According to the AWS Shared Responsibility Model, which of the following is both the responsibility of AWS and the customer? (Select two) Data center security Customer data Disposal of disk drives Configuration management Operating system (OS) configuration.
A production company would like to establish an AWS managed virtual private network (VPN) service between its on-premises network and AWS. Which item needs to be set up on the company's side? A security group A virtual private gateway (VGW) A customer gateway A VPC endpoint interface.
A growing start-up has trouble identifying and protecting sensitive data at scale.
Which AWS fully managed service can assist with this task? AWS Secrets Manager Amazon Macie AWS Artifact AWS Key Management Service (AWS KMS).
A company would like to separate cost for AWS services by the department for cost allocation.
Which of the following is the simplest way to achieve this task? Create different virtual private cloud (VPCs) for different departments Create different accounts for different departments Create tags for each department Create one account for all departments and share this account.
Which AWS service can be used to view the most comprehensive billing details for the past month? AWS Cost Explorer AWS Pricing Calculator AWS Budgets AWS Cost & Usage Report (AWS CUR).
According to the AWS Well-Architected Framework, which of the following statements are recommendations in the Operational Excellence pillar? (Select two) Automatically recover from failure Make frequent, small, reversible changes Use serverless architectures Anticipate failure Enable traceability.
Which AWS serverless service allows you to prepare data for analytics? Amazon Redshift Amazon EMR Amazon Athena AWS Glue.
The IT infrastructure at a university is deployed on AWS Cloud and it's experiencing a read-intensive workload.
As a Cloud Practitioner, which AWS service would you use to take the load off databases? Amazon ElastiCache Amazon Relational Database Service (Amazon RDS) AWS Glue Amazon EMR.
A company would like to define a set of rules to manage objects cost-effectively between Amazon Simple Storage Service (Amazon S3) storage classes.
As a Cloud Practitioner, which Amazon S3 feature would you use? Amazon Simple Storage Service (Amazon S3) Bucket policies Amazon S3 Transfer Acceleration (Amazon S3TA) S3 Cross-Region Replication (S3 CRR) Amazon Simple Storage Service (Amazon S3) Lifecycle configuration.
A company is planning to implement Chaos Engineering to expose any blind spots that can disrupt the resiliency of the application.
Which AWS service will help implement this requirement with the least effort? AWS Trusted Advisor Amazon Inspector Amazon GuardDuty AWS Fault Injection Simulator (AWS FIS).
Which AWS service allows you to quickly and easily add user sign-up, sign-in, and access control to web and mobile applications? AWS Identity and Access Management (AWS IAM) Amazon Cognito AWS Organizations AWS IAM Identity Center.
An engineering team is new to the AWS Cloud and it would like to launch a dev/test environment with low monthly pricing.
Which AWS service can address this use case? Amazon LightSail Amazon Elastic Container Service (Amazon ECS) Amazon Elastic Compute Cloud (Amazon EC2) AWS CloudFormation.
A multinational company has just moved its infrastructure to AWS Cloud and has employees traveling to different offices around the world. How should the company set the AWS accounts? As employees travel, they can use other employees' accounts There is nothing to do, AWS Identity and Access Management (AWS IAM) is a global service Create global permissions so users can access resources from all around the world Create an IAM user for each user in each AWS region.
An organization would like to copy data across different Availability Zones (AZs) using Amazon EBS snapshots.
Where are Amazon EBS snapshots stored in the AWS Cloud? Amazon Relational Database Service (Amazon RDS) Amazon Simple Storage Service (Amazon S3) Amazon Elastic Compute Cloud (Amazon EC2) Amazon Elastic File System (Amazon EFS).
A production company with predictable usage would like to reduce the cost of its Amazon Elastic Compute Cloud (Amazon EC2) instances by using reserved instances (RI).
Which of the following length terms are available for Amazon EC2 reserved instances (RI)? (Select Two) 6 months 1 year 5 years 3 years 2 years.
Which Amazon Elastic Compute Cloud (Amazon EC2) Auto Scaling feature can help with fault tolerance? Replacing unhealthy Amazon EC2 instances Distributing load to Amazon EC2 instances Lower cost by adjusting the number of Amazon EC2 instances Having the right amount of computing capacity.
An e-commerce company would like to build a chatbot for its customer service using Natural Language Understanding (NLU).
As a Cloud Practitioner, which AWS service would you use? Amazon SageMaker Amazon Comprehend Amazon Rekognition Amazon Lex.
A corporation would like to simplify access management to multiple AWS accounts as well as facilitate AWS Single Sign-On (AWS SSO) access to its AWS accounts.
As a Cloud Practitioner, which AWS service would you use for this task? AWS Cognito AWS IAM Identity Center AWS Identity and Access Management (AWS IAM) AWS Command Line Interface (CLI).
A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources.
Which AWS service can help with this task? Amazon Inspector AWS Trusted Advisor AWS Systems Manager AWS Health Dashboard - Your Account Health.
Adding more CPU/RAM to an Amazon Elastic Compute Cloud (Amazon EC2) instance represents which of the following? Managing increasing volumes of data Loose coupling Vertical scaling Horizontal scaling.
A company would like to move 50 petabytes (PBs) of data from its on-premises data centers to AWS in the MOST cost-effective way.
As a Cloud Practitioner, which of the following solutions would you choose? AWS Snowmobile AWS Storage Gateway AWS Snowball Edge AWS Snowball.
A developer would like to automate operations on his on-premises environment using Chef and Puppet.
Which AWS service can help with this task? AWS CodeDeploy AWS Batch AWS OpsWorks AWS CloudFormation.
A company would like to move its infrastructure to AWS Cloud.
Which of the following should be included in the Total Cost of Ownership (TCO) estimate? (Select TWO) Electronic equipment at office Number of end-users Power/Cooling Server administration Application advertising.
A company would like to reserve Amazon Elastic Compute Cloud (Amazon EC2) compute capacity for three years to reduce costs.
The company also plans to increase their workloads during this period.
As a Cloud Practitioner, which Amazon Elastic Compute Cloud (Amazon EC2) reserved instance (RI) type would you recommend? Standard reserved instance (RI) Convertible reserved instance (RI) Scheduled reserved instance (RI) Adaptable reserved instances (RI).
A company based in Sydney hosts its application on an Amazon Elastic Compute Cloud (Amazon EC2) instance in ap-southeast-2.
They would like to deploy the same Amazon EC2 instances in eu-south-1.
Which of the following AWS entities can address this use case? Amazon Machine Image (AMI) AWS Lambda Amazon EBS Elastic Volume snapshots Elastic Load Balancing (ELB).
A company using a hybrid cloud would like to store secondary backup copies of the on-premises data.
Which Amazon S3 Storage Class would you use for a cost-optimal yet rapid access solution? Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) Amazon S3 Glacier Deep Archive Amazon S3 Standard-Infrequent Access (S3 Standard-IA) Amazon S3 Standard.
Which of the following AWS Support plans is the MOST cost-effective when getting enhanced technical support by Cloud Support Engineers? AWS Basic Support AWS Developer Support AWS Enterprise Support AWS Business Support.
The development team at a company manages 300 microservices and it is now trying to automate the code reviews to improve the code quality.
Which tool/service is the right fit for this requirement? AWS Trusted Advisor Amazon CodeGuru AWS CodeBuild AWS X-Ray.
Which of the following statements is the MOST accurate when describing AWS Elastic Beanstalk? It is a Platform as a Service (PaaS) that allows you to deploy and scale web applications and services It is an Infrastructure as a Service (IaaS) that allows you to deploy and scale web applications and services It is an Infrastructure as Code (IaC) that allows you to model and provision resources needed for an application It is a Platform as a Service (PaaS) that allows you to model and provision resources needed for an application.
A company would like to audit requests made to an Amazon Simple Storage Service (Amazon S3) bucket.
