A company wants to establish a private, dedicated connection between AWS and its on-premises data center. Which AWS service is the right choice for this requirement? Amazon CloudFront AWS Site-to-Site VPN Amazon API Gateway AWS Direct Connect.
As part of a flexible pricing model, AWS offers two types of Savings Plans. Which of the following are the Savings Plans from AWS? Compute Savings Plans, EC2 Instance Savings Plans Compute Savings Plans, Storage Savings Plans Reserved Instances (RI) Savings Plans, EC2 Instance Savings Plans Instance Savings Plans, Storage Savings Plans.
Which of the following are the security best practices suggested by AWS for Identity and Access Management (IAM)? (Select two) Enable AWS Multi-Factor Authentication (AWS MFA) on your AWS root user account. MFA helps give root access to multiple users without actually sharing the root user login credentials When you create IAM policies, grant the least privileges required to perform a task Do not change passwords and access keys once created. This results in failure of connectivity in the application logic Share your AWS account root user credentials only if absolutely necessary for performing an important billing operation Do not share security credentials between accounts, use IAM roles instead.
Which of the following AWS services will help provision a logically isolated network for your AWS resources? Amazon Route 53 AWS PrivateLink AWS Firewall Manager Amazon Virtual Private Cloud (Amazon VPC).
A company is planning to move their traditional CRM application running on MySQL to an AWS database service.
Which database service is the right fit for this requirement? Amazon ElastiCache Amazon Aurora Amazon DynamoDB Amazon Neptune.
Which of the following is the least effort way to encrypt data for AWS services only in your AWS account using AWS Key Management Service (KMS)? Use AWS managed master keys that are automatically created in your account for each service Create your own customer managed keys (CMKs) in AWS KMS Use AWS owned CMK in the service you wish to use encryption Use AWS KMS APIs to encrypt data within your own application by using the AWS Encryption SDK.
Which of the following AWS services can be used to continuously monitor both malicious activities as well as unauthorized behavior to protect your AWS accounts and workloads? Amazon GuardDuty Amazon Inspector AWS Security Hub Amazon Detective.
Which of the following use-cases can be solved using the Amazon Forecast service? Predict the web traffic of a website for the next few weeks To recommend personalized products for users based on their previous purchases Document search service that can extract answers from text within documents To develop and test fully functional machine learning models.
A company is looking at a service/tool to automate and minimize the time spent on keeping the server images up-to-date.
These server images are used by Amazon Elastic Compute Cloud (Amazon EC2) instances as well as the on-premises systems.
Which AWS service will help achieve the company's need? Amazon EC2 Amazon Machine Image (AMI) AWS CloudFormation templates Amazon EC2 Image Builder AWS Systems Manager (Amazon Simple Systems Manager (SSM)).
A healthcare company wants to implement a continuous replication based disaster recovery mechanism and provide fast, reliable recovery of physical, virtual, and cloud-based servers into AWS Cloud.
Which of the following represents the best-fit solution for this use case? AWS Storage Gateway AWS Snowball Edge CloudCover Disaster Recovery CloudEndure Disaster Recovery.
An e-commerce company has its on-premises data storage on an NFS file system that is accessed in parallel by multiple applications.
The company is looking at moving the applications and data stores to AWS Cloud.
Which storage service should the company use to move their files to AWS Cloud seamlessly if the application is hosted on Amazon Elastic Compute Cloud (Amazon EC2) instances? AWS Storage Gateway Amazon Elastic File System (Amazon EFS) Amazon Elastic Block Store (Amazon EBS) Amazon Simple Storage Service (Amazon S3).
Which of the following will help you control the incoming traffic to an Amazon EC2 instance? Route Table Security Group AWS Resource Group Network access control list (network ACL).
Which tool/service will help you get a forecast of your spending for the next 12 months? AWS Marketplace Consolidated Billing of AWS Organizations AWS Cost Explorer AWS Pricing Calculator.
Which member of the AWS Snow Family is used by the Edge computing applications for IoT use cases for facilitating the collection and processing of data to gain immediate insights and then transfer the data to AWS? AWS Snowposts AWS Snowmobile AWS Snowcone AWS Snowball Edge Storage Optimized.
AWS Support plans are designed to give the right mix of tools and access to expertise for successfully running a business using AWS.
Which support plan(s) offers the full set of checks for AWS Trusted Advisor best practices and also provides support for programmatic case management? Only AWS Enterprise Support plan AWS Enterprise On-Ramp Support plan after paying an additional fee and AWS Enterprise Support plan AWS Business Support, AWS Enterprise On-Ramp, and AWS Enterprise Support plans AWS Developer Support, AWS Business Support and AWS Enterprise Support plans.
