Topic 3 Flashcards
A company wants to try a third party ecommerce solution before deciding to use it long torm Which AWS Orvice or tool will support this effort? A. AWS Marketplace B. AWS Partner Network (APN) C. AWS Managed Services D. AWS Service Catalog
Answer: A
IT systems should be designed to reduce interdependencies, so that a change or failure in one component
does not cascade to other components
This is an example of which principle of cloud architecture design?
A. ScalabilityAWSCLOUD PRACTITIONER DUMPS
B. Loose coupling
C. Automation
D. Automatic scaling
Answer: B
The ability to horizontally scale Amazon EC2 instances based on demand is an example of which concept in the AWSCloud value proposition? A. Economy of scale B. Elasticity C. High availability D. Agility
Answer: A
When a company provisions web servers in multiple AWS Regions,what is being increased? A. Coupling B. Availability C. Security D. Durability
Answer: B
Which AWS service helps users meet contractual and regulatory compliance requirements for data security
by using dedicated hardware appliances within the AWS Cloud?
A. AWS SecretsManager
B. AWS CloudHSM
C. AWS Key Management Service (AWS KMS),
D. AWS Directory Service
Answer: B
Amazon Route 53 enables users to:
A. encrypt data in transit.
B. register DNS domain names
C. generate and manage SSL certificates OD.
D. establish a dedicated network connection to AWS
Answer: B
How can an AWS user with an AWS Basic Support plan obtain technical assistance from AWS? A. AWS Senior Support Engineers B. AWSTechnical Account Managers C. AWS Trusted Advisor D. AWS Discussion Forums
Answer: C
How can a company isolate the costs of production and non-production workloads on AWS?
A. Create identity and Access Management (IAM) roles for production and non-production workloads
B. Use different accounts for production and non-production expenses.
C. Use Amazon EC2 for non-production workloads and otherservices for production workloads.
D. Use Amazon CloudWatch to monitor the use of services
Answer: B
Which AWS service or feature can be used to monitor CPU usage? A. AWS CloudTrail B. VPC Flow Logs C. Amazon CloudWatch D. AWS Config
Explanation:
Amazon CloudWatch is ma onitoring service for AWS cloud resources and the applications you run on
AWS. You can use Amazon CloudWatch to collect and track metrics, collect andmonitor log files, and set
alarms.
A user is planning to migrate an application workload to the AWS Cloud Which control becomes the
responsibility of AWS once the migration is complete?
A. Patching the guest operating system
B. Maintaining physical and environmental controls
C. Protecting communications and maintaining zone security
D. Patching specific applications
Answer: B
Which AWS service provides a quick and automated way to create and manage AWS accounts? A. AWS QuickSight B. Amazon Lightsail C. AWSOrganizations D. Amazon Connect
Answer: C
Which AWS service can run a managedPostgreSQL database that provides online transaction processing (OLTP)? A. Amazon DynamoDB B. Amazon Athena C. Amazon RDS D. Amazon EMR
Answer: C
Explanation:
https://aws.amazon.com/blogs/big-data/join-amazon-redshift-and-amazon-rds-postgresql-with-dblink/
Users are reporting latency when connecting to an website with a global customer base. Which AWS service will improve the customer experience by reducing latency? A. Amazon CloudFront B. AWS Direct Connect C. Amazon EC2 Auto Scaling D. AWS Transit Gateway
Answer: A
Which of the following are benefits of using AWS Trusted Advisor? (Select TWO.)
A. Providing high-performance containerorchestration
B. Creating and rotating encryption keys
C. Detecting underutilized resources to save costs
D. Improving security by proactively monitoring the AWS environment Implementing enforced tagging
across AWS resources
Answer: C
TheAWS Trusted Advisor checks include recommendations regarding which of the following? (Select
TWO.)
