Exam Questions Flashcards
Why is AWS more economical than traditional data centers for applications with varying compute workloads?
A. Amazon Elastic Compute Cloud (Amazon EC2) costs are billed on a monthly basis.
B. Customers retain full administrative access to their Amazon EC2 instances.
C. Amazon EC2 instances can be launched on-demand when needed.
D. Customers can permanently run enough instances to handle peak workloads.
C
Which AWS service would simplify migration of a database to AWS?
A. AWS Storage Gateway
B. AWS Database Migration Service (AWS DMS)
C. Amazon Elastic Compute Cloud (Amazon EC2)
D. Amazon AppStream 2.0
B
Which AWS offering enables customers to find, buy, and immediately start using software solutions in their AWS environment?
A. AWS Config
B. AWS OpsWorks
C. AWS SDK
D. AWS Marketplace
D
Which AWS networking service enables a company to create a virtual network within AWS?
A. AWS Config
B. Amazon Route 53
C. AWS Direct Connect
D. Amazon Virtual Private Cloud (Amazon VPC)
D
Which of the following is AWS’s responsibility under the AWS shared responsibility model?
A. Configuring third-party applications
B. Maintaining physical hardware
C. Securing application access and data
D. Managing custom Amazon Machine Images (AMIs)
B
Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery?
A. AWS Regions
B. AWS edge locations
C. AWS Availability Zones
D. Amazon Virtual Private Cloud (Amazon VPC)
B
How would a system administrator add an additional layer of login security to a user’s AWS Management Console?
A. Use AWS Cloud Directory
B. Audit AWS Identity and Access Management (IAM) roles
C. Enable Multi-Factor Authentication
D. Enable AWS CloudTrail
C
Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud (Amazon EC2) instance is terminated?
A. Amazon CloudWatch
B. AWS CloudTrail
C. AWS X-Ray
D. AWS Identity and Access Management (AWS IAM)
B
Which service would you use to send alerts based on Amazon CloudWatch alarms?
A. Amazon Simple Notification Service (Amazon SNS)
B. AWS CloudTrail
C. AWS Trusted Advisor
D. Amazon Route 53
A
Where can a customer find information about prohibited actions on AWS infrastructure?
A. AWS Trusted Advisor
B. AWS Identity and Access Management (IAM)
C. AWS Billing Console
D. AWS Acceptable Use Policy
D
According to AWS, what is the benefit of Elasticity?
A. Minimize storage requirements by reducing logging and auditing activities
B. Create systems that scale to the required capacity based on changes in demand
C. Enable AWS to automatically select the most cost-effective services.
D. Accelerate the design process because recovery from failure is automated, reducing the need for testing
B
Which tool can you use to forecast your AWS spending?
A. AWS Organizations
B. Amazon Dev Pay
C. AWS Trusted Advisor
D. AWS Cost Explorer
D
What best describes the “Principle of Least Privilege”?
Choose the correct answer from the options given below.
A. All users should have the same baseline permissions granted to them to use basic AWS services.
B. Users should be granted permission to access only resources they need to do their assigned job.
C. Users should submit all access requests in written form so that there is a paper trail of who needs access to different AWS resources.
D. Users should always have a little more permission than they need.
B
A web administrator maintains several public and private web-based resources for an organisation. Which service can they use to keep track of the expiry dates of SSL/TLS certificates as well as updating and renewal?
A. AWS Data Lifecycle Manager
B. AWS License Manager
C. AWS Firewall Manager
D. AWS Certificate Manager
D
Which of the following is the responsibility of the customer to ensure the availability and backup of the EBS volumes?
A. Delete the data and create a new EBS volume.
B. Create EBS snapshots.
C. Attach new volumes to EC2 Instances.
D. Create copies of EBS Volumes.
B
Which of the following AWS services can be used to retrieve configuration changes made to AWS resources causing operational issues?
A. Amazon Inspector
B. AWS CloudFormation
C. AWS Trusted Advisor
D. AWS Config
D
Which of the following features of Amazon RDS allows for better availability of databases? Choose the answer from the options given below.
A. VPC Peering
B. Multi-AZ
C. Read Replicas
D. Data encryption
B
A website for an international sport governing body would like to serve its content to viewers from different parts of the world in their vernacular language. Which of the following services provide location-based web personalization using geolocation headers?
A. Amazon CloudFront
B. Amazon EC2 Instance
C. Amazon Lightsail
D. Amazon Route 53
A
Which of the following are the recommended resources to be deployed in the Amazon VPC private subnet?
A. NAT Gateways
B. Bastion Hosts
C. Database Servers
D. Internet Gateways
C
A company wants to utilize AWS storage. For them, low storage cost is paramount. The data is rarely retrieved and a data retrieval time of 13-14 hours is acceptable for them. What is the best storage option to use?
A. Amazon S3 Glacier
B. S3 Glacier Deep Archive
C. Amazon EBS volumes
D. AWS CloudFront
B
Which AWS service provides a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability?
A. AWS RDS
B. DynamoDB
C. Oracle RDS
D. Elastic Map Reduce
B
For which of the following AWS resources, the Customer is responsible for the infrastructure-related security configurations?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon EC2
D. AWS Fargate
C
In the shared responsibility model for infrastructure services, such as Amazon Elastic Compute Cloud, which two are the customers responsibility?
A. Network infrastructure
B. Amazon Machine Images (AMIs)
C. Virtualization infrastructure
D. Physical security of hardware
E. Policies and configuration
B & E
A large Oil & gas company is planning to deploy a high-volume application on multiple Amazon EC2 instances. Which of the following can help to reduce operational expenses?
A. Deploy Amazon EC2 instance with Auto-scaling
B. Deploy Amazon EC2 instance in multiple AZ’s
C. Deploy Amazon EC2 instance with Amazon instance store-backed AMI
D. Deploy Amazon EC2 instance with Cluster placement group
A
Which of the following describes a security best practice that can be implemented by using AWS Identity and Access Management (IAM)?
A. Turn off AWS Management Console access for all users
B. Generate secret keys for every IAM user
C. Grant permissions to users who are required to perform a specific task only
D. Store AWS credentials within Amazon EC2 instances
C
Which aspect of AWS infrastructure provides global deployment of compute and storage?
A. Multiple Availability Zones in an AWS Region
B. Multiple AWS Regions
C. Tags
D. Resource groups
B
Which of the following are benefits of the AWS Cloud? (Select TWO.)
A. Companies need increased IT staff
B. Capital expenses are replaced with variable expenses
C. Customers receive the same monthly bill regardless of which resources they use
D. Companies gain increased agility
E. AWS holds responsibility for security in the cloud
B & D