As a Cloud Practitioner, which Amazon Simple Storage Service (Amazon S3) feature would you recommend addressing this use-case? Amazon Simple Storage Service (Amazon S3) Access Logs Amazon S3 Bucket Policies S3 cross-region replication (S3 CRR) S3 Versioning.
Which security control tool can be used to deny traffic from a specific IP address? VPC Flow Logs Network Access Control List (network ACL) Amazon GuardDuty Security Group.
Which AWS tool/service will help you define your cloud infrastructure using popular programming languages such as Python and JavaScript? AWS CodeBuild AWS Elastic Beanstalk AWS Cloud Development Kit (AWS CDK) AWS CloudFormation.
According to the AWS Well-Architected Framework, which of the following action is recommended in the Security pillar? Use AWS CloudFormation to automate security best practices Use AWS Key Management Service (AWS KMS) to encrypt data Use Amazon CloudWatch to measure overall efficiency Use AWS Cost Explorer to view and track your usage in detail.
Which of the following are the best practices when using AWS Organizations? (Select TWO) Restrict account privileges using Service Control Policies (SCP) Create AWS accounts per department Do not use AWS Organizations to automate AWS account creation Never use tags for billing Disable AWS CloudTrail on several accounts.
An engineering team would like to cost-effectively run hundreds of thousands of batch computing workloads on AWS.
As a Cloud Practitioner, which AWS service would you use for this task? AWS Lambda AWS Fargate AWS Batch Amazon Lightsail.
A company needs to keep sensitive data in its own data center due to compliance but would still like to deploy resources using AWS. Which Cloud deployment model does this refer to? On-premises Hybrid Cloud Public Cloud Private Cloud.
Which of the following AWS services can be used to generate, use, and manage encryption keys on the AWS Cloud? AWS Secrets Manager Amazon Inspector AWS CloudHSM AWS GuardDuty.
A research lab needs to be notified in case of a configuration change for security and compliance reasons.
Which AWS service can assist with this task? Amazon Inspector AWS Secrets Manager AWS Config AWS Trusted Advisor.
Which of the following options is NOT a feature of Amazon Inspector? Track configuration changes Automate security assessments Inspect running operating systems (OS) against known vulnerabilities Analyze against unintended network accessibility.
Which of the following statements is CORRECT regarding the scope of an Amazon Virtual Private Cloud (VPC)? A VPC spans all Availability Zones (AZs) within an AWS region A VPC spans all AWS regions within an Availability Zone (AZ) Amazon VPC spans all subnets in all AWS regions A VPC spans all Availability Zones (AZs) in all AWS regions.
A brand-new startup would like to remove its need to manage the underlying infrastructure and focus on the deployment and management of its applications. Which type of cloud computing does this refer to? On-premises Infrastructure as a Service (IaaS) Software as a Service (SaaS) Platform as a Service (PaaS).
According to the AWS Shared Responsibility Model, which of the following are the responsibilities of AWS? (Select two) Encrypting application data Configuring IAM Roles Network operability Installing security patches of the guest operating system (OS) Data center security.
Which of the following billing timeframes is applied when running a Windows EC2 on-demand instance? Pay per day Pay per minute Pay per hour Pay per second.
A company would like to optimize Amazon Elastic Compute Cloud (Amazon EC2) costs.
Which of the following actions can help with this task? (Select TWO) Vertically scale the EC2 instances Opt for a higher AWS Support plan Build its own servers Purchase Amazon EC2 Reserved instances (RIs) Set up Auto Scaling groups to align the number of instances with the demand.
Which of the following statements is an AWS best practice when architecting for the Cloud? Servers, not services Close coupling Security comes last Automation.
A start-up would like to monitor its cost on the AWS Cloud and would like to choose an optimal Savings Plan. As a Cloud Practitioner, which AWS service would you use? AWS Pricing Calculator AWS Cost & Usage Report (AWS CUR) AWS Cost Explorer AWS Budgets.
A data science team would like to build Machine Learning models for its projects.
Which AWS service can it use? Amazon Connect Amazon Comprehend Amazon Polly Amazon SageMaker.
Which of the following AWS Identity and Access Management (AWS IAM) Security Tools allows you to review permissions granted to an IAM user? IAM policy AWS Identity and Access Management (IAM) access advisor IAM credentials report Multi-Factor Authentication (MFA).
Which of the following are the advantages of using the AWS Cloud? (Select TWO) Stop guessing about capacity Trade operational expense for capital expense Limited scaling AWS is responsible for security in the cloud Increase speed and agility.
According to the AWS Shared Responsibility Model, which of the following is the responsibility of the customer? Edge locations security Protecting hardware infrastructure Firewall & networking configuration of Amazon Elastic Compute Cloud (Amazon EC2) Managing Amazon DynamoDB.
Which of the following services are provided by Amazon Route 53? (Select Two) Domain registration Health checks and monitoring Transfer acceleration IP routing Load balancing.
A company would like to create a private, high bandwidth network connection between its on-premises data centers and AWS Cloud.
As a Cloud Practitioner, which of the following options would you recommend? VPC peering connection AWS Site-to-Site VPN AWS Direct Connect VPC Endpoints.
Which AWS service can inspect Amazon CloudFront distributions running on any HTTP web server? AWS Web Application Firewall (AWS WAF) Amazon Inspector Elastic Load Balancing (ELB) AWS GuardDuty.
A start-up would like to quickly deploy a popular technology on AWS. As a Cloud Practitioner, which AWS tool would you use for this task? AWS Forums AWS CodeDeploy AWS Partner Solutions (formerly Quick Starts) AWS Whitepapers.
A media company wants to enable customized content suggestions for the users of its movie streaming platform.
Which AWS service can provide these personalized recommendations based on historic data? Amazon Personalize Amazon Customize Amazon SageMaker Amazon Comprehend.
Which of the following statements is INCORRECT regarding Amazon EBS Elastic Volumes? Amazon EBS Elastic Volumes can persist data after their termination Amazon EBS Elastic Volumes are bound to a specific Availability Zone (AZ) Amazon EBS Elastic Volumes can be bound to several Availability Zones (AZs) Amazon EBS Elastic Volumes can be mounted to one instance at a time.
Which types of monitoring can be provided by Amazon CloudWatch? (Select TWO) Resource utilization Application performance Account management API access Performance and availability of AWS services.
Which service/tool will you use to create and provide trusted users with temporary security credentials that can control access to your AWS resources? AWS Web Application Firewall (AWS WAF) AWS Security Token Service (AWS STS) Amazon Cognito AWS IAM Identity Center.
A company needs to use a secure online data transfer tool/service that can automate the ongoing transfers from on-premises systems into AWS while providing support for incremental data backups.
Which AWS tool/service is an optimal fit for this requirement? AWS Storage Gateway AWS Snowmobile AWS DataSync AWS Snowcone.
Which AWS service can be used to send, store, and receive messages between software components at any volume to decouple application tiers? Amazon Simple Queue Service (Amazon SQS) Amazon Simple Notification Service (Amazon SNS) AWS Elastic Beanstalk AWS Organizations.
Which of the following criteria are used to calculate the charge for Amazon EBS Volumes? (Select Two) Data type Data transfer IN Volume type Provisioned IOPS The Amazon EC2 instance type the Amazon EBS Elastic volume is attached to.
Which AWS service can be used to subscribe to an RSS feed to be notified of the status of all AWS service interruptions? AWS Lambda Amazon Simple Notification Service (Amazon SNS) AWS Health Dashboard - Service Health AWS Health Dashboard - Your Account Health.
Which AWS tool can provide best practice recommendations for performance, service limits, and cost optimization? Amazon Inspector AWS Health Dashboard - Service health Amazon CloudWatch AWS Trusted Advisor.
Which of the following options are the benefits of using AWS Elastic Load Balancing (ELB)? (Select TWO) Fault tolerance Less costly High availability Agility Storage.
A Cloud Practitioner would like to deploy identical resources across all AWS regions and accounts using templates while estimating costs. Which AWS service can assist with this task? AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) AWS CloudFormation Amazon LightSail AWS CodeDeploy.
|
