Cloud Partitioner Test 3 Flashcards
You wish to host a static website of your own in AWS at a low cost. Which service should be used for this purpose?
a.Amazon S3 Standard
b.Amazon S3 Infrequent Access
c.Amazon EC2
d.Amazon Elastic Load Balancer
a.Amazon S3 Standard
Which of the following is true if you store your data in AWS?
a.All data are stored durably and redundantly in different AZs
b.AWS has the right to review any data stored for potential threats
c.Encryption is required for all data at rest and in transit
d.You are the owner of the data you store in AWS
d.You are the owner of the data you store in AWS
Which of the following is needed to retrieve a list of your EC2 instances using the AWS CLI?
a.Username and password
b.MFA
c.SSH keys
d.Access Keys
d.Access Keys
A Cloud Architect in a large e-commerce company manages the company’s AWS environment. One day, the Cloud Architect was notified that one of their EC2 instances had been running non-stop for over 30 days, and its usage costs had skyrocketed. The Cloud Architect needs to identify the root cause of the issue and find a way to reduce the usage costs of the instance.
Which of the following AWS services can help the Cloud Architect identify the issue and check if their running resources conform to AWS best practices?
a.AWS Trusted Advisor
b.Amazon CloudWatch
c.AWS Config
d.AWS IAM
a.AWS Trusted Advisor
Which of the following security group rules are valid? (Select TWO.)
a.Outbound HTTPS rule with hostname as destination
b.Inbound HTTP rule with security group ID as source
c.Outbound MYSQL rule with IP address as source
d.Inbound TCP rule with instance ID as source
e.Inbound RDP rule with an address range as source
b.Inbound HTTP rule with security group ID as source
e.Inbound RDP rule with an address range as source
You are tasked to simplify the migration of your databases from your on-premises server to AWS. Which service fits best for this purpose?
a.AWS Snowball
b.AWS Database Migration Service
c.AWS Snowmobile
d.AWS Server Migration Service
b.AWS Database Migration Service
Which of the following is true about the enhanced technical support response times of the Enterprise support plan in AWS? (Select TWO.)
a.Provides a 48-hour response time support for general guidance
b.Provides a 15-minute response time support if your business-critical system goes down
c.Provides a 1-hour response time support if your production system goes down
d.Provides a 2-hour response time support if your production system got impaired
e.Provides a 12-hour response time support for general guidance
b.Provides a 15-minute response time support if your business-critical system goes down
c.Provides a 1-hour response time support if your production system goes down
Which of the following is the responsibility of the customer in the AWS cloud? (Select TWO.)
a.Disposal of disk drives
b.Ensuring that AWS services comply with the standards required of them
c.Managing data stored in the AWS resources
d.Upgrading chipsets to the latest commercially available product
e.Managing users in their AWS account
c.Managing data stored in the AWS resources
e.Managing users in their AWS account
Which of the following practices demonstrate operational excellence in AWS cloud? (Select TWO.)
a.Perform monthly game days on your AWS environment
b.Monitor EC2 metric consumption and adjust the instance type accordingly
c.Launching your infrastructure manually via the Console
d.Use serverless applications such as AWS Lambda
e.Deploy small, incremental changes to your production servers using AWS CodeDeploy
a.Perform monthly game days on your AWS environment
e.Deploy small, incremental changes to your production servers using AWS CodeDeploy
What service allows you to create alarms that notify you when EC2 CPU Utilization thresholds are breached?
a.Amazon CloudWatch
b.AWS Auto Scaling
c.AWS Config
d.Amazon SNS
a.Amazon CloudWatch
What is the main benefit you receive when moving to serverless from non-serverless compute services?
a.Serverless removes management overhead so you can focus on your applications instead
b.You get overall cheaper costs compared to using non-serverless services
c.Serverless are highly available so you don’t have to worry about downtime
d.Security is fully managed for you by the service provider
a.Serverless removes management overhead so you can focus on your applications instead
Which service in AWS allows you to host your own Puppet Enterprise infrastructure?
a.AWS Service Catalog
b.AWS Opsworks
c.AWS CloudFormation
d.AWS Elastic Beanstalk
b.AWS Opsworks
Which type of Elastic Load Balancer allows you to forward the incoming request to a target group with a Lambda function as a target?
