Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Certify for Sure > Topic 2 > Flashcards

Topic 2 Flashcards

1
Q 
Which service's PRIMARY purpose is softwareversion control?
A. Amazon CodeStar
B. AWS Command Line Interface (AWS CLI)
C. Amazon Cognito
D. AWS CodeCommit
A

Answer: D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Access keys in AWS Identity and Access Management (IM1) are used to
A. log in to the AWS Management Console
B. make programmatic calls to AWS from AWS APIs
C. log in to Amazon EC2 instances
D. authenticate to AWS CodeCommit repositories

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

How can a user protect against AWS service disruptions if a natural disaster affects an entire geographic
area?
A. Deploy applications across multiple Availability Zones within an AWS Region
B. Use a hybrid cloud computing deployment model within the geographic area
C. Deploy applications across multiple AWS Regions
D. Store application artifacts using AWS Artifact and replicate them across multiple AWS Regions

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q 
Which mechanism aHows developers lo access AWS sendees from application code?
A. AWS Software Development Kit
B. AWS Management Console
C. AWSCodePipelme
D. AWS Conlig
A

Answer: A

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which services are parts of the AWS serverless platform?
A. Amazon EC2, Amazon S3, Amazon Athena
B. Amazon Kinesis, Amazon SQS, Amazon EMR
C. AWS Step Functions, Amazon DynamoDB, Amazon SNS
D. Amazon Athena, Amazon Cognito, Amazon EC2

A

Answer: C
Explanation:
AWS provides a set of fully managed services that you can use to build and run serverless applications.
Serverless applications don’t require provisioning, maintaining, and administering servers for backend
components such as compute, databases, storage, stream processing, message queueing, and more. You
also no longer need to worry about ensuring application fault tolerance and availability. Instead, AWS
handles all of these capabilities for you. Serverless platform includes: AWS lambda, Amazon S3,
DynamoDB, API gateway, Amazon SNS, AWS step functions, Amazon kinesis and developing tools and
services.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q 
What are the advantages of the AWS Cloud (Select TWO )
A. Fixed rate monthly cost
B. No need to guesscapacity requirements
C. Increased speed to market
D. Increased upfront capital expenditure
E. Physical access to cloud data centers
A

Answer: B D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q 
Which of the following BEST describe theAWS pricing model? (Select TWO )
A. Fixed-term
B. Pay-as-you-go
C. Colocation
D. Planned
E. Variable cost
A

Answer: B E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What can AWS edgelocations be used for? (Select TWO.)
A. Hosting applications
B. Delivering content closer to users
C. Running NoSQL database caching services
D. Reducing traffic on the server by caching responses
E. Sending notification messages to end users

A

Answer: B D
Explanation:
CloudFront delivers your content through a worldwide network of data centers called edge locations. When
a user requests content that you’re serving with CloudFront, the user is routed to the edge location that
provides the lowest latency (time delay),so that content is delivered with the best possible performance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Why is it beneficial to use Elastic Load Balancers with applications?
A. They allow for the conversion from Application Load
B. Balancers to Classic Load Balancers
C. They arecapable of handling constant changes in network traffic patterns
D. They automatically adjust capacity. They are provided at no charge to users

A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

How can one AWS account use Reserved Instances from anotherAWS account?
A. By using Amazon EC2 Dedicated Instances
B. By using AWS Organizations consolidated billing
C. By using the AWS Cost Explorer tool
D. By using AWS Budgets

A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is:
A. the ability to bid for a lower hourly cost.
B. paying a daily rate regardless of time used.
C. paying onlyfor time used.
D. pre-paying for instances and paying a lower hourly rate.

