Practice Exam 3 Flashcards
AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the following categories? (Select two)?
- Change Management
- Cost Optimization
- Documentation
- Elasticity
- Service Limits
- Cost Optimization
- Service Limits
An IT company is on a cost-optimization spree and wants to identify all EC2 instances that are under-utilized. Which AWS services can be used off-the-shelf to address this use-case without needing any manual configurations? (Select two)
- AWS Trusted Advisor
- AWS Cost Explorer
- AWS Budgets
- AWS Cost and Usage Reports
- Amazon CloudWatdh
- AWS Trusted Advisor
- AWS Cost Explorer
Which feature of AWS Cloud offers the ability to innovate faster and rapidly develop, test and launch software applications?
- Elasticity
- Cost savings
- Ability to deploy globally in minutes
- Agility
- Agility
Compared to the On-demand prices, what is the highest possible discount offered for reserved instances?
- 40
- 50
- 90
- 72
-72
A research lab wants to optimize the caching capabilities for its scientific computations application running on EC2 instances. Which EC2 storage option is best suited for this use-case?
- Amazon EBS
- Amazon EC2 Instance Store
- Amazon EFS
- Amazon S3
- Amazon EC2 Instance Store
Which of the following statements are true about Cost Allocation Tags in AWS Billing? (Select two)
- For each resource, each tag key must be unique, and each tag key can only have one value
- Tags help in organizing resources and are a mandatory configuration item to run reports
- For each resource, each tag key must be unique, but can have multiple values
- You must activate both AWS generated tags and user-defined tags separately before they can appear in Cost Explorer or on a cost allocation report
- Only user-defined tags need to be activated before they can appear in Cost Explorer or on a cost allocation report.
- For each resource, each tag key must be unique, and each tag key can only have one value
- You must activate both AWS generated tags and user-defined tags separately before they can appear in Cost Explorer or on a cost allocation report
An AWS hardware failure has impacted one of your EBS volumes. Which AWS service will alert you of the affected resources and provide a remedial action?
- AWS Personal Health Dashboard
- AWS Trusted Advisor
- Amazon GuardDuty
- AWS Config
- AWS Personal Health Dashboard
Which AWS service will you use if you have to move large volumes of on-premises data to AWS Cloud from a remote location with limited bandwidth?
- AWS Virtual Private Network (VPN)
- AWS Direct Connect
- AWS Transit Gateway
- AWS Snowball
- AWS Snowball
Which of the following is a part of the AWS Global Infrastructure?
- Subnets
- Region
- Virtual Private Cloud (VPC)
- Virtual Private Network (VPN)
- Region
Which of the following statements are CORRECT regarding Security Groups and Network Access Control Lists (NACLs)? (Select two)
- A NACL is stateful, that is, it automatically allows the return traffic
- A Security Group is stateful, that is, it automatically allows the return traffic
- A Security Group is stateless, that is, the return traffic must be explicitly allowed
- A Security Group contains a numbered list of rules and evaluates those rules in the increasing order while deciding whether to allow thee traffic
- A NACL contains a numbered list of rules and evaluates those rules in the increasing order while deciding whether to allow thee traffic
- A Security Group is stateful, that is, it automatically allows the return traffic
- A NACL contains a numbered list of rules and evaluates those rules in the increasing order while deciding whether to allow thee traffic
A leading research firm needs to access information available in old patents and documents (such as PDFs, Text Files, Word documents, etc) present in its huge knowledge base. The firm is looking for a powerful search tool that can dig into these knowledge resources and return the most relevant files/documents. Which of the following is the correct service to address this requirement?
- Amazon Personalize
- Amazon Lex
- Amazon Kendra
- Amazon Comprehend
- Amazon Kendra
Which AWS service can be used as an in-memory database with high-performance and low latency?
- Amazon Athena
- Amazon RDS
- Amazon DynamoDB
- Amazon ElastiCache
- Amazon ElastiCache
A customer is running a comparative study of pricing models of Amazon EFS and Amazon EBS that are used with the Amazon EC2 instances that host the application. Which of the following statements are correct regarding this use-case? (Select two)
- Amazon EBS Snapshots are stored incrementally, which means you are billed only for the changed blocks stores
- Amazon EC2 data transfer charges will apply for all EBS direct APIs for Snapshots
- Amazon EBS Snapshot storage pricing is based on the amount of space your data consumes in EBS
- With AWS Backup, you pay only for the amount of EFS backup storage you use in a month, you need not pay for restoring this data
- You will pay a fee each time you read from or write data stored on the EFS - Infrequent Access storage class
- Amazon EBS Snapshots are stored incrementally, which means you are billed only for the changed blocks stores
- You will pay a fee each time you read from or write data stored on the EFS - Infrequent Access storage class
According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer (select 2)?
- Compliance validation of Cloud infrastructure
- Operating system patches and updates of an EC2 instance
- AWS Global Network Security
- Ensuring AWS employees cannot access customer data
- Enabling data encryption of data stored in S3 buckets
- Operating system patches and updates of an EC2 instance
- Enabling data encryption of data stored in S3 buckets
An IT company has a hybrid cloud architecture and it wants to centralize the server logs for its EC2 instances and on-premises servers. Which of the following is the MOST effective for this use-case?
- Use AWS Lambda to send log data from EC2 instances as well as on-premises servers to CloudWatch Logs
- Use CloudWatch Logs for the EC2 instance and CloudTrail for the on-premesis servers
- Use CloudTrail for the EC2 instance and CloudWatch Logs for the on-premesis servers
- Use CloudWatch Logs for both the EC2 instance and the on-premesis servers
- Use CloudWatch Logs for both the EC2 instance and the on-premesis servers
Data encryption is automatically enabled for which of the following AWS services? (Select two)?
- Amazon EFS drives
- Amazon EBS volumes
- AWS Storage Gateway
- Amazon Redshift
- Amazon S3 Glacier
- AWS Storage Gateway
- Amazon S3 Glacier
An organization maintains separate VPCs for each of its departments. With expanding business, the organization now wants to connect all VPCs for better departmental collaboration. Which AWS service will help the organization tackle the issue effectively?
- AWS DIrect Connect
- AWS Transit Gateway
- VPC Peering
- Site to Site VPN
- AWS Transit Gateway
Which AWS Support plan provides general architectural guidance on how services can be used for various use-cases, workloads, or applications?
- Enterprise
- Basic
- Developer
- Business
- Developer
An e-commerce company uses AWS Cloud and would like to receive separate invoices for development and production environments. As a Cloud Practioner, which of the following solutions would you recommend for this use-case?
- Create Separate AWS accounts for development and production environments to receive separate invoices
- Tag all resources in the AWS account as either “development” or “production.” Then use the tags to create separate invoices
- Use AWWS Organizations to create separate invoices for development and production environments
- Use AWS Cost Explorer to create separate invoices for development and production environments
- Create Separate AWS accounts for development and production environments to receive separate invoices
Which of the following statements are CORRECT about the AWS Auto Scaling group? (Select two)
- Auto Scaling group scales in and reduces the number of EC2 instances to match a decrease in demand
- Auto Scaling group scales up and upgrades to a more powerful EC2 instance to match an increase in demand
- Auto Scaling group scales down and reduces the number of EC2 instances to match a decrease in demand
- Auto Scaling group scales down and downgrades to a less powerful EC2 instance to match a decrease in demand
- Auto Scaling group scales out and adds more number of EC2 instances to match an increase in demand
- Auto Scaling group scales in and reduces the number of EC2 instances to match a decrease in demand
- Auto Scaling group scales out and adds more number of EC2 instances to match an increase in demand
Which of the following AWS services are regional in scope? (Select two)
- AWS WAF
- AWS Identity and Access Management (IAM)
- AWS Lambda
- Amazon CloudFront
- Amazon Rekognition
- AWS Lambda
- Amazon Rekognition
Most of the services that AWS offers are Region specific. But few services, by definition, need to be in a global scope because of the underlying service they offer. AWS IAM, Amazon CloudFront, Route 53 and WAF are some of the global services.
A financial services enterprise plans to enable Multi-Factor Authentication (MFA) for its employees. For ease of travel, they prefer not to use any physical devices to implement MFA. Which of the below options is best suited for this use case?
- Virtual MFA device
- U2F security key
- Hardware MFA device
- Soft Token MFA device
- Virtual MFA device
Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two)
- AWS is responsible for training AWS and customer employees on AWS products and services
- For an abstracted service, like Amazon S3, AWS operates the infrastructure layer, the operating system, and platforms
- Configuration Management is the responsibility of the customer
- AWS is responsible for security “of” the Cloud
- For a service like Amazon EC2, that falls under infrastructure as a service, AWS is responsible for maintaining guest operating system
- For an abstracted service, like Amazon S3, AWS operates the infrastructure layer, the operating system, and platforms
- AWS is responsible for security “of” the Cloud
An IT company would like to move its IT resources (including any data and applications) from an AWS Region in the US to another AWS Region in Europe. Which of the following represents the correct solution for this use-case?
- The company should just start creating new resources in the destination AWS Region and then migrate the relevant data and applications into this new AWS Region
- The company should use CloudFormation to move the resources (including any data and applications) from the source AWS Region to the destination AWS Region
- The company should raise a ticket with AWS Support for this resource migration
- The company should use Database Migration Service to move the resources (including any data and applications) from source AWS region to destination AWS Region
- The company should just start creating new resources in the destination AWS Region and then migrate the relevant data and applications into this new AWS Region
AWS Lambda pricing is based on which of the following criteria? (Select two)
- The size of the deployment package for the lambda function
- The language runtime of the lambda function
- The number of lines of code for the lambda function
- Number of requests for the lambda function
- The time it takes for the lambda function to execute
- Number of requests for the lambda function
- The time it takes for the lambda function to execute
Which of the following use cases is best suited for Amazon Elastic File System (EFS) Standard–Infrequent Access (Standard–IA) storage class?
- Use as boot volume for highly available Amazon EC2 instances
- Storing files in an accessible location to satisfy audit requirements
- Storing data in a single AWS Availability Zone
- Object storage for workloads that need sub-second latency speeds for accessing the data
- Storing files in an accessible location to satisfy audit requirements