A. Information on Amazon S3 bucket permissions
B. AWS service outages
C. Multi-factor authentication enabled on the AWS account root user
D. Available software patches
E. Number of users in the account
Answer: A D
Which of the following can be used a second factor within the AWS Management Console for AWS Multi-Factor Authentication (AWS MFA)? A. AWS IAM password B. AWS Certificate Manager certificate C. U2F security key token D. Access key or secret key
Answer: C
Which AWS service helps identifymalicious or unauthorized activities in AWS accounts and workloads? A. Amazon Rekognition B. AWS Trusted Advisor C. Amazon GuardDuty D. Amazon CloudWatch
Answer: C
Which AWS Support plan offers access to self-paced labs? A. Business Support B. Enterprise Support C. Basic Support D. Developer Support
Answer: B
A company’s application running on Amazon EC2 is designed to use an Auto Scaling group to dynamically
add or remove instances as demand increases or decreases. This is an example of
which AWS Cloud architectural principle?
A. Loose coupling
B. Elasticity
C. Design for failure
D. Parallelism
Answer: B
What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called? A. AWS Direct Connects B. Amazon VPCs C. Edge locations D. Availability Zones
Answer: D
Explanation:
Each Region is completely independent. Each Availability Zone is isolated, but the Availability Zones in a
Region are connected through low-latency links. A Local Zone is an AWS infrastructure deployment that
places select services closer to your end users. A Local Zone is an extension of a Region that is in a
different location from your Region. It provides a high-bandwidth backbone to the AWS infrastructure and is
ideal for latency-sensitive applications, for example machine learning.
e:https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html
Which AWS dashboard displays relevant and timely information to help users manage events in progress,
and provides proactive notifications to help plan for scheduled activities?
A. AWS Service Health Dashboard
B. AWS Personal Health Dashboard
C. AWS Trusted Advisor dashboard
D. Amazon CloudWatch dashboard
Answer: B
Explanation:
https://d1.awsstatic.com/whitepapers/aws-overview.pdf
AWS Personal Health Dashboard AWS Personal HealthDashboard provides alerts and remediation
guidance when AWS is experiencing events that might affect you. While the Service Health Dashboard
displays the general status of AWS services, Personal Health Dashboard gives you a personalized view into the performance and availability of the AWS services underlying your AWS resources. The dashboard
displays relevant and timely information to help you manage events in progress, and provides proactive
notification to help you plan for scheduled activities. With Personal Health Dashboard, alerts are
automatically triggered by changes in the health of AWS resources, giving you event visibility and guidance
to help quickly diagnose and resolve issues.
When building a cloud Total Cost of Ownership (TCO) model, which costelements should be considered for workloads running on AWS? (Select THREE.) A. Compute costs B. Facilities costs C. Storage costs D. Data transfer costs E. Network infrastructure costs F. Hardware lifecycle costs
Answer: A E
A company operating in the AWS Cloud requires separate invoices for specific environments, such as
development, testing, and production How can this be achieved? OA. Use multiple AWS accounts.
A. Use resource tagging
B. Use multiple VPCs.
C. Use Cost Explorer
Answer: A
Where can users find a catalog of AWS-recognized providers of third-party security solutions? A. AWS Service Catalog B. AWS Marketplace C. AWS Quick Start OD D. AWS CodeDeploy
Answer: A Creo que realmente debería ser Marketplace
Within the AWS Shared responsibility model, who is responsible for security and compliance?
A. The customer is responsible
B. AWS is responsible
C. AWS and the customer share responsibility
D. AWS shares responsibility with the relevant governing body
Answer: C
Which AWS services can be used as infrastructure automation tools? (Select TWO.) A. AWS CloudFormation B. Amazon CloudFront C. AWS Batch D. AWS OpsWorks E. Amazon QuickSight
Answer: A D
Which AWS services can be used to provide network connectivity between an on-premises network and a VPC? (Select TWO.) A. Amazon Route 53 B. AWS Direct Connect C. AWS Data Pipeline AWS VPN D. Amazon Connect
Answer: B
An ecommerce company anticipates a huge increasein web traffic for two very popular upcoming shopping holidays Which AWS service or feature can be configured to dynamically adjust resources to meet this change in demand? A. AWS Cloud Trail B. Amazon EC2 Auto Scaling C. Amazon Forecast D. AWS Config
Answer: B
Why is it beneficial to use Elastic Load Balancers with applications?
