Cloud Partitioner Test 5 Flashcards

1
Q

What types of caching solutions are available in Amazon ElastiCache? (Select TWO.)

a. Amazon ElastiCache for Redis
b. Amazon ElastiCache for Apache Ignite
c. Amazon ElastiCache for Serverless
d. Amazon ElastiCache for Apache Kafka
e. Amazon ElastiCache for Memcached

A

a. Amazon ElastiCache for Redis
e. Amazon ElastiCache for Memcached

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which AWS service provides tracing and monitoring capabilities for your Lambda function?

a. Amazon Macie
b. AWS X-Ray
c. AWS Shield
d. Amazon Inspector

A

b. AWS X-Ray

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A developer needs to collect and process large streams of data records in real-time. Which AWS service should be used for this task?

a. AWS Glue
b. AWS CloudTrail
c. Amazon CloudWatch
d. Amazon Kinesis Data Streams

A

d. Amazon Kinesis Data Streams

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

A company plans to use AWS to send email updates for their new products through SMTP. Which service should they use?

a. Amazon SNS
b. Amazon SES
c. Amazon SWF
d. Amazon SQS

A

b. Amazon SES

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which service should you use to run complex analytic queries against terabytes to petabytes of structured data?

a. Amazon Redshift
b. Amazon S3
c. Amazon DynamoDB
d. Amazon Neptune

A

a. Amazon Redshift

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which of the following is an AWS service that provides secure key storage and cryptographic operations, such as encryption and decryption, hashing, and digital signing?

a. AWS Inspector
b. AWS Secrets Manager
c. AWS CloudHSM
d. AWS GuardDuty

A

c. AWS CloudHSM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which of the following provides a collection of technical resources to help you build more effectively and efficiently in the AWS Cloud?

a. AWS Architecture Center
b. AWS Config
c. AWS Organizations
d. AWS Trusted Advisor

A

a. AWS Architecture Center

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which is a fully managed continuous integration service that compiles source code, runs tests, and produces software packages that are ready to deploy?

a. AWS CodeCommit
b. AWS CodePipeline
c. AWS CodeBuild
d. AWS CodeDeploy

A

c. AWS CodeBuild

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A company is planning to launch an Amazon EC2 instance with an attached EBS volume in a default configuration. You will be charged for your EBS storage only when your instance is in which instance state?

a. Terminated
b. Stopped
c. Running
d. Pending

A

b. Stopped

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

A customer plans to use Amazon S3 to store their less frequently accessed data and reduce their costs. The data is re-creatable and will be used as a secondary backup. They also require S3’s low latency and high throughput performance. Which of the following storage classes is the cheapest and most suitable option?

a. S3 One Zone-IA
b. S3 Glacier Flexible Retrieval
c. S3 Glacier Deep Archive
d. S3 Standard

A

a. S3 One Zone-IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which of the following are the capabilities provided by Amazon Route 53? (Select TWO.)

a. Web traffic filtering
b. DNS Resolution
c. Domain Registration
d. DDoS Protection
e. Resource metrics collection

A

b. DNS Resolution
c. Domain Registration

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which AWS services should you use to upload SSL certificates? (Select TWO.)

a. AWS Systems Manager
b. AWS IAM
c. AWS Certificate Manager
d. AWS KMS
e. AWS License Manager

A

b. AWS IAM
c. AWS Certificate Manager

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

A company plans to encrypt and manage its own encryption keys using a single-tenant hardware security module. The company must also have exclusive control over how its keys are used via an authentication mechanism independent from AWS.

Which service would meet that requirement?

a. Amazon S3
b. AWS CloudHSM
c. AWS KMS
d. Amazon Guard​Duty

A

b. AWS CloudHSM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following services allows you to quickly query data in S3 using SQL without having to set up and manage any servers?

a. AWS Step Functions
b. Amazon Athena
c. Amazon SQS
d. AWS Lambda

A

b. Amazon Athena

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the following support plans provides access to the AWS Personal Health Dashboard?

a. Developer, Business, Enterprise
b. Basic, Developer, Business
c. Basic, Business, Enterprise
d. Basic, Developer, Business, Enterprise

A

d. Basic, Developer, Business, Enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which feature will customers have access to by using the AWS Business Support plan?

a. Technical Account Manager
b. Concierge Support Team
c. Architecture Support
d. Access to online self-paced labs

A

c. Architecture Support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

A company needs access to the full set of monitoring checks in AWS Trusted Advisor to ensure that its cloud environment is well-architected.

