Cloud Practitioner - PRACTICE 5 Flashcards
Which AWS service can be used to prepare and load data for analytics using an extract, transform and load (EL) process?
- AWS Lambda
- AWS Glue
- Amazon EMR
- Amazon Athena
AWS Glue
AWS Glue is a fully managed extract, transform, and load (ETL) service that makes it easy for customers to prepare and load their data for analytics.
Which AWS service can be used to send automated notifications to HTTP endpoints?
- Amazon SQS
- Amazon SWF
- Amazon SNS
- Amazon SES
Amazon Simple Notification Service
(Amazon SNS) is a web service that makes it easy to set up, operate, and send notifications from the cloud. SNS can be used to send automated or manual notifications to email, mobile (SMS), SQS, and HTTP endpoints.
Which of the following constitute the five pillars for the AWS Well-Architected Framework? (Select TWO.)
- Operational excellence, security,
and reliability - Operational excellence, elasticity and
scalability - Cost prioritization, and cost optimization
- Data consistency, and cost optimization
- Performance efficiency, and cost optimization
Operational excellence, security, and reliability & Performance efficiency, and cost optimization
The five pillars of the AWS Well-Architected Framework are operational excellence, security, reliability, performance efficiency, and cost optimization
Assuming you have configured them correctly, which AWS services can scale automatically without intervention? (Select TWO.)
- Amazon RDS
- Amazon EC2
- Amazon S3
- Amazon DynamoDB
- Amazon EBS
Amazon S3 & Dynamo DB
Both S3 and DynamoDB automatically scale as demand dictates. In the case of DynamoDB you can either configure the on-demand or provisioned capacity mode. With on-demand capacity mode DynamoDB automatically adjusts the read and write throughput for you.
Which AWS components aid in the construction of fault-tolerant
applications? (Select TWO.)
- Elastic IP addresses
- ARNs
- AMIs
- Tags
- Block device mappings
Elastic IP addresses & AMIs
Elastic IP addresses can be easily remapped between EC2 instances in the event of a failure. Amazon Machine Images (AMIs) can be used to quickly launch replacement instances when there is a failure
A company wants to utilize a pay as you go cloud model for all of their applications without CAPEX costs and which is highly elastic. Which cloud delivery model will suit them best?
- Public
- Private
- Hybrid
- On-premise
Public
The public cloud is offered under a purely pay as you go model (unless you choose to reserve), and allows companies to completely avoid CAPEX costs. The public cloud is also highly elastic so companies can grow and shrink the applications as demand changes.
Which of the following are advantages of using the AWS cloud computing over legacy IT? (Select TWO.)
- You are able to pass responsibility for the availability of your application to AWS
- You don’t need to worry about over
provisioning as you can elastically scale - You don’t need to patch your operating
systems - You can bring new applications to market faster
- You can bring services closer to your end users
You don’t need to worry about over provisioning as you can elastically scale & You can bring new applications to market faster
With cloud computing you no longer need to guess about capacity as you can elastically scale. This means you don’t end up overprovisioning but instead react to the load on your servers.
Which AWS services form the app-facing services of the AWS serverless infrastructure? (Select TWO.)
- AWS Step Functions
- AWS Lambda
- Amazon API Gateway
- Amazon DynamoDB
- Amazon EFS
AWS Lambda & Amazon API Gateway
AWS Lambda and Amazon API Gateway are both app-facing components of the AWS Serverless infrastructure AWS Step Functions is an orchestration service
What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container Service (ECS)?
- Elastic Container Registry
- ECS Container Registry
- Docker Container Registry
- Docker Image Repository
Amazon Elastic Container Registry
Amazon Elastic Container Registry (ECR) is a fully- managed Docker container registry that makes it easy for developers to store, manage, and deploy Docker container images.
What are two benefits of using AWS Lambda? (Select TWO.)
- No servers to manage
- Integrated snapshots
- Continuous scaling (scale out)
- Flexible operating system choices
- Open source software
No servers to manage & Continuous scaling (scale out)
With AWS Lambda you don’t have any servers to manage (serverless). Lambda functions scale out rather than up running multiple invocations of the function in parallel.
