Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Cloud Practitioner > Practice Exams Questions > Flashcards

Practice Exams Questions Flashcards

1
Q

What are the different gateway types suported by AWS Storage Gateway Service?

A

Tape Gateway, File Gateway, and Block Gateway

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which AWS service helps with global application availability and performance using the AWS global network?

A

Global Accelerator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Which AWS service can be used to store, manage, and deploy docker container images?

A

Amazon Elastic Container Registry (ECR)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

An org must use a hardware device for data encryption ops in the cloud. Which service to use?

A

AWS CloudHSM

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Secure Shell Access to EC2 instances without opening new ports or using public IP addresses?

A

Systems Manager Session Manager

wtf.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Is server side encryption Customer or AWS respsonsibility? (Shared Responsibility Model)

A

Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Shared Respsonsibility: Security and Compliance

Does AWS need to manage physical locations and infrastructure?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

is the service ‘AWS service quotas’ a part of the well-architected framework pillar?

A

Yes

This is a way of configuring limits for services from a single point.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

is AWS Trusted Advisor part of the well-architected framework pillar?

A

yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

For windows based systesms, there is an AWS offering that gives a flexible, fully managed, scalable FS. What is it called?

A

FSx for Windows File Server

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Who is responsible for encrypting data in Amazon RDS? (Shared Respsonsibility Model)

A

The Customer

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Is it recommended to enable MFA for root?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Are the root user access credentials the email address and password used to create the AWS account?

A

Yes

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Does the root account get IAM policies applied to it?

A

NO; root user accesses / permissions cannot be restricted.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is AWS partner network for?

A

identify the right services to build solutions on the AWS cloud.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is AWS service catalog?

A

allows orgs to create and manage catalogs of IT services that are approved for use on AWS. These services can include anything from virtual machine images, servers, software, and databases.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

How many AZ’s does a VPC span?

A

All the AZ’s in the region

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How many AZ’s does a VPC subnet span?

A

Only a single AZ in a given region.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

How many cases can be open under the developer support plan?

A

Only One Contact, but they may have Unlimited cases open

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Access Key and Secret Access are tied to which AWS Identity and access management entitY?

A

IAM user;

Access keys are not applied to roles, groups, or AWS Policies.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Can cloudwatch and SNS be used together to notify staff about CPU utilization on a fleet of EC2 instances?

A

Yes.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Most cost-effective support plan to get 24/7 phone based technical support?

A

Business

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What services does AWS Compute Optimizer evaluate?

A

It helps you identify the optimal resource configs for:
EC2 Instances
EC2 Auto Scaling Groups
EBS Volumes
Lambda Functions

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Elasticity, Availability, and Scalability are described in AWS Well-Architected Framework.

A

False

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Tool for reviewing your workloads against best practices for cost optimization, security, and performance improvement, then obtain ADVICE to architect them better.

A

Trusted Advisor

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

IAM and Cloudfront are global in scope.

A

True

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

AWS S3 is global in scope.

A

False;

This is a shitty trick question beause S3 is in the global namespace, but the individual buckets are regional.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

What is the primary benefit of deploying RDS in a Multi-AZ config?

A

It enhances Database Availability.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

Name the policy that describes prohibited uses of amazons services.

A

Acceptable Use Policy

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

With Elastic Beanstalk, can you deploy code to AWS and have it handle the deployment on it’s own, while still having access to the underlying OS for further enhancements?

A

Yes.

works with:
Java
.Net
PHP
Node.js
Python
Ruby
Go
Docker

Uses servers like:
Apache
Nginx
Passenger
IIS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

Name 3 Services that can help to prevent a DDOS attack

A
  1. Shield
  2. WAF
  3. Cloudfront with Route 53
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

What is Athena?

A

Interactive query service that lets you analyze data in S3 using standard SQL. It’s serverless too, so there is no infra, and you just pay for the queries you run.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Is inbound and outbound data charged for moving data between regions?

A

No, only outbound data is charged.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Explain the difference between a secutiry group and a NACL.

A

A secutiry group acts as a firewall at the instance level, where a NACL acts as a firewall at the subnet level.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q

Provide two options for connecting on-prem networks with AWS Cloud.

A

Direct Connect and AWS VPN

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

Can you use internet gateway to connect on-prem network with AWS Cloud?

A

No

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q

What is Amazon EMR?

A

Used for big data platform . Great for processing huge data using open source tools like HADOOP, or spark on AWS.

Used to be called Elastic Map Reduce

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which Support package includes concierge support team, as well as a response time of about one hour if systems go down

A

Enterprise.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q

Which support plan gives access to a technical account manager?

A

Enterprise.

40
Q

What does AWS inspector do?

A

It’s an automated security assessment service that checks apps for:
- exposure
- vulnerabilities
- deviations from best practices

41
Q

AWS Managed RDS Instances are optimized for what?

A

One of the following:
- Memory
- Performance
- I/O

This means that the AWS managed versions are more performant than customer managed DB’s.

42
Q

What is the highest possible discount for spot instances?

A

90%

43
Q

Which services support reservations to optimize costs?

A
  • DynamoDB
  • EC2 Instances
  • RDS
  • Elasticache
  • Redshift
44
Q

What are advantages of cloud over on site infra?

A
  • Eliminate guessin on infra capacity
  • Trade capital expense for variable expense
45
Q

Which support plan provides architectural guidance contextual to your specific use-cases?

A

Business

I assume enterprise does as well. I suppose it was wrong because it wasn’t the cheapest option to do so.

46
Q

How to handle requirements to encrypt data prior to sending it to AWS S3 buckets?

A

Enable client-side encryption using AWS encryption SDK.

47
Q

What’s a great way to audit AWS ACCOUNT activity?

A

Cloudtrail gives you information that is happening at the account levle, so admin, and potentially service configs actions and what not

48
Q

Give two good means of getting assistance for migrating data and applications to cloud.

A
  • AWS professional services
  • Use the AWS Partner Network to get a custom solution built
49
Q

For a VPC, can security groups contain DENY rules?

A

No

50
Q

For a VPC, does AWS or the customer manage the NAT gateway?

A

AWS

51
Q

HOw can a company have control over creating it’s own encryption keys?

A

Customer Managed CMK

52
Q

Which support plan gives access to infra event management for an additional fee?

A

Business

53
Q

What is something that is a shared responsibility of both the customer AND AWS?

A

Configuration Management:
AWS must maintain the configuration, but the customer is the one who defines it. Therefore it’s the responsibility of both parties.

54
Q

Can you remove an AWS account from an organization if it cannot operate as a stand-alone account?

A

No. It must be able to function as a stand alone.

55
Q

Which services does Shield Advanced protect?

A
  • Route 53
  • Global Accelerator
  • EC2
  • ELB
  • Cloudfront
56
Q

Which service can be used to review HIPAA compliance and governance-related documents?

A

Arfitact

57
Q

Which services support VPC endpoint gateway for private connection from a VPC?

A
  • S3
  • DynamoDB

These are the only two

58
Q

Which support plan gives access to onlne training with self-paced labs?

A

Enterprise.

59
Q

Which support plans give access to guidance, configuration and troubleshooting of AWS Interop with THIRD-PARTY software?

A

Business and Enterprise.

60
Q

How many AZs are in a Region?

A

Two or more.

61
Q

How many discrete centers are in a given AZ?

A

One or more.

62
Q

Which support plas gives access to only 7 core checks from the Trusted Advisor best practice checks?

A
  • Basic
  • Developer
63
Q

Change management tooling:

A
  • Cloudtrail
  • Config
  • Cloudwatch

My understanding of this is that because it will show you which changes have been made, when, and by whom.

64
Q

This service gives you the ability to produce alerts when reservation utilization falls below a set threshold.

A

Budgets

65
Q

At what layer does WAF function?

