b. Pricing Calculator c. AWS Budgets d. Cost and Usage Reports

a. Cost Explorer

Which of the following statements about the Business Support plan is true? a. It is the cheapest support plan that includes receiving guidance from AWS Support. b. It is the cheapest support plan that includes the full set of Trusted Advisor checks as well as 24/7 access to the phone or chat support team. c. It is the cheapest support plan that includes guidance from Technical Account Managers d. It is the cheapest support plan that includes white glove, concierge-like billing support.

b. It is the cheapest support plan that includes the full set of Trusted Advisor checks as well as 24/7 access to the phone or chat support team.

Which S3 storage class is best for objects that are accessed extremely infrequently (once per quarter or less), but still require millisecond retrieval time? a. Glacier Instant Retrieval b. Glacier Deep Archive c. Glacier Flexible Retrieval d. S3 Standard-IA

a. Glacier Instant Retrieval

Which of the following is NOT one of the six advantages of cloud computing? a. Trade fixed expense for variable expense. b. Benefit from massive economies of scale. c. Stop guessing capacity d. Minimize the cost of compute.

d. Minimize the cost of compute.

Which of the following is NOT a benefit of AWS Organizations? a. Automate best practices for multi-account management. b. Consolidated Billing. c. Centralize budgets and cost analysis in your multi-account environment. d. Share Reserved Instance capacity across your Organization

a. Automate best practices for multi-account management.

Which S3 storage class class allows you to take advantage of cost-saving storage classes, even if you're not sure how often your objects will be accessed? a. S3 Lifecycle Management b. S3 Standard c. S3 Intelligent Tiering d. S3 Storage Lens

c. S3 Intelligent Tiering

Your company wants to do extremely detailed analysis of cloud costs broken down by account, service, product, environment, and team, among other custom categories. How can they achieve this? a. Group resources for each custom category into individual AWS accounts and do detailed cost analysis with Cost Explorer. b. Group resources for each custom category into individual AWS accounts and do detailed cost analysis with data from Cost and Usage Reports. c. Create resource groups using tags and do detailed cost analysis with data from Cost and Usage Reports. d. Create resource groups using tags and do detailed cost analysis with Cost Explorer.

c. Create resource groups using tags and do detailed cost analysis with data from Cost and Usage Reports.

Your company has a business-critical application running on EC2 instances that must always be running. This workload is known and constant, and will not change in upcoming years. What is the best way to reduce the cost of these instances? a. Use Convertible Reserved Instances b. Use Spot Instances c. Use Scheduled Reserved Instances d. Use Standard Reserved Instances.

d. Use Standard Reserved Instances.