With which service can a developer upload code using a ZIP or WAR file and have the service handle the end-to-end deployment of the resources?
- AWS CodeDeploy
- AWS Elastic Beanstalk
- Amazon ECS
- AWS CodeCommit
AWS Elastic Beanstalk
AWS Elastic Beanstalk can be used to quickly deploy and manage applications in the AWS Cloud. Developers upload applications and Elastic Beanstalk handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring.
Which service can you use to monitor, store and access log files generated by EC2 instances and on-premises servers?
- AWS CloudTrail
- AWS Ops Works
- Amazon CloudWatch Logs
- Amazon Kinesis
Amazon CloudWatch Logs
You can use Amazon CloudWatch Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, Route 53, and other sources. You can then retrieve the associated log data from CloudWatch Logs.
What offerings are included in the Amazon Lightsail product set? (Select TWO.)
- Virtual Private Server
- NoSQL database
- Managed MySQL database
- Object storage
- Serverless functions
Virtual Private Server & Managed MySQL database
Which AWS service is part of the suite of “serverless” services and runs code as functions?
- Amazon ECS
- Amazon EKS
- AWS Lambda
- AWS CodeCommit
AWS Lambda
AWS Lambda is a serverless compute service that runs your code in response to events and automatically manages the underlying compute resources for you. The code you run on AWS Lambda is called a “Lambda function”
To reward customers for using their services, what are two ways AWS reduce prices? (Select TWO.)
- Volume based discounts when you use more services
- Reduction in inbound data transfer charges
- Reduced cost for reserved capacity
- Discounts for using a wider variety of services
- Removal of termination fees for customers who spend more
Volume based discounts when you use more services & Reduced cost for reserved capacity
Which type of Amazon RDS automated backup allows you to restore the database with a granularity of as little as 5 minutes?
- Snapshot backup
- Full backup
- Incremental backup
- Point-in-time recovery
Point-in-time recovery
You can restore an Amazon RDS database instance to a specific point in time with a granularity of 5 minutes. Amazon RDS uses transaction logs which it uploads to Amazon S3 to do this.
Which DynamoDB feature provides in-memory acceleration to tables that result in significant performance improvements?
- Amazon ElastiCache
- Amazon DynamoDB Accelerator (DAX)
- Amazon EFS
- Amazon CloudFront
Amazon DynamoDB Accelerator (DAX)
Amazon DynamoDB Accelerator (DAX) is a fully managed, highly available, in-memory cache for DynamoDB that delivers up to a 10x performance improvement - from milliseconds to microseconds - even at millions of requests per second.
Which AWS service lets connected devices easily and securely interact with cloud applications and other devices?
- Amazon Workspaces
- AWS Directory Service
- AWS IoT Core
- AWS Server Migration Service (SMS)
AWS IoT Core
AWS IoT Core is a managed cloud service that lets connected devices easily and securely interact with cloud applications and other devices. AWS IoT Core can support billions of devices and trillions of messages, and can process and route those messages to AWS endpoints and to other devices reliably and securely.
Which AWS service enables developers and data scientists to build, train, and deploy machine learning models?
- Amazon Rekognition
- Amazon Comprehend
- Amazon SageMaker
- Amazon MQ
Amazon SageMaker
Amazon SageMaker is a fully-managed platform that enables developers and data scientists to quickly and easily build, train, and deploy machine learning models at any scale. Amazon SageMaker removes all the barriers that typically slow down developers who want to use machine learning.
Which service provides alerts and remediation guidance when AWS is experiencing events that may impact you?
- AWS Trusted Advisor
- AWS Inspector
- AWS Personal Health Dashboard
- AWS Shield
AWS Personal Health Dashboard
AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you.
What are the primary benefits of using AWS Elastic Load Balancing? (Select TWO.)
- High availability
- Elasticity
- Automation
- Caching
- Regional resilience
High availability & Elasticity
What is an Edge location?
- A public endpoint for Amazon S3
- A content delivery network (CDN) endpoint for CloudFront
- A virtual private gateway for VPN
- A VPC peering connection endpoint
A content delivery network (CDN) endpoint for CloudFront
Edge locations are Content Delivery Network (CDN) endpoints for CloudFront. There are many more edge locations than regions.
