Practice Exam 2 Flashcards

1
Q

A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?

  • Both the VPC and the subnet span only one AZ in the Region
  • A subnet spans all of the AZs in the Region whereas a VPC spans only one AZ in the Region
  • Both the VPC and the subnet span all of the AZs in the Region
  • A VPC spans all of the AZs in the Region whereas a subnet spans only one AZ in the Region
A
  • A VPC spans all of the AZs in the Region whereas a subnet spans only one AZ in the Region
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

A multi-national company wants to migrate its IT infrastructure to AWS Cloud and is looking for a concierge support team as well as a response time of around an hour in case the systems go down. As a Cloud Practitioner, which of the following support plans would you recommend to the company?

  • Business
  • Enterprise
  • Individual
  • Developer
A
  • Enterprise
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)

  • Availability
  • Cost Optimization
  • Reliability
  • Scalability
  • Elasticity
A
  • Cost Optimization

- Reliability

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which of the following statements are correct about the AWS account root user (Select two)

  • It is highly recommended to enable MFA for root user account
  • Root user access credentials are the email address and password used to create the AWS account
  • Root user account password cannot be changed once it is set
    Root user credentials should only be shared with managers requiring administrative responsibilities to complete their jobs
A
  • It is highly recommended to enable MFA for root user account
  • Root user access credentials are the email address and password used to create the AWS account
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which AWS service helps with global application availability and performance using the AWS global network?

  • Elastic Load Balancer
  • Amazon CloudFront
  • Amazon Route 53
  • Global Accelerator
A
  • Global Accelerator
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which of the following statements are true about AWS Lambda? (Select two)

  • AWS Lambda lets you run code without provisioning or managing servers
  • AWS Lambda provides access to the underlying operating system to control its behavior through code
  • You pay for the compute time you consume
  • Allows you to install databases on the underlying serverless OS
  • Allows you to orchestrate and manage Docker containers to facilitate complex containerized applications on AWS
A
  • AWS Lambda lets you run code without provisioning or managing servers
  • You pay for the compute time you consume
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Which of the following is correct about AWS “Developer” Support plan?

  • Allows unlimited contacts to open a limited number of cases per month
  • Allows one contact to open a limited number of cases per month
  • Allows one contact to open unlimited cases
  • Allows unlimited contacts to open unlimited cases
A
  • Allows one contact to open unlimited cases
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which AWS technology/service helps you to scale your resources to match supply with demand while still keeping your cloud solution cost-effective?

  • AWS Auto Scaling
  • AWS CloudFormation
  • AWS Cost Explorer
  • AWS OpsWorks
A
  • AWS Auto Scaling
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?

  • AWS Trusted Advisor
  • AWS Cost Explorer
  • AWS Inspector
  • Amazon CloudWatch
A
  • AWS Trusted Advisor
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the primary benefit of deploying an RDS database in a Multi-AZ configuration?

  • Multi-AZ protects the database from a regional failure
  • Multi-AZ improves database performance for read-heavy workloads
  • Multi-AZ reduces database usage cost
  • Multi-AZ enhances database availability
A
  • Multi-AZ enhances database availability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which AWS support plan provides access to a Technical Account Manager (TAM)?

  • Enterprise
  • Business & Enterprise
  • Business
  • Developer
A
  • Enterprise
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

As per the AWS shared responsibility model, which of the following is a responsibility of the customer from a security and compliance point of view?

  • Managing patches of the guest operating system on Amazon EC2
  • Patching/fixing flaws within the AWS infrastructure
  • Availability Zone infrastructure management
  • Configuration management for AWS global infrastructure
A
  • Managing patches of the guest operating system on Amazon EC2
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which of the following AWS services are always free to use (Select two)?

  • Elastic Compute Cloud (Amazon EC2)
  • AWS Auto Scaling
  • Simple Storage Service (S3)
  • DynamoDB
  • Identity and Access Management (IAM)
A
  • AWS Auto Scaling

- Identity and Access Management (IAM)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two).

  • AWS VPN
  • Internet Gateway
  • Amazon Route 53
  • AWS Direct Connect
  • Amazon VPC
A
  • AWS VPN

- AWS Direct Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two)

  • AWS CloudFormation
  • Amazon CloudWatch
  • AWS CloudTrail
  • AWS Trusted Advisor
  • AWS Service Quotas
A
  • AWS Trusted Advisor

- AWS Service Quotas

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?

  • AWS Web Application Firewall (WAF)
  • Amazon GuardDuty
  • Amazon Inspector
  • Amazon CloudWAtch
A
  • AWS Web Application Firewall (WAF)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which of the following AWS services is essential for implementing security of resources in AWS Cloud?

