Practice Test Questions

Question 1

Which cloud computing model offers fundamental building blocks that can be rented?

Answer 1

Infrastructure as a Service (IaaS)

IaaS offers building blocks that can be rented. EC2 is an example of IaaS.

Question 2

Which cloud computing model if often used by developers to develop software using web-based tools?

Answer 2

Platform as a Service (PaaS)

Question 3

What deployment model allows companies to migrate and extend their on-premises VMware vSphere-based environments to AWS Cloud using Amazon EC2?

Answer 3

Hybrid deployments connect infrastructure and applications between cloud-based resources and existing resources that are not located in the cloud.

VMware Cloud on AWS is an example of a hybrid deployment, since it involves the on-premises environments of VMware and the cloud-based services of AWS.

Question 4

A telecommunications company wants to develop a business case for moving its IT applications and infrastructure to AWS. The company’s leadership understands the agility value of the cloud, but the finance group is not interested in shifting capital expense to operating expense due to the company’s tax structure. What business case would satisfy everyone at the company?

Answer 4

Suggest that the company make Reserved Instance purchases and capitalize them.

Many companies capitalize Reserved Instance purchases, especially those with 3-year terms.

Question 5

A distinct location within a geographic area designed to provide high availability to a specific geography is called a ___________.

Answer 5

A Region is a distinct location within a geographic area designed to provide high availability to a specific geography. Regions are a key concept in AWS’ Global Infrastructure — each is made up of 1 or more isolated (within that Region) Availability Zones. There are often multiple AWS Regions on each continent, such as North America.

Question 6

What is the most efficient way for a customer to continuously monitor CloudTrail event logs, Amazon VPC Flow Logs, and DNS logs looking for unauthorized behavior?

Answer 6

GuardDuty is an intelligent threat detection system that uncovers unauthorized behavior.

note: While a CloudWatch alarm can be created to monitor logs, like VPC Flow Logs, it is not the most efficient way.

Question 7

Which security service provides enhanced protections and 24/7 access to AWS experts for a fee when issues arise?

Answer 7

AWS Shield Advanced

AWS Shield Advanced provides enhanced protections and 24/7 access to AWS experts for a fee.

Question 8

In Identity and Access Management (IAM), which term applies to a person or application that uses the AWS account root user, an IAM user, or an IAM role to sign in and make requests to AWS?

Answer 8

Principal

A principal is a person or application that uses the AWS account root user, an IAM user, or an IAM role to sign in and make requests to AWS.

Question 9

You have a read-heavy application workload resulting in I/O-intensive Amazon RDS database queries. Which service is most suitable to improve performance?

Answer 9

ElastiCache

You can use ElastiCache to store the results of often-used queries, and this will allow quicker retrieval of this data.

Question 10

What allows you to access AWS services from popular programming languages like Java, Python, and C#?

Answer 10

Software development kits

Software development kits (or SDKs) provide everything you need to develop and manage applications in AWS, including the programming language of your choice.

Question 11

What AWS services gives you a personalized view of the performance and availability of the AWS services underlying your AWS resources, alerting you and providing remediation guidance when AWS is experiencing events that may affect you?

Answer 11

AWS Personal Health Dashboard

AWS Personal Health Dashboard gives you a personalized view of the performance and availability of the AWS services underlying your AWS resources.

Question 12

What can help recommend changes to your environment based on some AWS best practices?

Answer 12

Trusted Advisor

Question 13

Which services can host a MariaDB database?

Answer 13

RDS

RDS supports several popular database engines: Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and SQL Server.

EC2

For complete control of a database, you can install the database software directly on an EC2 instance.

Question 14

What is a relational database compatible with MySQL and PostgreSQL that was created by AWS?

Answer 14

Aurora

Question 15

A company would like to implement a hybrid storage model where they connect on-premises data storage to storage in the AWS Cloud in order to move their backups to the cloud. What is the best and most efficient way to achieve this?

Answer 15

Storage Gateway

Storage Gateway is a hybrid storage service that allows you to connect on-premises and cloud data.

note: While Direct Connect supports a hybrid model, it’s not the best and most efficient solution.

Question 16

How does S3 Transfer Acceleration help you get your data into S3 quicker?

Answer 16

By using AWS’ network of edge locations to upload to a location closest to you before taking the most optimal path within AWS’ network

S3 Transfer Acceleration uses AWS’ network of edge locations to ingest data, and then uses the most optimal path within its own network to reach S3. Although compression and splitting data up before upload can also help speed things up, these are not offered by Transfer Acceleration. AWS does not let you send in data on your own disks, and although Snowball does let you send data in without going across the internet, it is only useful when working with massive amounts of data.

Question 17

A company would like to automate the configuration of its servers and deploy code to servers in the cloud and on-premises. Which service meets the requirement?

Answer 17

OpsWorks

OpsWorks allows you to use Chef or Puppet to automate the configuration of your servers and deploy code on-premises or the cloud.

Question 18

A healthcare agency needs to store certain patient information for up to 10 years. To save cost, they want to archive this data to cheaper storage. The data needs to be retrieved within 12 hours. Which is the cheapest option?