What is the MOST cost-effective support plan that the company should avail of?

a. Enterprise
b. Developer
c. Basic
d. Business

A

d. Business

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

A customer needs to store objects that are frequently accessed. To help the customer save costs, you must select a storage service free from retrieval charges. Which of the following S3 storage classes would meet this requirement? (Select TWO.)

a. S3 Glacier Deep Archive
b. S3 Standard-IA
c. S3 Intelligent Tiering
d. S3 One Zone-IA
e. S3 Standard

A

c. S3 Intelligent Tiering
e. S3 Standard

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A startup company plans to create a user management and authentication service for its customers. The users need to sign in through an external identity provider to access their web and mobile applications. Which AWS service should they use to meet this requirement?

a. AWS Artifact
b. AWS IAM
c. Amazon Macie
d. Amazon Cognito

A

d. Amazon Cognito

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

A company plans to restrict access to content served from an Amazon S3 bucket using Amazon CloudFront. Which of the following features can you use to satisfy this requirement?

a. Sticky Sessions
b. Origin Access Identity
c. Server Name Indication
d. Service Control Policies

A

b. Origin Access Identity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which of the following best describes Amazon Redshift?

a. A NoSQL database service.
b. A messaging and queuing service.
c. A managed data warehouse service.
d. An Online Transaction Processing (OLTP) database.

A

c. A managed data warehouse service.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which of the following benefits do AWS Organizations provide? (Select TWO.)

a. Ability to create IAM Roles
b. Records AWS API calls
c. Automate AWS account creation and management
d. Allow Active Directory access controls
e. Centrally manage policies across multiple AWS accounts

A

c. Automate AWS account creation and management
e. Centrally manage policies across multiple AWS accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A company needs to store frequently accessed data in Amazon S3. How will AWS bill you for storing objects in your S3 buckets?

a. Per GB
b. By Instance Type
c. Per Hour or Second
d. Per Unique File Type

A

a. Per GB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which AWS team can assist you when your systems are impacted by AWS resources engaging in abusive activities such as phishing, malware, spam, and denial of service (DoS) or distributed denial of service (DDoS) incidents?

a. AWS Trust & Safety
b. AWS Support API
c. Architecture Support
d. Concierge Support

A

a. AWS Trust & Safety

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

An e-commerce company launches several EC2 instances to run their web application. Which of the following services can be used to help ensure security compliance? (Select TWO.)

a. Amazon MQ
b. Amazon Inspector
c. AWS OpsWorks
d. AWS CloudFormation
e. AWS Trusted Advisor

A

b. Amazon Inspector
e. AWS Trusted Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

A developer needs to install their application in Docker containers. Which of the following services eliminates the need to manage containers manually?

a. Amazon ECS
b. AWS Fargate
c. Amazon EC2
d. Amazon FSx

A

b. AWS Fargate

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which of the following AWS resources is a zonal service? (Select TWO.)

a. Amazon Route 53
b. AWS IAM
c. Amazon EBS
d. Amazon EC2
e. Amazon S3

A

c. Amazon EBS
d. Amazon EC2

28
Q

A company plans to deploy an enterprise web application that will be accessed globally. The architecture must provide the highest redundancy and fault tolerance to avoid user disruptions.

How should the Amazon EC2 instances be deployed to meet the above requirements?

a. Deploy to multiple Availability Zones across three AWS Regions.
b. Deploy to three AWS Regions with one Availability Zone for each region.
c. Deploy to multiple Availability Zones in a single AWS Region.
d. Deploy in a single Availability Zone in a single AWS Region.

A

a. Deploy to multiple Availability Zones across three AWS Regions.

29
Q

Which AWS service allows you to easily manage access to multiple AWS accounts and provide users with single login access?

a. Amazon SES
b. Amazon SWF
c. AWS IAM Identity Center
d. Amazon SQS

A

c. AWS IAM Identity Center

30
Q

Which service lets you create rules to filter web traffic based on conditions that include IP addresses, HTTP headers, or custom URIs?

a. AWS Trusted Advisor
b. AWS WAF
c. Network ACLs
d. Security Group

A

b. AWS WAF

31
Q

Which of the following Amazon RDS features should you use to achieve high availability with automatic failover?

a. DB Snapshots
b. RDS Read Replica
c. RDS Multi-AZ Deployments
d. RDS Performance Insights

A

c. RDS Multi-AZ Deployments

32
Q

A team of developers needs to run hundreds of thousands of fully managed batch computing jobs on AWS. Which of the following service should they choose?

a. AWS Fargate
b. AWS Batch
c. AWS Elastic Beanstalk
d. AWS Lambda

A

b. AWS Batch

33
Q

The Chief Technology Officer wants to control the use of services across multiple AWS accounts using AWS Organizations. Which of the following must be used to satisfy this requirement?

a. AWS Systems Manager
b. Resource-based policy
c. Service Control Policy
d. AWS Secrets Manager

A

c. Service Control Policy

34
Q

A company plans to work with a third-party provider to deploy a new application that will be accessed globally. You need to delegate permissions to access resources without using permanent credentials.