A

Answer: C
Explanation:
On-Demand Capacity Reservations are priced exactly the same as their equivalent (On-Demand) instance
usage. If a Capacity Reservation is fully utilized, you only pay for instance usage and nothing towards the
Capacity Reservation. If a Capacity Reservation is partially utilized, you pay for the instance usage and for
the unused portion of the Capacity Reservation

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q 
Which of the following is an important architectural design principle when designing cloud applications?
A. Usemultiple Availability Zones.
B. Use tightly coupled components.
C. Use open source software.
D. Provision extra capacity.
A

Answer: A
Explanation:
Data Center resilience is practiced through Availability Zones across data centers that reduce the impact of
failures.
Fault isolation improvement can be made to traditional horizontal scaling by sharding (a method of grouping
instances into groups called shards, instead of sending the traffic from all users to every node like in the
traditional IT structure.)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q 
Which AWS service canbe used to query stored datasets directly from Amazon S3 using standard SQL?
A. AWS Glue
B. AWS Data Pipeline
C. Amazon CloudSearch
D. Amazon Athena
A

Answer: D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q 
Which disaster recovery scenario offers the lowest probability of down time?
A. Backup and restore
B. Pilot light
C. Warm standby
D. Multi-site active-active
A

Answer: D
Explanation:
Backup and Restore: asimple, straightforward, cost-effective method that backs up and restores data as
needed.
Keep in mind that because none of your data is on standby, this method, while cheap, can be quite
time-consuming.
Pilot Light: This method keeps critical applicationsand data at the ready so that it can be quickly retrieved if
needed.
Warm Standby: This method keeps a duplicate version of your business’ core elements running on standby
at all times, which makes for a little downtime and an almost seamless transition.
Multi-Site Solution: Also known as a Hot Standby, this method fully replicates your company’s
data/applications between two or more active locations and splits your traffic/usage between them. If a
disaster strikes, everything is simply rerouted to the unaffected area, which means you’ll suffer almost zero
downtime. However, by running two separate environments simultaneously, you will obviously incur much
higher costs.
Reference: https://cloudranger.com/best-practices-aws-disaster-recovery-planning/

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q 
Which of the following is an AWSCloud architecture design principle?
A. Implement single points of failure.
B. Implement loose coupling.
C. Implement monolithic design.
D. Implement vertical scaling.
A

Answer: B
Explanation:
Loose coupling between services can also be done throughasynchronous integration. It involves one
component that generates events and another that consumes them. The two components do not integrate
through direct point-to-point interaction, but usually through an intermediate durable storage layer. This
approach decouples the two components and introduces additional resiliency. So, for example, if a process
that is reading messages from the queue fails, messages can still be added to the queue to be processed
when the system recovers.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q 
Much AWS services provide a way to extend an on-premises architecture to the AWS Cloud? (Select
TWO )
A. Amazon EBS
B. AWS Direct Connect
C. Amazon CloudFront
D. AWS Storage Gateway
E. Amazon Connect
A

Answer: B D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q 
Which AWS service is a managed NoSQL database?
A. Amazon Redshift
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon RDS for ManaDB
A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How can acompany reduce its Total Cost of Ownership (TCO) using AWS?
A. By minimizing large capital expenditures
B. By having no responsibility for third-party license costs
C. By having no operational expenditures
D. By having AWS manage applications

A

Answer: D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

A company is planning to migrate from on-premises to the AWS Cloud
When AWS tool or service provides detailed reports on estimated cost savings after migration?
A. AWS Total Cost of Ownership (TCO)Calculator
B. Cost Explorer
C. AWS Budgets
D. AWS Migration Hub

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Whichof the following security measures protect access to an AWS account? (Select TWO.)
A. Enable AWS CloudTrail.
B. Grant least privilege access to IAM users.
C. Create one IAM user and share with many developers and users.
D. Enable Amazon CloudFront.
E. Activate multi-factor authentication (MFA) for privileged users.

A

Answer: B E
Explanation:
If you decided to create service accounts (that is, accounts used for programmatic access by applications
running outside of the AWS environment) and generate access keys forthem, you should create a
dedicated service account for each use case. This will allow you to restrict the associated policy to only the
permissions needed for the particular use case, limiting the blast radius if the credentials are compromised.
For example, if a monitoring tool and a release management tool both require access to your AWS
environment, create two separate service accounts with two separate policies that define the minimum set
of permissions for each tool.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What can users access from AWS Artifact?
A. AWS security and compliance documents
B. A download of configuration management details for all AWS resources
C. Training materials for AWS services
D. A security assessment of the applications deployed in the AWS Cloud

