Udemy Practice Exam 5 Flashcards
Which AWS tool/service will help you define your cloud infrastructure using popular programming languages such as Python and JavaScript?
AWS Cloud Development Kit (CDK)
A data science team would like to build Machine Learning models for its projects. Which AWS service can it use?
Amazon SageMaker
An e-commerce company would like to build a chatbot for its customer service using Natural Language Understand (NLU). As a Cloud Practitioner, which AWS service would you use?
Amazon Lex
Natural language processing (NLP) service that uses machine learning to find meaning and insights in text.
Amazon Comprehend
A company needs to keep sensitive data in its own data center due to compliance but would still like to deploy resources using AWS. Which Cloud deployment model does this refer to?
Hybrid Cloud
Which of the following statements is an AWS best practice when architecting for the Cloud?
-Automation
-Servers, not services
-Close coupling
-Security comes last
-Automation
Which AWS service can be used to send, store, and receive messages between software components at any volume to decouple application tiers?
-Amazon SQS
According to the Well-Architected Framework, which of the following action is recommended in the Security pillar?
-Use AWS Cost Explorer to view and track your usage in detail
-Use Amazon CloudWatch to measure overall efficiency
-Use AWS CloudFormation to automate security best practices
-Use AWS KMS to encrypt data
Use AWS KMS to encrypt data
“Protect data in transit and at rest”
Which AWS service can be used to view the most comprehensive billing details for the past month?
AWS Cost & Usage Reports
A production company would like to establish an AWS managed VPN service between its on-premises network and AWS. Which item needs to be set up on the company’s side?
A customer gateway
Which types of monitoring can be provided by Amazon CloudWatch? (Select TWO)
-Performance and availability of AWS services
-API Access
-Application performance
-Account management
-Resource utilization
-Application performance
-Resource utilization
A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?
-AWS Systems Manager
-You can create logical groups of resources such as applications, different layers of an application stack, or production versus development environments.
-Central place to view and manage your AWS resources,
-AWS Systems Manager
Which of the following AWS Support plans is the MOST cost-effective when getting enhanced technical support by Cloud Support Engineers?
-Business
It provides enhanced technical support, but by Cloud Support Associates.
-Developer
A company would like to separate cost for AWS services by the department for cost allocation. Which of the following is the simplest way to achieve this task?
-Create tags for each department
A media company wants to enable customized content suggestions for the users of its movies streaming platform. Which AWS service can provide these personalized recommendations based on the historic data?
-Amazon Personalize
A developer would like to automate operations on his on-premises environment using Chef and Puppet. Which AWS service can help with this task?
AWS OpsWorks
Which of the following IAM Security Tools allows you to review permissions granted to a user?
IAM access advisor
service permissions granted to a user and when those services were last accessed.
Lists all users in your account and the status of their various credentials, including passwords, access keys, and MFA devices.
IAM credentials report
A start-up would like to monitor its cost on the AWS Cloud and would like to choose an optimal Savings Plan. As a Cloud Practitioner, which AWS service would you use?
AWS Cost Explorer
According to the Shared Responsibility Model, which of the following is both the responsibility of AWS and the customer? (Select two)
-Configuration management
-Data center security
-Customer data
-Disposal of disk drives
-Operating system (OS) configuration
-Configuration management
-Operating system (OS) configuration (host OS-AWS / guest OS-Customer)
Which AWS service can inspect CloudFront distributions running on any HTTP web-server?
AWS WAF
Allowing you to configure rules that allow, block, or monitor (count) web requests based on conditions that you define.
AWS WAF (web application firewall )
Is a threat detection service that continuously monitors for malicious or unauthorized behavior to help you protect your AWS accounts and workloads.
AWS GuardDuty
Automated security assessment service that helps improve the security and compliance of applications deployed on AWS.
Amazon Inspector
A company is planning to implement Chaos Engineering to expose any blind spots that can disrupt the resiliency of the application.
Which AWS service will help implement this requirement with the least effort?
AWS Fault Injection Simulator
Which of the following are the best practices when using AWS Organizations? (Select TWO)
-Create accounts per department
-Never use tags for billing
-Restrict account privileges using Service Control Policies (SCP)
-Disable CloudTrail on several accounts
-Do not use AWS Organizations to automate AWS account creation
-Create accounts per department
-Restrict account privileges using Service Control Policies (SCP)
A research lab needs to be notified in case of a configuration change for security and compliance reasons. Which AWS service can assist with this task?
AWS Config
Helps you protect secrets needed to access your applications, services, and IT resources. The service enables you to easily rotate, manage, and retrieve database credentials, API keys, and other secrets throughout their lifecycle.
AWS Secrets Manager
A company using a hybrid cloud would like to store secondary backup copies of the on-premises data. Which S3 Storage Class would you use for a cost-optimal yet rapid access solution?
S3 One Zone - Infrequent Access
costs 20% less
S3 categories that don’t charge retrieval charge (2)
-S3 Standard
-S3 Intelligent-Tiering`