What is the relationship between subnets and availability zones?
- You can create one or more subnets within each availability zone
- Subnets span across multiple availability zones
- You can create one subnet per availability zone
- Subnets contain one or more availability zones
You can create one or more subnets within each availability zone
You can create one or more subnets within each availability zone but subnets cannot span across availability zones.
How can you configure Amazon Route 53 to monitor the health and performance of your application?
- Using DNS lookups
- Using Route 53 health checks
- Using the Route 53 API
- Using Cloud Watch
Amazon Route 53 Health Checks
Amazon Route 53 health checks monitor the health and performance of your web applications, web servers, and other resources. None of the other options provide a solution that can check the health and performance of an application.
A developer needs a way to automatically provision a collection of AWS resources. Which AWS service is primarily used for deploying infrastructure as code?
- AWS Elastic Beanstalk
- AWS CloudFormation
- AWS CodeDeploy
- Jenkins
AWS CloudFormation
AWS CloudFormation is a service that gives developers and businesses an easy way to create a collection of related AWS resources and provision them in an orderly and predictable fashion. AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.
How can a company connect from their on-premises network to VPCs in multiple regions using private connections?
- AWS Managed VPN
- AWS Direct Connect Gateway
- Amazon CloudFront
- Inter-Region VPC Peering
AWS Direct Connect Gateway
You can use an AWS Direct Connect gateway to connect your AWS Direct Connect connection over a private virtual interface to one or more PCs in your account that are located in the same or different Regions
Which of the following descriptions is incorrect in relation to the design of Availability Zones?
- AZ’s have direct, low-latency, high throughput
and redundant network connections between each other - Each AZ is designed as an independent failure zone
- AZs are physically separated within a typical metropolitan region and are located in lower risk flood plains
- Each subnet in a VPC is mapped to all AZs in the region
Each subnet in a VPC is mapped to all AZs in the region
When designing a VPC, what is the purpose of an Internet Gateway?
- Provides Internet access for EC2 instances in private subnets
- Enables Internet communications for
instances in public subnets - It’s a bastion host for inbound management connections
- It’s used for making VPN connections to a VPC
Enables Internet communications for instances in public subnets
An internet gateway is a horizontally scaled, redundant, and highly available VPC component that allows communication between instances in your VPC and the internet. It therefore imposes no availability risks or bandwidth constraints on your network traffic.
What is the name of the online, self-service portal that AWS provides to enable customers to view reports and, such as PCI reports, and accept agreements?
- AWS Compliance Portal
- AWS Documentation Portal
- AWS Artifact
- AWS DocuFact
AWS Artifact
AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS’ security and compliance reports and select online agreements.
What are two correct statements about AWS Organizations with
consolidated billing? (Select TWO.)
- Multiple bills are provided per organization
- One bill provided for multiple accounts
- Linked accounts lose their management independence
- Volume pricing discounts applied across multiple accounts
- CloudTrail can be configured per organization
One bill provided for multiple accounts & Volume pricing discounts applied across multiple accounts
With AWS organizations you create a paying account and linked
accounts. One bill is provided for multiple accounts within an
organization. Volume pricing discounts can be applied across resources in multiple accounts.
Which AWS IAM best practice recommends applying the minimum permissions necessary to perform a task when creating IAM policies?
- Create individual IAM users
- Use roles to delegate permissions
- Grant least privilege
- Enable MFA for privileged users
Grant least privilege
When you create IAM policies, follow the standard security advice of granting least privilege that is, granting only the permissions required to perform a task. Determine what users need to do and then craft policies for them that let the users perform only those tasks.
What are the benefits of using IAM roles for applications that run on EC2 instances? (Select TWO.)
- Easier to configure than using storing access keys within the EC2 instance
- More secure than storing access keys within applications
- Can apply multiple roles to a single instance
- It is easier to manage IAM roles
- Role credentials are permanent
More secure than storing access keys within applications & It is easier to manage IAM roles
Using IAM roles instead of storing credentials within EC2 instances is more secure It is also easier to manage roles.
Under the AWS Shared Responsibility Model, which of the following is the customer NOT responsible for?
- Adding firewall rules to security groups and network ACLs
- Applying encryption to data stored on an EBS volume
- Applying bucket policies to share Amazon S3 data
- Installing firmware updates on host servers
Installing firmware updates on host servers
AWS customers are not responsible for installing firmware updates on the underlying infrastructure. AWS customers must protect their AWS services through policies, encryption, and firewall rules.
Which type of storage stores objects comprised of key, value pairs?
- Amazon DynamoDB
- Amazon EBS
- Amazon EFS
- Amazon S3
Amazon S3
Amazon Simple Storage Service is storage for the Internet. It is designed to make web-scale computing easier for developers. Amazon S3 is an object-based storage system that stores objects that are comprised of key, value pairs.
Which type of EBS volumes can be encrypted?
- Non-root volumes only
- Both non-root and root volumes
- Only non-root volumes created from
snapshots - Only root volumes can have encryption
applied at launch time
Both non-root and root volumes
What feature of Amazon S3 enables you to set rules to automatically transfer objects between different storage classes at defined time intervals?
- Elastic Data Management
- Object Lifecycle Management
- Auto Lifecycle Scaling
- S3 Archiving
Object Lifecycle Management
Object lifecycle management can be used with objects so that they are stored cost effectively throughout their lifecycle. Objects can be transitioned to another storage class or expired.
What charges are applicable to Amazon S3 Standard storage class? (Select TWO.)
- Per GB/month storage fee
- Retrieval fee
- Minimum capacity charge per object
- Data ingress
- Data egress
Per GB/month storage fee & Data egress
With the standard storage class you pay a per GB/month storage fee, and data transfer out of S3. Standard-IA and One Zone-IA have a minimum capacity charge per object. Standard-IA, One Zone-IA, and Glacier also have a retrieval fee. You don’t pay for data into S3 under any storage class.
How can a company protect their Amazon S3 data from a regional disaster?
- Archive to Amazon Glacier
- Use Cross-Region Replication (CRR) to copy to another region
- Use lifecycle actions to move to another S3 storage class
- Enable Multi-Factor Authentication (MFA) delete
Use Cross-Region Replication (CRR) to copy to another region
Cross-Region replication (CRR) is used to copy objects across Amazon S3 buckets in different AWS Regions. The only option here that will help is to use CRR to copy the data to another region. This will provide disaster recovery.
Which AWS support plan provides email only support by Cloud Support Associates?
- Basic
- Developer
- Business
- Enterprise
Developer
Developer provides email support by the Cloud Support Associates team whereas Business and Enterprise provide email, 24×7 phone and chat access to Cloud Support Engineers. Basic does not provide email support at all.
Which support plan is the lowest cost option that allows unlimited cases to be open?
- Basic
- Developer
- Business
- Enterprise
Developer
With the Developer plan you can open unlimited cases. You can also open unlimited cases with the Business and Enterprise plans but these are more expensive. You cannot open any support cases with the basic support plan.
Which service allows an organization to bring their own licensing on host hardware that is physically isolated from other AWS accounts?
- EC2 Dedicated Instances
- EC2 Spot Instances
- EC2 Dedicated Hosts
- EC2 Reserved Instances
EC2 Dedicated Hosts
An Amazon EC2 Dedicated Host is a physical server with EC2 instance capacity fully dedicated to your use. Dedicated Hosts allow you to use your existing per-socket, per-core, or per-VM software licenses, including Windows Server, Microsoft SQL Server, SUSE, Linux Enterprise Server, and so on.
Which of the below is an example of optimizing for cost?
- Choosing the fastest EC2 instance to ensure performance
- Provision extra capacity to allow for growth
- Replace an EC2 compute instance with AWS Lambda
- Deploy resources with AWS CloudFormation
Replace an EC2 compute instance with AWS Lambda
Where possible, you should replace EC2 workloads with AWS managed services that don’t require you to take any capacity decisions. AWS Lambda is a serverless services and you only pay for actual processing time. Other examples of services that you don’t need to make capacity decisions with include: ELB, CloudFront, SQS, Kinesis Firehose, SES, and CloudSearch.
Which service is used for caching data?
- Amazon Simple Queue Service (SQS)
- Amazon DynamoDB DAX
- AWS Key Management Service (KMS)
- Amazon Elastic File System (EFS)
Amazon DynamoDB Accelerator (DAX)
Amazon DynamoDB Accelerator (DAX) is a fully managed, highly available, in-memory cache for DynamoDB that delivers up to a 10x performance improvement - from milliseconds to microseconds - even at millions of requests per second.
Which service is used introduce fault tolerance into an application architecture?
- Amazon CloudFront
- Amazon ElastiCache
- Amazon Elastic Load Balancing
- Amazon DynamoDB
Amazon Elastic Load Balancing
Amazon Elastic Load Balancing is used to spread load and introduce fault tolerance by distributing connections across multiple identically configured back-end EC2 instances.
Which tools can you use to manage identities in IAM? (choose 2)
- Amazon Cloud Watch API
- AWS Management Console
- AWS Command Line Tools
- EC2 Management Console
- Amazon Workspaces
AWS Management Console & AWS Command Line Tools
You can manage AWS Identity and Access Management identities through the AWS Management Console, AWS Command Line Tools, AWS SDKs, and IAM HTTPS API.
Which of the following would be good reasons to move from on-premises to the AWS Cloud? (Select TWO.)
- Gain access to free technical support services
- Reduce costs through easier right-sizing of workloads
- Improve agility and elasticity
- Gain end-to-end operational management of the entire infrastructure stack
- Outsource all security responsibility
Reduce costs through easier right-sizing of workloads & Improve agility and elasticity
Which service runs your application code only when needed without needing to run servers?
- Amazon EC2
- Amazon ECS
- AWS Lambda
- AWS LightSail
AWS Lambda
AWS Lambda is a serverless service that runs code as “functions”. That means that your code is run when needed but there are no servers running (at least not servers that you see or manage). This reduces cost and operational overhead.
Which AWS feature of Amazon EC2 allows an administrator to create a standardized image that can be used for launching new instances?
- Amazon Golden Image
- Amazon Block Template
- Amazon Machine Image (AMI)
- Amazon EBS Mount Point
Amazon Machine Image (AMI)
An Amazon Machine Image (AMI) provides the information required to launch an instance. You can use an AMI to launch identical instances from a standard template. This is also known as a Golden Image (though no such feature exists in AWS with this name). An AMI is created from an EBS snapshot and also includes launch permissions and a block device mapping.
What information must be entered into the AWS TCO Calculator?
- The number of end users in your company
- The number of applications in your company
- The number of storage systems in your
company - The number of servers in your company
The number of servers in your company
An Elastic IP Address can be remapped between EC2 instances across which boundaries?
- Regions
- Edge Locations
- Availability Zones
- DB Subnets
Availability Zones
You can use Elastic IP addresses to mask the failure of an instance in one Availability Zone by rapidly remapping the address to an instance in another Availability Zone.
Which AWS service can assist with providing recommended actions on cost optimization?
- AWS Inspector
- AWS Trusted Advisor
- AWS Artifact
- Amazon Cloud Watch Events
Trusted Advisor
Trusted Advisor is an online resource that helps to reduce cost, increase performance and improve security by optimizing your AWS environment.
How can an online education company ensure their video courses play with minimal latency for their users around the world?
- Use Amazon S3 Transfer Acceleration to speed up downloads
- Use Amazon EBS Cross Region Replication to get the content close to the users
- Use Amazon Aurora Global Database
- Use Amazon CloudFront to get the content closer to users
Use Amazon CloudFront to get the content closer to users
Amazon CloudFront is a content delivery network (CDN) that enables you to cache content in Edge Locations that are located around the world. This brings your media closer to your end users which reduces latency and improves the user experience.
Which AWS security service provides a firewall at the subnet level within a VPC?
- Security Group
- IAM Policy
- Bucket Policy
- Network Access Control List
Network Access Control List
A Network ACL is a firewall that is associated with a subnet within your VPC. It is used to filter the network traffic that enters and exits the subnet.