A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

A company’s web application currently has light dependencies on underlyingcomponents so when one
component fails the entire web application fails
Applying which AWS Cloud design principle will address the current design issue?
A. Implementing elasticity enabling the application to scale up or scale down as demand changes
B. Enabling several EC2 instances to run in parallel to achieve better performance
C. Focusing on decoupling components by isolating them and ensuring individual components can function
when other components
D. Doubling EC2 computing resources to increase systemfault tolerance

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q 
Which of the following is a cloud architectural design principle?
A. Scale up not out
B. Loosely couple components
C. Build monolithic systems
D. Use commercial database software
A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which Amazon EC2 pricing model offers the MOST significant discount when compared to OnDemand
Instances?
A. A Partial Upfront Reserved Instances for a 1-year term
B. All Upfront Reserved instances for a 1 year form
C. All Upfront Reserved Instances for a 3 year term
D. No Upfront Reserved Instances for a 3 year term

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q 
What can assist in evaluating anapplication for migration to the cloud? (Select TWO )
A. AWS Trusted Advisor
B. AWS Professional Services
C. AWS Systems Manager
D. AWS Partner Network (APN)
E. AWS Secrets Manager
A

Answer: B D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

If each department within a company has itsown AWS account, what is one way to enable consolidated
billing?
A. Use AWS Budgets on each account to pay only to budget.
B. Contact AWS Support for a monthly bill.
C. Create an AWS Organization from the payer account and invite the other accounts to join.
D. Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon
Redshift, and then run a billing report.

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific
users?
A. A public and private key-pair
B. Amazon Inspector
C. AWS Identity and Access Management (IAM) policies
D. Security Groups

A

Answer: C
Explanation:
To allow users to perform S3 actions on the bucket from the VPC endpoints or IP addresses, you must
explicitly grant those user-level permissions. You can grant user-level permissions on either an AWS
Identity and Access Management (IAM) policy or another statement in the bucket policy.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

How does AWS shorten the time to provision IT resources?
A. It supplies an online IT ticketing platform for resource requests.
B. Itsupports automatic code validation services.
C. It provides the ability to programmatically provision existing resources.
D. It automates the resource request process from a company’s IT vendor list.

A

Answer: C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q 
Which of the following are pillars of the AWS Well-Architected Framework? (Select TWO )
A. Multiple Availability Zones
B. Performance efficiency
C. Security
D. Encryption usage
E. High availability
A

Answer: B C

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

What time-savings advantage is offered with the use of Amazon Rekognition?
A. Amazon Rekognition provides automatic watermarking of images
B. Amazon Rekognition provides automatic detection of objects appeanng m pictures
C. Amazon Recognition provides the ability to resize millions of images automatically
D. Amazon Rekognition uses Amazon Mechanical Turk to allow humans to bid on object detection jobs

A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q 
A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with
which cloud architecture principle?
A. Think parallel
B. Implement elasticity
C. Decouple your components
D. Design for failure
A

Answer: B

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

Which of the following will enhance the security of access to the AWS Management Console’? (Select TWO )
A. AWS Secrets Manager
B. AWS Certificate Manager
C. AWS Multi-Factor Authentication (AWS MFA)
D. Securitygroups
E. Password policies

A

Answer: C E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
33
Q

Amazon Relational Database Service (Amazon RDS) offers which of the following benefits over traditional
database management?
A. AWS manages the data stored in Amazon RDS tables.
B. AWS manages themaintenance of the operating system.
C. AWS automatically scales up instance types on demand.
D. AWS manages the database type.

A

Answer: C
Explanation:
RDS lowers administrative burden through automatic software patching and maintenance of the
underlyingoperating system and secondly, you still have to manually upgrade the underlying instance type
of your database cluster in order to scale it up.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
34
Q

Which AWS services provide a wayto extend an on-premises architecture to the aws cloud?
A. Amazon EBS
B. Amazon Connect
C. AWS Storage GatewayAWS CLOUD PRACTITIONER DUMPS
D. Amazon CloudFront
E. AWS Direct Connect

A

Answer: B D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
35
Q 
Which AWS services can be used to gather information about AWS account activity? (Select TWO.)
A. Amazon CloudFront
B. AWS Cloud9
C. AWS CloudTrail
D. AWS CloudHSM
E. Amazon CloudWatch
A

