NVCC Final Exam Flashcards

1
Q

1 - Which are typical advantages of using a cloud vendor. (CHECK ALL THAT APPLY):
______ Having the “pay as you go” model
______ Having complete control over the physical machines and infrastructure
______ No upfront costs
______ Don’t need to worry about security and encryption
______ Ability to create a system with high availability

A

1 - Which are typical advantages of using a cloud vendor. (CHECK ALL THAT APPLY):
____X__ Having the “pay as you go” model
______ Having complete control over the physical machines and infrastructure
___X___ No upfront costs
______ Don’t need to worry about security and encryption
__X____ Ability to create a system with high availability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

2 - Which factors contribute to Total Cost of Ownership to move to the cloud? (CHECK ALL THAT
APPLY):
______ The number of servers that we would like to migrate to the cloud
______ The number of customers that we have
______ The amount of storage we would like to use
______ The number of system administrators that we have on staff

A

2 - Which factors contribute to Total Cost of Ownership to move to the cloud? (CHECK ALL THAT
APPLY):
__X____ The number of servers that we would like to migrate to the cloud
______ The number of customers that we have
___X___ The amount of storage we would like to use
______ The number of system administrators that we have on staff

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

3 - Matching: auto-scaling ________ elasticity ________ load balancing ________
A. Configure EC2 to stand up a new instance, but make it driven off of a threshold or metric
B. Stand up multiple EC2 instance and “round robin” incoming requests across all instances
C. Be able to bring down an EC instance if demand decreases

A

3 - Matching: auto-scaling ____A____ elasticity ___C_____ load balancing ____B____
A. Configure EC2 to stand up a new instance, but make it driven off of a threshold or metric
B. Stand up multiple EC2 instance and “round robin” incoming requests across all instances
C. Be able to bring down an EC instance if demand decreases

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

4 - Which are FALSE when it comes to elasticity. (CHECK ALL THAT APPLY) (1118G)
_____ Diverting traffic to instances based on the demand
_____ Diverting traffic to instances with the least load
_____ Diverting traffic across multiple regions
_____ Diverting traffic to instances with higher capacity

A

4 - Which are FALSE when it comes to elasticity. (CHECK ALL THAT APPLY) (1118G)
_____ Diverting traffic to instances based on the demand
_____ Diverting traffic to instances with the least load
__X___ Diverting traffic across multiple regions
__X___ Diverting traffic to instances with higher capacity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q
5 - Which of the following are right principles when designing cloud-based systems (CHECK ALL
THAT APPLY): (51385)
\_\_\_\_\_ Build Tightly-coupled components
\_\_\_\_\_ Build loosely-coupled components
\_\_\_\_\_ Assume everything will fail
\_\_\_\_\_ Use as many services as possible
A
5 - Which of the following are right principles when designing cloud-based systems (CHECK ALL
THAT APPLY): (51385)
\_\_\_\_\_ Build Tightly-coupled components
\_\_X\_\_\_ Build loosely-coupled components
\_\_X\_\_\_ Assume everything will fail
\_\_\_\_\_ Use as many services as possible
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

6 - Which of these entities by default has complete control over all resources in the respective AWS
account? (4826/6143)
A. AWS Support Team C. AWS Security Team
B. AWS Account Owner D. AWS Technical Account Manager (TAM)

A

6 - Which of these entities by default has complete control over all resources in the respective AWS
account? (4826/6143)
B. AWS Account Owner

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

7 - Our company would like to use AWS but our company is split into several departments. What
can be we use to get a consolidated bill? (7893/21256/31702/41945/5609)
A. AWS Organizations C. AWS Trusted Advisor
B. Amazon One Bill D. AWS Cost Explorer

A

7 - Our company would like to use AWS but our company is split into several departments. What
can be we use to get a consolidated bill? (7893/21256/31702/41945/5609)
A. AWS Organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

8 - In what way(s) can we configure AWS core services? (CHECK ALL THAT APPLY)
______ Using the CLI through a script we have written
______ Using SDKs through a program written in a supported programming language
______ Through a web-based Console using a valid AWS account

A

8 - In what way(s) can we configure AWS core services? (CHECK ALL THAT APPLY)
___X___ Using the CLI through a script we have written
__X____ Using SDKs through a program written in a supported programming language
__X____ Through a web-based Console using a valid AWS account

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

9 - As per the AWS Acceptable Use Policy, penetration testing of EC2 instances: (7314)
A. May be performed by AWS upon request
B. May be performed by AWS periodically
C. Are expressly prohibited under all circumstances
D. May be performed by the customer on their own instances with prior authorization from AWS
E. May be performed by the customer on their own instances, only if performed from EC2
instances.

