Practice exam 9 Flashcards
An administrator needs to rapidly deploy a popular IT solution and start using it immediately. Where can the administrator find assistance?
A. AWS Well-Architected Framework documentation.
B. Amazon CloudFront.
C. AWS CodeCommit.
D. AWS Quick Start reference deployments.
D. AWS Quick Start reference deployments.
What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)?
A. It simplifies relational database administration tasks.
B. It provides 99.99999999999% reliability and durability.
C. It automatically scales databases for loads.
D. It enables users to dynamically adjust CPU and RAM resources.
A. It simplifies relational database administration tasks.
Which of the following AWS Cloud services can be used to run a customer-managed relational database?
A. Amazon EC2.
B. Amazon Route 53.
C. Amazon ElastiCache.
D. Amazon DynamoDB.`
A. Amazon EC2.`
A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take?
A. Launch the instances across multiple Availability Zones in a single AWS Region.
B. Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone.
C. Launch the instances in multiple AWS Regions but in the same Availability Zone.
D. Launch the instances as EC2 Spot Instances in the same AWS Region but in different Availability Zones.
A. Launch the instances across multiple Availability Zones in a single AWS Region.
Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?
A. A public and private key-pair.
B. Amazon Inspector.
C. AWS Identity and Access Management (IAM) policies.
D. Security Groups.
C. AWS Identity and Access Management (IAM) policies.
Which AWS service allows companies to connect an Amazon VPC to an on-premises data center? (Select TWO)
A. AWS VPN.
B. Amazon Redshift.
C. API Gateway.
D. Amazon Direct Connect.
A. AWS VPN.
D. Amazon Direct Connect.
Which AWS service or feature can be used to monitor CPU usage?
A. AWS CloudTrail.
B. VPC Flow Logs.
C. Amazon CloudWatch.
D. AWS Config.
C. Amazon CloudWatch.
Which task is AWS responsible for in the shared responsibility model for security and compliance?
A. Granting access to individuals and services.
B. Encrypting data in transit.
C. Updating Amazon EC2 host firmware.
D. Updating operating systems.
C. Updating Amazon EC2 host firmware.
Which of the following security-related actions are available at no cost?
A. Calling AWS Support.
B. Contacting AWS Professional Services to request a workshop.
C. Accessing forums, blogs, and whitepapers.
D. Attending AWS classes at a local university.
C. Accessing forums, blogs, and whitepapers.
Which storage service can be used as a low-cost option for hosting static websites?
A. Amazon Glacier.
B. Amazon DynamoDB.
C. Amazon Elastic File System (Amazon EFS).
D. Amazon Simple Storage Service (Amazon S3).
D. Amazon Simple Storage Service (Amazon S3).
According to the AWS shared responsibility model what is the sole responsibility of AWS?
A. Application security.
B. Edge location management.
C. Patch management.
D. Client-side data.
B. Edge location management.
Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO)
A. Multiple Availability Zones.
B. Performance efficiency.
C. Security.
D. Encryption usage.
E. High availability.
B. Performance efficiency.
C. Security.
Which AWS service identifies security groups that allow unrestricted access to a user’s AWS resources?
A. AWS Trusted Advisor.
B. Amazon Inspector.
C. Amazon CloudWatch.
D. AWS CloudTrail.
A. AWS Trusted Advisor.
Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Select TWO)
A. Use manual monitoring.
B. Use fixed servers.
C. Implement loose coupling.
D. Rely on individual components.
E. Design for scalability.
C. Implement loose coupling.
E. Design for scalability.
When architecting cloud applications, which of the following are a key design principle?
A. Use the largest instance possible.
B. Provision capacity for peak load.
C. Use the Scrum development process.
D. Implement elasticity.
D. Implement elasticity.
A company has deployed several relational databases on Amazon EC2 instances. Every month the database software vendor releases new security patches that need to be applied to the databases. What is the MOST efficient way to apply the security patches?
A. Connect to each database instance on a monthly basis and download and apply the necessary security patches from the vendor.
B. Enable automate patching for the instances using the Amazon RDS console.
C. In AWS Config. configure a rule for the instances and the required patch level.
D. Use AWS Systems Manager to automate database patching according to a schedule.
D. Use AWS Systems Manager to automate database patching according to a schedule.
Which mechanism allows developers to access AWS services from application code?
A. AWS Software Development Kit.
B. AWS Management Console.
C. AWS CodePipeline.
D. AWS Config.
A. AWS Software Development Kit.
Which AWS feature will reduce the customer’s total cost of ownership (TCO)?
A. Shared responsibility security model.
B. Single tenancy.
C. Elastic computing.
D. Encryption.
C. Elastic computing.
Which of the following is a benefit of using the AWS Cloud?
A. Permissive security removes the administrative burden.
B. Ability to focus on revenue-generating activities.
C. Control over cloud network hardware.
D. Choice of specific cloud hardware vendors.
B. Ability to focus on revenue-generating activities.
Which of the following are categories of AWS Trusted Advisor? (Select TWO)
A. Fault Tolerance.
B. Instance Usage.
C. Infrastructure.
D. Performance.
E. Storage Capacity.
A. Fault Tolerance.
D. Performance.