AWS Certified Cloud Practitioner Practice Exams 2
Which AWS Service can be used to establish a dedicated, private network connection between AWS and your datacenter? Amazon Route 53 AWS Snowball Amazon CloudFront AWS Direct Connect
AWS Direct Connect
Which of the following aspects of security are managed by AWS? (Choose TWO) VPC security Hardware patching Access permissions Encryption of EBS volumes Securing global physical infrastructure
Hardware patching Securing global physical infrastructure AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications. AWS provides a number of security features depending on the location, such as security guards, fencing, security feeds, intrusion detection technology, and other security measures.
What does Amazon Elastic Beanstalk provide? A compute engine for Amazon ECS A scalable file storage solution for use with AWS and on-premises servers A PaaS solution to automate application deployment A NoSQL database service
A PaaS solution to automate application deployment
What are the default security credentials that are required to access the AWS management console for an IAM user account? A user name and password Security tokens Access keys MFA
A user name and password "Access keys" is incorrect. Access keys are long-term credentials that can be used to sign programmatic requests to AWS. The AWS Management Console allows you to access and manage Amazon Web Services through a simple and intuitive web-based user interface. You can only access the AWS management console if you have a valid user name and password.
In your on-premises environment, you can create as many virtual servers as you need from a single template. What can you use to perform the same in AWS? EBS Snapshot An internet gateway AMI IAM
AMI Amazon Machine Image (AMI) is a template that contains a software configuration (for example, an operating system, an application server, and applications).This pre-configured template save time and avoid errors when configuring settings to create new instances. You specify an AMI when you launch an instance, and you can launch as many instances from the AMI as you need. You can also launch instances from as many different AMIs as you need.
A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company? AWS TAM AWS Professional Services APN Technology Partners APN Consulting Partners
APN Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. Consulting Partners include System Integrators, Strategic Consultancies, Agencies, Managed Service Providers, and Value-Added Resellers. AWS supports the APN Consulting Partners by providing a wide range of resources and training to support their customers. The other options are incorrect: "APN Technology Partners" is incorrect. APN Technology Partners provide software solutions that are either hosted on, or integrated with, the AWS platform. APN Technology Partners include Independent Software Vendors (ISVs), SaaS, PaaS, Developer Tools, Management and Security Vendors. "AWS Professional Services" is incorrect. AWS Professional Services shares a collection of offerings to help you achieve specific outcomes related to enterprise cloud adoption. AWS Professional Services also trains your team with specialized skills and provides global specialty practices to support your efforts in focused areas of enterprise cloud computing. "AWS TAM" is incorrect. A Technical Account Manager (TAM) is your designated technical point of contact who provides advocacy and guidance to help plan and build solutions using best practices and proactively keep your AWS environment operationally healthy. TAM is available only for the Enterprise support plan.
A company has deployed a new web application on multiple Amazon EC2 instances. Which of the following should they use to ensure that the incoming HTTP traffic is distributed evenly across the instances? AWS Auto Scaling AWS Network Load Balancer AWS Application Load Balancer AWS EC2 Auto Recovery
AWS Application Load Balancer
What is the AWS tool that enables you to use scripts to manage all AWS services and resources? AWS Console AWS CLI AWS Service Catalog AWS OpsWorks
AWS CLI
What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment? (Choose TWO) AWS CloudTrail AWS Config AWS X-Ray AWS Transit Gateway Amazon Comprehend
AWS CloudTrail AWS Config AWS Config and AWS CloudTrail are change management tools that help AWS customers audit and monitor all resource and configuration changes in their AWS environment
An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products? Amazon EMR Network Access Control Lists Amazon RDS AWS Identity and Access Management
AWS Identity and Access Management
What is the AWS serverless service that allows you to run your applications without any administrative burden? Amazon RDS instances Amazon EC2 instances AWS Lambda Amazon LightSail
AWS Lambda
Savings Plans are available for which of the following AWS compute services? (Choose TWO) AWS Batch AWS Lambda AWS Outposts Amazon EC2 Amazon Lightsail
AWS Lambda Amazon EC2 Savings Plans are a flexible pricing model that offers low prices on EC2, Lambda, and Fargate usage, in exchange for a commitment to a consistent amount of usage (measured in $/hour) for a 1 or 3 year term.
What is the AWS service that enables you to manage all of your AWS accounts from a single master account? Amazon Config AWS Organizations AWS WAF AWS Trusted Advisor
AWS Organizations AWS Organizations enables the following capabilities: 1- Automate AWS account creation and management 2- Consolidate billing across multiple AWS accounts 3- Govern access to AWS services, resources, and regions 4- Centrally manage access policies across multiple AWS accounts 5- Configure AWS services across multiple accounts
What are the connectivity options that can be used to build hybrid cloud architectures? (Choose TWO) AWS Artifact AWS Cloud9 AWS VPN AWS Direct Connect AWS CloudTrail
AWS VPN AWS Direct Connect
Which of the following services can help protect your web applications from SQL injection and other vulnerabilities in your application code? AWS WAF Amazon Aurora AWS IAM Amazon Cognito
AWS WAF
A company is developing a new application using a microservices framework. The new application is having performance and latency issues. Which AWS Service should be used to troubleshoot these issues? Amazon Inspector AWS CodePipeline AWS X-Ray AWS CloudTrail
AWS X-Ray
Which of the following is equivalent to a user name and password and is used to authenticate your programmatic access to AWS services and APIs? Key pairs MFA Access Keys Instance Password
Access Keys
Which of the following AWS offerings is a MySQL-compatible relational database service that can scale capacity automatically based on demand? Amazon Neptune Amazon RDS for PostgreSQL Amazon RDS for SQL Server Amazon Aurora
Amazon Aurora
Which AWS services can be used to improve the performance of a global application and reduce latency for its users? (Choose TWO) AWS KMS AWS Direct Connect Amazon CloudFront AWS Glue AWS Global accelerator
Amazon CloudFront AWS Global accelerator
What is the primary storage service used by Amazon RDS database instances? Amazon EFS Amazon S3 Amazon EBS Amazon Glacier
Amazon EBS "Amazon S3" is incorrect. Amazon S3 refers to the simple storage service. Amazon S3 is an object level storage that cannot be used to store running operating systems or live databases.
Where can you store files in AWS? (Choose TWO) Amazon EBS Amazon SNS Amazon EMR Amazon ECS Amazon EFS
Amazon EBS Amazon EFS
What is the AWS service that provides you the highest level of control over the underlying virtual infrastructure? Amazon RDS Amazon DynamoDB Amazon Redshift Amazon EC2
Amazon EC2 Amazon EC2 provides you the highest level of control over your virtual instances, including root access and the ability to interact with them as you would any machine.
Which of the following AWS services can be used as a compute resource? (Choose TWO) Amazon EC2 Amazon S3 Amazon VPC Amazon CloudWatch AWS Lambda
Amazon EC2 AWS Lambda
What are the AWS services\features that can help you maintain a highly available and fault-tolerant architecture in AWS? (Choose TWO) AWS Direct Connect Amazon EC2 Auto Scaling Elastic Load Balancer CloudFormation Network ACLs
Amazon EC2 Auto Scaling Elastic Load Balancer
Which of the following services allows you to run containerized applications on a cluster of EC2 instances? AWS Personal Health Dashboard AWS Data Pipeline AWS Cloud9 Amazon ECS
Amazon ECS
An organization needs to analyze and process a large number of data sets. Which AWS service should they use? Amazon SNS Amazon MQ Amazon EMR Amazon SQS
Amazon EMR
What is the AWS service that performs automated network assessments of Amazon EC2 instances to check for vulnerabilities? Amazon Inspector Security groups AWS Network Access Control Lists Amazon Kinesis
Amazon Inspector
A company has a large amount of structured data stored in their on-premises data center. They are planning to migrate all the data to AWS, what is the most appropriate AWS database option? Amazon DynamoDB Amazon SNS Amazon RDS Amazon ElastiCache
Amazon RDS
What is the AWS data warehouse service that supports a high level of query performance on large amounts of datasets? Amazon Redshift Amazon Kinesis Amazon DynamoDB Amazon RDS
Amazon Redshift
Your company is designing a new application that will store and retrieve photos and videos. Which of the following services should you recommend as the underlying storage mechanism? Amazon SQS Amazon EBS Amazon S3 Amazon Instance store
Amazon S3
Which AWS service can be used to store and reliably deliver messages across distributed systems? Amazon Simple Storage Service Amazon Simple Email Service AWS Storage Gateway Amazon Simple Queue Service
Amazon Simple Queue Service
Which of the following are important design principles you should adopt when designing systems on AWS? (Choose TWO) Treat servers as fixed resources Always use Global Services in your architecture rather than Regional Services Automate wherever possible Always choose to pay as you go Remove single points of failure
Automate wherever possible Remove single points of failure A single point of failure (SPOF) is a part of a system that, if it fails, will stop the entire system from working. "Always use Global services in your architecture rather than Regional services" is incorrect. AWS services\resources are either Global, Regional or specific to an Availability Zone. Among all the services\resources that AWS offers, only a few of them are considered global services.
Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities? (Choose TWO) Patching the database software Installing the database software Building the relational database schema Performing backups Managing the database settings
Building the relational database schema Managing the database settings You'll need to build the relational schema that best fits your use case and are responsible for any performance tuning to optimize your database for your application's workflow.
Which of the following services will help businesses ensure compliance in AWS? CloudTrail CloudFront CloudEndure Migration CloudWatch
CloudTrail AWS CloudTrail is designed to log all actions taken in your AWS account. This provides a great resource for governance, compliance, and risk auditing
Sarah has deployed an application in the Northern California (us-west-1) region. After examining the application's traffic, she notices that about 30% of the traffic is coming from Asia. What can she do to reduce latency for the users in Asia? Create a CDN using CloudFront, so that content is cached at Edge Locations close to and in Asia Replicate the current resources across multiple Availability Zones within the same region Recreate the website content Migrate the application to a hosting provider in Asia
Create a CDN using CloudFront, so that content is cached at Edge Locations close to and in Asia
Which of the following activities may help reduce your AWS monthly costs? (Choose TWO) Using the AWS Network Load Balancer (NLB) to load balance the incoming HTTP requests Creating a lifecycle policy to move infrequently accessed data to less expensive storage tiers Deploying your AWS resources across multiple Availability Zones Removing all of your Cost Allocation Tags Enabling Amazon EC2 Auto Scaling for all of your workloads
Creating a lifecycle policy to move infrequently accessed data to less expensive storage tiersnabling Amazon EC2 Auto Scaling for all of your workloads
Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose TWO) Installing software on EC2 instances Creating hypervisors Hardware maintenance Monitoring network performance Configuring Access Control Lists (ACLs)
Creating hypervisors Hardware maintenance AWS is responsible for items such as the physical security of its data centers, creating hypervisors, replacement of old disk drives, and patch management of the infrastructure.
Which of the below is a best-practice when building applications on AWS? Ensure that the application runs on hardware from trusted vendors Use IAM policies to maintain performance Strengthen physical security by applying the principle of least privilege Decouple the components of the application so that they run independently
Decouple the components of the application so that they run independently "Strengthen physical security by applying the principle of least privilege" is incorrect. Physical security is the sole responsibility of AWS.
Which of the following EC2 instance purchasing options supports the Bring Your Own License (BYOL) model for almost every BYOL scenario? Reserved Instances Dedicated Hosts Dedicated Instances On-demand Instances
Dedicated Hosts Dedicated Hosts provide additional control over your instances and visibility into Host level resources and tooling that allows you to manage software that consumes licenses on a per-core or per-socket basis, such as Windows Server and SQL Server. This is why most BYOL scenarios are supported through the use of Dedicated Hosts, while only certain scenarios are supported by Dedicated Instances.
A company has business critical workloads hosted on AWS and they are unwilling to accept any downtime. Which of the following is a recommended best practice to protect their workloads in the event of an unexpected natural disaster? Create point-in-time backups in another subnet and recover this data when a disaster occurs Replicate data across multiple Edge Locations worldwide and use Amazon CloudFront to perform automatic failover in the event of an outage Deploy AWS resources to another AWS Region and implement an Active-Active disaster recovery strategy Deploy AWS resources across multiple Availability Zones within the same AWS Region
Deploy AWS resources to another AWS Region and implement an Active-Active disaster recovery strategy
What are two advantages of using Cloud Computing over using traditional data centers? (Choose TWO) Dedicated hosting Virtualized compute resources Distributed infrastructure Reserved Compute capacity Eliminating Single Points of Failure (SPOFs)
Distributed infrastructure Eliminating Single Points of Failure (SPOFs) Distributed infrastructure: The AWS Cloud operates in over 75 Availability Zones within over 20 geographic Regions around the world, with announced plans for more Availability Zones and Regions, allowing you to reduce latency to users from all around the world.
How are AWS customers billed for Linux-based Amazon EC2 usage? EC2 instances will be billed on one hour increments, with a minimum of one day EC2 instances will be billed on one day increments, with a minimum of one month EC2 instances will be billed on one minute increments, with a minimum of one hour EC2 instances will be billed on one second increments, with a minimum of one minute
EC2 instances will be billed on one second increments, with a minimum of one minute
AWS has created a large number of Edge Locations as part of its Global Infrastructure. Which of the following is NOT a benefit of using Edge Locations? Edge locations are used by CloudFront to distribute content to global users with low latency Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency Edge locations are used by CloudFront to cache the most recent responses Edge locations are used by CloudFront to improve your end users' experience when uploading files
Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency
Under the Shared Responsibility Model, which of the following controls do customers fully inherit from AWS? (Choose TWO) Awareness & Training Patch management controls Database controls Environmental controls Physical controls
Environmental controls Physical controls
Your application has recently experienced significant global growth, and international users are complaining of high latency. What is the AWS characteristic that can help improve your international users' experience? High availability Elasticity Global reach Data durability
Global reach
Using Amazon EC2 falls under which of the following cloud computing models? SaaS PaaS IaaS IaaS & SaaS
IaaS
What does Amazon ElastiCache provide? In-memory caching for read-heavy applications A domain name system in the cloud An online software store that allows Customers to launch pre-configured software with just few clicks An Ehcache compatible in-memory data store
In-memory 内存 caching for read-heavy applications "An Ehcache compatible in-memory data store" is incorrect. ElastiCache supports only two cache engines: Redis and Memcached.
Which of the following will impact the price paid for an EC2 instance? (Choose TWO) Instance type The Availability Zone where the instance is provisioned Load balancing Number of private IPs Number of buckets
Instance type load balancing EC2 instance pricing varies depending on many variables: - The buying option (On-demand, Savings Plans, Reserved, Spot, Dedicated) - Selected instance type - Selected Region - Number of instances - Load balancing: The number of hours the Elastic Load Balancer runs and the amount of data it processes contribute to the EC2 monthly cost. - Allocated Elastic IP Addresses
Amazon Glacier is an Amazon S3 storage class that is suitable for storing ____________ & ______________. (Choose TWO) Active databases Cached data Active archives Dynamic websites' assets Long-term analytic data
Long-term analytic data Active archives "Cached data" is incorrect. The data in a cache is generally stored in fast access hardware such as RAM (Random-access memory) and may also be used in correlation with a software component.
According to the AWS Shared responsibility model, which of the following are the responsibility of the customer? (Choose TWO) Patching applications installed on Amazon EC2 Protecting the confidentiality of data in transit in Amazon S3 Managing environmental events of AWS data centers Ensuring that the underlying EC2 host is configured properly Controlling physical access to AWS Regions
Patching applications installed on Amazon EC2 Protecting the confidentiality of data in transit in Amazon S3
Which of the following should be considered when performing a TCO analysis to compare the costs of running an application on AWS instead of on-premises? Application development Physical hardware Market research Business analysis
Physical hardware When comparing AWS with on-premises TCO, customers should consider all costs of owning and operating a data center. Examples of these costs include facilities, physical servers, storage devices, networking equipment, cooling and power consumption, data center space, and Labor IT cost.
What are the Amazon RDS features that can be used to improve the availability of your database? (Choose TWO) AWS Regions Edge Locations Read Replicas Multi-AZ Deployment Automatic patching
Read Replicas Multi-AZ Deployment Amazon RDS Read Replicas provide enhanced performance and durability for database (DB) instances. This feature makes it easy to elastically scale out beyond the capacity constraints of a single DB instance for read-heavy database workloads. You can create one or more replicas of a given source DB Instance and serve high-volume application read traffic from multiple copies of your data, thereby increasing aggregate read throughput. Read replicas provide a complementary availability mechanism to Amazon RDS Multi-AZ Deployments. You can promote a read replica if the source DB instance fails. You can also replicate DB instances across AWS Regions as part of your disaster recovery strategy. This functionality complements the synchronous replication, automatic failure detection, and failover provided with Multi-AZ deployments.
Which of the following is one of the benefits of moving infrastructure from an on-premises data center to AWS? Free support for all enterprise customers Reduced Capital Expenditure (CapEx) AWS holds responsibility for managing customer applications Automatic data protection
Reduced Capital Expenditure (CapEx)
A company needs to host a database in Amazon RDS for at least three years. Which of the following options would be the most cost-effective solution? Reserved instances - No Upfront Reserved instances - Partial Upfront On-Demand instances Spot Instances
Reserved instances - Partial Upfront
A company is migrating its on-premises database to Amazon RDS. What should the company do to ensure Amazon RDS costs are kept to a minimum? Use a Multi-Region Active-Active architecture Combine On-demand Capacity Reservations with Saving Plans Use a Multi-Region Active-Passive architecture Right-size before and after migration
Right-size before and after migration "Combine On-demand Capacity Reservations with Saving Plans" is incorrect. When you combine On-demand Capacity Reservations with Saving Plans, you will be able to reduce costs significantly. But, On-demand Capacity Reservations is available only for Amazon EC2. For more information about On-demand Capacity
What is the AWS service\feature that takes advantage of Amazon CloudFront's globally distributed edge locations to transfer files to S3 with higher upload speeds? S3 Transfer Acceleration AWS WAF AWS Snowball AWS Snowmobile
S3 Transfer Acceleration
Which of the following describes the payment model that AWS makes available for customers that can commit to using Amazon EC2 over a one or 3-year term to reduce their total computing costs? Pay as you go Pay less by using more Save when you reserve Pay less as AWS grows
Save when you reserve
Which of the following AWS security features is associated with an EC2 instance and functions to filter incoming traffic requests? AWS Systems Manager Session Manager VPC Flow logs Security Groups Network ACL
Security Groups
Which of the following can help protect your EC2 instances from DDoS attacks? (Choose TWO) Security Groups AWS CloudHSM AWS Batch AWS IAM Network Access Control Lists (Network ACLs)
Security Groups Network Access Control Lists (Network ACLs) "AWS CloudHSM" is incorrect. AWS CloudHSM is a cloud-based hardware security module (HSM) that enables you to easily generate and use your own encryption keys on the AWS Cloud. "AWS IAM" is incorrect. AWS IAM enables you to manage access to AWS services and resources securely. "AWS Batch" is incorrect. AWS Batch is a compute service that allows you to run hundreds of thousands of batch computing jobs on AWS.
Jessica is managing an e-commerce web application in AWS. The application is hosted on six EC2 instances. One day, three of the instances crashed; but none of her customers were affected. What has Jessica done correctly in this scenario? She has properly built an elastic system She has properly built a scalable system She has properly built a fault tolerant system She has properly built an encrypted system
She has properly built a fault tolerant system "She has properly built an elastic system" is incorrect. Elasticity is the ability of a system to scale the resources needed to cope with load dynamically. So that when the load increases you scale by adding more resources and when demand wanes you shrink back and remove unneeded resources. "She has properly built a scalable system" is incorrect. Scalability is the ability of a system to accommodate larger loads just by adding resources, either making hardware larger (scaling vertically) or adding additional nodes (scaling horizontally). "She has properly built an encrypted system" is incorrect. Encryption is much more related to data protection, not fault-tolerance.
Which statement best describes the operational excellence pillar of the AWS Well-Architected Framework? The efficient use of computing resources to meet requirements The ability to monitor systems and improve supporting processes and procedures The ability of a system to recover gracefully from failure The ability to manage datacenter operations more efficiently
The ability to monitor systems and improve supporting processes and procedures 1- Operational Excellence: The operational excellence pillar includes the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures. 2- Security: The security pillar includes the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies. 3- Reliability: The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues. 4- Performance Efficiency: The performance efficiency pillar includes the ability to use computing resources efficiently to meet system requirements. Key topics include selecting the right resource types and sizes based on workload requirements, monitoring performance, and making informed decisions to maintain efficiency as business needs evolve. 5- Cost Optimization: The cost optimization pillar includes the ability to avoid or eliminate unneeded cost or sub-optimal resources.
Which of the following procedures will help reduce your Amazon S3 costs? Use the right combination of storage classes based on different use cases Move all the data stored in S3 standard to EBS Use the Import/Export feature to move old files automatically to Amazon Glacier Pick the right Availability Zone for your S3 bucket
Use the right combination of storage classes based on different use cases
You are working on two projects that require completely different network configurations. Which AWS service or feature will allow you to isolate resources and network configurations? Virtual Private Cloud Internet gateways Security Groups Amazon CloudFront
Virtual Private Cloud
Which statement is correct with regards to AWS service limits? (Choose TWO) You can use the AWS Trusted Advisor to monitor your service limits Each IAM user has the same service limits There are no service limits on AWS You can contact AWS support to increase the service limits The Amazon Simple Email Service is responsible for sending email notifications when usage approaches a service limit
You can use the AWS Trusted Advisor to monitor your service limits You can contact AWS support to increase the service limits