Answer: C E
Explanation:
AWS offers a solution that uses AWS CloudTrail to log account activity, Amazon Kinesis to compute and
stream metrics in real-time, and Amazon DynamoDB to durably store the computed data. Metrics are
calculated for create, modify, anddelete API calls for more than 60 supported AWS services. The solution
also features a dashboard that visualizes your account activity in real-time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
36
Q

What are the benefits of developing and running a new application in the AWS Cloud compared to
on-premises? (Select TWO )
A. AWS automatically distributes the data globally for higher durability
B. AWS will take care of operating the application
C. AWS makes it easy to architect for high availability
D. AWS can easilyaccommodate application demand changes
E. AWS takes care of application security patching

A

Answer: C D

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
37
Q 
Which of the following are main components of the AWS global infrastructure? (Select TWO)
A. Resourcegroups
B. Availability Zones
C. Security groups
D. Regions
E. Amazon Machine Images (AMIS)
A

Answer: B E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
38
Q

Which of the following can an AWS customer use to launch a new Amazon Relational Database Service
(Amazon RDS) cluster? (Select TWO.)
A. AWS Concierge
B. AWS CloudFormation
C. Amazon Simple Storage Service (Amazon S3)
D. Amazon EC2 Auto Scaling
E. AWS Management Console

A

Answer: B E

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
39
Q 
Which AWS service is used to track record, and audit configuration changes made to AWS resources?
A. AWS Shield
B. AWS Config
C. AWS 1AM
D. Amazon Inspector
A

Answer: B

40
Q 
Which of the following is acomponent of the shared responsibility model managed entirely by AWS?
A. Patching operating system software
B. Encrypting data
C. Enforcing multi-factor authentication
D. Auditing physical data center assets
A

Answer: D
Explanation:
Of course, Amazon is responsible for auditing physical data center assets and resources since it is the
property of Amazon Inc. Customers have no access to physical sites, hence they are not responsible for
maintaining physical data center assets.

41
Q

How doAmazon EC2 Auto Scaling groups help achieve high availability for a web application?
A. They automatically add more instances across multiple AWS Regions based on global demand of the
application
B. They automatically add or replace instances across multiple Availability Zones when the application
needs it
C. They enable the application’s stalk: content to reside closer to end users
D. They are able to distribute incoming requests across a tier of web server instances

A

Answer: B

42
Q

A company wants to focus on business activities instead of managingcompute and capacity
Which AWS service can be used to automatically add or remove Amazon EC2 instances based on
demand)
A. Elastic Load Balancer
B. Amazon EC2 Auto Scaling
C. Amazon Route 53
D. Amazon CloudFront

A

Answer: B

43
Q

Which element of the AWS global infrastructure consists of one or more discrete data centers each with
redundant power networking and connectivity which are housed in separate facilities?
A. AWS Regions
B. Availability Zones
C. Edge locations
D. Amazon CloudFront

A

Answer: B

44
Q

A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action
should theuser take?
A. Launch the instances across multiple Availability Zones in a single AWS Region
B. Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability
Zone
C. Launch the instances in multiple AWS Regions but in thesame Availability Zone
D. Launch the instances as EC2 Spot Instances in the same AWS Region but in different Availability Zones

A

Answer: B

45
Q

What is a value proposition of the AWS Cloud?
A. AWS is responsible for security in the AWS Cloud
B. No long-term contract is required
C. Provision new servers in days
D. AWS manages user applications in the AWS Cloud

A

Answer: D

46
Q

A. Easy and fast deployment of applications in multiple Regions around the world
B. Security of the AWS Cloud
C. Elasticity of the AWS Cloud
D. Lower variable costs due to massive economies of scale

A

Answer: A

47
Q

How canthe AWS Cloud increase user workforce productivity after migration from an on-premises data
center?
A. Users do not have to wait for infrastructure provisioning
B. The AWS Cloud infrastructure is much faster than an on-premises data center infrastructure
C. AWS takes over application configuration management on behalf of users
D. Users do not need to address security and compliance issues

A

Answer: D

48
Q

A user must meet compliance andsoftware licensing requirements that state a workload must be hosted on
a physical server. When Amazon EC2 instance pricing option will meet these requirements?
A. Dedicated Hosts
B. Dedicated Instances
C. Spot Instances
D. Reserved Instances

