Test 6 Flashcards by Michael Cessaro

What is a characteristic of Convertible Reserved Instances (RIs)?

a.
Users can exchange Convertible Rls for other Convertible Rls in different AWS Regions.
b.
Users can sell and buy Convertible Rls on the AWS Marketplace.
c.
Users can exchange Convertible RIs for other Convertible Rls from a different instance family.
d.
Users can shorten the term of their Convertible RIs by merging them with other Convertible Rls.

c.
Users can exchange Convertible RIs for other Convertible Rls from a different instance family.

How well did you know this?

Not at all

Perfectly

A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next 12 months. What is the MOST cost-effective instance purchasing option that meets these requirements?

a.
Dedicated Hosts
b.
Spot Instances
c.
On-Demand Instances
d.
Savings Plans

d.
Savings Plans

How well did you know this?

Not at all

Perfectly

Which are customer responsibilities when using Amazon EC2? (Select TWO.)

a. Guest operating system firewall configuration
b. File-system-level encryption
c. Hypervisor-level software patching
d. Physical security at data center facilities
e. Underlying hardware maintenance

a. Guest operating system firewall configuration

b. File-system-level encryption

How well did you know this?

Not at all

Perfectly

Which AWS service aggregates, organizes, and prioritizes security alerts and findings from multiple AWS services?

a.
AWS Security Hub
b.
Amazon Detective
c.
Amazon Macie
d.
Amazon Inspector

a.
AWS Security Hub

How well did you know this?

Not at all

Perfectly

Which AWS service or feature can help a company determine if it has Amazon S3 buckets that are publicly available?

a.
AWS Service Catalog
b.
Amazon CloudWatch Logs
c.
AWS Service Health Dashboard
d.
AWS Trusted Advisor

d.
AWS Trusted Advisor

How well did you know this?

Not at all

Perfectly

A company plans to launch an application that will run in multiple locations within the United States. The company needs to identify the two AWSRegions where the application can operate at the lowest price. Which AWS service or feature should the company use to determine the Regions that offer the lowest price?

a.
Cost Explorer
b.
AWS Budgets
c.
AWS Trusted Advisor
d.
AWS Pricing Calculator

d.
AWS Pricing Calculator

How well did you know this?

Not at all

Perfectly

Which AWS service is used to pay AWS bills, and monitor usage and budget costs?

a.
Amazon QuickSight
b.
Amazon CloudWatch
c.
AWS Billing and Cost Management
d.
Consolidated billing

c.
AWS Billing and Cost Management

How well did you know this?

Not at all

Perfectly

Which of the following is the customer’s responsibility under the AWS shared responsibility model?

a.
Patching Amazon EC2 instances
b.
Physical security
c.
Patching underlying infrastructure
d.
Patching network infrastructure

a.
Patching Amazon EC2 instances

How well did you know this?

Not at all

Perfectly

Which AWS services are managed database services? (Select TWO.)

a. Amazon DynamoDB
b. Amazon S3
c. Amazon Elastic Block Store (Amazon EBS)
d. Amazon RDS
e. Amazon Elastic File System (Amazon EFS)

a. Amazon DynamoDB

d. Amazon RDS

How well did you know this?

Not at all

Perfectly

A company has multiple data sources across the organization and wants to consolidate data into one data warehouse. Which AWS service can be used to meet this requirement?

a.
Amazon DynamoDB
b.
Amazon Redshift
c.
Amazon QuickSight
d.
Amazon Athena

b.
Amazon Redshift

How well did you know this?

Not at all

Perfectly

A company is piloting a new customer-facing application on Amazon Elastic Compute Cloud (Amazon EC2) for one month. What pricing model is appropriate?

a.
Reserved Instances
b.
Spot Instances
c.
On-Demand Instances
d.
Dedicated Hosts

c.
On-Demand Instances

How well did you know this?

Not at all

Perfectly

Which AWS service is suitable for an event-driven workload?

a.
Amazon Lumberyard
b.
AWS Lambda
c.
Amazon EC2
d.
AWS Elastic Beanstalk

b.
AWS Lambda

How well did you know this?

Not at all

Perfectly

Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?

a.
Amazon Elastic Block Storage (Amazon EBS)
b.
AWS Snowball
c.
Amazon Glacier
d.
AWS Storage Gateway

d.
AWS Storage Gateway

How well did you know this?

Not at all

Perfectly

Users are reporting latency when connecting to a website with a global customer base. Which AWS service will improve the customer experience by reducing latency?

a.
Amazon CloudFront
b.
AWS Direct Connect
c.
AWS Transit Gateway
d.
Amazon EC2 Auto Scaling

a.
Amazon CloudFront

How well did you know this?

Not at all

Perfectly

A user has an AWS Business Support plan and requires detailed billing information.Which AWS resource will help?

a.
AWS Service Catalog
b.
AWS Budgets
c.
AWS Concierge Support
d.
AWS Cost and Usage Report

d.
AWS Cost and Usage Report

How well did you know this?

Not at all

Perfectly

Which AWS service provides a customized view of the health of specific AWS services that power a customer’s workloads running on AWS?

a.
AWS X-Ray
b.
AWS Service Health Dashboard
c.
Amazon CloudWatch
d.
AWS Personal Health Dashboard

d.
AWS Personal Health Dashboard

How well did you know this?

Not at all

Perfectly

Which service enables customers to audit API calls in their AWS accounts?

a.
Amazon Inspector
b.
AWS X-Ray
c.
AWS CloudTrail
d.
AWS Trusted Advisor

c.
AWS CloudTrail

How well did you know this?

Not at all

Perfectly

Which AWS service would a customer use with a static website to achieve lower latency and high transfer speeds?

a.
AWS Lambda
b.
Amazon DynamoDB Accelerator
c.
Amazon Route 53
d.
Amazon CloudFront

d.
Amazon CloudFront

How well did you know this?

Not at all

Perfectly

A web developer has limited knowledge of AWS networking services such as Amazon VPC, Elastic Load Balancing, and Auto Scaling, but wantsto host a highly available web application. Which AWS service would automatically handle the deployment and reduce the complexity for the developer?

a.
AWS CloudFormation
b.
AWS Resource Access Manager
c.
AWS Elastic Beanstalk
d.
AWS CodeDeploy

c.
AWS Elastic Beanstalk

How well did you know this?

Not at all

Perfectly

A user with an AWS Basic Support plan has determined that illegal activities are being run on their AWS resources. What is the recommended method for the user to report the activity to AWS

a.
Contact an AWS technical account manager.
b.
Contact the AWS Support team.
c.
Contact the AWS Abuse team.
d.
Contact the AWS Concierge Support team.

c.
Contact the AWS Abuse team.

How well did you know this?

Not at all

Perfectly

A company purchased Amazon EC2 Standard Reserved Instances (RIs) for a workload in the AWS Cloud. The company needs to move part of the workload to an instance family that does not match the instance family of these Standard Rls. How can the company take advantage of the Standard Rls that it no longer needs?

a.
Contact the AWS Support team, and ask the team to sell the Standard Rls.
b.
Convert the Standard RIs to Savings Plans.
c.
Sell the Standard RIs as a third-party seller on the AWS Marketplace.
d.
Sell the Standard Rls on the Amazon EC2 Reserved Instance Marketplace.

d.
Sell the Standard Rls on the Amazon EC2 Reserved Instance Marketplace.

How well did you know this?

Not at all

Perfectly

Which benefit of cloud computing gives a company the ability to deploy applications to users all over the world through a network of AWS Regions, Availability Zones, and edge locations?

a.
Agility
b.
Global reach
c.
High availability
d.
Economy of scale

b.
Global reach

How well did you know this?

Not at all

Perfectly

A company wants to migrate its Microsoft SQL Server database management system from on premises to the AWS Cloud. Which AWS service should the company use to reduce management overhead for this environment?

a.
Amazon RDS
b.
Amazon Athena
c.
Amazon Elastic Container Service (Amazon ECS)
d.
Amazon SageMaker

a.
Amazon RDS

Using Amazon Elastic Container Service (Amazon ECS) to break down a monolithic architecture into microservices is an example of

a.
tightly coupled architecture.
b.
a loosely coupled architecture.
c.
stateful architecture.
d.
stateless architecture.

b.
a loosely coupled architecture.

A company has an AWS Business Support plan. The company needs to gain access to the AWS DDoS Response Team (DRT) to help mitigate DDoS events. Which AWS service or resource must the company use to meet these requirements? a. AWS Shield Standard b. AWS WAF c. AWS Shield Advanced d. AWS Enterprise Support

c. AWS Shield Advanced

A cloud practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this? a. Run AWS Trusted Advisor and review the findings. b. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0. c. In AWS Config, create a custom rule that invokes an AWS Lambda function to review firewall rules for inbound access. d. Open the AWS IAM console and check the inbound rule filters for open access.

a. Run AWS Trusted Advisor and review the findings.

A company requires an isolated environment within AWS for security purposes. Which action can be taken to accomplish this? a. Create an AWS Direct Connect connection between the company and AWS. b. Create a separate Availability Zone to host the resources. c. Create a placement group to host the resources. d. Create a separate VPC to host the resources.

d. Create a separate VPC to host the resources.

Which credentials used to sign in to the AWS Management Console meet security best practices? (Select TWO.) a. Multi-factor authentication b. Username and password c. X.509 certificates d. An access key e. A secret key

a. Multi-factor authentication b. Username and password

A user is able to set up a master payer account to view consolidated billing reports through a. AWS Budgets. b. Amazon Macie. c. Amazon QuickSight. d. AWS Organizations.

d. AWS Organizations.

Which security credentials are required to run commands by using the AWS Command Line Interface (AWS CLI)? a. AWS root user email and password b. Amazon Elastic Compute Cloud (Amazon EC2) key pairs c. Access Key ID and Secret Access Key d. AWS Identity and Access Management (IAM) username and password

c. Access Key ID and Secret Access Key

Which of the following are benefits of using the AWS Cloud? (Select TWO.) a. Fast provisioning of IT resources b. fault tolerance c. Outsourcing all application coding to AWS d. Total control over underlying infrastructure e. Ability to go global quickly

a. Fast provisioning of IT resources e. Ability to go global quickly

A company believes an unauthorized user copied data from an Amazon S3 bucket to their own account. Which AWS service will record the actions taken by the user? a. AWS Systems Manager b. Amazon CloudWatch c. AWS CloudTrail d. AWS Infrastructure Event Management

c. AWS CloudTrail

Which of the following enables users to leverage the power of AWS services programmatically? a. AWS Trusted Advisor b. AWS Management Console c. AWS CodeDeploy d. AWS Command Line Interface (AWS CLI)

d. AWS Command Line Interface (AWS CLI)

Which AWS service or resource provides cloud-related regulatory requirements that are organized by country, along with information about how those regulations affect specific industries? a. AWS Management Console b. AWS Support Center c. AWS Artifact d. AWS Compliance Center

d. AWS Compliance Center

A company wants to route its traffic directly and privately to a VPC without going over the public internet. Which connectivity option provides this capability? a. AWS VPN b. AWS Direct Connect c. VPC NAT gateway d. VPC internet gateway

b. AWS Direct Connect

Which service is best for storing common database query results, which helps to alleviate database access load? a. Amazon Elasticache b. Amazon Machine Learning c. Amazon SQS d. Amazon EC2 Instance Store

a. Amazon Elasticache

A user wants to move legacy applications to the AWS Cloud to reduce the total cost. Which option is the MOST cost-effective according to best practices? a. Right-size the Amazon EC2 instances to prevent over-provisioning in terms of compute and memory. b. Migrate relational databases to Amazon DynamoDB. c. Reserve a data center facility with an upfront payment, which provides an additional discount. d. Rewrite the legacy applications in an open-source language, such as Python.

a. Right-size the Amazon EC2 instances to prevent over-provisioning in terms of compute and memory.

Which of the following is an advantage of consolidated billing on AWS? a. Multiple bills per account b. Eliminates the need for tagging c. Volume pricing qualification d. Shared access permissions

c. Volume pricing qualification

Which of the following security-related aspects of running an Amazon Elastic Compute Cloud (Amazon EC2) instance is the responsibility of AWS? a. Hypervisor software updates b. Policies controlling instance access c. Security updates to software running on the instance d. Security of private keys

a. Hypervisor software updates

Which AWS service will help a company identify the user who deleted an Amazon EC2 instance yesterday? a. AWS CloudTrail b. Amazon CloudWatch c. Amazon Inspector d. AWS Trusted Advisor

a. AWS CloudTrail

Performing operations as code is a design principle that supports which pillar of the AWS Well-Architected Framework? a. Operational excellence b. Reliability c. Performance efficiency d. Security

a. Operational excellence

A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Select TWO.) a. Share the AWS account root user credentials with the developer. b. Grant the developer access to only the AWS resources needed to perform the job. c. Ensure the account password policy requires a minimum length. d. Configure a password policy that ensures the developer's password cannot be changed. e. Add the developer to the administrator's group in AWS IAM.

b. Grant the developer access to only the AWS resources needed to perform the job. c. Ensure the account password policy requires a minimum length.

According to the AWS shared responsibility model, which task is the responsibility of AWS for workloads running on Amazon EC2? a. Updating the database engine b. Updating the physical hardware c. Updating the user data d. Updating the operating system

b. Updating the physical hardware

Previous Page Which AWS service can be used to provide an on-demand, cloud-based contact center?Select one a. AWS Managed Services b. AWS Direct Connect c. Amazon Connect d. AWS Support Center

c. Amazon Connect

A food delivery company needs to block users in certain countries from accessing its website. Which AWS service should the company use to meet this requirement? a. Amazon Pinpoint b. Amazon Fraud Detector c. AWS Control Tower d. AWS WAF

d. AWS WAF

Which of the following AWS services can be used to run a self-managed database? a. Amazon Elastic Compute Cloud (Amazon EC2) b. AWS Snowmobile c. Amazon Route 53 d. AWS X-Ray

a. Amazon Elastic Compute Cloud (Amazon EC2)

A company is building a web application and needs to test the application across different mobile devices and desktop browsers. Which AWS service should the company use for this testing? a. Amazon Pinpoint b. AWS AppSync c. AWS Device Farm d. AWS Amplify

c. AWS Device Farm

Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework? a. Manual failure recovery b. Testing recovery procedures c. Changing infrastructure manually d. Vertical scaling

b. Testing recovery procedures

Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Select TWO.) a. Amazon S3 b. Amazon Simple Queue Service (Amazon SQS) c. Amazon Simple Notification Service (Amazon SNS) d. AWS CodeBuild e. Amazon DynamoDB

a. Amazon S3 e. Amazon DynamoDB

Which AWS service helps assess the security and compliance of applications that are deployed on Amazon EC2 instances? a. AWS Shield b. Amazon GuardDuty c. Amazon Inspector d. AWS Security Hub

c. Amazon Inspector

A company wants to quickly develop, build, and deploy applications on AWS. The company must allow all team members to update the application code, and the company must be able to track changes that are made to the code. The company also needs a dashboard that will provide an overall view of the project and the entire continuous delivery toolchain. Which AWS service will meet these requirements? a. AWS CloudFormation b. AWS Elastic Beanstalk c. AWS Cloud Development Kit (AWS CDK) d. AWS CodeStar

d. AWS CodeStar

An application designed to span multiple Availability Zones is described as a. being highly available. b. using an economy of scale. c. having global reach. d. having elasticity.

a. being highly available.

What are benefits of using the AWS Cloud for companies with customers in many countries around the world? (Select TWO.) a. Amazon CloudFront has multiple edge locations around the world to reduce latency. b. Amazon Translate automatically translates third-party website interfaces into multiple languages. c. Companies can deploy applications in multiple AWS Regions to reduce latency. d. Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world, which reduces latency. e. Amazon Comprehend allows users to build applications that can respond to user requests in many languages.

a. Amazon CloudFront has multiple edge locations around the world to reduce latency. c. Companies can deploy applications in multiple AWS Regions to reduce latency.

A user needs to identify underutilized Amazon Elastic Block Store (Amazon EBS) volumes to reduce costs. Which AWS service or feature will meet this requirement? a. AWS CloudTrail b. AWS Trusted Advisor c. AWS Budgets d. AWS Personal Health Dashboard

b. AWS Trusted Advisor

Which of the following are features of network ACLs as they are used in the AWS Cloud? (Select TWO.) a. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. b. They are stateless c. They operate at the instance level. d. They evaluate all rules before allowing traffic. e. They are stateful.

a. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic. b. They are stateless