A team manager needs data about the changes that have taken place for AWS resources in his account during the past two weeks. Which AWS service can help get this data? Amazon CloudWatch AWS CloudTrail Amazon Inspector AWS Config.
An e-learning company wants to build a knowledge graph by leveraging a fully managed database.
Which of the following is the best fit for this requirement? Amazon DynamoDB Amazon Neptune Amazon Relational Database Service (Amazon RDS) Amazon DocumentDB.
A gaming company needs compute and storage services close to edge locations in order to ensure ultra-low latency for end-users and devices that connect through mobile networks.
Which AWS service is the best fit for this requirement? AWS Snowmobile AWS Outposts AWS Wavelength AWS Snowball Edge.
Which AWS service is used to store and commit code privately and also offer features for version control? AWS CodeBuild AWS CodePipeline AWS CodeStar AWS CodeCommit.
Which of the following is a repository service that helps in maintaining application dependencies via integration with commonly used package managers and build tools like Maven, Gradle, npm, etc? AWS CodeCommit AWS CodeStar AWS CodeArtifact AWS CodeBuild.
A company stores all its media files in Amazon Simple Storage Service (Amazon S3) which is accessed by an application hosted on Amazon EC2 instances.
The company wants to convert these media files into formats that users can playback on mobile devices.
Which AWS service/tool helps you achieve this requirement? AWS Glue Amazon Transcribe Amazon Elastic Transcoder Amazon Comprehend.
AWS Web Application Firewall (AWS WAF) can be deployed on which of the following services? Amazon CloudFront, Amazon Elastic Compute Cloud (Amazon EC2), Amazon API Gateway, Application Load Balancer AWS AppSync, Amazon CloudFront, Application Load Balancer, Amazon Elastic Compute Cloud (Amazon EC2) Amazon CloudFront, Application Load Balancer, Amazon API Gateway, AWS AppSync Application Load Balancer, Amazon Elastic Compute Cloud (Amazon EC2), Amazon API Gateway.
A manufacturing company is looking at a service that can offer AWS infrastructure, AWS services, APIs, and tools to its on-premises data center for running low latency applications.
Which of the following service/tool is the best fit for the given requirement? AWS Local Zones AWS Outposts AWS Snow Family AWS Wavelength.
Which AWS service allows you to connect any number of IoT devices to the cloud without requiring you to provision or manage servers? AWS IoT Core Amazon Connect AWS Control Tower AWS IoT Gateway.
AWS Support offers five support plans for its customers.
Which of the following features are covered as part of the AWS Basic Support Plan? (Select two) Client-side diagnostic tools Use-case guidance – What AWS products, features, and services to use for best supporting your specific needs Infrastructure event management Service health checks One-on-one responses to account and billing questions.
Which of the following data sources are used by Amazon Detective to analyze events and identify potential security issues? Amazon CloudWatch Logs, AWS CloudTrail logs and Amazon Simple Storage Service (Amazon S3) Access Logs Amazon CloudWatch Logs, AWS CloudTrail logs and Amazon Inspector logs Amazon CloudWatch Logs, Amazon VPC Flow Logs and Amazon GuardDuty findings AWS CloudTrail logs, Amazon VPC Flow Logs, and Amazon GuardDuty findings.
As part of log analysis, you have realized that one or more AWS-owned IP addresses are being used for port scanning your on-premises server. Which service/team should you connect to resolve this issue? Reach out to Werner Vogels, the CTO of Amazon, with the details of the incident Use AWS Trusted Advisor to log a complaint with AWS Contact AWS Abuse team Contact AWS Support.
A financial services company needs to retain its data for 10 years to meet compliance norms.
Which Amazon Simple Storage Service (Amazon S3) storage class is the best fit for this use case considering that the data has to be stored at a minimal cost? Amazon S3 Glacier Deep Archive Amazon S3 Glacier Flexible Retrieval Amazon S3 Intelligent-Tiering Amazon S3 Standard-Infrequent Access (S3 Standard-IA).
An e-commerce company needs to generate custom reports and graphs every week for analyzing the product sales data.
The company is looking at a tool/service that will help them analyze this data using interactive dashboards with minimal effort.
The dashboards also need to be accessible from any device.
Which AWS tool/service will you recommend for this use-case? Amazon Athena Amazon Quicksight AWS Glue Amazon SageMaker.
