Test #3

Which of the following AWS services have data encryption automatically enabled? (Select two)?. Amazon Elastic File System (Amazon EFS). AWS Storage Gateway. Amazon Redshift. Amazon Elastic Block Store (Amazon EBS). Amazon Simple Storage Service (Amazon S3).

Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two). AWS is responsible for training AWS and customer employees on AWS products and services. For a service like Amazon EC2, that falls under Infrastructure as a Service (IaaS), AWS is responsible for maintaining guest operating system. Configuration Management is the responsibility of the customer. For abstracted services like Amazon S3, AWS operates the infrastructure layer, the operating system, and platforms. AWS is responsible for Security 'of' the Cloud.

Which of the following is the best way to protect your data from accidental deletion on Amazon S3?. Amazon S3 storage classes. Amazon S3 Transfer Acceleration (Amazon S3TA). Amazon S3 Versioning. Amazon S3 lifecycle configuration.

Which pillar of the AWS Well-Architected Framework recommends maintaining infrastructure as code (IaC)?. Performance Efficiency. Cost Optimization. Security. Operational Excellence.

Which of the following are components of an AWS Site-to-Site VPN? (Select two). AWS storage gateway. Customer gateway. Network Address Translation gateway (NAT gateway). Virtual private gateway (VGW). Internet gateway.

Which AWS service can be used to automate code deployment to Amazon Elastic Compute Cloud (Amazon EC2) instances as well as on-premises instances?. AWS CodeDeploy. AWS CodePipeline. AWS CloudFormation. AWS CodeCommit.

An IT company has a hybrid cloud architecture and it wants to centralize the server logs for its Amazon Elastic Compute Cloud (Amazon EC2) instances and on-premises servers. Which of the following is the MOST effective for this use-case?. Use Amazon CloudWatch Logs for the Amazon Elastic Compute Cloud (Amazon EC2) instance and AWS CloudTrail for the on-premises servers. Use AWS Lambda to send log data from Amazon Elastic Compute Cloud (Amazon EC2) instance as well as on-premises servers to Amazon CloudWatch Logs. Use Amazon CloudWatch Logs for both the Amazon Elastic Compute Cloud (Amazon EC2) instance and the on-premises servers. Use AWS CloudTrail for the Amazon Elastic Compute Cloud (Amazon EC2) instance and Amazon CloudWatch Logs for the on-premises servers.

A financial services company must meet compliance requirements that mandate storing multiple copies of data in geographically distant locations. As the company uses Amazon Simple Storage Service (Amazon S3) as its main storage service, which of the following represents the MOST resource-efficient solution for this use-case?. For every new object, trigger an AWS Lambda function to write data into a bucket in another AWS Region. Run a daily job on an Amazon Elastic Compute Cloud (Amazon EC2) instance to copy objects into another Region. Use S3 same-region replication (S3 SRR) to replicate data between distant AWS Regions. Use S3 cross-region replication (S3 CRR) to replicate data between distant AWS Regions.

Which AWS service will you use to privately connect your virtual private cloud (VPC) to Amazon Simple Storage Service (Amazon S3)?. AWS Transit Gateway. VPC Endpoint. Amazon API Gateway. AWS Direct Connect.

Which of the following AWS services are regional in scope? (Select two). AWS Identity and Access Management (AWS IAM). AWS Lambda. Amazon CloudFront. Amazon Rekognition. AWS Web Application Firewall (AWS WAF).

Which of the following statements are CORRECT regarding security groups and network access control lists (network ACL)? (Select two). A security group is stateless, that is, the return traffic must be explicitly allowed. A security group contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic. A security group is stateful, that is, it automatically allows the return traffic. A network access control list (network ACL) is stateful, that is, it automatically allows the return traffic. A network access control list (network ACL) contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic.

Which of the following statements are CORRECT about the AWS Auto Scaling group? (Select two). Auto Scaling group scales down and reduces the number of Amazon EC2 instances to match a decrease in demand. Auto Scaling group scales in and reduces the number of Amazon EC2 instances to match a decrease in demand. Auto Scaling group scales up and upgrades to a more powerful Amazon EC2 instance to match an increase in demand. Auto Scaling group scales out and adds more number of Amazon EC2 instances to match an increase in demand. Auto Scaling group scales down and downgrades to a less powerful Amazon EC2 instance to match a decrease in demand.

A research group wants to provision an Amazon Elastic Compute Cloud (Amazon EC2) instance for a flexible application that can be interrupted. As a Cloud Practitioner, which of the following would you recommend as the MOST cost-optimal option?. Reserved Instance (RI). Spot Instance. Dedicated Host. On-Demand Instance.

Which AWS service can be used to execute code triggered by new files being uploaded to Amazon Simple Storage Service (Amazon S3)?. Amazon Simple Queue Service (Amazon SQS). Amazon Elastic Container Service (Amazon ECS). Amazon Elastic Compute Cloud (Amazon EC2). AWS Lambda.

A research lab wants to optimize the caching capabilities for its scientific computations application running on Amazon Elastic Compute Cloud (Amazon EC2) instances. Which Amazon Elastic Compute Cloud (Amazon EC2) storage option is best suited for this use-case?. Amazon Simple Storage Service (Amazon S3). Amazon Elastic File System (Amazon EFS). Instance Store. Amazon Elastic Block Store (Amazon EBS).

A company is looking for a guided path to help deploy, configure, and secure its new workloads while ensuring that it is ready for on-going operations in the cloud. Which of the following AWS services/tools can be leveraged for this use case?. AWS Config. AWS Trusted Advisor. AWS Shared Responsibility Model. Cloud Foundations.

Which budget types can be created under AWS Budgets (Select three)?. Software budget. Reservation budget. Usage budget. Hardware budget. Resource budget. Cost budget.

Which Amazon Route 53 routing policy would you use when you want to route your traffic in an active-passive configuration?. Simple routing. Failover routing. Weighted routing. Latency-based routing.

A multi-national company has its business-critical data stored on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances, in various countries, configured in region-specific compliance rules. To demonstrate compliance, the company needs to submit historical configurations on a regular basis. Which AWS service is best suited for this requirement?. AWS Config. Amazon GuardDuty. AWS CloudTrail. Amazon Macie.

A medical device company is looking for a durable and cost-effective way of storing their historic data. Due to compliance requirements, the data must be stored for 10 years. Which AWS Storage solution will you suggest?. Amazon Elastic File System (Amazon EFS). Amazon S3 Glacier Flexible Retrieval. AWS Storage Gateway. Amazon S3 Glacier Deep Archive.

An AWS hardware failure has impacted one of your Amazon Elastic Block Store (Amazon EBS) volumes. Which AWS service will alert you of the affected resources and provide a remedial action?. AWS Health Dashboard – Your account health. AWS Config. Amazon GuardDuty. AWS Trusted Advisor.

Compared to the on-demand instance prices, what is the highest possible discount offered for reserved instances (RI)?. 90. 40. 72. 50.

Which of the following capabilities does Amazon Rekognition provide as a ready-to-use feature?. Resize images quickly. Convert images into greyscale. Human pose detection. Identify objects in a photo.

Which of the following is a perspective of the AWS Cloud Adoption Framework (AWS CAF)?. Product. Business. Process. Architecture.

A development team is looking for a forum where the most frequent questions and requests from AWS customers are listed along with AWS provided solutions. Which AWS forum/service can be used for troubleshooting an issue or checking for a solution?. AWS Support Center. AWS Knowledge Center. AWS Marketplace. AWS Health Dashboard - service health.

As a Cloud Practitioner, which Amazon Simple Storage Service (Amazon S3) storage class would you recommend for data archival?. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Amazon S3 Glacier Flexible Retrieval. Amazon S3 Intelligent-Tiering. Amazon S3 Standard.

A startup has just moved its IT infrastructure to AWS Cloud. The CTO would like to receive detailed reports that break down the startup's AWS costs by the hour in an Amazon Simple Storage Service (Amazon S3) bucket. As a Cloud Practitioner, which AWS service would you recommend for this use-case?. AWS Cost & Usage Report (AWS CUR). AWS Cost Explorer. AWS Pricing Calculator. AWS Budgets.

Which AWS service will you use if you have to move large volumes of on-premises data to AWS Cloud from a remote location with limited bandwidth?. AWS Direct Connect. AWS Virtual Private Network (VPN). AWS Transit Gateway. AWS Snowball.