  • AWS WAF
  • AWS Identity and Access Management (IAM)
  • Amazon CloudWatch
  • AWS Shield
A
  • AWS Identity and Access Management (IAM)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which AWS service would you use to send alerts when the costs for your AWS account exceed your budgeted amount?

  • AWS Budgets
  • AWS Cost Explorer
  • AWS Organizations
  • AWS Pricing Calculator
A
  • AWS Budgets
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A fleet of Amazon EC2 instances spread across different Availability Zones needs to access, edit and share file-based data stored centrally on a system. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

  • Amazon S3
  • EC2 Instance Store
  • Elastic File System (EFS)
  • Elastic Block Store (EBS) VOlume
A
  • Elastic File System (EFS)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

A company wants a fully managed, flexible, and scalable file storage system, with low latency access, for its Windows-based applications. Which AWS service is the right choice for the company?

  • Amazon Elastic File System (Amazon EFS)
  • Amazon Elastic Block Storage (Amazon EBS)
  • Amazon FSx for Windows File Server
  • Amazon FSc for Lustre
A
  • Amazon FSx for Windows File Server
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

An e-commerce company wants to assess its applications deployed on EC2 instances for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?

  • AWS Trusted Advisor
  • AWS CloudHSM
  • AWS Secrets Manager
  • Amazon Inspector
A
  • Amazon Inspector
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

AWS Compute Optimizer delivers recommendations for which of the following AWS resources? (Select two)

  • Amazon EC2 instances, Amazon EFC
  • Amazon EC2 Instances, Amazon EC2 Auto Scaling Groups
  • AWS Lambda functions, S3
  • Amazon EFS, AWS Lambda functions
  • Amazon EBS volumes, AWS Lambda functions
A
  • Amazon EC2 Instances, Amazon EC2 Auto Scaling Groups

- Amazon EBS volumes, AWS Lambda functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?

  • Amazon Kinesis Data Stream
  • Amazon MQ
  • Amazon Simple Queue Service (SQS)
  • Amazon Simple Notification Service (SNS)
A
  • Amazon MQ
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Multi AZ (Availability Zone) deployment is an example of which of the following?

  • Vertical Scaling
  • Performance Efficiency
  • High Availability
  • Horizontal Scaling
A
  • High Availability
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management entities?

  • AWS Policy
  • IAM Role
  • IAM Group
  • IAM User
A
  • IAM User
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?

  • AWS Secrets Manager
  • AWS Cost Explorer
  • AWS Organizations
  • AWS Budgets
A
  • AWS Organizations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model?

  • Mixed deployment
  • Private deployment
  • Cloud deployment
  • Hybrid deployment
A
  • Hybrid deployment
28
Q

An online gaming company wants to block users from certain geographies from accessing its content. Which AWS services can be used to accomplish this task? (Select two)

  • CloudWatch
  • AWS Protect
  • AWS Shield
  • AWS WAF
  • Route 53
A
  • Route 53
29
Q

Which of the following are examples of Horizontal Scalability (aka Elasticity)? (Select two)

  • Modify a Database instance to higher CPU and RAM
  • Elastic Load Balancing
  • Read Replicas in Amazon RDS
  • Modify an EC2 instance type from t2.nano to u-12tb1.metal
  • Add a bigger CPU to a computer
A
  • Elastic Load Balancing

- Read Replicas in Amazon RDS

30
Q

Which of the following is the correct statement regarding the AWS Storage services?

  • S3 is object based storage, EBS is block based storage and EFS is file based storage
  • S3 os object based storage, EBS is file based storage, and EFS is block based storage
  • S3 is block based storage, EBS is object based storage, and EFS is file based storage
  • S3 is file based storage, EBS is block based storage, and EFS is object based storage
A
  • S3 is object based storage, EBS is block based storage and EFS is file based storage
31
Q

An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?

  • AWS Service Catalog
  • AWS Config
  • AWS CloudTrail
  • AWS CloudFormation
A
  • AWS Config
32
Q

Which AWS service can be used to store, manage, and deploy Docker container images?

  • Amazon Lambda
  • Amazon Elastic Container Service (ECS)
  • Amazon EC2
  • Amazon Elastic Container Registry (ECR)
A
  • Amazon Elastic Container Registry (ECR)
33
Q

A company’s flagship application runs on a fleet of Amazon EC2 instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to AWS EC2 instances without opening new ports or using public IP addresses.

Which tool/service will help you achieve this requirement?

  • Amazon Inspector
  • Amazon Route 53
  • Amazon EC2 Instance Connect
  • AWS Systems Manager Session Manager
A
  • AWS Systems Manager Session Manager
34
Q

Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them?

  • Resiliency
  • Elasticity
  • Reliability
  • Durability
A
  • Elasticity
35
Q

An organization is planning to move its infrastructure from the on-premises datacenter to AWS Cloud. As a Cloud Practioner, which options would you recommend so that the organization can identify the right AWS services to build solutions on AWS Cloud (Select two)?

  • Amazon CloudWatch
  • AWS Service Catalog
  • AWS Partner Network
  • AWS Organizations
  • AWS CloudTrail
A
  • AWS Service Catalog

- AWS Partner Network

36
Q

Which of the following statement is correct for a Security Group and a Network Access Control List?

  • Security Group acts as a firewall at the instance level whereas Network Access Control List acts as a firewall at the subnet level
  • Security Group acts as a firewall at the VPClevel whereas Network Access Control List acts as a firewall at the AZ level
  • Security Group acts as a firewall at the subnet level whereas Network Access Control List acts as a firewall at the instance level
  • Security Group acts as a firewall at the AZ level whereas Network Access Control List acts as a firewall at the VPClevel
A

Security Group acts as a firewall at the instance level whereas Network Access Control List acts as a firewall at the subnet level

37
Q

A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon S3. The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on S3?

  • Use S3 Standard to store the thumbnails
  • Use S3 Standard Infrequent Access (Standard-IA) to store the thumbnails
  • Use S3-One-Zone Infrequent Access (One-Zone IA) to store the thumbnails
  • Use S3 Glacier to store the thumbnails
A
  • Use S3-One-Zone Infrequent Access (One-Zone IA) to store the thumbnails
38
Q

A data analytics company has some data stored on Amazon S3 and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for this use case?

  • Dynamo DB
  • Amazon Athena
  • Amazon Aurora
  • Redshifr
A
  • Amazon Athena
39
Q

An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)

  • Systems Manager
  • EC2 Instance
  • Step Function
  • CloudWatch
  • Lambda
A
  • CloudWatch

- Lambda

40
Q

Which of the following statements is INCORRECT about AWS Auto Scaling?

  • You can automatically remove unhealthy instance
  • You can automatically deploy AWS Shield when a DDoS attack is detected
  • You can scale out and add more EC2 instances to match an increase in demand as well as scale in and remove EC2 instances to match reduced demand
  • You can automatically register new instances to a Load Balancee
A
  • You can automatically deploy AWS Shield when a DDoS attack is detected
41
Q

Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?

  • AWS Marketplace
  • AWS Systems Manager
  • AWS Config
  • AWS OpsWorks
A
  • AWS Marketplace
42
Q

The engineering team at an IT company wants to monitor the CPU utilization for its fleet of EC2 instances and send an email to the administrator if the utilization exceeds 80%. As a Cloud Practitioner, which AWS services would you recommend to build this solution? (Select two)

  • SNS
  • CloudTrail
  • SQS
  • CloudWatch
  • Lambda
A
  • SNS

- CloudWatch

43
Q

Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)

  • Amazon Inspector
  • AWS SHield
  • AWS WAF
  • Amazon CloudFront with Route 53
  • AWS Trusted Advisor
  • AWS CloudHSM
A
  • AWS SHield
  • AWS WAF
  • Amazon CloudFront with Route 53
44
Q

Which policy describes prohibited uses of the web services offered by Amazon Web Services?

  • AWS Trusted Advisor
  • AWS Fair Use Policy
  • AWS Acceptable Use Policy
  • AWS Applicable Use Policy
A
  • AWS Acceptable Use Policy
45
Q

A startup is looking for 24x7 phone based technical support for his AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?

  • Enterprise
  • Business
  • Developer
  • Basic
A
  • Business
46
Q

Which of the following statement is correct regarding the AWS pricing policy for data transfer charges into or out of an AWS Region?

  • Neither inbound nor outbound data transfer are charged
  • Only inbound data transfer is charged
  • Only outbound data transfer is charged
  • Both inbound data transfer and outbound data transfer are charged
A
  • Only outbound data transfer is charged
47
Q

Which of the following AWS services are global in scope? (Select two)

  • S3
  • Amazon CloudFront
  • IAM
  • RDS
  • EC2
A
  • Amazon CloudFront

- IAM

48
Q

A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations.

Which AWS technology/service will provide the necessary low-latency access to the end-users?

  • AWS Wavelength
  • AWS Direct Connect
  • AWS Local Zones
  • AWS Edge Locations
A
  • AWS Local Zones
49
Q

Which AWS EC2 pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?

  • Spot Instances
  • Dedicated Hosts
  • On-demand instances
  • Reserved Instances
A
  • On-demand instances
50
Q

Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?

  • AWS Secrets Manager
  • AWS Key Management Service (KMS)
  • AWS Trusted Advisor
  • AWS CloudHSM
A
  • AWS CloudHSM
51
Q

Which AWS compute service provides the EASIEST way to access resizable compute capacity in the cloud with support for per-second billing and access to the underlying OS?

  • EC2
  • ECS
  • Amazon Lightsail
  • Lambda
A
  • EC2
52
Q

Which of the following use-cases is NOT supported by Amazon Rekognition?

  • Label objects in a photo
  • Detect text in a photo
  • Identify person in a photo
  • Quickly resize photos to create thumbnails
A
  • Quickly resize photos to create thumbnails
53
Q

Which AWS Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience?

  • Failover routing policy
  • SImple routing policy
  • Latency routing policy
  • Weighted routing policy
A
  • Latency routing policy
54
Q

Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?

  • Amazon CloudWatch
  • AWS Personal Health Dashboard
  • AWS Service Health Dashboard
  • AWS Inspector
A
  • AWS Personal Health Dashboard
55
Q

Which of the following AWS services comes under the Software as a Service (SaaS) Cloud Computing Type?

  • Amazon Rekognition
  • Amazon EC2
  • AWS Elastic Beanstalk
  • Elastic Load Balancing
A
  • Amazon Rekognition
56
Q

What are the different gateway types supported by AWS Storage Gateway service?

  • Tape Gateway, Object Gateway, and Volume Gateway
  • Object Gateway, File Gateway, and Block Gateway
  • Tape Gateway, File Gateway, and Volume Gateway
  • Tape Gateway, File Gateway, and Block Gateway
A
  • Tape Gateway, File Gateway, and Volume Gateway
57
Q

Which AWS service can be used to provision resources to run big data workloads on Hadoop clusters?

  • AWS Step Function
  • Amazon EC2
  • Amazon EMR
  • AWS Batch
A
  • Amazon EMR

mazon EMR is the industry-leading cloud big data platform for processing vast amounts of data using open source tools such as Hadoop, Apache Spark, Apache Hive, Apache HBase, Apache Flink, Apache Hudi, and Presto. Amazon EMR can be used to provision resources to run big data workloads on Hadoop clusters.

58
Q

Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?

  • Amazon Elastic Container Service - EC2 launch type
  • Amazon Elastic Compute Cloud (EC2)
  • AWS Lambda
  • Amazon Elastic Container Service - Fargate launch type
A
  • Amazon Elastic Container Service - Fargate launch type
59
Q

Which of the following options can be used to access and manage all AWS services (Select three)?

  • AWS Secrets Manager
  • AWS Management Console
  • Amazon API Gateway
  • AWS Systems Manager
  • AWS Software Developer Kit (SDK)
  • AWS Command Line Interface (CLI)
A
  • AWS Management Console
  • AWS Software Developer Kit (SDK)
  • AWS Command Line Interface (CLI)
60
Q

As per the AWS shared responsibility model, which of the following is a responsibility of AWS from a security and compliance point of view?

  • Edge Location Management
  • Identity and Access Management
  • Server-side Encryption
  • Customer Data
A
  • Edge Location Management
61
Q

Which AWS service publishes up-to-the-minute information on the general status and availability of all AWS services in all the Regions of AWS Cloud?

  • AWS CLoudFormation
  • AWS Service Health Dashboard
  • Amazon CloudWatch
  • AWS Personal Health Dashboard
A
  • AWS Service Health Dashboard
62
Q

According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?

  • Managing the underlying server hardware on which RDS runs
  • Applying patches to the RDS database
  • Applying patches to the underlying OS
  • Database encryption
A
  • Database encryption
63
Q

What are the fundamental drivers of cost with AWS Cloud?

  • Compute, Storage, and Inbound Data Transfer
  • Compute, Databases, and Inbound Data Transfer
  • Compute, Databases, and Outbound Data Transfer
  • Compute, Storage, and Outbound Data Transfer
A
  • Compute, Storage, and Outbound Data Transfer
64
Q

Which of the following AWS services allows a database to have flexible schema and supports document data models?

  • Amazon Redshift
  • Amazon Aurora
  • Amazon DynamoDB
  • Amazon RDS for PostreSQL
A
  • Amazon DynamoDB
65
Q

A developer has written a simple web application in PHP and he wants to just upload his code to AWS Cloud and have AWS handle the deployment automatically but still wants access to the underlying operating system for further enhancements. As a Cloud Practioner, which of the following AWS services would you recommend for this use-case?

  • Amazon EC2
  • AWS ELastic Beanstalk
  • AWS CloudFormation
  • AWS Elastic Container Service (ECS)
A
  • AWS ELastic Beanstalk