A

9 - As per the AWS Acceptable Use Policy, penetration testing of EC2 instances: (7314)
D. May be performed by the customer on their own instances with prior authorization from AWS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

10 - Which of the following are the responsibility of the AWS Customer? (CHECK ALL THAT
APPLY) (21497/3170/1120/9851)
_____ Creating and maintaining IAM settings _____ Hardware patching
_____ Decommissioning storage devices _____ Implementing NIST and SOC standards
_____ Encryption of EBS volumes _____ Physical security of edge locations
_____ Controlling the physical access to compute resources

A

10 - Which of the following are the responsibility of the AWS Customer? (CHECK ALL THAT
APPLY) (21497/3170/1120/9851)
___X__ Creating and maintaining IAM settings _____ Hardware patching
_____ Decommissioning storage devices _____ Implementing NIST and SOC standards
__X___ Encryption of EBS volumes _____ Physical security of edge locations
_____ Controlling the physical access to compute resources

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

11 - Which of the following is a benefit of running an app across two Availability Zones?
A. It increases the overall availability of an application
B. The response time or performance of a single request is improved
C. It is more secure

A

11 - Which of the following is a benefit of running an app across two Availability Zones?
A. It increases the overall availability of an application

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

12 - Which best describes the concept of an AWS Region?
A. A Region is a collection of Edge Locations
B. A Region is a grouping of Compute capacity
C. A Region is a geographic area that is divided into different Availability Zones
D. An Availability Zone is a geographic area that is divided into different Regions

A

12 - Which best describes the concept of an AWS Region?

C. A Region is a geographic area that is divided into different Availability Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

13 - We have a mission-critical application. What is the best option for building a most robust
architecture with highest availability (41435/5923/2248):
A. Deployment to multiple edge locations C. Deployment to multiple Data Centers
B. Deployment to multiple Availability Zones D. Deployment to multiple Regions

A

13 - We have a mission-critical application. What is the best option for building a most robust
architecture with highest availability (41435/5923/2248):
D. Deployment to multiple Regions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

14 - Which of the following can be used to increase the fault tolerance of an application. (1844):
A. Deploying resources across multiple edge locations
B. Deploying resources across multiple VPC’s
C. Deploying resources across multiple Availability Zones
D. Deploying resources across multiple AWS Accounts

A

14 - Which of the following can be used to increase the fault tolerance of an application. (1844):
C. Deploying resources across multiple Availability Zones

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

15 - Our company must create snapshots of our EBS volumes. To yield highest availability, where
should we create these snapshots? (7501):
A. In another Availability Zone C. In another Region
B. In another data center D. In another Edge location

A

15 - Our company must create snapshots of our EBS volumes. To yield highest availability, where
should we create these snapshots? (7501):
C. In another Region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

16 - Which is NOT an available AMI:
A. RedHat Linux C. MS Windows Server E. Amazon Linux
B. SUSE Linux D. Mac OS

A

16 - Which is NOT an available AMI:

D. Mac OS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

17- There is a requirement to host a database server for a minimum period of one year. Which of
the following would result in the least cost overall: (2440)
A. Spot Instances C. No Upfront costs Reserved
B. On-Demand D. Partial Upfront costs Reserved

A

17- There is a requirement to host a database server for a minimum period of one year. Which of
the following would result in the least cost overall: (2440)
D. Partial Upfront costs Reserved

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

18 - We would like to try out some instances for prototyping for just a few months. Which pricing
option should we choose?
A. Reserved instances C. Spot instances
B. On-demand instances D. Dedicated instances

A

18 - We would like to try out some instances for prototyping for just a few months. Which pricing
option should we choose?
B. On-demand instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

19 - Amazon EC2 spot instances are appropriate for which of the following?
A. Instances that only run in the morning and stopped at night
B. Instances that are not critical and workload can be flexible
C. Instances that must run for long periods of time without interruption
D. Instance that must have termination protection

A

19 - Amazon EC2 spot instances are appropriate for which of the following?
B. Instances that are not critical and workload can be flexible

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

20 - For which of the following EC2 payment types must we configure to enable hibernation?
A. Reserved instances C. On-Demand instances
B. Dedicated instances D. Spot Instances

A

20 - For which of the following EC2 payment types must we configure to enable hibernation?
D. Spot Instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

21 - We would like to ensure that our EC2 instance is not shared with other AWS customers.
Which pricing option should we choose?
A. Reserved instances C. Spot instances
B. On-demand instances D. Dedicated instances

A

21 - We would like to ensure that our EC2 instance is not shared with other AWS customers.
Which pricing option should we choose?
D. Dedicated instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

22 - You are current hosting instances that are 90-100% utilized at all times. Which EC2 pricing
option should we choose?
A. Reserved instances C. Spot instances
B. On-demand instances D. Regular instances

A

22 - You are current hosting instances that are 90-100% utilized at all times. Which EC2 pricing
option should we choose?
A. Reserved instances

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

23 - The benefit of decoupling in an application is: (9150)
A. Create components that are tightly integrated
B. Reduce inter-dependencies so that failures do not impact other components
C. Decoupling the layers of the OSI model
D. Trying many different services to manage costs

A

23 - The benefit of decoupling in an application is: (9150)

B. Reduce inter-dependencies so that failures do not i

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

24 - Our company is planning to use AWS and we would like to decouple resources. Which of the
following services can best help to meet this requirement. (1689)
A. AWS EBS Volumes C. AWS Glacier
B. AWS EBS Snapshots D. AWS SQS