A

Answer: A

49
Q

In which scenario should Amazon EC2 Spot Instances be used?
A. A company wants to move its main website to AWS from an on-premises web server.
B. A company has a number of application services whose Service Level Agreement (SLA) requires
99.999% uptime.
C. A company’s heavily used legacy database is currently runningon-premises.
D. A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances

A

Answer: D

50
Q 
According to the AWS shared responsibility model what is the sole responsibility of AWS?
A. Application security
B. Edge location management
C. Patch management
D. Client-side data
A

Answer: C

51
Q

Which of the following tasks is the responsibility of AWS?
A. Encrypting client-side data
B. Configuring AWS Identity and Access Management (IAM) roles
C. Securing the Amazon EC2 hypervisor
D. Setting user password policies

A

Explanation:
In EC2, the AWSIaaS offering, everything from the hypervisor layer down is AWS’s responsibility. A
customer’s poorly coded applications, misconfigured operating systems, or insecure firewall settings will
not affect the hypervisor, it will only affect the customer’s virtual machines running on that hypervisor.

52
Q

A user wantsguidance on possible savings when migrating from on-premises to AWS Which tool is suitable
for this scenario?
A. AWS Budgets
B. Cost Explorer
C. AWS Total Cost of Ownership (TCO) Calculator
D. AWS Well-Architected Tool

A

Answer: C

53
Q 
Which AWS support plan includes a dedicated Technical Account Manager?
A. Developer
B. Enterprise
C. Business
D. Basic
A

Answer: B
Explanation:
The enterprise support plans supports technical account manager. Developer and business support plans
are devoid ofthis facility.

54
Q

Which serviceprovides a hybrid storage service that enables on-premises applications to seamlessly use
cloud storage?
A. Amazon Glacier
B. AWS Snowball
C. AWS Storage Gateway
D. Amazon Elastic Block Storage (Amazon EBS)

A

Answer: C
Explanation:
AWS Storage Gateway is ahybrid cloud storage service that gives you on-premises access to virtually
unlimited cloud storage. Customers use Storage Gateway to simplify storage management and reduce
costs for key hybrid cloud storage use cases. These include moving tape backups tothe cloud, reducing
on-premises storage with cloud-backed file shares, providing low latency access to data in AWS for
on-premises applications, as well as various migration, archiving, processing, and disaster recovery use
cases.

55
Q

According to the AWS shared responsibility model who ts responsible for configuration management?
A. It is solely the responsibility of the customer
B. It is solely the responsibility of AWS
C. It is shared between AWS and the customer
D. It is not part of the AWS shared responsibility model

A

Answer: C

56
Q 
Which of the following services is in the category of AWS serverless platform?
A. Amazon EMR
B. Elastic Load Balancing
C. AWS Lambda
D. AWS Mobile Hub
A

Answer: C
Explanation:
AWS provides a set of fully managed services that you can use to build and run serverless applications.
Serverless applications don’t require provisioning, maintaining, and administering servers for backend
components such as compute, databases, storage, stream processing, message queueing, and more. You
also no longer need to worry about ensuring application fault tolerance and availability. Instead, AWS
handles all of these capabilities for you. Serverless platform includes: AWS lambda, AmazonS3,
DynamoDB, API gateway, Amazon SNS, AWS step functions, Amazon kinesis and developing tools and
services.

57
Q 
Which of the following is an AWS-managed compute service?
A. Amazon SWF
B. Amazon EC2
C. AWS Lambda
D. Amazon Aurora
A

Answer: B

58
Q

Under the shared responsibility model which ofthe following areas are the customer’s responsibility?
(Select TWO )
A. Firmware upgrades of network infrastructure
B. Patching of operating systems
C. Patching of the underlying hypervisor
D. Physical security of data centers
E. Configuration of the security group

A

Answer: B C

59
Q 
Which service is best for storing common database query results, which helps to alleviate database access
load?
A. Amazon Machine Learning
B. Amazon SQS
C. Amazon ElastiCache
D. Amazon EC2 Instance Store
A

Answer: C
Explanation:
Amazon ElastiCache for Redis is a great choice for implementing a highly available, distributed, and secure
in-memory cache to decrease access latency, increase throughput, and ease the load off your relational or
NoSQL databases and applications. ElastiCache can serve frequently requested items at sub-millisecond
response times, and enables you to easily scale for higher loads without growing the costlier backend
databases. Database query results caching, persistent session caching, and full-page caching are all
popular examples of caching with ElastiCache for Redis.

60
Q 
Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC)
Dashboard? (Select TWO.)
A. Amazon CloudFront distributions
B. Amazon Route 53
C. Security Groups
D. Subnets
E. Elastic Load Balancing
A

Answer: C D
Explanation:
Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS Cloud where you can launch AWS resources in a virtual network that you define. You have complete
control over your virtual networking environment, including selection of your own IP address range, creation
of subnets, and configuration of route tables and network gateways. You can use both IPv4 and IPv6 in
your VPC for secure and easy access to resources and applications.
You can easily customize the network configuration for your Amazon VPC. For example, you can create a
public-facing subnet for your web servers that has access to the Internet, and place your backend systems
such as databases or application servers in a private-facing subnet with no Internet access. You can
leverage multiple layers of security, including security groups and network access control lists, to help
control access to Amazon EC2 instances in each subnet.

61
Q

How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Select TWO )
A. It identifies software vulnerabilities inapplications running on AWS
B. It provides a list of cost optimization recommendations based on current AWS usage
C. It detects potential security vulnerabilities caused by permissions settings on account resources
D. It automatically corrects potential security issues caused by permissions settings on account resources
E. It provides proactive alerting whenever an Amazon EC2 instance has been compromised

A

Answer: B C

62
Q 
Which AWS service can serve a static website?
A. Amazon S3
B. Amazon Route 53
C. Amazon QuickSight
D. AWS X-Ray
A

Answer: A
Explanation:
Youcan host a static website on Amazon Simple Storage Service (Amazon S3). On a static website,
individual webpages include static content. They might also contain client-side scripts. By contrast, a
dynamic website relies on server-side processing, includingserver-side scripts such as PHP, JSP, or ASP.NET. Amazon S3 does not support server-side scripting.

63
Q 
Which AWSservice of feature can be used to monitor CPU usage?
A. AWS CloudTrail
B. VPC Flow Logs
C. Amazon CloudWatch
D. AWSConfig
A

Answer: C

64
Q 
Which type of AWS storage is ephemeral and is deleted when an instance is stopped Of terminated?
A. Amazon EBS
B. Amazon EC2 instance store
C. Amazon EFS
D. Amazon S3
A

Answer: B

65
Q 
Which AWSservice identifies security groups that allow unrestricted access to a user's AWS resources?
A. AWS Trusted Advisor
B. Amazon Inspector
C. Amazon CloudWatch
D. AWS CloudTrail
A

Answer: A

66
Q

Which of the following services falls under the responsibility of the customer to maintain operating system
configuration, security patching, and networking?
A. Amazon RDS
B. Amazon EC2
C. Amazon ElastiCache
D. AWS Fargate

A

Answer: B
Explanation:
The customer is responsible for managing, support, patching and control of the guest operating system and
AWS services provided like EC2.

67
Q

How do customers benefit from Amazon’s massive economies of scale?
A. Periodic price reductions as the result of Amazon’s operational efficiencies
B. New Amazon EC2 instance types providing the latest hardware
C. The ability to scale up and down when needed
D. Increased reliability in the underlying hardware of Amazon EC2 instances

A

Answer: C
Explanation:
By using cloud computing, you can achieve a lower variable cost than you can get on your own. Because
usage from hundreds of thousands of customers is aggregated in the cloud, providers such as AWS can
achieve higher economies of scale, which translates into lower pay as-you-go prices.