A. They allow for the conversion from Application Load Balancers toClassic Load Balancers.
B. They are capable of handling constant changes in network traffic patterns.
C. They automatically adjust capacity
D. They are provided at no charge to
Answer: B
What is an Availability Zone in AWS?
A. One or more physical data centers
B. A completely isolated geographic location
C. One or more edge locations based around the world
D. A data center location with a single source of power and networking
Answer: A
How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (Select TWO)
A. By the time it takes for the Lambda function to execute.
B. By the number of versions of a specific Lambda function. C. By the number of requests made for a given Lambda function.
D. By the programming language that is used for the Lambda function
E. By the total number of Lambda functions in an AWS account
Answer: A C
A company is running an ecommerce application hosted inEurope. To decrease latency for users who
access the website from other parts of the world, the company would like to cache frequently accessed
static content closer to the users
Which AWS service will support these requirements?
A. Amazon ElastiCache
B. Amazon CloudFront
C. Amazon Elastic File System (Amazon EFS)
D. Amazon Elastic Block Store (Amazon EBS)
Answer: C
Under the AWS shared responsibility model, which of the following is a customer responsibility?
A. Installing security patches for the Xen and KVMhypervisors
B. Installing operating system patches for Amazon DynamoDB
C. Installing operating system security patches for Amazon EC2 database
D. instances Installing operating system security patches for Amazon RDS database instances
Answer: C
What is a characteristic of Amazon S3 cross-region replication?
A. Both source and destination S3 buckets must have versioning disabled
B. The source and destination S3 buckets cannot be in different AWS Regions
C. S3 buckets configured for cross-region replication canbe owned by a single AWS account or by different
accounts
D. The source S3 bucket owner must have the source and destination AWS Regions disabled for their
account
Answer: C
A Cloud Practitioner must determine if any security groups in an AW account have been provisioned to
allow unrestricted access for specific ports
What is the SIMPLEST way to do this?
A. Review the inbound rules for each security group in the Amazon EC2 management console to check for
port 0.0.0.0/0.
B. Run AWS Trusted Advisor and review the findings
C. Open the AWS IAM console and check the inbound rule filters for open access
D. In AWS Config, create a custom rule that invokes an AWS Lambdafunction to review firewall rules for
inbound access
Answer: B
Which AWS services provide a user with connectivity between the AWS Cloud and onpremises resources? (Select TWO) A. AWS VPN B. Amazon Connect C. Amazon Cognito D. AWS Direct Connect E. AWS Managed Services
Answer: A D
Under the shared responsibility model, which of thefollowing tasks are the responsibility of the customer?
(Choose two.)
A. Maintaining the underlying Amazon EC2 hardware.
B. Managing the VPC network access control lists.
C. Encrypting data in transit and at rest.
D. Replacing failed hard disk drives.
E. Deploying hardware in different Availability Zones
Answer: B C
Explanation:
The hardware related jobs is the prime responsibility of AWS. VPC network access control lists is
something a customer has to do himself to secure the applications. Encrypting data in transit and at rest is a
shared responsibility in which AWS plays a part. All hardware related jobs have nothing to do with the
customer.
Reference: https://dzone.com/articles/aws-shared-responsibility-model-cloud-security
Which of the following allows an application running on an Amazon EC2 instance to securely write data to
an Amazon S3 bucketwithout using long term credentials?
A. Amazon Cognito
B. AWS Shield
C. AWS IAM role
D. AWS IAM user access key
Answer: C
Which service is an AWS-managed Hadoop framework that makes it easy, fast, and cost effective to process large amounts of data across dynamically scalable Amazon EC2 instances? A. Amazon EMR B. Amazon EC2 C. AWS Elastic Beanstalk D. Amazon Redshift
Answer: A