a.Application Load Balancer
b.Classic Load Balancer
c.Gateway Load Balancer
d.Network Load Balancer
a.Application Load Balancer
Which of the following AWS services are used to secure your VPC network? (Select TWO.)
a.Network ACL
b.CloudFront
c.Application load balancer
d.IAM
e.Security group
a.Network ACL
e.Security group
Which service in AWS protects your resources from common DDoS attacks in a proactive manner?
a.AWS Shield
b.Security groups
c.AWS WAF
d.Amazon Inspector
a.AWS Shield
What service acts as a firewall for your EC2 instances?
a.Network ACL
b.Security Group
c.VPC
d.Elastic Network Interface
b.Security Group
You noticed that you cannot reach one of your EC2 web servers behind an ELB whenever you enter the DNS name of your load balancer. Which of the following should you first check to gain more insight on the issue?
a.AWS CloudTrail
b.Amazon CloudWatch
c.AWS Config
d.ELB Health Check
d.ELB Health Check
A startup is recently migrated its infrastructure to the AWS cloud and wants to ensure that users can access the right resources.
Which IAM service is responsible for enforcing privileges and access controls in your AWS environment?
a.IAM Role
b.IAM Group
c.IAM Policy
d.IAM User
c.IAM Policy
In which of the following occasions should you use the Amazon SQS in your application system? (Select TWO.)
a.When your application requires the use of industry-standard messaging protocols for message delivery
b.When you have to automate certain tasks in your workflow
c.If you need to decouple certain parts of your system for better fault tolerance
d.If you need to submit push notifications to your event subscribers
e.If you require a durable storage for your application events or messages
c.If you need to decouple certain parts of your system for better fault tolerance
e.If you require a durable storage for your application events or messages
Which AWS service lets you provision either Windows or Linux desktops in just a few minutes and can scale easily to provide thousands of desktops to workers?
a.AWS Systems Manager
b.AWS Organizations
c.AWS Cloud9
d.Amazon Workspaces
d.Amazon Workspaces
A Software Engineer is working on a new project for the company. The project entails creating a web application with the PHP framework and releasing it to the AWS Cloud. Given the company’s limited resources and the Software Engineer’s tight deadline, the Software Engineer must devise a plan for quickly deploying the application to AWS while avoiding the time-consuming process of setting up and configuring the infrastructure.
Which of the following service will allow the Software Engineer to quickly deploy their application into the AWS Cloud without building or launching the individual resources themselves?
a.Amazon EBS
b.Amazon EKS
c.AWS Elastic Beanstalk
d.Amazon ECS
c.AWS Elastic Beanstalk
Which of the following AWS well-architected pillars discusses the use of the right computing resources to meet demand levels even as the demand changes and technologies evolve?
a.Operational Excellence
b.Performance Efficiency
c.Reliability
d.Cost optimization
b.Performance Efficiency
Which of the following should you set up in order to connect your AWS VPC network to your local network via an IPsec tunnel?
a.An on-premises NAT gateway device connected to your VPC’s Internet Gateway
b.A VPN gateway in your VPC connected to the Customer Gateway in your on-premises network
c.VPC Peering connection between your on-premises network and VPC
d.A NAT gateway in your private subnet connected to your on-premises network
b.A VPN gateway in your VPC connected to the Customer Gateway in your on-premises network
Which of the following is a serverless compute service of AWS?
a.Amazon Aurora
b.AWS Lambda
c.Amazon DynamoDB
d.Amazon Athena
b.AWS Lambda
A company is using Amazon S3 to store various types of documents in a single bucket, and different teams frequently access the stored objects. If the document is accidentally overwritten or deleted, the data must be recoverable. Which of the following S3 features should they use?
a.S3 Versioning
b.S3 Event Notifications
c.S3 Glacier Vault Lock
d.S3 Lifecycle
a.S3 Versioning
The use of multi-threading in your Amazon S3 requests via the Multipart Upload API is an example of which AWS cloud best practice?
a.Decouple your components.
b.Implement elasticity.
c.Think parallel.
d.Allow for evolutionary architectures.
c.Think parallel.