68
Q 
Which AWS feature allows a company to take advantage of usage tiers for services across multiple
member accounts?
A. Service control policies (SCPs)
B. Consolidated billing
C. All Upfront Reserved Instances
D. AWS Cost Explorer
A

Answer: B

69
Q

Which AWS feature should a customer leverage to achieve high availability of an application?
A. AWSDirect Connect
B. Availability Zones
C. Data centers
D. Amazon Virtual Private Cloud (Amazon VPC)

A

Answer: B
Explanation:
This is to achieve High Availability for any web application (in this case SwiftCode) deployed in AWS. The
following features will bepresent:

70
Q 
Which AWS service would a customer use with a static website to achieve tower latency and high transfer
speeds?
A. AWS Lambda
B. Amazon DynamoDB Accelerator
C. Amazon Route 53
D. Amazon CloudFront
A

Answer: D

71
Q

Which benefits are included with the AWS Business Support plan? (Select TWO )
A. 24/7assistance by way of live chat or a telephone call
B. Support from a dedicated AWS Technical Account Manager
C. An unlimited number of cases and contacts
D. 15-minute response time for production system interruption cases
E. Annual operational reviews with AWS Solutions Architects

A

Answer: A C

72
Q

A company will be moving from an on-premises data center to the AWS Cloud. What would be one financialdifference after the move?
A. Moving from variable operational expense (opex) to upfront capital expense (capex).
B. Moving from upfront capital expense (capex) to variable capital expense (capex).
C. Moving from upfront capital expense (capex) tovariable operational expense (opex).
D. Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex)

A

Answer: C

73
Q 
Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Select
TWO)
A. AWS WAF
B. Amazon DynamoDB
C. Amazon EC2
D. Amazon CloudFront
E. Amazon Inspector
A

Answer: A D

74
Q 
Which is the MINIMUM AWS Support plan that provides technical support through phone calls?
A. Enterprise
B. Business
C. Developer
D. Basic
A

Answer: B

75
Q 
Which of the following common IT tasks can AWS cover to free up company IT resources? (Select TWO.)
A. Patching databases software
B. Testing application releases
C. Backing up databases
D. Creating database schema
E. Running penetration tests
A

Answer: A C

76
Q 
Which AWS service delivers data, videos, applications, and APIs to users globally with low latency and high
transfer speeds?
A. Amazon Route 53
B. Amazon Connect
C. Amazon CloudFront
D. Amazon EC2
A

Answer: B

77
Q 
Which AWS service can be used to automatically scale an application up and down without making
capacity planning decisions?
A. Amazon EBS
B. Amazon Redshift
C. AWS CloudTrail
D. AWS Lambda
A

Answer: D

78
Q

What is an advantage of deploying an application across multiple Availability Zones?
A. There is a lower risk of service failure if a natural disaster causes a service disruption in a given AWS
Region
B. The application will have higher availability because it can withstand a service disruption in one
Availability Zone
C. There will be better coverage as Availability Zones are geographical^ distant and can serve a wider area
D. There will be decreased application latency that will improve the user experience

A

Answer: B

79
Q

A company needs 24/7 phone email and chat access with a response time of less than 1 hour if a
production system has a service interruption
Which AWS Support plan meets these requirements at the LOWEST cost?
A. Basic
B. Developer
C. Business
D. Enterprise

A

Answer: D

80
Q 
AWS Enterprise Support users have access towhich service or feature that is not available to users with
other AWS Support plans?
A. AWS Trusted Advisor
B. AWS Support case
C. Concierge team
D. Amazon Connect
A

Answer: D

81
Q 
Which of the following is a component of the AWS Global Infrastructure?
A. Amazon Alexa
B. AWS Regions
C. Amazon Lightsail
D. AWS Organizations
A

Answer: B

82
Q

Which AWS security service protects applications from distributed denial of service attacks with always-on
detection and automatic inline mitigations?
A. AmazonInspector
B. AWS Web Application Firewall (AWS WAF)
C. Elastic Load Balancing (ELB)
D. AWS Shield

A

Answer: B

83
Q 
What credential components are required to gain programmatic access to an AWS account? (Select TWO )
A. An access key ID
B. A primary key
C. A secret access key
D. A user ID
E. A secondary key
A

Answer: A C

84
Q

A company wants to migrate its applications to a VPC on AWS These applications will need to access
on-premises resources What combination of actions will enable the company to accomplish this
goals?(Select TWO )
A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated
B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC
C. Use Amazon Athena to query data fromthe on-premises database servers
D. Connect the company’s on-premises data center to AWS using AWS Direct Connect
E. Leverage Amazon CloudFront to restrict access to static web content provided through the company’s
on-premises web servers