A

24 - Our company is planning to use AWS and we would like to decouple resources. Which of the
following services can best help to meet this requirement. (1689)
D. AWS SQS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

25 - Your company needs a support plan in which they can work with an AWS employee and the
response time is less than 1 hour for critical issues. Which is the best plan? (91062)
A. Basic C. Business
B. Developer D. Enterprise

A

25 - Your company needs a support plan in which they can work with an AWS employee and the
response time is less than 1 hour for critical issues. Which is the best plan? (91062)
D. Enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

26 - Which one of the following features is present in all of AWS Support plans? (81334)
A. 24*7 access to customer support C. A technical Account Manager
B. Access to all features in the Trusted Advisor D. A dedicated support person

A

26 - Which one of the following features is present in all of AWS Support plans? (81334)
A. 24*7 access to customer support

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

27 - What are the four levels of AWS Support? (11872)
A. Basic, Developer, Business, Enterprise C. Free, Bronze, Silver, Gold
B. Basic, Startup, Business, Enterprise D. All support is free

A

27 - What are the four levels of AWS Support? (11872)

A. Basic, Developer, Business, Enterprise

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

28 - Which of the following is a compatible MySQL database which also has the ability to grow in
storage size on its own and is automatically backed up. (6525):
A. Aurora C. RDS MySQL
B. DynamoDB D. An EC2 Instance with MySQL installed

A

28 - Which of the following is a compatible MySQL database which also has the ability to grow in
storage size on its own and is automatically backed up. (6525):
A. Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

29 - Which of the following is a fully managed NoSQL database service available in AWS.
A. AWS DynamoDB C. AWS Redshift
B. AWS RDS D. AWS Aurora

A

29 - Which of the following is a fully managed NoSQL database service available in AWS.
A. AWS DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

30 - Our company wants to setup a database on AWS but we want as much control as possible.
Which option should we choose? (91166)
A. AWS DynamoDB B. AWS RDS D. Amazon Aurora
C. Setting up an EC2 Instance and setup a DBMS on that instance

A

30 - Our company wants to setup a database on AWS but we want as much control as possible.
Which option should we choose? (91166)
C. Setting up an EC2 Instance and setup a DBMS on that instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

31 - Which of the following services is a fully managed, petabyte-scale data warehouse service in
the AWS cloud? (3793)
A. Amazon Redshift C. Amazon ElastiCache E. AWS EMR
B. Amazon DynamoDB D. Amazon Aurora

A

31 - Which of the following services is a fully managed, petabyte-scale data warehouse service in
the AWS cloud? (3793)
A. Amazon Redshift

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

32 - What is the AWS service that is a fully managed NoSQL database service that provides fast
and predictable performance with seamless scalability. (71566)
A. AWS RDS C. Oracle RDS
B. DynamoDB D. EMR

A

32 - What is the AWS service that is a fully managed NoSQL database service that provides fast
and predictable performance with seamless scalability. (71566)
B. DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

33 - Which service is a managed Hadoop framework for Big Data processing? (41327)
A. Aurora B. RDS C. DynamoDB D. EMR

A

33 - Which service is a managed Hadoop framework for Big Data processing? (41327)
D. EMR

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

34 - Which of the following AWS services can we use to migrate our existing Oracle database from
our on-prem environment to the AWS cloud? (61427 / 21134):
A. AWS Lambda C. AWS DMS E. Trusted Advisor
B. AWS Storage gateway D. AWS Snowball

A

34 - Which of the following AWS services can we use to migrate our existing Oracle database from
our on-prem environment to the AWS cloud? (61427 / 21134):
C. AWS DMS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

35 - Which of the following is AWS managed database service provides processing power that is up
to 5X faster than a traditional MySQL database. (1612)
A. MariaDB B. Aurora C. PostgreSQL D. DynamoDB

A

35 - Which of the following is AWS managed database service provides processing power that is up
to 5X faster than a traditional MySQL database. (1612)
B. Aurora

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

36 - Which of the following is a fully managed NoSQL database AWS service? (2278/31884):
A. AWS RDS B. AWS DynamoDB C. AWS Redshift D. AWS MongoDB

A

36 - Which of the following is a fully managed NoSQL database AWS service? (2278/31884):
D. AWS MongoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

37 - Which of the following is NOT a supported database engine in the AWS RDS? (11662)
A. MS SQLServer B. MariaDB C. MySQL D. IBM DB2

A

37 - Which of the following is NOT a supported database engine in the AWS RDS? (11662)
D. IBM DB2

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

38 - Which of the following are features of RDS? CHECK ALL THAT APPLY: (21094/21743):
_____ Can set it up to exist in two different AZs _____ You can resize the capacity
_____ Automated patches and backups _____ It allows you to store NoSQL data

A

38 - Which of the following are features of RDS? CHECK ALL THAT APPLY: (21094/21743):
_____ Can set it up to exist in two different AZs _____ You can resize the capacity
_____ Automated patches and backups _____