Per the AWS Shared Responsibility Model, management of which of the following AWS services is the responsibility of the customer? AWS Elastic Beanstalk Amazon Elastic Compute Cloud (Amazon EC2) Amazon DynamoDB Amazon Simple Storage Service (Amazon S3).
Which of the following services/tools offers a user-friendly graphical user interface to manage AWS Snowball devices without a need for command-line interface or REST APIs? AppStream 2.0 AWS Transfer Family AWS OpsWorks AWS OpsHub.
Which of the following points have to be considered when choosing an AWS Region for a service? (Select two) Compliance and Data Residency guidelines of the AWS Region should match your business requirements The AWS Region should have 5G networks, to seamlessly access the breadth of AWS services in the region The AWS Region chosen should have all its Availability Zones (AZ) within 100 Kms radius, to keep latency low for hosted applications The AWS Region with high availability index should be considered for your business AWS Region chosen should be geographically closer to the user base that utilizes the hosted AWS services.
A company is looking at real-time processing of streaming big data for their ad-tech platform.
Which of the following AWS services is the right choice for this requirement? Amazon Kinesis Data Streams Amazon Simple Queue Service (Amazon SQS) Amazon EMR Amazon Redshift.
Which feature/functionality will help you organize your AWS resources, manage and automate tasks on large numbers of resources at a time? Amazon WorkSpaces AWS Resource Groups Tags AWS Organizations.
Which of the following are NoSQL database services from AWS? (Select two) AWS Storage Gateway Amazon DocumentDB Amazon Neptune Amazon Aurora Amazon Relational Database Service (Amazon RDS).
Which free tool helps to review the state of your workloads and compares them to the latest AWS architectural best practices after you have answered a series of questions about your workload? AWS Well-Architected Tool AWS Technical Account Manager (TAM) AWS Trusted Advisor AWS Well-Architected Framework.
By default, which of the following events are logged by AWS CloudTrail? Data events Management events Data events and Insights events AWS CloudTrail Insights events.
An e-commerce application sends out messages to a downstream application whenever an order is created.
The downstream application processes the messages and updates its own systems.
Currently, the two applications directly communicate with each other.
Which service will you use to decouple this architecture, without any communication loss between the two systems? Amazon Simple Notification Service (Amazon SNS) AWS Lambda Amazon Simple Queue Service (SQS) Amazon Kinesis Data Streams.
Which of the following represents the correct scenario where an Auto Scaling group's (ASG) predictive scaling can be effectively used to maintain the required number of AWS resources? To manage a workload that exhibits recurring load patterns that are specific to the day of the week or the time of day To help configure a scaling policy to keep the average aggregate CPU utilization of your Auto Scaling group at 40 percent To help configure a CloudWatch Amazon Simple Queue Service (Amazon SQS) metric like ApproximateNumberOfMessagesVisible for scaling the group based on the value of the metric To manage a fixed number of resources in the Auto Scaling group.
Due to regulatory guidelines, a company needs to encrypt data as it passes through the different layers of its AWS architecture.
The company is reviewing the capabilities of the various AWS services and their encryption options.
Which of the below services are encrypted by default and need no user intervention to enable encryption? AWS Organizations, Amazon EC2, AWS CloudTrail Logs AWS Storage Gateway, Application Load Balancer (ALB), Amazon CloudFront AWS CloudTrail Logs, Amazon S3 Glacier, AWS Storage Gateway Amazon CloudWatch logs, Application Load Balancer (ALB), Amazon S3 Glacier.
Which of the following statements are true about AWS Shared Responsibility Model? (Select two) For abstracted services, such as Amazon S3, AWS operates the infrastructure layer, the operating system, platforms, encryption options, and appropriate permissions for accessing the S3 resources AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest operating system and applications AWS maintains the configuration of its infrastructure devices and is responsible for configuring the guest operating systems, databases, and applications Amazon Elastic Compute Cloud (Amazon EC2) is categorized as Infrastructure as a Service (IaaS) and hence AWS will perform all of the necessary security configuration and management tasks AWS trains AWS employees, but a customer must train their own employees.
Which of the following statements are true about AWS Elastic Beanstalk? (Select two) AWS Elastic Beanstalk supports Java, .NET, PHP, but does not support Docker web applications There is no additional charge for AWS Elastic Beanstalk. You pay only for the underlying AWS resources that your application consumes AWS Elastic Beanstalk supports web applications built on different languages. But, AWS Elastic Beanstalk cannot be used for deploying non-web applications AWS Elastic Beanstalk automates the details of capacity provisioning, load balancing, and application deployment, creating an environment that runs a version of your application. However, auto-scaling functionality cannot be automated using AWS Elastic Beanstalk With AWS Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that runs those applications.
