Practice Test 2 Study Flashcards
The engineering team at an IT company wants to monitor the CPU utilization for its fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances and send an email to the administrator if the utilization exceeds 80%. As a Cloud Practitioner, which AWS services would you recommend to build this solution? (Select two)
- Amazon Simple Notfication System (SNS)
- Amazon Simple Queue Service (SQS)
- Amazon CloudWatch
- AWS Lambda
- AWS CloudTrail
1- Amazon Simple Notification Service (SNS)
3- Amazon CloudWatch
A startup is looking for 24x7 phone based technical support for its AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?
- AWS Developer Support
- AWS Business Support
- AWS Enterprise Support
- AWS Enterprise On-Ramp Support
4- AWS Enterprise On-Ramp Support
You should use the AWS Business Support plan if you have production workloads on AWS and want 24x7 phone, email and chat access to technical support and architectural guidance in the context of your specific use-cases. AWS Business Support plan is the MOST cost-effective option for the given use-case.
A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?
- Amazon MQ
- Amazon Simple Queue Service (SQS)
- Amazon Kinesis Data Streams
- Amazon Simple Notification Service (SNS)
1- Amazon MQ (Message Queue)
A company’s flagship application runs on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to Amazon Elastic Compute Cloud (Amazon EC2) instances without opening new ports or using public IP addresses.
Which tool/service will help you achieve this requirement?
- AWS Systems Manager Session Manager
- Amazon Elastic Compute Cloud (Amazon EC2) Instance Connect
- Amazon Inspector
- Amazon Route 53
1- AWS Systems Manager Session Manager
AWS Systems Manager Session Manager is a fully-managed service that provides you with an interactive browser-based shell and CLI experience. It helps provide secure and auditable instance management without the need to open inbound ports, maintain bastion hosts, and manage SSH keys. AWS Systems Manager Session Manager helps to enable compliance with corporate policies that require controlled access to instances, increase security and auditability of access to the instances while providing simplicity and cross-platform instance access to end-users.
Which of the following statement is correct for a Security Group and a Network Access Control List (Network ACL)?
- Security Group acts as a firewall at the instance level whereas Network Acces Control List (Network ACL) acts as a firewall at the subnet level
- Security Group acts as a firewall at the subnet level whereas Network Access Control List (Network ACL) acts as a firewall at the instance level
- Security Group acts as a firewall at the VPC level whereas Network Access Control List (Network ACL) acts as a firewall at the Availability Zone (AZ) level
- Security Group acts as a firewall at the Availability Zone (AZ) level whereas Network Access Control List (Network ACL) acts as a firewall at the VPC level
- Security Group acts as a firewall at the instance level whereas Network Access Control List (Network ACL) acts as a firewall at the subnet level
- A security group acts as a virtual firewall for your instance to control inbound and outbound traffic.
- Each subnet in your VPC must be associated with a network ACL
AWS Compute Optimizer delivers recommendations for which of the following AWS resources? (Select two)
- Amazon EC2 instances, Amazon EFS
- Amazon EFS, AWS Lambda functions
- Amazon EC2 instances, Amazon EC2 Auto Scaling groups
- AWS Lambda functions, Amazon S3
- Amazon EBS, AWS Lambda functions
3- Amazon EC2, Amazon EC2 Auto Scaling groups
5- Amazon EBS, AWS Lambda functions
Which Amazon Elastic Compute Cloud (Amazon EC2) pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?
- Reserved Instance (RI)
- Spot Instance
- Dedicated Host
- On-demand Instance
4- On-demand instance
An On-Demand Instance is an instance that you use on-demand. You have full control over its lifecycle — you decide when to launch, stop, hibernate, start, reboot, or terminate it. There is no long-term commitment required when you purchase On-Demand Instances. There is no upfront payment and you pay only for the seconds that your On-Demand Instances are running. The price per second for running an On-Demand Instance is fixed. On-demand instances cannot be interrupted.
What is the primary benefit of deploying an Amazon RDS Multi-AZ database with one standby?
- Amazon RDS Multi-AZ enhances database availability
- Amazon RDS Multi-AZ reduces database usage costs
- Amazon RDS Multi-AZ protects the database from a regional failure
- Amazon RDS Multi-AZ improves database performance for read-heavy workloads
1- Amazon RDS Multi-AZ enhances database availability
NOT protecting from a regional failure
A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations.
Which AWS technology/service will provide the necessary low-latency access to the end-users?
- AWS Direct Connect
- AWS Wavelength
- AWS Edge Locations
- AWS Local Zones
4- AWS Local Zones
AWS Local Zones allow you to use select AWS services, like compute and storage services, closer to more end-users, providing them very low latency access to the applications running locally.
(An AWS Edge location is a site that CloudFront uses to cache copies of the content for faster delivery to users at any location.)
An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)
- AWS Lambda
- Amazon Eventbridge
- AWS Step Function
- AWS Systems Manager
- Amazon EC2
1- AWS Lambda
2- Amazon Eventbridge
Amazon EventBridge is a serverless service that provides real-time access to changes in data in AWS services, your own applications, and software as a service (SaaS) applications without writing code.
An e-commerce company wants to store data from a recommendation engine in a database. As a Cloud Practioner, which AWS service would you recommend to provide this functionality with the LEAST operational overhead for any scale?
- Amazon S3
- Amazon RDS
- Amazon DynamoDB
- Amazon Neptune
3- Amazon DynamoDB
Amazon Neptune is a fully managed database service built for the cloud that makes it easier to build and run graph applications. It’s not the right fit to store recommendation results with the LEAST operational overhead for any scale.
What are the different gateway types supported by AWS Storage Gateway service?
- Object Gateway, File Gateway and Block Gateway
- Tape Gateway, File Gateway and Block Gateway
- Tape Gateway, Object Gateway and Volume Gateway
- Tape Gateway, File Gateway and Volume Gateway
4- Tape Gateway, File Gateway, Volume Gateway
AWS Storage Gateway service provides three different types of gateways – Tape Gateway, File Gateway, and Volume Gateway – that seamlessly connect on-premises applications to cloud storage, caching data locally for low-latency access.
As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?
- Customer Data
- IAM
- Server-side Encryption (SSE)
- Edge Location Management
Edge location management
AWS is responsible for security “of” the cloud. This covers their global infrastructure elements including Regions, Availability Zones (AZ), and Edge Locations.
Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two)?
- AWS Direct Connect
- Amazon VPC
- AWS VPN
- Amazon Route 53
- Internet Gateway
1- AWS Direct Connect
3- AWS Virtual Private Network (VPN)
AWS Virtual Private Network (VPN) solutions establish secure connections between on-premises networks, remote offices, client devices, and the AWS global network.
Which of the following statements are correct about the AWS root user account? (Select two)
- Root user access creds are the email address and password used to create the AWS account
- Root user access password cannot be changed once it’s set
- Root user account gets unrestricted permissions when the account is created, but these can be restricted using IAM policies
- Root user creds should only be shared with managers requiring administrative responsibilities to complete their jobs
- It is highly recommended to enable MFA for root user account
1- Root user access credentials are the email address and password used to create the AWS account
5- It is highly recommended to enable MFA for root user account