Which of the following should you use?

a. IAM User
b. Service Control Policy
c. IAM Role
d. IAM Group

A

c. IAM Role

35
Q

Which of the following AWS services helps you coordinate the components of distributed applications and microservices using visual workflows?

a. AWS Batch
b. Amazon API Gateway
c. Amazon Rekognition
d. AWS Step Functions

A

d. AWS Step Functions

36
Q

Which configuration management service in AWS helps you configure applications and manage resources in your cloud architecture by using Puppet or Chef?

a. AWS Config
b. AWS Systems Manager
c. AWS Management Console
d. AWS OpsWorks

A

d. AWS OpsWorks

37
Q

Which AWS service can automatically detect a large and growing list of sensitive data types, including personally identifiable information (PII) such as names, addresses, and credit card numbers?

a. Amazon Rekognition
b. Amazon Macie
c. Amazon CloudSearch
d. Amazon CloudWatch

A

b. Amazon Macie

38
Q

What service will allow you to safely store and automatically rotate database secrets for services such as Amazon RDS and Amazon Redshift?

a. AWS Systems Manager Parameter Store
b. AWS Artifact
c. AWS KMS
d. AWS Secrets Manager

A

d. AWS Secrets Manager

39
Q

The root AWS account of your company was compromised and fortunately, there was no major data leak. What should you do to prevent this from happening again? (Select TWO.)

a. Grant full access for your IAM users
b. Enable MFA
c. Share your root user access keys
d. Disable the rotation of credentials
e. Configure a strong password policy for your users

A

b. Enable MFA
e. Configure a strong password policy for your users

40
Q

Which of the following is a benefit of using AWS Global Accelerator?

a. Reduced server costs in running AWS Services
b. Provides a highly durable data store in AWS
c. Accelerates server performance of your Amazon EC2 instances globally
d. Decreased latency in accessing applications hosted in AWS

A

d. Decreased latency in accessing applications hosted in AWS

41
Q

Which of the following pricing options will automatically reduce your cost on any EC2 instance usage regardless of region, instance family, size, OS, or tenancy?

a. Dedicated Hosts
b. Savings Plans
c. On-Demand Instances
d. Reserved Instances

A

b. Savings Plans

42
Q

The security team needs to automate security vulnerability assessments throughout their development and production environments. Which service should they use to comply with this requirement?

a. AWS WAF
b. Amazon Inspector
c. AWS Shield
d. AWS Config

A

b. Amazon Inspector

43
Q

What is the cloud computing model for services like Amazon RDS and Amazon ECS?

a. SaaS
b. IaaS
c. PaaS
d. FaaS

A

c. PaaS

44
Q

A Systems Administrator needs to create an account that will be used for long-term programmatic access to AWS. Which of the following IAM entities should be used to comply with this requirement?

a. IAM User
c. IAM Group
d. IAM Policy
e. IAM Role

A

a. IAM User

45
Q

Which of the following AWS services does Amazon EBS use natively for encryption?

a. AWS KMS
b. AWS WAF
c. Amazon S3 SSE
d. AWS Shield

A

a. AWS KMS

46
Q

Which of the following services can establish a connection from your on-premises environment and resources hosted on AWS? (Select TWO.)

a. Amazon Connect
b. AWS Directory Service
c. AWS Site-to-Site VPN
d. AWS Direct Connect
e. AWS Snowcone

A

c. AWS Site-to-Site VPN
d. AWS Direct Connect

47
Q

Which of the following services connects VPCs and on-premises networks through a central hub?

a. AWS Direct Connect
b. AWS Transit Gateway
c. Amazon VPC Peering
d. AWS Client VPN

A

b. AWS Transit Gateway

48
Q

A customer needs to establish a private connection between two virtual private clouds (VPCs) without using additional software. Which of the following should they use?

a. AWS Direct Connect
b. AWS Site-to-Site VPN
c. VPC Peering
d. Amazon Connect

A

c. VPC Peering

49
Q

Which of the following services displays the general status of all available AWS Services and informs you if a service is experiencing availability issues?

a. AWS Config Dashboard
b. AWS Trusted Advisor
c. AWS Health Dashboard
d. Amazon CloudWatch

A

c. AWS Health Dashboard

50
Q

An e-commerce company is currently undergoing a technological transformation to modernize its infrastructure and transfer its operations to the cloud. The company’s Chief Technology Officer (CTO) has decided to adopt Amazon Web Services (AWS) as its cloud service provider and intends to follow the AWS Cloud Adoption Framework (CAF) methodology to achieve this goal.

Which perspective of the AWS CAF would be most helpful in ensuring successful outcomes in this scenario?

a. Governance
b. Platform
c. People
d. Business

A

b. Platform

51
Q

In AWS, _______ is a managed service that enables you to easily create and control the encryption keys used for cryptographic operations without having to manage your own hardware module.

a. AWS CloudHSM
b. AWS IAM
c. AWS KMS
d. AWS Systems Manager

A

c. AWS KMS

52
Q

A company is using Cost Explorer to gain an understanding of its cost trends in AWS. How many months of historical data can Cost Explorer store and display?

a. 6 Months
b. 15 Months
c. 12 Months
d. 3 Months

A

c. 12 Months

53
Q

A developer needs to set up a message broker service for Apache ActiveMQ for its enterprise application running in AWS. Which service should be used in this scenario?

a. Amazon Chime
b. Amazon WorkMail
c. Amazon Simple Email Service
d. Amazon MQ

A

d. Amazon MQ

54
Q

What is the main benefit of deploying instances to multiple availability zones?

a. Cost Optimization
b. Agility
c. Security
d. High Availability

A

d. High Availability

55
Q

Which of the following AWS services allows you to query data directly in Amazon S3? (Select TWO.)

a. Amazon MQ
b. Amazon Elasticache
c. Amazon Neptune
d. Amazon Redshift Spectrum
e. Amazon Athena

A

d. Amazon Redshift Spectrum
e. Amazon Athena

56
Q

Which AWS service provides automated reference deployments for key workloads in AWS via CloudFormation templates?

a. AWS OpsWorks
b. AWS Config
c. AWS Quick Starts
d. AWS Systems Manager Automation

A

c. AWS Quick Starts

57
Q

Which of the following services enables you to limit access to a portfolio of predefined AWS resources?

a. AWS Service Catalog
b. Amazon Grafana
c. AWS Config
d. Amazon Pinpoint

A

a. AWS Service Catalog

58
Q

Which of the following provides the key concepts, design principles, and architectural best practices for designing and running workloads in the cloud?

a. AWS Reference Architecture Diagrams
b. AWS Shared Responsibility Model
c. AWS Well-Architected Framework
d. AWS Trusted Advisor

A

c. AWS Well-Architected Framework

59
Q

Which service enables you to set up directories in the AWS cloud, or connect your AWS resources with an existing on-premises Microsoft Active Directory?

a. AWS Direct Connect
b. AWS Directory Service
c. Amazon Connect
d. AWS Site-to-Site VPN

A

b. AWS Directory Service

60
Q

A customer plans to speed up the time it takes to download data between its clients and S3 bucket over long distances. Which service would meet this requirement?

a. Amazon Kinesis
b. AWS Elastic Load Balancing (ELB)
c. Amazon Route 53
d. Amazon S3 Transfer Acceleration

A

d. Amazon S3 Transfer Acceleration

61
Q

A high-performance computing (HPC) application needs a storage service in AWS that can be used as a centralized Windows File Server for multiple EC2 instances.

Which of the following should they use?

a. Amazon EBS
b. Amazon EFS
c. Amazon S3
d. Amazon FSx

A

d. Amazon FSx

62
Q

What is the MOST affordable AWS Support plan that provides users access to the AWS Support API?

a. Basic
b. Enterprise
c. Developer
d. Business

A

d. Business

63
Q

A developer plans to build a serverless application with a key-value database. Which of the following AWS services can be used to fulfill this requirement? (Select TWO.)

a. Amazon ECR
b. Amazon RDS
c. Amazon DynamoDB
d. Amazon SageMaker
e. AWS Lambda

A

c. Amazon DynamoDB
e. AWS Lambda

64
Q

Which of the following cost management capabilities does AWS immediately provide you even before you create your AWS account?

a. Allows you to request billing discounts in exchange for a committed level of instance usage.
b. Allows you to estimate your monthly spending in AWS.
c. Allows you to organize your resources according to your own cost allocation tagging strategy.
d. Allows you to create monthly reports on the cost behavior of your resources.

A

b. Allows you to estimate your monthly spending in AWS.

65
Q

An organization is mandated to secure its Amazon S3 bucket and ensure that it cannot have any public objects to satisfy the compliance requirements.

What S3 feature should be used to easily accomplish this?

a. Network ACL
b. Security Groups
c. VPC Endpoint
d. Block Public Access

A

d. Block Public Access