Answer 18

Glacier Deep Archive

Glacier Deep Archive meets the requirement and is the cheapest option.

Question 19

You have a short-term computing task to complete. It is essential that this task run uninterrupted from start to finish. Which is the best EC2 option for this task?

Answer 19

On-Demand Instance

No commitment
No upfront costs
highly flexible
suitable for short term projects

Question 20

In the AWS Global Infrastructure, which components are physically separated and connected through low-latency links, enabling fault tolerance and high availability?

Answer 20

Availability Zones

Availability Zones (AZs) are connected among themselves in a single Region. They are physically separated, connected through low-latency links, fault tolerant, and allow high availability.

Question 21

What can you use to resolve the connection between your on-premises VPN and your AWS virtual private cloud?

Answer 21

An Amazon VPC Site-to-Site VPN connection can link your data center (or network) to your Amazon Virtual Private Cloud (VPC). A customer gateway is an anchor on your side of that connection. It can be a physical or software appliance. The anchor on the AWS side of the VPN connection is called a virtual private gateway.

Amazon Route 53 is a highly available and scalable cloud Domain Name System (DNS) web service. It is designed to give developers and businesses an extremely reliable and cost-effective way to route end users to Internet applications by translating names like www.tutorialsdojo.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other.

This service can also help you create a hybrid cloud architecture using the Amazon Route 53 Resolver, which provides recursive DNS for your Amazon VPC and on-premises networks over AWS Direct Connect or a VPN solution.

Question 22

Which service is the most suitable one to use to store the results of I/O-intensive SQL database queries to improve application performance?

Answer 22

Amazon ElastiCache offers fully managed Redis and Memcached. Seamlessly deploy, run, and scale popular open source compatible in-memory data stores. With this service, you can build data-intensive apps or improve the performance of your existing apps by retrieving data from high throughput and low latency in-memory data stores.

Question 23

Which service is capable of inspecting your AWS environment and making recommendations to lower expenditures, improve system performance and reliability, and close security gaps?

Answer 23

AWS Trusted Advisor is an online tool that provides you real-time guidance to help you provision your resources following AWS best practices. It inspects your AWS environment and makes recommendations for saving money, improving system performance and reliability, or closing security gaps.

Whether establishing new workflows, developing applications, or as part of ongoing improvement, take advantage of the recommendations provided by Trusted Advisor on a regular basis to help keep your solutions provisioned optimally.

Question 24

What Amazon EC2 instance purchasing option can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses?

Answer 24

An Amazon EC2 Dedicated Host is a physical server with EC2 instance capacity fully dedicated to your use. Dedicated Hosts can help you address compliance requirements and reduce costs by allowing you to use your existing server-bound software licenses.

Dedicated Hosts allow you to use your existing per-socket, per-core, or per-VM software licenses, including Microsoft Windows Server, Microsoft SQL Server, SUSE Linux Enterprise Server, Red Hat Enterprise Linux, or other software licenses that are bound to VMs, sockets, or physical cores, subject to your license terms.

Question 25

Which type of Elastic Load Balancer supports path-based routing, host-based routing, and bi-directional communication channels using WebSockets?

Answer 25

Application Load Balancer – This is best suited for load balancing of HTTP and HTTPS traffic and provides advanced request routing targeted at the delivery of modern application architectures, including microservices and containers. Operating at the individual request level (Layer 7), Application Load Balancer routes traffic to targets within Amazon Virtual Private Cloud (Amazon VPC) based on the content of the request.

Question 26

________ describes the ability to scale computing resources out or in easily, while only paying for the resources used.

Answer 26

Elasticity

Question 27

What service allows you to connect a private cloud to a public cloud?

Answer 27

Direct Connect

Direct Connect is a dedicated physical network connection from your on-premises data center to AWS.

Question 28

A company on the Business Support plan currently runs all their applications in a single Region. They have made the decision to expand to multiple Regions. What is the process to start deploying their applications to the new Regions?

Answer 28

Just start deploying the applications to the new Regions.

You are free to deploy your applications to new Regions. Don’t forget: CloudFormation can make the process of provisioning resources easier and repeatable.

Question 29

A system’s ability to grow to accommodate an increase in demands is an example of which cloud concept?

Answer 29

Scalability

Scalability is the concept that describes a measurement of a system’s ability to grow to accommodate an increase in demand. Successful, growing, systems often see an increase in demand over time. A system that is scalable can adapt to meet this new level of demand.

Question 30

________ is AWS’ managed DDoS protection service

Answer 30

AWS Shield

AWS Shield is AWS’ managed DDoS protection service at Layer 4.

Question 31

_________ refers to the Identity and Access Management (IAM) resource objects that AWS uses for authentication.

Answer 31

Entities

IAM entities are the users (IAM users and federated users) and roles that are created and used for authentication.

Question 32

You are using your corporate directory to grant your users access to AWS services. What is this called?

Answer 32

Federated access

Federated access is when you use an external directory, such as your corporate one, to grant users in that directory access to AWS resources.