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

39 - Which of the following features of RDS allows for data redundancy across regions: (3497)
A. Creating Read Replica’s C. Using the Multi-AZ feature of RDS
B. Using snapshots

A

39 - Which of the following features of RDS allows for data redundancy across regions: (3497)
A. Creating Read Replica’s

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
40
Q

40 - Which RDS feature allows for reducing the load on our source DB instance: (21149)
A. Creating Read Replica’s C. Using the Multi-AZ feature of RDS
B. Using snapshots

A

40 - Which RDS feature allows for reducing the load on our source DB instance: (21149)
C. Using the Multi-AZ feature of RDS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
41
Q

41 - Which of the following is a valid disaster recovery method and has the SHORTEST recovery
period of these listed: (7641)
A. Pilot Light B. Warm Standby C. Backup and Restore D. Single Site

A

41 - Which of the following is a valid disaster recovery method and has the SHORTEST recovery
period of these listed: (7641)
B. Warm Standby

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
42
Q

42 - Which of the following is a valid disaster recovery method and has the LONGEST recovery
period of these listed: (81292)
A. Pilot Light B. Warm Standby C. Backup and Restore D. Single Site

A

42 - Which of the following is a valid disaster recovery method and has the LONGEST recovery
period of these listed: (81292)
C. Backup and Restore

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
43
Q

43 - Which of the following service is most useful for a robust Disaster Recovery method in AWS:
(1746)
A. Amazon Route 53 B. Amazon SNS C. Amazon SQS D. Amazon Inspector

A

43 - Which of the following service is most useful for a robust Disaster Recovery method in AWS:
(1746)
A. Amazon Route 53

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
44
Q

44 - Which is our responsibility as a company to ensure that the data in EBS is not lost? (7572)
A. Deleting the data when the device is destroyed C. Attaching volumes to EC2 Instances
B. Creating EBS snapshots D. Storing all EBS data as S3 objects

A

44 - Which is our responsibility as a company to ensure that the data in EBS is not lost? (7572)
B. Creating EBS snapshots

45
Q

45 - What is the best way to backup an EBS volume? (21819)
A. Store the EBS volume in S3 C. Create an EBS snapshot
B. Store the EBS volume in an RDS database D. Store the EBS volume in DynamoDB

A

45 - What is the best way to backup an EBS volume? (21819)

C. Create an EBS snapshot

46
Q

46 - How can data be moved into AWS Glacier? (3399) CHECK ALL THAT APPLY:
_____ AWS Console _____ AWS Glacier API
_____ AWS Glacier SDK _____ AWS S3 Lifecycle policies

A

46 - How can data be moved into AWS Glacier? (3399) CHECK ALL THAT APPLY:
_____ AWS Glacier API
_____ AWS Glacier SDK _____ AWS S3 Lifecycle policies

47
Q

47 - Which of the following is a best practice when working with permissions in AWS. (81512)
A. Ensure the least privilege access is used C. Don’t use IAM users and groups
B. Use the root account credentials D. Ensure the highest privilege access is used

A

47 - Which of the following is a best practice when working with permissions in AWS. (81512)
A. Ensure the least privilege access is used

48
Q

48 - When creating IAM security groups, what should be done (CHECK ALL THAT APPLY): (1460)
_____ Giving a name and description for the security group
_____ Defining the rules as per the customer requirements.
_____ Ensure the rules are applied immediately
_____ Create as few groups as possible

A

48 - When creating IAM security groups, what should be done (CHECK ALL THAT APPLY): (1460)
_____ Giving a name and description for the security group
_____ Defining the rules as per the customer requirements.

49
Q

49 - Which could allow an application running on an EC2 instance to write data to S3: (71864):
A. IAM Users B. IAM Roles C. IAM Groups D. IAM Permissions

A

49 - Which could allow an application running on an EC2 instance to write data to S3: (71864):
B. IAM Roles

50
Q

50 - Which is a JSON document that provides a states one or more permissions? (1172G)
A. Policy B. Permission C. Role D. Resource

A

50 - Which is a JSON document that provides a states one or more permissions? (1172G)
A. Policy

51
Q

51 - Which could be used to associate an federated User with permissions in AWS (21240):
A. IAM Users B. IAM Roles C. IAM Groups D. IAM Permissions

A

51 - Which could be used to associate an federated User with permissions in AWS (21240):
B. IAM Roles

52
Q

52 - How can the AWS Management Console be secured against unauthorized access? (4225)
A. Apply MFA C. Request root access privileges
B. Set up a secondary password D. Disable AWS console access

A

52 - How can the AWS Management Console be secured against unauthorized access? (4225)
A. Apply MFA

53
Q

53 - Which of the following applies security for using AWS API to call AWS services from EC2
Instances: (2598)
A. IAM Users B. IAM Roles C. IAM Groups D. IAM policies

A

53 - Which of the following applies security for using AWS API to call AWS services from EC2
Instances: (2598)
B. IAM Roles

54
Q

54 - Which of the following are features of AWS Lambda. (CHECK ALL THAT APPLY):
______ It is considered to be “serverless computing”
______ We provide the code in a language that is supported by AWS
______ We know about the hardware of the EC2 instance where the code is running
______ We get to choose the AMI from a menu of options

A

54 - Which of the following are features of AWS Lambda. (CHECK ALL THAT APPLY):
______ It is considered to be “serverless computing”
______ We provide the code in a language that is supported by AWS

55
Q

55 - Which is one programming language not supported by AWS Lambda?
A. Node.js B. C++ C. Go D. C#

A

55 - Which is one programming language not supported by AWS Lambda?
B. C++

56
Q

56 - What steps should we take to create an application that must be PCI-Compliant. (CHECK ALL
THAT APPLY): (5385)
_____ Choose AWS services that are already PCI-Compliant
_____ Ensure that our company takes PCI-Compliant steps during application development
_____ Ensure the AWS Services are made PCI Compliant
_____ Do an audit after the deployment of the application for PCI Compliance

A

56 - What steps should we take to create an application that must be PCI-Compliant. (CHECK ALL
THAT APPLY): (5385)
_____ Choose AWS services that are already PCI-Compliant
_____ Ensure that our company takes PCI-Compliant steps during application development

57
Q

57 - Which is true about S3? (1155S)
A. S3 can be used to host a relational database.
B. Objects can be accessed via a URL if desired.
C. S3 can be used to store general block storage.

A

57 - Which is true about S3? (1155S)

B. Objects can be accessed via a URL if desired.

58
Q

58 - Cost for S3 is based on the following (CHECK ALL THAT APPLY): (61894):
_____ The storage class used for the objects stored.
_____ Number of S3 buckets
_____ The total size in gigabytes of all objects stored.
_____ Using encryption in S3

A

58 - Cost for S3 is based on the following (CHECK ALL THAT APPLY): (61894):
_____ The storage class used for the objects stored.
_____ The total size in gigabytes of all objects stored.

59
Q

59 - Which of these can we use to help to protect access to our EC2 Instances. (CHECK ALL THAT
APPLY) (81035/3362/81693)
_____ Use VPC Security Groups _____ Use Network Access Control Lists
_____ Use of AWS Config _____ Use the Internet Gateway

A

59 - Which of these can we use to help to protect access to our EC2 Instances. (CHECK ALL THAT
APPLY) (81035/3362/81693)
_____ Use VPC Security Groups _____ Use Network Access Control Lists

60
Q

60 - Which are services that we do NOT manage the underlying infrastructure (Choose 3) (2128):
A. DynamoDB B. EC2 C. EBS D. Simple Storage Service E. Lambda

A

60 - Which are services that we do NOT manage the underlying infrastructure (Choose 3) (2128):
A. DynamoDB D. Simple Storage Service E. Lambda

61
Q

61 - Which of the following did we attach to EC2 Instances to store data?
A. Amazon Glacier B. Amazon Cache Servers C. Amazon Files D. Amazon EBS Volumes

A

61 - Which of the following did we attach to EC2 Instances to store data?
D. Amazon EBS Volumes

62
Q

62 - What is the feature we use to create two servers with the same configuration?
A. AMI B. Elastic Block Storage C. EC2 Snapshot D. Amazon Lightsail

A

62 - What is the feature we use to create two servers with the same configuration?
A. AMI

63
Q

63 - Which of the following helps with governance, compliance, and risk auditing in AWS. (71637)
A. AWS Config B. AWS CloudTrail C. AWS CloudWatch D. AWS SNS

A

63 - Which of the following helps with governance, compliance, and risk auditing in AWS. (71637)
B. AWS CloudTrail

64
Q

64 - Which AWS service is used as a global content delivery network service in AWS?
A. Amazon S3 B. Amazon CDN C. Amazon CloudWatch D. Amazon CloudFront

A

64 - Which AWS service is used as a global content delivery network service in AWS?
D. Amazon CloudFront

65
Q

65 - Which service allows us to see logs and various metrics through graphs?
A. Amazon CloudFront C. Amazon CloudWatch
B. Amazon TCO Calculator D. Amazon Metrics

A

65 - Which service allows us to see logs and various metrics through graphs?
C. Amazon CloudWatch

66
Q

66 - Which service can be used to store requests that must be processed. (21317):
A. Amazon Glacier C. Amazon EBS Snapshots
B. Amazon EBS Volumes D. Amazon SQS

A

66 - Which service can be used to store requests that must be processed. (21317):
D. Amazon SQS

67
Q

67 - Which AWS service provides optimization recommendations?
A. AWS CloudWatch B. Reserved Instances
C. AWS Trusted Advisor D. AWS TCO Calculator

A

67 - Which AWS service provides optimization recommendations?
C. AWS Trusted Advisor

68
Q

68 - Which of the following services allows you to analyze EC2 Instances against pre-defined
security templates to check for vulnerabilities. (31309)
A. AWS Trusted Advisor B. AWS Inspector C. AWS WAF D. AWS Shield

A

68 - Which of the following services allows you to analyze EC2 Instances against pre-defined
security templates to check for vulnerabilities. (31309)
B. AWS Inspector

69
Q

69 - Which service allows for an admin to create and modify AWS user permissions? (5106)
A. AWS Config C. AWS Key Management Service (AWS KMS)
B. AWS Cloud Trail D. AWS Identity and Access Management (IAM)

A

69 - Which service allows for an admin to create and modify AWS user permissions? (5106)
D. AWS Identity and Access Management (IAM)

70
Q

70 - Which service allows for distribution of incoming traffic across multiple EC2 instances?
A. AWS EC2 B. AWS ELB C. AWS AutoScaling

A

70 - Which service allows for distribution of incoming traffic across multiple EC2 instances?
B. AWS ELB

71
Q

71 - What storage is best for storing individual files or objects? (143S1)
A. Amazon S3 C. Amazon Storage Gateway
B. Amazon Glacier D. Amazon Elastic Block Storage

A

71 - What storage is best for storing individual files or objects? (143S1)
A. Amazon S3

72
Q

72 - Which approach(es) can configure AWS services in an automated or programmatic way
(CHECK ALL THAT APPLY):
______ AWS Console ______ AWS CLI
______ AWS GUI ______ AWS SDK

A

72 - Which approach(es) can configure AWS services in an automated or programmatic way
(CHECK ALL THAT APPLY):
______ AWS CLI
______ AWS SDK

73
Q

73 - Which of the following are true about an Edge Locations. (CHECK ALL THAT APPLY):
______ Provide content in close proximity to our customers
______ Create a cache of commonly used data for customers
______ Balance the traffic load of requests to multiple EC2 instances
______ Used in conjunction with the CloudFront
______ Creates a backup of our data in case our system goes down
______ Used to reduce latency of data retrieval for our customers

A

73 - Which of the following are true about an Edge Locations. (CHECK ALL THAT APPLY):
____X__ Provide content in close proximity to our customers
___X___ Create a cache of commonly used data for customers
______ Balance the traffic load of requests to multiple EC2 instances
___X___ Used in conjunction with the CloudFront
______ Creates a backup of our data in case our system goes down
______ Used to reduce latency of data retrieval for our customers

74
Q

74 - What can we use to monitor CPU utilization of an EC2 instance?
A. AWS TCO C. AWS Trusted Advisor
B. AWS CloudFront D. AWS CloudWatch

A

74 - What can we use to monitor CPU utilization of an EC2 instance?
D. AWS CloudWatch

75
Q

75 - You have a Web application hosted in an EC2 Instance that needs to send notifications based
on events. Which of the below services can assist in sending notifications: (91713)
A. AWS SES B. AWS SNS C. AWS SQS D. AWS EC2

A

75 - You have a Web application hosted in an EC2 Instance that needs to send notifications based
on events. Which of the below services can assist in sending notifications: (91713)
B. AWS SNS

76
Q

76 - Which of the following storage options provides the option of “lifecycle policies” that can be
used to move data to archived storage: (71088):
A. Amazon S3 B. Amazon Glacier C. Amazon Storage Gateway D. Amazon EBS

A

76 - Which of the following storage options provides the option of “lifecycle policies” that can be
used to move data to archived storage: (71088):
A. Amazon S3

77
Q

77 - You are considering using AWS. What tool can be used to estimate the costs for moving
artifacts from on-prem to AWS?
A. AWS TCO Calculator C. AWS Cost Explorer
B. AWS Trusted Advisor D. AWS CloudWatch

A

77 - You are considering using AWS. What tool can be used to estimate the costs for moving
artifacts from on-prem to AWS?
A. AWS TCO Calculator

78
Q

78 - Which AWS service is used to manage users and groups in AWS. (2774)
A. AWS Config C. AWS Key Management Service (AWS KMS)
B. AWS Cloud Trail D. AWS Identity and Access Management (IAM)

A

78 - Which AWS service is used to manage users and groups in AWS. (2774)
D. AWS Identity and Access Management (IAM)

79
Q

79 - What is the service in which we provide some code and AWS will run it on a server that it
chooses?
A. AWS SDK B. AWS Lambda C. AWS API D. AWS API Gateway

A

79 - What is the service in which we provide some code and AWS will run it on a server that it
chooses?
B. AWS Lambda

80
Q

80 - Which service can quickly setup a simple web application?
A. EC2 B. Amazon Lightsail C. S3 Buckets D. AWS Lambda

A

80 - Which service can quickly setup a simple web application?
B. Amazon Lightsail

81
Q

81 - Our company has a data warehouse that is 10 terabytes that we must move into the AWS
cloud. Which service should we use to move this data to the cloud? (91670)
A. Amazon Snowball C. Amazon S3 Connector
B. Amazon Direct Connect D. AWS Transfer

A

81 - Our company has a data warehouse that is 10 terabytes that we must move into the AWS
cloud. Which service should we use to move this data to the cloud? (91670)
A. Amazon Snowball

82
Q

82 - Our company’s IT auditor needs to have an audit trail of all access to the AWS resources in our
company’s account. Which is the best service to meet this requirement? (9482/7735)
A. AWS CloudWatch C. AWS EC2 Instance Usage Report
B. AWS CloudTrail D. AWS SNS

A

82 - Our company’s IT auditor needs to have an audit trail of all access to the AWS resources in our
company’s account. Which is the best service to meet this requirement? (9482/7735)
C. AWS EC2 Instance Usage Report

83
Q

83 - Which is the feature of tagging?
A. To write our own key / value pairs and attach them to services
B. To tag each service and AWS provides a unique tag key
C. To ask AWS to generate a key pair

A

83 - Which is the feature of tagging?

A. To write our own key / value pairs and attach them to services

84
Q

84 - Which service would be used for “golden images”?

A. EBS Volumes B. Elastic Block Storage C. AMIs D. Amazon Linux

A

84 - Which service would be used for “golden images”?

C. AMIs

85
Q

85 - Which AWS Cloud service is used to turn on MFA? (1230)
A. AWS IAM C. AWS Config
B. Amazon EC2 D. Amazon Inspector

A

85 - Which AWS Cloud service is used to turn on MFA? (1230)

A. AWS IAM

86
Q

86 - Our company would like to create standard templates for deploying our Infrastructure. Which
service can be used? (71765)
A. Amazon Simple Workflow Service C. AWS Cloud Formation
B. AWS Elastic Beanstalk D. AWS OpsWorks

A

86 - Our company would like to create standard templates for deploying our Infrastructure. Which
service can be used? (71765)
D. AWS OpsWorks

87
Q

87 - Our company is deploying a two-tier web application on AWS. We want to provide static
content and make it available to customers via the web tier. What storage solution is best for this?
(91582):
A. Amazon EBS volume C. Amazon EC2 instance store
B. Amazon S3 D. Amazon RDS instance

A

87 - Our company is deploying a two-tier web application on AWS. We want to provide static
content and make it available to customers via the web tier. What storage solution is best for this?
(91582):
B. Amazon S3

88
Q

88 - What is the service that allows us to easily bundle services that are commonly grouped, such
as installation of an app server, web servers, hosts, and programming language support:
A. EMR B. AWS Elastic Beanstalk C. Route 53

A

88 - What is the service that allows us to easily bundle services that are commonly grouped, such
as installation of an app server, web servers, hosts, and programming language support:
B. AWS Elastic Beanstalk

89
Q

89 - The Trusted Advisor service provides insight into what four aspects of usage?
A. Cost reporting, CPU monitoring, edge locations, and storage usage
B. Performance, high availability, network connectivity, and storage usage
C. Performance, cost optimization, network connectivity, and access groups
D. Performance, cost optimization, security improvements, and fault tolerance

A

89 - The Trusted Advisor service provides insight into what four aspects of usage?
D. Performance, cost optimization, security improvements, and fault tolerance

90
Q

90 - Which is not a recommendation type given by the AWS Trusted Advisor?
A. Security B. High Availability
C. Cost Optimization D. Performance

A

90 - Which is not a recommendation type given by the AWS Trusted Advisor?
B. High Availability

91
Q

91 - What is the service provided by AWS that allows us to host Domain Name systems? (11780)
A. Route 53 B. VPC
C. Direct Connect D. VPN

A

91 - What is the service provided by AWS that allows us to host Domain Name systems? (11780)
A. Route 53

92
Q

92 - Your company just started using AWS. They would like to get an idea on how much they have
spent in the last few months. What can they use?
A. Use TCO B. Use Cost Explorer
C. Use Trusted Advisor D. Use CloudWatch

A

92 - Your company just started using AWS. They would like to get an idea on how much they have
spent in the last few months. What can they use?
B. Use Cost Explorer

93
Q

93 - We need to store separate artifacts, such as photos and videos. Which service would the
BEST simple solution for this type of storage?
A. Amazon Elastic Block Store volumes B. Amazon S3
C. Amazon Relational Database

A

93 - We need to store separate artifacts, such as photos and videos. Which service would the
BEST simple solution for this type of storage?
B. Amazon S3

94
Q

94 - What service can we use to display our past distribution of our AWS spending?
A. AWS Cost Explorer B. AWS TCO
C. AWS Trusted Advisor D. AWS WAF

A

94 - What service can we use to display our past distribution of our AWS spending?
A. AWS Cost Explorer

95
Q

95 - Which service is to create server instances or virtual servers in the cloud?
A. AWS Lambda B. AWS Servers
C. AWS EC2 D. AWS Regions

A

95 - Which service is to create server instances or virtual servers in the cloud?
C. AWS EC2

96
Q

96 - What is the best service for storing archived data that is not frequently accessed? (1282)
A. Amazon Storage Gateway B. AWS S3 Reduced Redundancy Storage
C. EBS backed storage connected to EC2 D. Amazon S3 E. Amazon Glacier

A

96 - What is the best service for storing archived data that is not frequently accessed? (1282)
E. Amazon Glacier

97
Q

97 - Your company must deploy videos that will be streamed by users across the world. Which
service can help stream content efficiently across the globe?
A. Amazon EC2 B. Amazon WAF
C. Amazon CloudFront D. Amazon S3

A

97 - Your company must deploy videos that will be streamed by users across the world. Which
service can help stream content efficiently across the globe?
C. Amazon CloudFront

98
Q

98 - Which of the following services helps provide a dedicate connection from our on-prem
environment to the AWS cloud: (1982)
A. AWS VPC B. AWS VPN
C. AWS Direct Connect D. AWS Subnets

A

98 - Which of the following services helps provide a dedicate connection from our on-prem
environment to the AWS cloud: (1982)
C. AWS Direct Connect

99
Q

99 - Which AWS Cloud service helps in quick deployment of resources which can make use of
different programming languages such as .Net and Java? (2912):
A. AWS Elastic Beanstalk B. AWS EC2
C. AWS VPC D. AWS SQS

A

99 - Which AWS Cloud service helps in quick deployment of resources which can make use of
different programming languages such as .Net and Java? (2912):
A. AWS Elastic Beanstalk

100
Q

100 - A company needs to know which user was responsible for terminating several critical EC
Instances. Where can the customer find this information? (860):
A. AWS Trusted Advisor B. Amazon EC2 instance usage report
C. Amazon CloudWatch D. AWS CloudTrail Logs

A

100 - A company needs to know which user was responsible for terminating several critical EC
Instances. Where can the customer find this information? (860):
D. AWS CloudTrail Logs

101
Q

101 - Our company currently uses VM Templates to spin our virtual machines on-prem. Which of
the following can be used in a similar way to spin up EC2 instances on AWS. (81044):
A. EBS Volumes B. EBS Snapshots
C. Amazon Machines Images D. Amazon VMware

A

101 - Our company currently uses VM Templates to spin our virtual machines on-prem. Which of
the following can be used in a similar way to spin up EC2 instances on AWS. (81044):
C. Amazon Machines Images

102
Q

102 - A company wants to store their most frequently used data so that the response time for the
application is improved. Which is the best solution for meeting this requirement? (31808)
A. MySQL installed on two Amazon EC2 Instances in a single Availability Zone
B. Amazon RDS
C. Amazon ElastiCache D. Amazon DynamoDB

A

102 - A company wants to store their most frequently used data so that the response time for the
application is improved. Which is the best solution for meeting this requirement? (31808)
C. Amazon ElastiCache

103
Q

103 - Which service falls into the category of managing “infrastructure as code”: (2783)
A. Using AWS Cloud Formation B. Using AWS Config
C. Using AWS Inspector D. Using AWS Trusted Advisor

A

103 - Which service falls into the category of managing “infrastructure as code”: (2783)
A. Using AWS Cloud Formation

104
Q

104 - Which of the following from AWS can be used to transfer petabytes of data from on-premise
locations to the AWS Cloud. (31114)
A. AWS Import/Export B. AWS EC2
C. AWS Snowball D. AWS Transfer

A

104 - Which of the following from AWS can be used to transfer petabytes of data from on-premise
locations to the AWS Cloud. (31114)
C. AWS Snowball

105
Q

105 - What AWS service has built-in DDoS mitigation? (71368):
A. CloudTrail B. EC2
C. CloudFront D. CloudWatch

A

105 - What AWS service has built-in DDoS mitigation? (71368):
C. CloudFront

106
Q

106 - Our company is moving to the AWS and we want to employ proper security settings. What
tools can we use to assist with security compliance. (CHECK ALL THAT APPLY): (2719)
A. AWS Inspector B. AWS Trusted Advisor
C. AWS Support D. AWS Kinesis

A

106 - Our company is moving to the AWS and we want to employ proper security settings. What
tools can we use to assist with security compliance. (CHECK ALL THAT APPLY): (2719)
A. AWS Inspector B. AWS Trusted Advisor

107
Q

107 - Which of the following can be used to protect against DDoS attacks. (CHECK ALL THAT
APPLY) (71448/11262)
_____ AWS EC2 _____ AWS ELB
_____ AWS Shield or AWS Shield Advanced _____ AWS DMS
_____ Cloud Front

A

107 - Which of the following can be used to protect against DDoS attacks. (CHECK ALL THAT
APPLY) (71448/11262)
_____ AWS Shield or AWS Shield Advanced
_____ Cloud Front

108
Q

108 - Which feature enables fast, easy, and secure transfers of files over long distances between
our client and our Amazon S3 bucket: (61526/3307)
A. File Transfer B. HTTP Transfer
C. S3 Acceleration D. Transfer Acceleration

A

108 - Which feature enables fast, easy, and secure transfers of files over long distances between
our client and our Amazon S3 bucket: (61526/3307)
D. Transfer Acceleration

109
Q

109 - What feature is generally free of charge (CHECK ALL THAT APPLY):
______ Inbound data transfer from the internet
______ Storage used for Elastic Block Storage
______ Outbound data transfer from S3 to CloudFront

A

109 - What feature is generally free of charge (CHECK ALL THAT APPLY):
__X____ Inbound data transfer from the internet
______ Storage used for Elastic Block Storage
__X____ Outbound data transfer from S3 to CloudFront