According to the AWS Shared Responsibility Model, which of the following are the responsibilities of the customer? (Select two). Ensuring AWS employees cannot access customer data. AWS Global Network Security. Operating system patches and updates of an Amazon Elastic Compute Cloud (Amazon EC2) instance. Enabling data encryption of data stored in Amazon Simple Storage Service (Amazon S3) buckets. Compliance validation of Cloud infrastructure.

AWS Lambda pricing is based on which of the following criteria? (Select two). Number of requests for the AWS Lambda function. The size of the deployment package for the AWS Lambda function. The time it takes for the AWS Lambda function to execute. The language runtime of the AWS Lambda function. The number of lines of code for the AWS Lambda function.

A financial services enterprise plans to enable Multi-Factor Authentication (MFA) for its employees. For ease of travel, they prefer not to use any physical devices to implement Multi-Factor Authentication (MFA). Which of the below options is best suited for this use case?. Soft Token Multi-Factor Authentication (MFA) device. U2F security key. Virtual Multi-Factor Authentication (MFA) device. Hardware Multi-Factor Authentication (MFA) device.

Which of the following improves the availability for a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances?. Deploy the Amazon Elastic Compute Cloud (Amazon EC2) instances in the same Availability Zone (AZ) across two different AWS Regions. Deploy the Amazon Elastic Compute Cloud (Amazon EC2) instances across different AWS Regions of the same Availability Zone (AZ). Deploy the Amazon Elastic Compute Cloud (Amazon EC2) instances in the same Availability Zone (AZ) of an AWS Region. Deploy the Amazon Elastic Compute Cloud (Amazon EC2) instances across different Availability Zones (AZ) in the same AWS Region.

Which Amazon Simple Storage Service (Amazon S3) storage class offers the lowest availability?. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Amazon S3 Standard. Amazon S3 Glacier Flexible Retrieval. Amazon S3 Intelligent-Tiering.

Which of the following AWS services specialize in data migration from on-premises to AWS Cloud? (Select two). AWS Snowball. AWS Database Migration Service (AWS DMS). AWS Site-to-Site VPN. AWS Direct Connect. AWS Transit Gateway.

Which AWS service can help you create data-driven business cases for transitioning your business from on-premises to AWS Cloud?. AWS Migration Evaluator. AWS Billing and Cost Management. AWS Budgets. AWS Trusted Advisor.

A customer is running a comparative study of pricing models of Amazon EFS and Amazon Elastic Block Store (Amazon EBS) that are used with the Amazon EC2 instances that host the application. Which of the following statements are correct regarding this use-case? (Select two). Amazon Elastic Compute Cloud (Amazon EC2) data transfer charges will apply for all Amazon Elastic Block Store (Amazon EBS) direct APIs for Snapshots. You will pay a fee each time you read from or write data stored on the Amazon Elastic File System (Amazon EFS) - Infrequent Access storage class. Amazon Elastic Block Store (Amazon EBS) Snapshot storage pricing is based on the amount of space your data consumes in Amazon Elastic Block Store (Amazon EBS). Amazon Elastic Block Store (Amazon EBS) Snapshots are stored incrementally, which means you are billed only for the changed blocks stored. With AWS Backup, you pay only for the amount of Amazon Elastic File System (Amazon EFS) backup storage you use in a month, you need not pay for restoring this data.

A company has a static website hosted on an Amazon Simple Storage Service (Amazon S3) bucket in an AWS Region in Asia. Although most of its users are in Asia, now it wants to drive growth globally. How can it improve the global performance of its static website?. Use Amazon CloudFormation to improve the performance of your website. Use Amazon CloudFront to improve the performance of your website. Use Amazon S3 Transfer Acceleration (Amazon S3TA) to improve the performance of your website. Use AWS Web Application Firewall (AWS WAF) to improve the performance of your website.

Which of the following Cloud Computing models does the 'gmail' service represent?. Platform as a service (PaaS). Software as a service (SaaS). Infrastructure as a service (IaaS). Function as a service (FaaS).

Which feature of AWS Cloud offers the ability to innovate faster and rapidly develop, test and launch software applications?. Agility. Elasticity. Cost savings. Ability to deploy globally in minutes.

Under the AWS Shared Responsibility Model, which of the following is the responsibility of a customer regarding AWS Lambda?. Maintain versions of an AWS Lambda function. Configure networking infrastructure for the AWS Lambda functions. Maintain all runtime environments for AWS Lambda functions. Patch underlying OS for the AWS Lambda function infrastructure.

An IT company is on a cost-optimization spree and wants to identify all Amazon Elastic Compute Cloud (Amazon EC2) instances that are under-utilized. Which AWS services can be used off-the-shelf to address this use-case without needing any manual configurations? (Select two). Amazon CloudWatch. AWS Cost & Usage Report (AWS CUR). AWS Trusted Advisor. AWS Budgets. AWS Cost Explorer.

What is the primary benefit of deploying an Amazon Relational Database Service (Amazon RDS) database in a Read Replica configuration?. Read Replica enhances database availability. Read Replica protects the database from a regional failure. Read Replica improves database scalability. Read Replica reduces database usage costs.

Which AWS service can be used for online analytical processing?. Amazon Redshift. Amazon Relational Database Service (Amazon RDS). Amazon ElastiCache. Amazon DynamoDB.

AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the following categories? (Select two). Change Management. Service Limits. Documentation. Elasticity. Cost Optimization.

AWS Identity and Access Management (AWS IAM) policies are written as JSON documents. Which of the following are mandatory elements of an IAM policy?. Effect, Sid. Sid, Principal. Effect, Action. Action, Condition.

An organization maintains separate Amazon Virtual Private Clouds (Amazon VPC) for each of its departments. With expanding business, the organization now wants to connect all Amazon Virtual Private Clouds (Amazon VPC) for better departmental collaboration. Which AWS service will help the organization tackle the issue effectively?. VPC peering connection. AWS Transit Gateway. AWS Site-to-Site VPN. AWS Direct Connect.

Which of the following are recommended best practices for AWS Identity and Access Management (AWS IAM) service? (Select two). Create a minimum number of accounts and share these account credentials among employees. Enable multi-factor authentication (MFA) for all users. Share AWS account root user access keys with other administrators. Grant maximum privileges to avoid assigning privileges again. Rotate credentials regularly.

Which of the following AWS entities provides the information required to launch an Amazon Elastic Compute Cloud (Amazon EC2) instance?. Amazon Elastic Block Store (Amazon EBS). Amazon Elastic File System (Amazon EFS). Amazon Machine Image (AMI). AWS Lambda.

Which AWS services support High Availability by default? (Select two). Amazon Elastic File System (Amazon EFS). Instance Store. Amazon DynamoDB. Amazon Redshift. Amazon Elastic Block Store (Amazon EBS).

Which of the following statements are true about Cost Allocation Tags in AWS Billing? (Select two). You must activate both AWS generated tags and user-defined tags separately before they can appear in Cost Explorer or on a cost allocation report. For each resource, each tag key must be unique, and each tag key can have only one value. Only user-defined tags need to be activated before they can appear in Cost Explorer or on a cost allocation report. For each resource, each tag key must be unique, but can have multiple values. Tags help in organizing resources and are a mandatory configuration item to run reports.

Which AWS service can be used as an in-memory database with high-performance and low latency?. Amazon Athena. Amazon Relational Database Service (Amazon RDS). Amazon ElastiCache. Amazon DynamoDB.

Which of the following is a part of the AWS Global Infrastructure?. Subnet. AWS Region. Virtual Private Cloud (VPC). Virtual Private Network (VPN).

Amazon CloudWatch billing metric data is stored in which AWS Region?. In the AWS Region where the AWS resource is provisioned. US West (N. California) - us-west-1. US East (N. Virginia) - us-east-1. In the AWS Region where the AWS account is created.

A startup runs its proprietary application on docker containers. As a Cloud Practitioner, which AWS service would you recommend so that the startup can run containers and still have access to the underlying servers?. AWS Lambda. Amazon Elastic Container Registry (Amazon ECR). AWS Fargate. Amazon Elastic Container Service (Amazon ECS).

An IT company has deployed a static website on Amazon Simple Storage Service (Amazon S3), but the website is still inaccessible. As a Cloud Practioner, which of the following solutions would you suggest to address this issue?. Fix the Amazon S3 bucket policy. Enable Amazon S3 replication. Enable Amazon S3 versioning. Disable Amazon S3 encryption.

Which of the following AWS services offer block-level storage? (Select two). Amazon Elastic Container Service (Amazon ECS). Amazon Simple Storage Service (Amazon S3). Instance Store. Amazon Elastic File System (Amazon EFS). Amazon Elastic Block Store (Amazon EBS).

An IT company would like to move its IT resources (including any data and applications) from an AWS Region in the US to another AWS Region in Europe. Which of the following represents the correct solution for this use-case?. The company should raise a ticket with AWS Support for this resource migration. The company should use AWS CloudFormation to move the resources (including any data and applications) from source AWS Region to destination AWS Region. The company should just start creating new resources in the destination AWS Region and then migrate the relevant data and applications into this new AWS Region. The company should use AWS Database Migration Service (AWS DMS) to move the resources (including any data and applications) from source AWS Region to destination AWS Region.

A cyber-security agency uses AWS Cloud and wants to carry out security assessments on its own AWS infrastructure without any prior approval from AWS. Which of the following describes/facilitates this practice?. Penetration Testing. Network Stress Testing. AWS Secrets Manager. Amazon Inspector.

Which of the following statements is correct regarding the Amazon Elastic File System (Amazon EFS) storage service?. EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ) but not across VPCs and Regions. EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system only in one Availability Zone (AZ). EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ), Regions and VPCs. EC2 instances can access files on an Amazon Elastic File System (Amazon EFS) file system across many Availability Zones (AZ) and VPCs but not across Regions.

An AWS user is trying to launch an Amazon Elastic Compute Cloud (Amazon EC2) instance in a given region. What is the region-specific constraint that the Amazon Machine Image (AMI) must meet so that it can be used for this Amazon Elastic Compute Cloud (Amazon EC2) instance?. An Amazon Machine Image (AMI) is a global entity, so the region is not applicable. You must use an Amazon Machine Image (AMI) from the same region as that of the Amazon EC2 instance. The region of the Amazon Machine Image (AMI) has no bearing on the performance of the Amazon EC2 instance. You can use an Amazon Machine Image (AMI) from a different region, but it degrades the performance of the Amazon EC2 instance. You should use an Amazon Machine Image (AMI) from the same region, as it improves the performance of the Amazon EC2 instance.

Which AWS service protects your AWS account by monitoring malicious activity and detecting threats?. AWS Trusted Advisor. Amazon GuardDuty. Amazon CloudWatch. AWS CloudTrail.

Which of the following is correct regarding the AWS Shield Advanced pricing?. AWS Shield Advanced offers protection against higher fees that could result from a DDoS attack. AWS Shield Advanced is a free service for all AWS Support plans. AWS Shield Advanced is a free service for AWS Business Support plan. AWS Shield Advanced is a free service for AWS Enterprise Support plan.

A leading research firm needs to access information available in old patents and documents (such as PDFs, Text Files, Word documents, etc) present in its huge knowledge base. The firm is looking for a powerful search tool that can dig into these knowledge resources and return the most relevant files/documents. Which of the following is the correct service to address this requirement?. Amazon Lex. Amazon Personalize. Amazon Kendra. Amazon Comprehend.

Which of the following use cases is best suited for Amazon EFS Standard-Infrequent Access (EFS Standard-IA) storage class?. Object storage for workloads that need sub-second latency speeds for accessing the data. Storing files in an accessible location to satisfy audit requirements. Storing data in a single AWS Availability Zone (AZ). Use as boot volume for highly available Amazon Elastic Compute Cloud (Amazon EC2) instances.

An e-commerce company uses AWS Cloud and would like to receive separate invoices for development and production environments. As a Cloud Practioner, which of the following solutions would you recommend for this use-case?. Use AWS Cost Explorer to create separate invoices for development and production environments. Tag all resources in the AWS account as either development or production. Then use the tags to create separate invoices. Create separate AWS accounts for development and production environments to receive separate invoices. Use AWS Organizations to create separate invoices for development and production environments.