Which services allow you to store files on AWS? (Select TWO.)
- AWS Lambda
- Amazon LightSail
- Amazon EBS
- Amazon EFS
- Amazon SQS
Amazon EBS & Amazon EFS
Which AWS program can help an organization to design, build, and manage their workloads on AWS?
- APN Consulting Partners
- APN Technology Consultants
- AWS Business Development Manager
- AWS Technical Account Manager
APN Consulting Partners
Which of the following statements is correct about Amazon S3 cross-region replication?
- Both source and destination S3 buckets must have versioning disabled
- The source and destination S3 buckets cannot be in different AWS Regions
- S3 buckets configured for cross-region
replication can be owned by a single AWS
account or by different accounts - The source $3 bucket owner must have the source and destination AWS Regions disabled for their account
S3 buckets configured for cross-region replication can be
owned by a single AWS account or by different accounts
Which of the following Amazon EC2 pricing models allows customers to use existing server-bound software licenses?
- Spot Instances
- Reserved Instances
- Dedicated Hosts
- On-Demand Instances
Dedicated Hosts
Amazon EC2 Dedicated Hosts allow you to use your eligible software licenses from vendors such as Microsoft and Oracle on Amazon EC2, so that you get the flexibility and cost effectiveness of using your own licenses, but with the resiliency, simplicity and elasticity of AWS.
A company has deployed several relational databases on Amazon RDS. Every month, the database software vendor releases new security patches that need to be applied to the database. What is the MOST efficient way to apply the security patches?
- Connect to each database instance on a monthly basis, and download and apply the necessary security patches from the vendor
- Enable automatic patching for the instances using the Amazon RDS console
- In AWS Config, configure a rule for the
instances and the required patch level - Use AWS Systems Manager to automate database patching according to a schedule
Enable automatic patching for the instances using the
Amazon RDS console
A Cloud Practitioner needs to rapidly deploy a popular IT solution and start using it immediately. What should the Cloud Practitioner use?
- AWS Well-Architected Framework documentation
- Amazon CloudFront
- AWS Elastic Beanstalk
- AWS Quick Start reference deployments
AWS Quick Start reference deployments
Quick Starts are built by AWS solutions architects and partners to help you deploy popular technologies on AWS, based on AWS best practices for security and high availability.
A cloud practitioner needs to decrease application latency and increase performance for globally distributed users. Which services can assist? (Select TWO)
- Amazon ECS
- Amazon S3
- Amazon AppStream 2.0
- Amazon ElastiCache
- Amazon CloudFront
Amazon S3 & Amazon CloudFront
A company needs protection from distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?
- AWS Shield Advanced
- AWS Firewall Manager
- AWS Web Application Firewall
- Amazon GuardDuty
AWS Shield Advanced
AWS Shield Advanced provides enhanced detection and includes a specialized support team for customers on Enterprise or Business support plans. The AWS DDoS Response Team (DRT) are available 24/7 and can be engaged before, during, or after a DDoS attack.
Which of the following must be used together to gain programmatic access to an AWS account? (Select TWO.)
- An access key ID
- A primary key
- A secret access key
- A user ID
- A secondary key
An access key ID & A secret access key
An application that is deployed across multiple Availability Zones could be described as:
- Being highly available
- Having global reach
- Being secure
- Having elasticity
Being highly available
When you deploy an application across multiple Availability Zones the application can be considered to be highly available. You must also have a way of directing traffic to the application in each AZ such as an Elastic Load Balancer.
A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?
- AWS Accounts
- AWS Regions
- Availability Zones
- Edge locations
AWS Regions
AWS has the concept of a Region, which is a physical location around the world where we cluster data centers. We call each group of logical data centers an Availability Zone. Each AWS Region consists of multiple, isolated, and physically separate AZ’s within a geographic area.
A user deploys an Amazon Aurora database instance in multiple Availability Zones. This strategy involves which pillar of the AWS Well-Architected Framework?
- Performance efficiency
- Reliability
- Cost optimization
- Security
Reliability
The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues.