Question 33

A company has a large number of S3 buckets and needs to manage and automate tasks on these buckets at one time. Which AWS feature can do this?

Answer 33

Resource groups

You can use resource groups to organize your AWS resources. Resource groups make it easier to manage and automate tasks on large numbers of resources at one time. This guide shows you how to create and manage AWS resource groups.

Question 34

__________ compute services is ideal if you need to run a simple website or a simple e-commerce application.

Answer 34

Lightsail is ideal for simple websites or simple e-commerce applications.

Question 35

You’ve been tasked with assessing your AWS infrastructure in terms of cost optimization. Which of the following AWS services would help with this task?

Answer 35

Trusted Advisor

AWS Trusted Advisor is an online tool that provides you with real-time guidance to help you provision your resources following AWS best practices.

Question 36

Using Infrastructure as Code (IaC) is related to which cloud concept?

Answer 36

Automation

Infrastructure as Code is a key implementation of automation in cloud - using Infrastructure as Code allows you to quickly and easily deploy and manage your environment without reliance on humans to complete all the tasks.

Question 37

The load on your application fluctuates by day of the week. Wednesdays have the most traffic, and Saturdays have the least traffic. Which AWS service allows you to ensure you have the correct amount of compute capacity while also optimizing on a cost basis?

Answer 37

Auto Scaling

Auto Scaling allows you to add or remove EC2 instances based on conditions you specify. Auto Scaling events can be scheduled to meet predictable changes in the load on your application.

Question 38

A company has developed a popular online multiplayer gaming application. How can the company enhance its players’ online experience and improve overall application availability and reduce in-game latency?

Answer 38

Global Accelerator

Global Accelerator can improve the experience by routing player traffic along with the private AWS global network to the fastest instance of your application. Player traffic is not negatively impacted by internet congestion and local outages.

Question 39

With which AWS service, coupled with EC2, can you implement elasticity by adding and removing instances as needed?

Answer 39

Auto Scaling

Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance.

Question 40

A customer provisioned an on-demand EC2 instance using a Linux AMI. The instance ran for 10 hours, 3 minutes, and 7 seconds before the user terminated it. How much time will the customer be billed for?

Answer 40

10 hours, 3 minutes, and 7 seconds

You are billed down to the second for an EC2 instance.

Question 41

When you pay a subscription fee to a hosting company to serve your website on an instance you manage, which cloud computing model are you using?

Answer 41

Infrastructure as a Service (IaaS)

IaaS offers building blocks that can be rented. When you pay a web hosting fee, you’re using IaaS.

Question 42

When you access tools provided to build a storefront application that runs on another company’s server, which cloud computing model are you using?

Answer 42

Platform as a Service (PaaS)

PaaS is often used by developers to develop software using web-based tools.

Question 43

You would like to give an application running on one of your EC2 instances access to an S3 bucket. What is the best way to implement this?

Answer 43

Assign the instance an IAM role

The recommended method to assign permissions to apps running in EC2 is to use IAM roles.

Question 44

For which services is DDoS protection via AWS Shield Advanced supported?

Answer 44

CloudFront
Route 53
Elastic Load Balancing

Question 45

Which AWS service allows the deployment of resources in code templates, otherwise known as Infrastructure as Code?

Answer 45

CloudFormation

CloudFormation allows you to provision AWS resources using Infrastructure as Code (IaC)

Question 46

A gaming company is using the AWS Developer Tools suite to develop, build, and deploy their applications. Which AWS service can be used to trace user requests from end to end through the application?

Answer 46

AWS X-Ray

AWS X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components. You can use X-Ray to analyze from simple three-tier applications to complex microservices applications consisting of thousands of services.

Question 47

A development team has created a large amount of CloudFormation templates in the JSON format. Which AWS database would be best suited for storing these documents?

Answer 47

Amazon DocumentDB

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. As a document database, Amazon DocumentDB makes it easy to store, query, and index JSON data.

Question 48

Amazon DocumentDB

Amazon DocumentDB (with MongoDB compatibility) is a fast, scalable, highly available, and fully managed document database service that supports MongoDB workloads. As a document database, Amazon DocumentDB makes it easy to store, query, and index JSON data.

Answer 48

Elastic Beanstalk monitors application health via a health dashboard.

Route 53 can be used to configure DNS health checks to route traffic to healthy endpoints or to monitor the health of your applications.

Elastic Load Balancing

Load balancers monitor the health of EC2 instances and route the traffic to only instances that are in a healthy state.

Question 49

A company ingests data to S3 using Kinesis. What is the easiest way for the company to run ad hoc SQL queries against the data in S3 without the need to manage servers?

Answer 49

Use Athena.

Athena allows the company to query data in S3 using standard SQL.

Question 50

A customer wants to run an application on a local version of an EC2 instance in a disconnected environment. Which Snow Family device supports this?

Answer 50

Snowball Edge

Snowball Edge offers on-board storage and compute power that can handle local processing and edge-computing workloads in disconnected environments and handles transferring data between your local environment and AWS. Snowball Edge supports S3, EC2, Lambda, and IoT Greengrass.

Question 51

You have decided to use the AWS Cost and Usage Report to track your EC2 Reserved Instance costs. Which AWS service can be used to store AWS Cost and Usage report files?

Answer 51

An S3 bucket you own

You can use Cost and Usage Reports to publish your AWS billing reports to an S3 bucket you own. AWS updates the report in your bucket once a day in comma-separated value (CSV) format. You can view the reports using spreadsheet software or access them from an application using the Amazon S3 API.

Question 52

Scientists would like to analyze terabytes of scientific data from a rover that landed on Mars. Which service will help them find trends and understand the vast amount of data using Hadoop?

Answer 52

Elastic MapReduce (EMR)

EMR helps you process large amounts of data using big data frameworks like Hadoop.

Question 53

You need to track your AWS costs on a detailed level. Which tool will allow you to do this?

Answer 53

Cost Allocation Tags

A tag is a label that you or AWS assign to an AWS resource. Each tag consists of a key and a value. Tagged resources can appear on the Cost Explorer or on a cost allocation report.

Question 54

How can a customer meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware in the cloud?

Answer 54

CloudHSM

CloudHSM allows customers to meet compliance requirements for data security by using dedicated hardware.

Question 55

Which pillar of the Well-Architected Framework encourages the use of CloudFormation?

Answer 55

Operational excellence

Operational excellence focuses on creating applications that effectively support production workloads. Scripting operations as code is a part of this pillar, which includes the use of CloudFormation.

Question 56

A company wants to ensure all AWS accounts in their environment conform to company-wide policies. Which services can help?

Answer 56

Control Tower

Control Tower helps you ensure your accounts conform to company-wide policies. Control Tower actually sits on top of Organizations.

Organizations

Organizations allows you to centrally manage multiple AWS accounts under 1 umbrella. You can allocate resources and apply policies across accounts.

Question 57

A customer has an on-premises 5-gigabyte Oracle database that needs to be migrated to AWS and converted to Aurora. The customer requires minimal downtime to the database. Which service is the best option for migration and conversion?

Answer 57

Database Migration Service

DMS supports homogeneous migrations like Oracle to Oracle and heterogeneous migrations like Oracle to Aurora, with minimal downtime.

Question 58

__________ is basically a metrics and logs repository.

Answer 58

Amazon CloudWatch

An AWS service, such as Amazon EC2, puts metrics and monitoring logs into Cloudwatch, and you can view statistics based on those metrics. If you put your own custom metrics into the service, you can retrieve statistics on these metrics as well. You can use metrics to calculate statistics and then present the data graphically in the CloudWatch console. You can configure alarm actions to stop, start, or terminate an Amazon EC2 instance when certain criteria are met, for example. In addition, you can create alarms that initiate Amazon EC2 Auto Scaling and Amazon Simple Notification Service (Amazon SNS) actions on your behalf, and more.

Question 59

_______ is an automated security assessment service?

Answer 59

Amazon Inspector

Question 60

_______ is a repository for compliance rules.

Answer 60

AWS Config

Question 61

________ is a senior customer service agent who is assigned to your account when you subscribe to an Enterprise or qualified Reseller Support plan.

Answer 61

AWS Concierge

Question 62

________ a software that lets you run local compute, messaging, data caching, sync, and ML inference capabilities on connected devices in a secure way.

Answer 62

AWS IoT Greengrass

Question 63

Which AWS Cloud Adoption Framework perspective enables you to orchestrate your cloud initiatives, increasing organizational advantages and lowering risks associated with the transition?

Answer 63

Governance Perspective

Question 64

Which AWS Cloud Adoption Framework perspective assists in ensuring that your cloud services are offered at a level that satisfies your company’s requirements.

Answer 64

Operations Perspective

Question 65

Which AWS Cloud Adoption Framework perspective enables you to create a hybrid cloud platform that is enterprise-grade, scalable, and cloud-native, as well as to update the current workload.

Answer 65

Platform Perspective

Question 66

Which AWS service helps identify resources shared with an external entity and generates policies based on access activity?

Answer 66

AWS IAM Access Analyzer

offers the following features:

– Identify resources in your organization and accounts that are shared with an external entity.

– Validates IAM policies against policy grammar and best practices.

– Generates IAM policies based on access activity in your AWS CloudTrail logs.

Question 67

A company has enlisted the help of TDojo Consulting Co. to assist them in designing an AWS disaster recovery solution for their on-premises bare metal servers and SQL databases. The implementation has to be robust, fast, and simple to use. It should also prevent any type of data loss from occurring. The company would like to keep track of the status of the migration.

Which tool should the team adopt for the DR solution?

Answer 67

CloudEndure Disaster Recovery is a tool that minimizes downtime and data loss by providing fast, reliable recovery of physical, virtual, and cloud-based servers into AWS Cloud. You can also use CloudEndure Disaster Recovery to protect your most critical SQL databases thanks to the continuous replication of your machines into a low-cost staging area in your target AWS account and preferred Region.

In the case of a disaster, CloudEndure Disaster Recovery can automatically launch your machines in their fully provisioned state in minutes.

Question 68

What AWS service provides managed compliance and security controls for workloads?

Answer 68

AWS Security Hub is a service that helps customers to improve their security posture on AWS by providing a comprehensive view of security and compliance across their AWS accounts. It aggregates security findings from various AWS services and third-party tools and presents them in a single dashboard. Doing so makes it easier for customers to identify and prioritize security issues and take corrective actions. Moreover, it offers automated compliance checks against industry standards and best practices such as PCI DSS, HIPAA, and CIS AWS Foundations Benchmark. With AWS Security Hub, customers can automate security and compliance checks, eliminate manual processes, and increase the efficiency of their security operations.

Question 69

_______ is an easy way to establish a landing zone that implements an AWS well-architected, multi-account environment and applies the AWS best practices.

Answer 69

AWS Control Tower is for customers who want to create or manage their multi-account AWS environment with best practices. It offers prescriptive guidance to govern your AWS environment at scale. It gives you control over your environment without sacrificing the speed and agility AWS provides for builders.

AWS Control Tower offers the easiest way to set up and govern a secure, multi-account AWS environment. It establishes a landing zone that is based on best-practices blueprints and enables governance using guardrails you can choose from a pre-packaged list. The landing zone is a well-architected, multi-account baseline that follows AWS best practices. Guardrails implement governance rules for security, compliance, and operations.

Question 70

Which AWS service helps identify resources shared with an external entity and generates policies based on access activity?

Answer 70

AWS Identity and Access Management (IAM) is a web service that helps you securely control access to AWS resources. With IAM, you can centrally manage permissions that control which AWS resources users can access. You use IAM to control who is authenticated (signed in) and authorized (has permissions) to use resources. When you set permissions with IAM policies, grant only the permissions required to perform a task, this practice is known as granting the least privilege. You can apply least-privilege permissions in IAM by defining the actions that can be taken on specific resources under specific conditions.

Question 71

A company has a large amount of data stored in multiple sources such as S3, Redshift, and RDS, and they need to extract, transform and load this data into a data warehouse.

Which AWS service can help automate this process?

Answer 71

AWS Glue orchestrates your ETL (extract, transform, and load) activities to build data warehouses and data lakes and generate output streams using other AWS services. AWS Glue uses API activities to modify your data, generate runtime logs, save your job logic, and generate notifications to assist you in monitoring your task runs. The AWS Glue console binds these services together into a managed application, allowing you to focus on generating and monitoring your ETL work. The console manages administrative and job development tasks for you. You provide AWS Glue with credentials and other properties to access your data sources and write to your data targets.

Question 72

________ is an interactive query service that allows users to analyze data stored in Amazon S3 using SQL.

Answer 72

Amazon Athena

While Athena can be used to query data stored in S3, it does not provide a full-fledged ETL solution for extracting, transforming, and loading data into a data warehouse or data lake.

Question 73

A group of Software Engineers is working on a project that requires a new Microsoft SQL Server database to be hosted in AWS. The team needs to ensure that the database can be set up quickly and efficiently to meet an urgent deadline.

Which AWS services should they use to meet their requirement?

Answer 73

Amazon RDS
Amazon EC2

Amazon Web Services offers you the flexibility to run Microsoft SQL Server for as much or as little time as you need and select from a number of versions and editions. SQL Server on Amazon EC2 and Amazon EBS gives you complete control over every setting, just like when it’s installed on-premises.

Amazon RDS is a managed service that takes care of all the maintenance, backups, and patching for you.

Question 74

A customer has a popular website that has millions of viewers from all over the world and has read-heavy database workloads. What is the best option to use to increase the read throughput on their database?

Answer 74

Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances. This feature makes it easy to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads.

You can create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read throughput. Read replicas can also be promoted when needed to become standalone DB instances. Read replicas are available in Amazon RDS for MySQL, MariaDB, Oracle, and PostgreSQL as well as Amazon Aurora.

Question 75

What is a data transport solution that accelerates moving terabytes to petabytes of data into and out of AWS using appliances with on-board storage and compute capabilities?

Answer 75

AWS Snowball Edge is a data migration and edge computing device that comes in two options. Snowball Edge Storage Optimized provides both block storage and Amazon S3-compatible object storage and 24 vCPUs. It is well suited for local storage and large-scale data transfer. Snowball Edge Compute Optimized provides 52 vCPUs, block and object storage, and an optional GPU for use cases such as advanced machine learning and full-motion video analysis in disconnected environments. Customers can use these two options for data collection, machine learning and processing, and storage in environments with intermittent connectivity (such as manufacturing, industrial, and transportation) or in extremely remote locations (such as military or maritime operations) before shipping it back to AWS. These devices may also be rack mounted and clustered together to build larger, temporary installations.

Snowball Edge supports specific Amazon EC2 instance types as well as AWS Lambda functions, so customers may develop and test in AWS and then deploy applications on devices in remote locations to collect, pre-process, and return the data. Common use cases include data migration, data transport, image collation, IoT sensor stream capture, and machine learning.

Question 76

Which AWS storage service offers faster disk read and write performance and provides temporary block-level storage for your instance?

Answer 76

Instance store
provides temporary block-level storage for your instance. This storage is located on disks that are physically attached to the host computer. Instance store is ideal for temporary storage of information that changes frequently, such as buffers, caches, scratch data, and other temporary content, or for data that is replicated across a fleet of instances, such as a load-balanced pool of web servers.

An instance store consists of one or more instance store volumes exposed as block devices. The size of an instance store, as well as the number of devices available, varies by instance type.

Since the disk is physically attached to the instance, disk read and writes are faster than EBS volumes or EFS systems which are virtually attached.

Question 77

What services should you provision if your local data center requires additional storage space without having to migrate data?

Answer 77

AWS Storage Gateway is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage. Your applications connect to the service through a virtual machine or hardware gateway appliance using standard storage protocols, such as NFS, SMB, and iSCSI. The gateway connects to AWS storage services, such as Amazon S3, Amazon S3 Glacier, Amazon S3 Glacier Deep Archive, Amazon EBS, and AWS Backup, providing storage for files, volumes, snapshots, and virtual tapes in AWS.

AWS Snowball Edge is incorrect because this is just an edge computing and data transfer device provided by the AWS Snowball service. It has onboard storage and compute power that provides select AWS services for use in edge locations. Since it is stated in the scenario that no migration will be done, this is not the best solution to go for.

Question 78

What type of EBS volume is recommended for most workloads and is also usable as a boot volume?

Answer 78

General Purpose SSD
Recommended for most workloads; Can be used as system boot volumes; Best for development and test environments

Question 79

What is the EBS volume, Provisioned IOPS SSD meant for?

Answer 79

for critical business applications that require sustained IOPS performance; Best used for large database workloads

Question 80

What is the EBS volume, Throughput Optimized HDD meant for?

Answer 80

for streaming workloads requiring consistent, fast throughput at a low price, big data, data warehouses, and log processing. It cannot be a boot volume

Question 81

What is the EBS volume, Cold HDD meant for?

Answer 81

for throughput-oriented storage for large volumes of data that are infrequently accessed or in scenarios where the lowest storage cost is important. It cannot be a boot volume

Question 82

A company plans to migrate their on-premises MySQL database to Amazon RDS. Which AWS service should they use for this task?

Answer 82

AWS Database Migration Service helps you migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. The AWS Database Migration Service can migrate your data to and from the most widely used commercial and open-source databases.

AWS Database Migration Service supports homogeneous migrations such as Oracle to Oracle, as well as heterogeneous migrations between different database platforms, such as Oracle or Microsoft SQL Server to Amazon Aurora. With AWS Database Migration Service, you can continuously replicate your data with high availability and consolidate databases into a petabyte-scale data warehouse by streaming data to Amazon Redshift and Amazon S3.

Question 83

Which service in AWS supports various business intelligence tools such as Apache Spark so that you may perform data transformation workloads (ETL) and analytics at a low cost?

Answer 83

Amazon EMR is a web service that enables businesses, researchers, data analysts, and developers to easily and cost-effectively process vast amounts of data. It utilizes a hosted Apache Hadoop framework running on the web-scale infrastructure of Amazon EC2 and Amazon S3. Amazon EMR lets you focus on crunching or analyzing your data without having to worry about time-consuming set-up, management, or tuning of Hadoop clusters or the compute capacity upon which they sit.

Question 84

You have a customized EC2 instance running your latest web application. How can you create an exact copy of this instance in another region?

Answer 84

AMIs provide the information required to launch an Amazon EC2 instance, which is a virtual server in the AWS Cloud. A golden AMI is an AMI that contains the latest security patches, software, configuration, and software agents that you need to install for logging, security maintenance, and performance monitoring.

An AMI includes the following:

– One or more EBS snapshots, or, for instance-store-backed AMIs, a template for the root volume of the instance (for example, an operating system, an application server, and applications).

– Launch permissions that control which AWS accounts can use the AMI to launch instances.

– A block device mapping that specifies the volumes to attach to the instance when it’s launched.

Question 85

A startup is in need of a database that is capable of self-healing and has a high throughput. Which of the following services fits these criteria?

Answer 85

Amazon Aurora is a relational database engine that combines the speed and reliability of high-end commercial databases with the simplicity and cost-effectiveness of open source databases. It is designed to transparently handle the loss of up to two copies of data without affecting database write availability and up to three copies without affecting read availability. Amazon Aurora storage is also self-healing. Data blocks and disks are continuously scanned for errors and repaired automatically.

Amazon Aurora is fully managed by Amazon Relational Database Service (RDS), which automates time-consuming administration tasks like hardware provisioning, database setup, patching, and backups.

It also features a distributed, fault-tolerant, self-healing storage system that auto-scales up to 64TB per database instance. It delivers high performance and availability with up to 15 low-latency read replicas, point-in-time recovery, continuous backup to Amazon S3, and replication across three Availability Zones (AZs).

Question 86

What are global resources?

Answer 86

A Global service means that it covers all of the AWS Regions across the globe

IAM
STS
Route 53
CloudFront
WAF.

Question 87

What are zonal resources?

Answer 87

a Zonal service can only exist in one Availability Zone.

examples are EC2 Instance and EBS Volumes

Take note that although EBS Volumes are considered a zonal service, the EBS snapshots are considered regional since it is not tied to a specific Availability Zone.

Question 88

What cloud computing model deals with services such as EC2 instances?

Answer 88

Amazon EC2 is considered IaaS because you have total control over what could be done within the instances. You are borrowing the server infrastructure of AWS to fulfill your business needs, and you are charged at a rate for this service.

Question 89

What is the lowest support plan that allows an unlimited number of technical support cases to be opened?

Answer 89

The cheapest support plan that offers technical support with an unlimited amount of cases that can be opened is the Developer support plan. Additionally, it provides you access to the 7 core Trusted Advisor checks and the Personal Health Dashboard, where you get a personalized view of the health of AWS services, and alerts when your resources are impacted.

Question 90

Which AWS services should you use to upload SSL certificates?

Answer 90

AWS Certificate Manager (ACM) handles the complexity of creating, storing, and renewing public SSL/TLS X.509 certificates and keys that protect your AWS websites and applications. You can provide certificates for supported AWS services either by issuing them directly with ACM or by importing third-party certificates into the ACM management system. ACM certificates can secure multiple domain names and multiple names within a domain.

ACM is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.

You can use IAM as a certificate manager only when you must support HTTPS connections in a region not supported by ACM. IAM securely encrypts your private keys and stores the encrypted version in IAM SSL certificate storage. IAM supports deploying server certificates in all Regions, but you must obtain your certificate from an external provider for use with AWS.

Question 91

What AWS service lets you provision either Windows or Linux desktops in just a few minutes and can scale easily to provide thousands of desktops to workers?

Answer 91

Amazon WorkSpaces is a managed, secure Desktop-as-a-Service (DaaS) solution where you provision either Windows or Linux desktops in just a few minutes and quickly scale to provide thousands of desktops to workers across the globe.

For both Windows and Amazon Linux WorkSpaces, each WorkSpace is associated with a virtual private cloud (VPC), and a directory to store and manage information for your WorkSpaces and users. Directories are managed through the AWS Directory Service, which offers the following options: Simple AD, AD Connector, or AWS Directory Service for Microsoft Active Directory, also known as AWS Managed Microsoft AD.

Question 92

_______ is simply a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser. It includes a code editor, debugger, and terminal.

Answer 92

AWS Cloud9

Question 93

Which AWS well-architected pillar stresses the importance of selecting the most appropriate and right number of resource types for your requirements?

Answer 93

Cost Optimization focuses on avoiding un-needed costs. Key topics include understanding and controlling where money is being spent, selecting the most appropriate and right number of resource types, analyzing spending over time, and scaling to meet business needs without overspending.

Question 94

________ AWS well-architected pillar focuses on using IT and computing resources efficiently. Key topics include selecting the right resource types and sizes based on workload requirements, monitoring performance, and making informed decisions to maintain efficiency as business needs evolve.

Answer 94

Performance Efficiency

Question 95

_________ AWS well-architected pillar focuses on running and monitoring systems to deliver business value, and continually improving processes and procedures.

Answer 95

Operational Excellence

Question 96

________ AWS well-architected pillar focuses on the ability to prevent and quickly recover from failures to meet business and customer demand.

Answer 96

Reliability

Question 97

List a couple Amazon CloudFront use cases.

Answer 97

Static asset caching – speed up the delivery of your static content to viewers across the globe.

Live & on-demand video streaming – multiple options for streaming your media – both pre-recorded files and live events at sustained, high throughput required for 4K delivery to global viewers.

Security – integrates seamlessly with AWS Shield for Layer 3/4 DDoS mitigation and AWS WAF for Layer 7 protection.

Customizable content delivery with Lambda@Edge – run your code across AWS locations globally, allowing you to respond to your end-users at the lowest latency and allowing you to personalize content.

Dynamic content & API acceleration – secure and accelerate your WebSocket traffic as well as API calls.

Software distribution – scales automatically as globally-distributed clients download software updates.

Question 98

A company plans to use an application streaming service to give its employees instant access to their desktop applications from any device.

Which services fulfills this requirement?

Answer 98

Amazon AppStream 2.0 is a fully managed application streaming service that provides users with instant access to their desktop applications from anywhere. AppStream 2.0 manages the AWS resources required to host and run your applications, scales automatically, and provides access to your users on demand. AppStream 2.0 provides users access to the applications they need on the device of their choice, with a responsive, fluid user experience that is indistinguishable from natively installed applications.

Amazon AppStream 2.0 provides the following advantages:

– Access desktop applications securely from any supported device

– Secure applications and data

– Consistent, scalable performance

– Integrate with your IT environment

– Choose the fleet type that meets your needs

Question 99

What action does not affect costs when using Amazon S3?

Answer 99

With Amazon S3, you pay only for the storage you use, with no minimum fee. Prices are based on the location of your Amazon S3 bucket. When you begin to estimate the cost of Amazon S3, consider the following:

Storage – Costs vary with the number and size of objects stored in your Amazon S3 buckets as well as the type of storage.

Requests – The number and type of requests. GET requests incur charges at different rates than other requests, such as PUT and COPY requests.

Data transfer – The amount of data transferred out of the Amazon S3 region.

Given these pricing parameters, data transferred into Amazon S3 are not charged by AWS. The action of uploading objects, therefore, should not incur data transfer costs

Question 100

What AWS Cost Management features uses machine learning to continuously monitor costs and usage in order to detect unusual expenditures?

Answer 100

AWS Cost Anomaly Detection helps you detect and alert on any abnormal or sudden spend increases in your AWS account. This is possible by using machine learning to understand your spend patterns and trigger alert as they seem abnormal. It also allows you to segment your spend by different dimensions (AWS Services, Linked Accounts, Cost Allocation Tags, and Cost Categories). This segmentation allows Cost Anomaly Detection to detect more granular anomalies and customize alerting preferences.

Using AWS Cost Anomaly Detection has the following advantages:

– Receive individual alerts in aggregated reports via email or Amazon SNS topic.

– Use machine learning methods to evaluate your spending patterns in order to reduce false positive alerts.

– Investigate and identify the root cause of the anomaly, such as the AWS account, service, Region, or usage type that is causing the cost increase.

– Define how your costs will be calculated. Select whether to analyze all of your AWS services individually or by member accounts, cost allocation tags, or cost categories.

The detection of anomalies is based on data from Cost Explorer, which has a latency of up to 24 hours. Any monitor requires at least 10 days of historical usage data to detect anomalies.

Question 101

Which pricing options will automatically reduce your cost on any EC2 instance usage regardless of region, instance family, size, OS, or tenancy?

Answer 101

AWS Savings Plan is a flexible pricing model that saves up to 72 percent on Amazon EC2, AWS Fargate, and AWS Lambda usage. Savings Plans provides you lower prices for your Amazon EC2 usage, Fargate, and Lambda in exchange for a commitment to a consistent usage amount (measured in $/hour) for a one or three-year term.

Savings Plans Types:

– Compute Savings Plans provide the most flexibility and prices of up to 66 percent off on-Demand rates. These plans automatically apply to your EC2 instance usage, regardless of instance family, instance sizes, region, operating system, or tenancy.

– EC2 Instance Savings Plans provide savings up to 72 percent off On-Demand, in exchange for a commitment to a specific instance family in a chosen AWS Region.

Question 102

________ is used for sharing private content through CloudFront.

Answer 102

The OAI is a virtual user identity that will be used to give your CloudFront distribution permission to fetch a private object from your origin server.

You can restrict access to content that you serve from Amazon S3 buckets by configuring this to your services:

Create a special CloudFront user called an origin access identity (OAI) and associate it with your distribution.
Configure your S3 bucket permissions so that CloudFront can use the OAI to access the files in your bucket and serve them to your users. Make sure that users can’t use a direct URL to the S3 bucket to access a file there.
After the S3 and CloudFront configuration, your users can only access your files through CloudFront and not directly from the S3 bucket.

Question 103

Which services connects VPCs and on-premises networks through a central hub?

Answer 103

AWS Transit Gateway connects VPCs and on-premises networks through a central hub. This simplifies your network and puts an end to complex peering relationships. It acts as a cloud router – each new connection is only made once.

Without a central hub, the network complexity increases with scale. You must maintain routing tables within each VPC and connect to each onsite location using separate network gateways. But if you use a centralized hub, your network is more streamlined and scalable. AWS Transit Gateway routes all traffic to and from each VPC or VPN, and you have one place to manage and monitor it all.

Question 104

Which services allows you to purchase Reserved Instances?

Answer 104

available for
EC2
Amazon Relational Database Service (Amazon RDS),
Amazon ElastiCache,
Amazon Redshift,
Amazon DynamoDB.

Question 105

What AWS service can monitor the compliance status of your AWS resources against a set of compliance guidelines?

Answer 105

AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Config continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations.

AWS Artifact is incorrect because this simply acts as a central resource for compliance-related information. It provides on-demand access to AWS’ security and compliance reports and select online agreements. It does not, however, monitor the compliance status of your AWS resources and alerts you when there are deviations from your set guidelines.

Question 106

Which services should you use to deploy and easily rollback a web application from your Git repository to your on-premises server?

Answer 106

AWS offers services that integrate application deployment and management across on-premises and cloud environments for a robust hybrid architecture. Below are the following services that you can use to manage or deploy applications to your servers running on-premises:

OpsWorks – AWS OpsWorks is a configuration management service that helps customers configure and operate applications, both on-premises and in the AWS Cloud, using Chef and Puppet.

CodeDeploy – AWS CodeDeploy automates code deployments to any instance, including Amazon EC2 instances and instances running on-premises. AWS CodeDeploy makes it easier to rapidly release new features, avoids downtime during application deployment, and handles the complexity of updating applications.