A

Answer: A B

85
Q

A company has deployed several relational databases on Amazon EC2 instances Every month the
database software vendor releases new security patches that need to be applied to the databases
What is the MOST efficient way toapply the security patches?
A. Connect to each database instance on a monthly basis and download and apply the necessary security
patches from the vendor
B. Enable automate patching for the instances using the Amazon RDS console
C. In AWS Config. configurea rule for the instances and the required patch level
D. Use AWS Systems Manager to automate database patching according to a schedule

A

Answer: D

86
Q

How can a customer increase security to AWS account logons? (Select TWO )
A. Configure AWS Certificate Manager
B. Enable Multi-Factor Authentication (MFA)
C. UseAmazon Cognito to manage access
D. Configure a strong password policy
E. Enable AWS Organizations

A

Answer: B D

87
Q 
Which AWS service allows users to identify the changes made to a resource over time?
A. Amazon Inspector
B. AWS Config
C. AWS Service Catalog
D. AWS 1AM
A

Answer: B

88
Q 
Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional
costs?
A. Enterprise
B. Business
C. Developer
D. Basic
A

Answer: A
Explanation:
https://aws.amazon.com/premiumsupport/plans

89
Q

What are the benefits of using the AWS Cloud for companies with customers in many countries around the
world (SelectTWO)
A. Companies can deploy applications in multiple AWS Regions to reduce latency
B. Amazon Translate automatically translates third-party website interfaces into multiple languages
C. Amazon CloudFront has multiple edge locations around the world to reduce latency
D. Amazon Comprehend allows users to build applications that can respond to user requests in many
languages
E. Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world
which reduces latency

A

Answer: A C

90
Q 
Which options does AWS make available for customers who want to learn about security in the cloud in an
instructor-led setting? (Select TWO.)
A. AWS Trusted Advisor
B. AWS Online Tech Talks
C. AWS Blog
D. AWS Forums
E. AWS Classroom Training
A

Answer: B E

91
Q

When should a company consider using Amazon EC2 Spot Instances? (Select TWO )
A. For non-production applications
B. For stateful workloads
C. For applications that cannot have interruptions
D. For fault-tolerant flexible applications
E. For sensitive database applications

A

Answer: A D

92
Q

The user is fully responsible for which action when running workloads on aws?
A. Patching the infrastructure components
B. Maintaining the underlying infrastructure components
C. Maintaining physical and environmental controls
D. Implementing controls to route application traffic

A

Answer: B

93
Q 
Which AWS service is used to pay AWS bills, and monitor usage and budget costs?
A. AWS Billing and Cost Management
B. Consolidated billing
C. Amazon CloudWatch
D. Amazon GuickStght
A

Answer: B

94
Q

An administrator needs to rapidly deploy a popular IT solution and start using it immediately. Where can the
administrator find assistance?
A. AWS Well-Architected Framework documentation
B. Amazon CloudFront
C. AWS CodeCommit
D. AWS Quick Start reference deployments

A

Answer: D
Explanation:
Quick Starts are built by AWS solutions architects and partners to help you deploy popular technologies on
AWS, based on AWS best practices for security and high availability. These accelerators reduce hundreds
of manual procedures into just a few steps, so you canbuild your production environment quickly and start
using it immediately.

95
Q 
How should a customer forecast the future costs for running a new web application?
A. Amazon Aurora Backtrack
B. Amazon CloudWatch Billing Alarms
C. AWS Simple Monthly Calculator
D. AWS Cost and Usage report
A

Answer: C
Explanation:
https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/ce-forecast.html

96
Q

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility
model?
A. Ensuring network connectivity from AWS to the internet
B. Patching and fixing flaws within the AWS Cloud infrastructure
C. Ensuring the Answer: Dphysical security of cloud data centers
D. Ensuring Amazon EBS volumes are backed up

A

Answer: D

97
Q 
Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Select TWO)
A. AWSWAF
B. AWS Trusted Advisor
C. AWS Direct Connect
D. AWS Organizations
E. Network ACLs
A

Answer: A E

Certify for Sure (4 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions