Test #4

According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for AWS Identity and Access Management (AWS IAM)? (Select two). Analyze user access patterns and review AWS Identity and Access Management (AWS IAM) permissions. Manage global network security infrastructure. Enable multi-factor authentication (MFA) on all accounts. Configuration and vulnerability analysis for the underlying software infrastructure. Compliance validation for the underlying software infrastructure.

Which of the following can you use to run a bootstrap script while launching an Amazon Elastic Compute Cloud (Amazon EC2) instance?. Amazon EC2 instance AMI data. Amazon EC2 instance user data. Amazon EC2 instance metadata. Amazon EC2 instance configuration data.

Which of the following is correct regarding the Amazon Relational Database Service (Amazon RDS) service?. You can use read replicas for disaster recovery only and multi-AZ deployment for improved read performance only. You can use both read replicas and multi-AZ deployment having single standby for improved read performance. You can use read replicas for improved read performance only and multi-AZ deployment for disaster recovery only. You can use both read replicas and multi-AZ deployment for disaster recovery.

The DevOps team at an IT company wants to centrally manage its servers on AWS Cloud as well as on-premise data center so that it can collect software inventory, run commands, configure and patch servers at scale. As a Cloud Practitioner, which AWS service would you recommend for this use-case?. AWS Systems Manager. AWS CloudFormation. AWS OpsWorks. AWS Config.

Which of the following statements are CORRECT regarding AWS Global Accelerator? (Select two). AWS Global Accelerator is a good fit for non-HTTP use cases. AWS Global Accelerator uses the AWS global network and its edge locations. But the edge locations used by Global Accelerator are different from Amazon CloudFront edge locations. AWS Global Accelerator provides static IP addresses that act as a fixed entry point to your applications. AWS Global Accelerator cannot be configured with an Elastic Load Balancer (ELB). AWS Global Accelerator can be used to host static websites.

AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two). Amazon Simple Storage Service (Amazon S3). AWS Identity and Access Management (AWS IAM). Amazon CloudFront. AWS Elastic Beanstalk. Amazon Elastic Compute Cloud (Amazon EC2).

As per the AWS Shared Responsibility Model, Security and Compliance is a shared responsibility between AWS and the customer. Which of the following security services/utilities falls under the purview of AWS under the AWS Shared Responsibility Model?. AWS Web Application Firewall (AWS WAF). Security group. AWS Shield Advanced. AWS Shield Standard.

Which AWS service would you choose for a data processing project that needs a schemaless database?. Amazon RedShift. Amazon Aurora. Amazon Relational Database Service (Amazon RDS). Amazon DynamoDB.

Which AWS service can be used to host a static website with the LEAST effort?. Amazon S3 Glacier. AWS Storage Gateway. Amazon Elastic File System (Amazon EFS). Amazon Simple Storage Service (Amazon S3).

Which pillar of AWS Well-Architected Framework is responsible for making sure that you select the right resource types and sizes based on your workload requirements?. Operational Excellence. Cost Optimization. Performance Efficiency. Reliability.

Reserved Instance (RI) pricing is available for which of the following AWS services? (Select two). Amazon Simple Storage Service (Amazon S3). Amazon Elastic Compute Cloud (Amazon EC2). AWS Identity and Access Management (AWS IAM). Amazon CloudFront. Amazon Relational Database Service (Amazon RDS).

A digital media company wants to convert English language subtitles into Spanish language subtitles. As a Cloud Practitioner, which AWS service would you recommend for this use-case?. Amazon Rekognition. Amazon Transcribe. Amazon Translate. Amazon Polly.

AWS Organizations provides which of the following benefits? (Select two). Provision Amazon EC2 Spot instances across the member AWS accounts. Check vulnerabilities on Amazon EC2 instances across the member AWS accounts. Deploy patches on Amazon EC2 instances across the member AWS accounts. Volume discounts for Amazon EC2 and Amazon S3 aggregated across the member AWS accounts. Share the reserved Amazon EC2 instances amongst the member AWS accounts.

Which of the following entities can be used to connect to an Amazon Elastic Compute Cloud (Amazon EC2) server from a Mac OS, Windows or Linux based computer via a browser-based client?. Putty. Amazon EC2 Instance Connect. AWS Direct Connect. SSH.

Which Amazon Route 53 routing policy would you use to route traffic to a single resource such as a web server for your website?. Simple routing. Latency-based routing. Failover routing. Weighted routing.

A financial services company wants to ensure that all customer data uploaded on its data lake on Amazon Simple Storage Service (Amazon S3) always stays private. Which of the following is the MOST efficient solution to address this compliance requirement?. Use Amazon S3 Block Public Access to ensure that all Amazon S3 resources stay private. Trigger a lambda function every time an object is uploaded on Amazon S3. The lambda function should change the object settings to make sure it stays private. Set up a high-level advisory committee to review the privacy settings of each object uploaded into Amazon S3. Use Amazon CloudWatch to ensure that all Amazon S3 resources stay private.

Which AWS service can be used to set up billing alarms to monitor estimated charges on your AWS account?. Amazon CloudWatch. AWS CloudTrail. AWS Organizations. AWS Cost Explorer.

Which of the following statements are true regarding Amazon Simple Storage Service (Amazon S3) (Select two)?. Amazon Simple Storage Service (Amazon S3) is a fully managed, elastic file system storage service used as database backup. Amazon Simple Storage Service (Amazon S3) stores data in a flat non-hierarchical structure. Amazon Simple Storage Service (Amazon S3) is a key value based object storage service. Amazon Simple Storage Service (Amazon S3) is a block storage service designed for a broad range of workloads. You can install databases on Amazon Simple Storage Service (Amazon S3).

Which of the following Amazon Simple Storage Service (Amazon S3) storage classes do not charge any data retrieval fee? (Select two). Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA). Amazon S3 Intelligent-Tiering. Amazon S3 Glacier Flexible Retrieval. Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Amazon S3 Standard.

Which of the following entities should be used for an Amazon Elastic Compute Cloud (Amazon EC2) Instance to access a DynamoDB table?. IAM role. AWS Key Management Service (KMS). Amazon Cognito. AWS IAM user access keys.

Which of the following AWS storage services can be directly used with on-premises systems?. Amazon Simple Storage Service (Amazon S3). Amazon Elastic File System (Amazon EFS). Amazon Elastic Block Store (Amazon EBS). Amazon EC2 Instance Store.

A social media analytics company wants to migrate to a serverless stack on AWS. Which of the following scenarios can be handled by AWS Lambda? (Select two). You can install low latency databases on AWS Lambda. AWS Lambda can be used to store sensitive environment variables. AWS Lambda can be used to execute code in response to events such as updates to DynamoDB tables. AWS Lambda can be used for preprocessing of data before it is stored in Amazon S3 buckets. You can install Container Services on AWS Lambda.

Which of the following is available across all AWS Support plans?. Third-Party Software Support. Full set of AWS Trusted Advisor best practice checks. AWS Health Dashboard – Your account health. Enhanced Technical Support with unlimited cases and unlimited contacts.

An organization maintains a separate Virtual Private Cloud (VPC) for each of its business units. Two units need to privately share data. Which is the most optimal way of privately sharing data between the two VPCs?. AWS Site-to-Site VPN. VPC peering connection. AWS Direct Connect. VPC Endpoint.

Which of the following AWS Support plans provide programmatic access to AWS Support Center features to create, manage and close your support cases? (Select two). AWS Basic Support. AWS Business Support. AWS Developer Support. AWS Corporate Support. AWS Enterprise Support.

As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?. Service and Communications Protection. Identity and Access Management. Patching guest OS and applications. Patching networking infrastructure.

Which of the following are the serverless computing services offered by AWS ? (Select two). Amazon Elastic Compute Cloud (Amazon EC2). AWS Lambda. AWS Elastic Beanstalk. Amazon Lightsail. AWS Fargate.

The QA team at a company wants a tool/service that can provide access to different mobile devices with variations in firmware and Operating System versions. Which AWS service can address this use case?. AWS CodePipeline. AWS Device Farm. AWS Elastic Beanstalk. AWS Mobile Farm.

Which of the following AWS entities lists all users in your account and the status of their various account aspects such as passwords, access keys, and MFA devices?. AWS Cost & Usage Report (AWS CUR). Credentials Report. Amazon Inspector. AWS Trusted Advisor.

Which benefit of Cloud Computing allows AWS to offer lower pay-as-you-go prices as usage from hundreds of thousands of customers is aggregated in the cloud?. Increased speed and agility. Go global in minutes. Massive economies of scale. Trade capital expense for variable expense.

Which of the following entities are part of an Amazon Virtual Private Cloud (Amazon VPC) in the AWS Cloud? (Select two). Internet Gateway. AWS Storage Gateway. Subnet. Object. API Gateway.

Which AWS entity enables you to privately connect your Amazon Virtual Private Cloud (Amazon VPC) to an Amazon Simple Queue Service (Amazon SQS) queue?. Internet Gateway. AWS Direct Connect. VPC Interface Endpoint. VPC Gateway Endpoint.

Which of the following describes an Availability Zone (AZ) in the AWS Cloud?. One or more server racks in multiple locations. One or more server racks in the same location. One or more data centers in the same location. One or more data centers in multiple locations.

Which of the following Amazon Simple Storage Service (Amazon S3) storage classes has NO constraint of a minimum storage duration charge for objects?. Amazon S3 Standard-Infrequent Access (S3 Standard-IA). Amazon S3 Glacier Flexible Retrieval. Amazon S3 Standard. Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA).

How is Amazon EC2 different from traditional hosting systems? (Select two). Amazon EC2 provides a pre-configured instance for a fixed monthly cost. Amazon EC2 caters more towards groups of users with similar system requirements so that the server resources are shared across multiple users and the cost is reduced. With Amazon EC2, users risk overbuying resources. With Amazon EC2, developers can launch and terminate the instances anytime they need to. Amazon EC2 can scale with changing computing requirements.

Which of the following are recommended security best practices for the AWS account root user? (Select two). Set up an IAM user with administrator permissions and do not use AWS account root user for administrative tasks. Keep your AWS account root user access keys in an encrypted file on Amazon S3. Share AWS account root user access keys with other administrators. Enable multi-factor authentication (MFA) for the AWS account root user. Disable multi-factor authentication (MFA) for the AWS account root user as it can lock the entire AWS account if the multi-factor authentication (MFA) device is lost.

Which of the following are benefits of the AWS Web Application Firewall (AWS WAF)? (Select two). AWS Web Application Firewall (AWS WAF) offers dedicated support from the DDoS Response Team (DRT) and advanced reporting. AWS Web Application Firewall (AWS WAF) lets you monitor the HTTP and HTTPS requests that are forwarded to Amazon Route 53. AWS Web Application Firewall (AWS WAF) offers protection against all known infrastructure (Layer 3 and 4) attacks. AWS Web Application Firewall (AWS WAF) can block all requests except the ones that you allow. AWS Web Application Firewall (AWS WAF) can check for the presence of SQL code that is likely to be malicious (known as SQL injection).

Which AWS service will you use to provision the same AWS infrastructure across multiple AWS accounts and regions?. AWS CodeDeploy. AWS OpsWorks. AWS CloudFormation. AWS Systems Manager.

Which AWS services can be used together to send alerts whenever the AWS account root user signs in? (Select two). AWS Lambda. AWS Step Functions. Amazon Simple Queue Service (Amazon SQS). Amazon CloudWatch. Amazon Simple Notification Service (Amazon SNS).

A multi-national organization has a separate virtual private cloud (VPC) for each of its business units on the AWS Cloud. The organization also wants to connect its on-premises data center with the different virtual private clouds (VPC) for better organization-wide collaboration. Which AWS services can be combined to build the MOST efficient solution for this use-case? (Select two). AWS Storage Gateway. AWS Transit Gateway. Internet Gateway. AWS Direct Connect. VPC peering connection.

An e-commerce company would like to receive alerts when the Amazon EC2 Reserved Instances (RI) utilization drops below a certain threshold. Which AWS service can be used to address this use-case?. AWS Trusted Advisor. AWS Cost Explorer. AWS Budgets. AWS Systems Manager.

A social media company wants to have the MOST cost-optimal strategy for deploying Amazon Elastic Compute Cloud (Amazon EC2) instances. As a Cloud Practitioner, which of the following options would you recommend? (Select two). Use Reserved Instances (RI) for ad-hoc jobs that can be interrupted. Use On-Demand Instances to run applications with a predictable usage over the next one year. Use Spot Instances for ad-hoc jobs that can be interrupted. Use Reserved Instances (RI) to run applications with a predictable usage over the next one year. Use On-Demand Instances for ad-hoc jobs that can be interrupted.

A media company uploads its media (audio and video) files to a centralized Amazon Simple Storage Service (Amazon S3) bucket from geographically dispersed locations. Which of the following solutions can the company use to optimize transfer speeds?. AWS Direct Connect. Amazon S3 Transfer Acceleration (S3TA). Amazon CloudFront. AWS Global Accelerator.

Which of the following AWS authentication mechanisms supports an AWS Multi-Factor Authentication (AWS MFA) device that you can plug into a USB port on your computer?. SMS text message-based Multi-Factor Authentication (AWS MFA). U2F security key. Hardware Multi-Factor Authentication (AWS MFA) device. Virtual Multi-Factor Authentication (AWS MFA) device.

Which of the following is best-suited for load-balancing HTTP and HTTPS traffic?. AWS Auto Scaling. System Load Balancer. Application Load Balancer. Network Load Balancer.

A financial services company wants to migrate from its on-premises data center to AWS Cloud. As a Cloud Practitioner, which AWS service would you recommend so that the company can compare the cost of running their IT infrastructure on-premises vs AWS Cloud?. AWS Cost Explorer. AWS Trusted Advisor. AWS Budgets. AWS Pricing Calculator.

Amazon Elastic Compute Cloud (Amazon EC2) Spot instances are a best-fit for which of the following scenarios?. To run scheduled jobs (jobs that run at the same time every day). To run batch processes for critical workloads. To install cost-effective Amazon RDS database. To run any containerized workload with Amazon Elastic Container Service (Amazon ECS) that can be interrupted.

Which of the following is the MOST cost-effective Amazon Elastic Compute Cloud (Amazon EC2) instance purchasing option for short-term, spiky and critical workloads on AWS Cloud?. Dedicated Host. On-Demand Instance. Spot Instance. Reserved Instance (RI).

A firm wants to maintain the same data on Amazon Simple Storage Service (Amazon S3) between its production account and multiple test accounts. Which technique should you choose to copy data into multiple test accounts while retaining object metadata?. Amazon S3 Replication. Amazon S3 Bucket Policy. Amazon S3 Transfer Acceleration (Amazon S3TA). Amazon S3 Storage Classes.

Which of the following is a container service of AWS?. AWS Fargate. Amazon SageMaker. Amazon Simple Notification Service (Amazon SNS). AWS Elastic Beanstalk.

The DevOps team at a Big Data consultancy has set up Amazon Elastic Compute Cloud (Amazon EC2) instances across two AWS Regions for its flagship application. Which of the following characterizes this application architecture?. Deploying the application across two AWS Regions improves security. Deploying the application across two AWS Regions improves agility. Deploying the application across two AWS Regions improves availability. Deploying the application across two AWS Regions improves scalability.

Which AWS service will help you deploy application code automatically to an Amazon Elastic Compute Cloud (Amazon EC2) instance?. AWS CodeBuild. AWS Elastic Beanstalk. AWS CloudFormation. AWS CodeDeploy.

Which of the following AWS services offers Lifecycle configuration for cost-optimal storage?. Amazon Elastic Block Store (Amazon EBS). AWS Storage Gateway. Amazon EC2 Instance Store. Amazon Simple Storage Service (Amazon S3).

Bob and Susan each have an AWS account in AWS Organizations. Susan has five Reserved Instances (RIs) of the same type and Bob has none. During one particular hour, Susan uses three instances and Bob uses six for a total of nine instances on the organization's consolidated bill. Which of the following statements are correct about consolidated billing in AWS Organizations? (Select two). Bob does not receive any cost-benefit since he hasn't purchased any Reserved Instance (RI). If his account has even one RI, then the cost-benefit from Susan's account is also added to his account. Bob receives the cost-benefit from Susan's Reserved Instance (RI) only if he launches his instances in the same AWS Region where Susan purchased her Reserved Instances (RI). Bob receives the cost-benefit from Susan's Reserved Instances (RI) only if he launches his instances in the same Availability Zone (AZ) where Susan purchased her Reserved Instances. AWS bills five instances as Reserved Instances, and the remaining four instances as regular instances. AWS bills three instances as Reserved Instances (RI), and the remaining six instances as regular instances.

A cargo shipping company runs its server fleet on Amazon Elastic Compute Cloud (Amazon EC2) instances. Some of these instances host the CRM (Customer Relationship Management) applications that need to be accessible 24*7. These applications are not mission-critical. In case of a disaster, these applications can be managed on a lesser number of instances for some time. Which disaster recovery strategy is well-suited as well as cost-effective for this requirement?. Backup & Restore strategy. Warm Standby strategy. Multi-site active-active strategy. Pilot Light strategy.

Which of the following types are free under the Amazon Simple Storage Service (Amazon S3) pricing model? (Select two). Data transferred out to an Amazon Elastic Compute Cloud (Amazon EC2) instance in any AWS Region. Data transferred out to an Amazon Elastic Compute Cloud (Amazon EC2) instance, when the instance is in the same AWS Region as the S3 bucket. Data storage fee for objects stored in S3 Standard. Data storage fee for objects stored in S3 Glacier. Data transferred in from the internet.

AWS Marketplace facilitates which of the following use-cases? (Select two). AWS customer can buy software that has been bundled into customized Amazon Machine Image (AMIs) by the AWS Marketplace sellers. Purchase compliance documents from third-party vendors. Sell Software as a Service (SaaS) solutions to AWS customers. Raise request for purchasing AWS Direct Connect connection. Buy Amazon EC2 Standard Reserved Instances (RI).

An e-commerce company wants to review the Payment Card Industry (PCI) reports on AWS Cloud. Which AWS resource can be used to address this use-case?. AWS Artifact. AWS Cost & Usage Report (AWS CUR). AWS Trusted Advisor. AWS Secrets Manager.

Which AWS service can help you analyze your infrastructure to identify unattached or underutilized Amazon EBS Elastic Volumes?. Amazon Inspector. AWS Trusted Advisor. Amazon CloudWatch. AWS Config.

Which entity ensures that your application on Amazon Elastic Compute Cloud (Amazon EC2) always has the right amount of capacity to handle the current traffic demand?. Network Load Balancer. Application Load Balancer. Amazon EC2 Auto Scaling. Multi-AZ deployment.

An e-commerce company has migrated its IT infrastructure from the on-premises data center to AWS Cloud. Which of the following costs is the company responsible for?. Costs for powering servers on AWS Cloud. AWS Data Center physical security costs. Costs for hardware infrastructure on AWS Cloud. Application software license costs.

Which of the following is the best practice for application architecture on AWS Cloud?. Build monolithic applications. Build tightly coupled components. Build loosely coupled components. Use synchronous communication between components.

Which of the following AWS services can be used to forecast your AWS account usage and costs?. AWS Budgets. AWS Cost & Usage Report (AWS CUR). AWS Cost Explorer. AWS Pricing Calculator.

Which AWS service would you use to create a logically isolated section of the AWS Cloud where you can launch AWS resources in your virtual network?. Virtual Private Network (VPN). Network Access Control List (Network ACL). Subnet. Virtual private Cloud (VPC).

AWS Trusted Advisor can provide alerts on which of the following common security misconfigurations? (Select two)?. When you don't turn on user activity logging (AWS CloudTrail). When you don't tag objects in Amazon S3 buckets. When you allow public access to Amazon S3 buckets. When you share IAM user credentials with others. When you don't enable data encryption on Amazon S3 Glacier.