Extra Exam 5 Flashcards

1
Q

How does IAM Identity Center (Single sign-on) differ from Cognito?

A

IAM Identity Center - a single login allows you to access all of your accounts in an AWS organization, business cloud applications (Office 365), and more

Cognito - Allows users to create identity/login to your web and mobile applications

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A company needs to use a secure online data transfer tool/service that can automate the ongoing transfers from on-premises systems into AWS while providing support for incremental data backups.

Which AWS tool/service is an optimal fit for this requirement?

A

DataSync

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which Amazon Elastic Compute Cloud (Amazon EC2) Auto Scaling feature can help with fault tolerance?

Distributing load between instances
Having the right amount of computing capacity
Lower cost by adjusting the number of instances
Replacing unhealthy instances

A

Replacing unhealthy instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which AWS service can be used to subscribe to an RSS feed to be notified of the status of all AWS service interruptions?

A

AWS Service Health Dashboard (not personal)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

An engineering team is new to the AWS Cloud and it would like to launch a dev/test environment with low monthly pricing. Which AWS service can address this use case?

A

Lightsail

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

According to the AWS Shared Responsibility Model, which of the following is both the responsibility of AWS and the customer?

Customer data
Data center security
OS configuration
Configuration management

A

OS configuration, configuration management

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A company would like to move 50 petabytes (PBs) of data from its on-premises data centers to AWS in the MOST cost-effective way. As a Cloud Practitioner, which of the following solutions would you choose?

A

AWS Snowmobile

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which AWS service can inspect Amazon CloudFront distributions running on any HTTP web server?

ELB
Inspector
Web Application Firewall
GuardDuty

A

Web Application Firewall

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A company would like to move its infrastructure to AWS Cloud. Which of the following should be included in the Total Cost of Ownership (TCO) estimate? (2)

Number of end-users
Application advertising
Power/Cooling
Server administration
Electronic equipment at the office

A

Power/Cooling, Server administration?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which AWS serverless service allows you to prepare data for analytics?

A

AWS Glue (Extract, Transform, Load)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which types of monitoring can be provided by Amazon CloudWatch?

API Access
Account Management
Performance and availability of AWS services
Application performance
Resource utilization

A

Application performance and resource utilization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

According to the AWS Well-Architected Framework, which of the following action is recommended in the Security pillar?

Use CloudWatch to measure overall efficiency
Use Key Management Servers (KMS) to encrypt data
Use Cost Explorer to view and track your usage in detail
Use CloudFormation to automate best security practices

A

Use Key Management Servers (KMS) to encrypt data

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

The development team at a company manages 300 microservices and it is now trying to automate the code reviews to improve the code quality. Which tool/service is the right fit for this requirement?

A

CodeGuru

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

According to the AWS Well-Architected Framework, which of the following statements are recommendations in the Operational Excellence pillar? (Select two)

Automatically recover from failure
Anticipate failure
Enable traceability
Make frequent, small, reversible changes

A

Anticipate failure, Make frequent, small, reversible changes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

A company using a hybrid cloud would like to store SECONDARY backup copies of the on-premises data. Which Amazon S3 Storage Class would you use for a cost-optimal yet rapid access solution?

S3 Standard
S3 Standard-IA
S3 Glacier Deep Archive
S3 One Zone-IA

A

S3 One Zone-IA

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A data science team would like to build Machine Learning models for its projects. Which AWS service can it use?

A

SageMaker

17
Q

A company would like to reserve Amazon Elastic Compute Cloud (Amazon EC2) compute capacity for three years to reduce costs. The company also plans to increase their workloads during this period. As a Cloud Practitioner, which Amazon Elastic Compute Cloud (Amazon EC2) reserved instance (RI) type would you recommend?

A

Convertible Reserved Instances

18
Q

An e-commerce company would like to build a chatbot for its customer service using Natural Language Understanding (NLU). As a Cloud Practitioner, which AWS service would you use?

A

Lex

19
Q

A company needs a Natural Language Processor, which service should they use?

A

Comprehend

20
Q

A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?

AWS Personal Health Dashboard
AWS Systems Manager
Trusted Advisor
Amazon Inspector

A

AWS Systems Manager

21
Q

Which of the following statements is CORRECT regarding the scope of an Amazon Virtual Private Cloud (VPC)?

A VPC spans all AZs within an AWS region
A VPC spans all subnets in all AWS regions
A VPC spans all AZs in all AWS regions

A

A VPC spans all AZs within an AWS region

22
Q

A start-up would like to monitor its cost on the AWS Cloud and would like to choose an optimal Savings Plan. As a Cloud Practitioner, which AWS service would you use?

Cost & Usage Report
Cost Explorer
Budgets

A

Cost Explorer

23
Q

A brand-new startup would like to remove its need to manage the underlying infrastructure and focus on the deployment and management of its applications. Which type of cloud computing does this refer to?

SaaS
PaaS
IaaS

A

PaaS

24
Q

Which of the following services are provided by Amazon Route 53?

Domain registration
IP routing
Transfer acceleration
Health checks and monitoring

A

Domain registration, Health checks and monitoring

25
Q

Which of the following AWS services can be used to generate, use, and manage encryption keys on the AWS Cloud?

CloudHSM
Inspector
GuardDuty
Secrets Manager

A

CloudHSM

26
Q

Which of the following AWS Identity and Access Management (AWS IAM) Security Tools allows you to review permissions granted to an IAM user?

IAM credentials report
IAM policy
AWS IAM access advisor

A

AWS IAM access advisor

27
Q

Which of the following criteria are used to calculate the charge for Amazon EBS Volumes? (Select Two)

The EC2 instance type the EBS Elastic volume is attached to
Volume type
Provisioned IOPS
Data type

A

Volume type, Provisioned IOPS