A Security Group has been changed in an AWS account and the manager of the account has asked you to find out the details of the user who changed it.
As a Cloud Practitioner, which AWS service will you use to fetch the necessary information? AWS Trusted Advisor AWS CloudTrail AWS X-Ray Amazon Inspector.
Which of the following AWS services is delivered globally rather than regionally? AWS Snowmobile Amazon Simple Storage Service (Amazon S3) buckets Amazon Elastic File System (Amazon EFS) Amazon WorkSpaces.
A company provides you with a completed product that is run and managed by the company itself.
As a customer, you only use the product without worrying about maintaining or managing the product.
Which cloud computing model does this kind of product belong to? Platform as a Service (PaaS) Product as a Service (Paas) Software as a Service (SaaS) nfrastructure as a Service (IaaS).
A company is looking for ways to make its desktop applications available to the employees from browsers on their devices/laptops.
Which AWS service will help achieve this requirement without having to procure servers or maintain infrastructure? Amazon AppStream 2.0 Amazon WorkSpaces AWS Outposts AWS Snowball.
A blogging company is looking at an easy to use solution to host WordPress blogs.
The company needs a cost-effective, readily available solution without the need to manage the configurations for servers or the databases.
Which AWS service will help you achieve this functionality? Amazon Lightsail AWS Fargate Amazon Elastic Compute Cloud (EC2) with Amazon S3 for storage Host the application directly on Amazon S3.
Which of the following statements are true about AWS Regions and Availability Zones (AZ)? (Select two) All traffic between Availability Zones (AZ) is encrypted An Availability Zone (AZ) is a physical location where AWS clusters the data centers Each AWS Region consists of multiple, isolated, and physically separate Availability Zones (AZ) within a geographic area AWS calls each group of logical data centers as AWS Regions Traffic between Availability Zones (AZ) is not encrypted by default, but can be configured from AWS console.
Which of the following statements are correct regarding the AWS Support Plans? (Select two) Both Basic and AWS Developer Support plans have access to the core Trusted Advisor checks only Infrastructure Event Management is included for free for AWS Business Support and AWS Enterprise Support plans and can be extended to AWS Developer Support plan for an additional fee A designated Technical Account Manager is available only for AWS Enterprise Support plan Contextual guidance based on customer use-case, is available only for the AWS Enterprise support plan AWS Concierge service is available for the AWS Business Support and AWS Enterprise Support plans.
Which of the following statements are correct regarding Amazon API Gateway? (Select two) If an API response is served by the cached data, it is not considered an API call for billing purposes Amazon API Gateway can call an AWS Lambda function to create the front door of a serverless application Amazon API Gateway does not yet support API result caching Amazon API Gateway creates RESTful APIs, Storage Gateway creates WebSocket APIs API Gateway can be configured to send data directly to Amazon Kinesis Data Stream.
A Cloud Practitioner wants to use CIDR block notation when providing an IP address range.
Which of the following AWS network services/utilities allow this feature? (Select two) AWS Lambda AWS Cost Explorer Amazon Simple Storage Service (Amazon S3) Security group Network access control list (network ACL).
A weather-tracking application is built using Amazon DynamoDB.
The performance of the application has been consistently good.
But lately, the team has realized that during holidays and travel seasons, the load on the application is high and the read requests consume most of the database resources, thereby drastically increasing the overall application latency.
Which feature/service will help resolve this issue? Amazon ElastiCache Amazon CloudFront Amazon DynamoDB Accelerator Amazon DynamoDB Regulator.
Which of the following AWS services are offered free of cost? (Select two) Amazon CloudWatch facilitated detailed monitoring of EC2 instances An Elastic IP address, which is chargeable as long as it is associated with an EC2 instance AWS Auto Scaling AWS Elastic Beanstalk Amazon EC2 Spot Instances.
A supply chain company is looking for a database that provides a centrally verifiable history of all changes made to data residing in it.
This functionality is critical for the product and needs to be available off the shelf without the need for any customizations.
Which of the following databases is the right choice for this use case? Amazon Timestream Amazon Neptune Amazon Managed Blockchain Amazon Quantum Ledger Database (Amazon QLDB).
Which of the following statements are correct regarding the AWS Control Tower and Service Control Policies? (Select two) Service Control Policies (SCPs), by default, affect all the users in the AWS Organization. They have to be configured to effect only the member accounts, if needed AWS Control Tower helps you deploy a multi-account AWS environment and operate it with day-to-day reminders and recommendations Service Control Policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization Service Control Policies (SCPs) can help grant permissions to the accounts in your organization AWS Control Tower is an AWS native service providing a pre-defined set of blueprints and guardrails to help customers implement a landing zone for new AWS accounts.
A company has defined a baseline that mentions the number of AWS resources to be used for different stages of application testing. However, the company realized that employees are not adhering to the guidelines and provisioning additional resources via API calls, resulting in higher testing costs.
Which AWS service will help the company raise alarms whenever the baseline resource numbers are crossed? AWS Config AWS CloudTrail Insights AWS X-Ray Amazon Detective.
A company is moving its on-premises application to AWS Cloud.
The application uses in-memory caches for running custom workloads.
Which Amazon Elastic Compute Cloud (Amazon EC2) instance type is the right choice for the given requirement? Compute Optimized instance types Storage Optimized instance types Memory Optimized instance types Accelerated computing instance types.
A financial consulting company is looking for automated reference deployments, that will speed up the process of deploying its financial solutions on AWS Cloud.
The reference deployment should be able to deploy most of the well-known functions of financial services and leave space for customizations, if necessary.
Which AWS service will help achieve this requirement? AWS CloudFormation AWS Elastic Beanstalk AWS Partner Solutions(formerly Quick Starts) Amazon Quicksight.
Historically, IT departments had to over-provision for peak demand.
IT professionals may bring this legacy mindset to the table when they build their cloud infrastructure leading to over-provisioned resources and unnecessary costs.
Right-sizing of resources is necessary to reduce infrastructure costs while still using cloud functionality optimally.
Which feature of the AWS Cloud refers to right-sizing the resources? Elasticity Reliability Resiliency Horizontal scaling.
A media company uses Amazon Simple Storage Service (Amazon S3) for storing all its data.
Which storage class should it consider for cost-optimal storage of the data that has random access patterns? Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering) Amazon S3 Standard-Infrequent Access (S3 Standard-IA) Amazon S3 Standard (S3 Standard) Amazon S3 Random Access (S3 Random-Access).
As a Cloud Practitioner, which of the following credentials would you recommend for signing in to the AWS Management Console to meet security best practices? (Select two) Multi Factor Authentication (MFA) Secret Access Key Access Key ID X.509 certificate IAM Username and password.
A team lead is reviewing the AWS services that can be used in the development workflow for his company.
Which of the following statements are correct regarding the capabilities of these AWS services? (Select three) AWS CodeCommit allows you to run builds and tests as part of your AWS CodePipeline AWS CodeBuild is directly integrated with both AWS CodePipeline and AWS CodeCommit You can use AWS CodeStar and AWS Cloud9 to develop, build, and deploy a serverless web application AWS CodePipeline uses Amazon CloudWatch Events to detect changes in CodeCommit repositories used as a source for a pipeline Each AWS CodeStar project includes development tools, including AWS CodePipeline, AWS CodeCommit, AWS CodeBuild, and AWS CodeDeploy, that can be used on their own and with existing AWS applications AWS CodeStar is a cloud-based integrated development environment that lets you write, run, and debug your code with just a browser.
Which of the following statements are correct regarding the health monitoring and reporting capabilities supported by AWS Elastic Beanstalk? (Select two) With basic health reporting, the AWS Elastic Beanstalk service does not publish any metrics to Amazon CloudWatch The basic health reporting system that provides information about the health of instances in an AWS Elastic Beanstalk environment does not use health checks performed by Elastic Load Balancing (ELB) AWS Elastic Beanstalk provides only basic health reporting system; Combined with Elastic Load Balancing (ELB), they provide advanced health check features In a single instance environment, AWS Elastic Beanstalk determines the instance's health by monitoring the Elastic Load Balancing (ELB) health settings The AWS Elastic Beanstalk health monitoring can determine that the environment's Auto Scaling group is available and has a minimum of at least one instance.
Which pillar of AWS Well-Architected Framework focuses on using IT and computing resources efficiently, while considering the right resource types and sizes based on workload requirements? Performance Efficiency Pillar Operational Excellence Pillar Cost Optimization Pillar Reliability Pillar.
A university provides access to AWS services for its students to submit their research data for analysis.
The university is looking at the most cost-effective approach for recovering from disasters and it can tolerate data loss of a few hours.
Which disaster recovery strategy is well-suited for this use case? Backup and restore strategy Warm standby strategy Pilot light strategy Multi-site active/active strategy.
|