A

Layer 7 only (http / https)

66
Q

EC2 is an Infrastructure as a service?

A

Yes.

67
Q

Does AWS cloudtrail logs have encryption enabled by default?

A

yes.

68
Q

Does AWS S3 have encryption enabled by default?

A

no.

69
Q

Do cloud apps trade variable expense for capital expense?

A

No, they trade Capital Expense (physica stuff, energy costs) for variable expense (utilization costs)

70
Q

True or False: A Site-to-Site contains a Customer Gateway, and a Virtual Private Gateway?

A

True!

A site to site vpn has the following:
- Virtual Private Gateway
- Transit Gateway
- Customer Gateway
- Customer Gateway Device

71
Q

What is a powerful search tool from AWS that can provide search multiple scattered and huge repositories of text information for specific terms?

A

AWS Kendra

ML service that can search enormous quantities of text information.

72
Q

How long for Snowball to move Terabytes of data?

A

about a week

73
Q

Which AWS Support plan provides general architecture guidance on how services can be used for various use-cases, workloads, or applications?

A

Developer

74
Q

How to receive detailed reports that break down a companies AWS costs by the hour in an S3 Bucket?

A

AWS Cost and Usage Reports

This is the most comprehensive cost and usage data available to the customer.

75
Q

True or False: EC2 Instances can access files on an EFS file system across many availability zones, regions, and VPC’s?

A

True.

76
Q

Amazon Rekognition is capable of quickly resizing images

A

False

Rekognition can identify:
- objects
- people
- text
- scenes
- activities
- facial analysis and search

77
Q

Is AWS WAF a regional scoped service?

A

NO, it is a global scope.

78
Q

For collaborative working environments between VPCs, would it be better to use VPC Peering or AWS Transit Gateway?

A

Transit Gateway

This arranges various VPC’s on a start topology, so a central hub is respsonible when routing between, so complex VPC relationship management is not needed.

79
Q

Which AWS support plan guarantees a response time of 15 minutes when business critical systems are down?

A

Enterprise.

80
Q

What are the types of Budgets?

A

Usage Budget
Reservation Budget
Cost Budget
Savings Plan Budget

81
Q

When an application and it’s data needs migrating to regions that are in a different country, how to approach this?

A

Create resources, migrate data, then applications.

82
Q

True or false: You must activate AWS Generated Tags and User Defined Tags separately before they can appear in Cost Explorer or a cost allocation report

A

True

83
Q

True or False: a tag key must be unique, and each tag key can have only one value

A

True

84
Q

Does a Security Group Automatically allow return traffic?

A

Yes, this is considered stateful

85
Q

NACL (Network Access Control Lists) automatically allow return traffic?

A

No, responses to allowed inbound traffic are subjec to outbound rules. Outbound traffic may be denied.

This is considered stateless.

86
Q

Which AWS Services support high availability by default?

A
  • DynamoDB
  • EFS

There could be more, i didn’t see a comprehensive list.

87
Q

Maintaining infrastructure as code is covered under the well-architected framework. Which pillar?

A
  • Operational Excellence
88
Q

Billing data is stored where always?

A

US East 1 – north virginia

89
Q

How is EFS Chargeed?

A

You pay a fee when you read or write - Infrequent Access Storage Class

90
Q

How is EBS Charged?

A

They are stored incrementally so you are only billed ffor the changed blocks which were stored.

91
Q

How to connect a VPC direct to S3?

A

VPC Endpoint Gateway

92
Q

Trusted advisor provides best practice recommendations for which categories?

A

Cost Optimization and Service Limits

93
Q

Which two services would be used to really dial in cost vs utilization (under utilization specifically)?

A

Trusted Advisor and Cost Explorer

94
Q

Which two services automatically have data encryption enabled?

A

Storage Gateway and S3 Glacier

95
Q

What are the mandatory elements of an IAM Policy?

A

Effect, Action

these are defined in JSON

Cloud Practitioner (1 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions