AWS CLOUD FOUNDATIONS

True or False? Private subnets have direct access to the internet.

False

True or False? AWS Organizations enables you to consolidate multiple AWS accounts so that you can centrally manage them.

True

True or False? Amazon RDS automatically patches the database software and backs up your database, storing the backups for a user-defined retention period and enabling point-in time recovery.

True

True or False? Amazon S3 is an object storage suitable for the storage of flat files like Microsoft Word and photos.

True

True or False? When you create a bucket in Amazon S3, it is associated with a specific AWS region

True

____________ means that infrastructure has built-in computer redundancy and _________ means that resources dynamically adjust to increases or decreases in capacity increases. A. No human intervention, fault tolerant B. Elastic and scalable, no human intervention C. Fault tolerant, elastic and scalable D. Fault tolerant, no human intervention E. Elastic and scalable, fault tolerant

C. Fault tolerant, elastic and scalable

There is no charge for which of the following? A. Compute B. Storage C. Inbound Data Transfer (with some exceptions) D. Outbound Data Transfer E. Data transfer between services within the same AWS region

C. Inbound Data transfer with some exceptions E. Data transfer between services within the same AWS region.

Which of the following are best practices to secure your account using AWS IAM? (Choose 2) A. Provide users with default administrative privileges B. Leave unused and unnecessary users and credentials in place C. Manage access to AWS resources D. Avoid using IAM groups to grant the same permissions to multiple users E. Define fine-grained access rights

C. Manage access to AWS resources E. Define fine-grained access rights

When creating an AWS IAM policy, what are the two types of access that can be granted to a user? A. Institutional Access B. Authorized Access C. Programmatic Access D. AWS Management Console Access E. Administrative Root Access

C. Programmatic Access D. AWS Management Console Access

Which of the following is a measure of your system's ability to provide functionality when desired by the user? A. Availability B. Fault Tolerance C. Reliability D. Performance Efficiency

C. Reliability

Which Amazon EC2 option is best for long-term workloads with predictable usage patterns? A. Spot instances B. On-Demand Instances C. Reserved Instances

C. Reserved Instances

With Amazon VPC, what is the maximum size IP address range you can have in a VPC? A. /24 B. /30 C. /28 D. /16

D. /16

Which of the following is the responsibility of AWS under the AWS shared responsibility model? A. Configuring third-party applications B. Maintaining physical hardware C. Security application access and data D. Managing custom AMIs

B. Maintaining physical hardware

EBS is recommended when data ______________ and __________ A. requires Object Level Storage B. Must be quickly accessible, requiring long-term persistence C. requires an encryption solution D. Needs to be stored in a different availability zone than the one EC2 instance is stored in

B. Must be quickly accessible, requiring long-term persistence C. requires an encryption solution

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? A. Security Groups B. NAT Gateway C. Route Tables D. Network ACLs

B. NAT Gateway

What is the pricing model that enables AWS customers to pay for resources on an as-needed basis? A. Pay as you decommission B. Pay as you go C. Pay as you buy D. Pay as you reserve

B. Pay as you go

True or False? AWS Key Management Service (KMS) enables you to asses, audit, and evaluate the configurations of your AWS resources.

False

True or False? By default, all data stored in Amazon S3 is viewable by the public.

False

True or False? AWS owns and maintains the network-connected hardware required for application services, while you provision and use what you need. A. True B. False

A. True

What are the 4 support plans offered by AWS support? A. Basic, Developer, Business, Enterprise B. Basic, Startup, Business, Enterprise C. Free, Bronze, Silver, Gold D. All support is free

A. Basic, Developer, Business, Enterprise

True or False? Availability Zones within a region are connected through low-latency links. A. True B. False

A. True

True or False? Networking, storage, compute, and databases are examples of service categories that AWS offers. A. True B. False

A. True

With Amazon VPC, what is the smallest size subnet you can have in a VPC? A. /28 B. /26 C. /30 D. /24

A. /28

In Amazon DynamoDB, an attribute is ________________. A. A fundamental data element B. A collection of items C. A collection of attributes

A. A fundamental data element

What happens when you use a VPC to create a new VPC? A. A main route table is created by default B. Three subnets are created by default in one Availability Zone C. An internet gateway is created by default D. Three Subnets are created by default: one for each AZ

A. A main route table is created by default

Which of the following elements are used to create an Amazon EC2 auto scaling launch configuration? (Choose 3): A. AMI B. Load Balancer C. Instance Type D. VPC and subnets E. EBS volumes

A. AMI C. Load Balancer E. Instance Type

Which of the following must be specified when launching a new Amazon EC2 instance Windows instance? (Choose 2) A. AMI B. Instance Type C. The Amazon EC2 Instance ID D. Password for the admin. account

A. AMI B. Instance Type

For certain services like Amazon Elastic compute cloud (EC2) and Amazon RDS, you can invest in reserved capacity. What options are available for Reserved Instances? (Choose 3). A. AURI B. MURI C. NURI D. PURI E. DURI

A. AURI C. NURI D. PURI

What AWS tool lets you explore AWS services and create an estimate for the cost of your use cases on AWS? A. AWS Pricing Calculator B. AWS Budgets C. AWS Cost and Usage Report D. AWS Billing Dashboard

A. AWS Pricing Calculator

Which service would you use to send alerts based on Amazon CloudWatch alarms? A. Amazon SNS B. AWS CloudTrail C. AWS Trusted Advisor D. Amazon Route 53

A. Amazon SNS

What is true about Regions? (Choose two) A. Each Region is located in a separate geographic area B. They are physical locations of your customers C. A Region is a physical location that has multiple Availability Zones D. All Regions are located in one specific geographic area

A. Each Region is located in a separate geographic location C. A Region is a physical location that has multiple Availability Zones.

True or False? Cloud computing provides a simple way to access servers, storage, databases, and a broad set of application services over the internet. You own the network-connected hardware required for these services and Amazon Web Services provisions what you need. A. True B. False

A. False

When are free data transfers applicable across AWS? (Choose two) A. Free inbound data transfer across all AWS services in all Regions B. Free inbound data transfer across all AWS services in all Regions C. Free inbound data transfer for EC2 instances D. Free outbound data transfer between AWS services within the same region.

A. Free inbound data transfer across all AWS services in all Regions C. Free inbound data transfer for EC2 instances

Which of the following are elements of an auto scaling group? (Choose 3) A. Minimum size B. Health checks C. Desired capacity D. Maximum size

A. Minimum Size C. Desired Capacity D. Maximum size

Which of following are NOT benefits of AWS Cloud Computing? (Choose two) A. Multiple procurement cycles B. High availability C. High latency D. Temporary and disposable resources E. Fault-tolerant databases

A. Multiple procurement cycles C. High latency

Which of the following is an optional security control that can be applied at the subnet layer of a VPC? A. Network ACL B. Web application firewall C. Security Group D. Firewall

A. Network ACL

Which of the following can be used as a storage class for an amazon S3 object lifecycle policy? A. S3- Standard Access B. AWS Storage Gateway C. S3 - Infrequent Access D. Simple Storage Service Glacier E. Reduced Redundancy Storage F. Amazon Dynamo DB

A. S3- Standard Access C. S3 Infrequent Access D. Simple Storage Service Glacier

Which of the following are pillars of the AWS Well-Architected Framework? (Choose 3) A. Security B. Persistence C. Operational Excellence D. Cost Optimization

A. Security C. Operational Excellence D. Cost Optimization

In the shared responsibility model, AWS is responsible for providing what? A. Security of the cloud B. Security to the cloud C. Security for the cloud D. Security in the cloud

A. Security of the cloud.

In Elastic Load Balancing, when the load balancer detects an unhealthy target, which of the following are true? (Choose 3) A. Stops routing traffic to that target B. Triggers an alarm C. Resumes routing traffic when it detects that the target is healthy again D. Resumes routing traffic when manually restarted E. Routes traffic to a healthy target

A. Stops routing traffic to that target C. Resumes routing traffic when it detects that the target is healthy again E. Routes traffic to a healthy target

True or False? AWS offers some services at no charge, such Amazon VPC, AWS IAM, Consolidated Billing, AWS Elastic Beanstalk, automatic scaling, AWS OpsWorks, and AWS CloudFormation. However, you might be charged for other AWS services that you use in conjunction with these servies. A. True B. False

A. True

Which design principles are recommended when considering performance efficiency? (Choose 2) A. Use serverless architectures B. Analyze and attribute expenditure C. Match supply and demmand D. Enable traceability E. Democratize advanced technologies

A. Use serverless architecture E. Democratize advanced technologies

The name of an S3 bucket must be unique ___________________. A. worldwide across all AWS accounts B. within a region C. across all your AWS accounts D. within your AWS account

A. worldwide across all AWS accounts

There is an audit of your company and they need to have a log of all access to AWS resources in the account. Which of the following services can assist in providing these details? A. Amazon CloudWatch B. AWS CloudTrail C. Amazon EC2 D. Amazon SNS

B. AWS CloudTrail

Where can a customer go to get more details about Amazon EC2 billing activity that took place 3 months ago? A. Amazon EC2 dashboard B. AWS Cost Explorer C. AWS Trusted Advisor Dashboard D. AWS CloudTrail Logs stored in S3

B. AWS Cost Explorer

Which component of the AWS Global Infrastructure does Amazon CloudFront use to ensure low-latency delivery? A. AWS Regions B. AWS Edge Locations C. AWS Availability Zones D. Amazon VPC

B. AWS Edge Locations

What is the service provided by AWS that enables developers to easily deploy and manage applications in the cloud? A. Amazon Elastic Container Service (ECS) B. AWS Elastic Beanstalk C. AWS Opswork D. AWS CloudFormation

B. AWS Elastic Beanstalk

Which of the following services is a serverless compute service in AWS? A. AWS Config B. AWS Lambda C. AWS OpWorks D. Amazon EC2

B. AWS Lambda

Which of the following are geographic areas that host two or more Availability Zones? A. AWS Origins B. AWS Regions C. Compute Zones D. Edge Locations

B. AWS Regions

A company has an application, which consists of a .net layer that connects to a MYSQL database. They want to move this application on to AWS and use AWS features such as high availability and automated backups. Which of the following would be an ideal database for this use case? A. Amazon RDS B. Amazon Aurora C. Amazon DynamoDB D. Amazon Redshift

B. Amazon Aurora

You are designing an ecommerce web application that will scale to hundreds of thousands of concurrent users. Which database technology is best suited to hold the session state in this example? A. Amazon RDS B. Amazon Dynamo DB C. Amazon Redshift D. S3

B. Amazon DynamoDB

Which of the following AWS tools help your application scale up or down based on demand? (Choose 2) A. Availability Zones B. Amazon EC2 Auto Scaling C. AWS loudFormation D. Elastic Load Balancing E. AWS Config

B. Amazon EC2 Auto Scaling D. Elastic Load Balancing

What are the 3 types of load balancers that Elastic Load Balancing offers? A. Internet Load Balancer B. Application Load Balancer C. Network Load Balancer D. Compute Load Balancer E. Classic Load Balancer F. Auto Scaling Load Balancer

B. Application Load Balancer E. Classic Load Balancer C. Network Load Balancer

Which of the following are features of Amazon Elastic Block Store (EBS) (Choose 2) A. Data on an Amazon EBS volume is lost when the attached instance is stopped B. Data stored on Amazon EBS is automatically replicated within an availability zone C. Amazon EBS data is automatically backed up to tape D. Amazon EBS volumes can be encrypted transparently to workloads on the attached instance.

B. Data stored on Amazon EBS is automatically replicated within an availability zone D. Amazon EBS volumes can be encrypted transparently to workloads on the attached instance.

As AWS grows, the cost of doing business is reduced and savings are passed back to the customer with lower pricing. What is this optimization called? A. Expenditure Awareness B. Economies of Scale C. Matching supply and demand D. EC2 Right Scaling

B. Economies of Scale

True or False? To receive the discounted rate associated with Reserved Instances, you must make a full, upfront payment for the term of the agreement. A. True B. False

B. False

True or False? Unlimited services are available with the AWS free tier to new AWS customers for 12 months following their AWS sign-up date. A. True B. False

B. False

True or False? Edge locations are only located in the same general area as Regions? A. True B. False

B. False (Edge Locations do not need to be located in the same general area as Regions)

What is defined as the ability for a system to remain operational even if some of the components of that system fail? A. High durability B. Fault tolerance C. High availability

B. Fault tolerance

Economies of scale result from _________________. A. Having many different cloud providers B. Having hundreds of thousands of customers aggregated in the cloud C. Having hundreds of cloud services available over the internet D. Having to invest heavily in data centers and servers

B. Having hundreds of thousands of customers aggregated in the cloud.

You can use Amazon EFS to: A. Provide simple, scalable, elastic file storage for use only within AWS B. Implement storage for Amazon EC2 instances that multiple virtual machines can access at the same time C. Host a robust CDN to deliver entire websites with dynamic, static, and streaming content. D. Generate user-specific content.

B. Implement storage for Amazon EC2 Instances that multiple virtual machines can access at the same time.

Amazon S3 replicates all objects A. On multiple volumes within a single availability zones B. In multiple availability zones within the same region C. Across multiple regions for higher durability D. On multiple S3 buckets

B. In multiple availability zones within the same region

Which of these is NOT a benefit of cloud computing over on-premises computing? A. Increase speed and agility B. Pay for racking, stacking, and powering servers C. Eliminate guessing on your infrastructure capacity needs D. Trade capital expense for variable expense E. Benefit from massive economies of scale

B. Pay for racking, stacking, and powering servers

AWS Trusted Advisor provides insight regarding which five categories of an AWS account? A. Security, access control, high availability, performance, service limits B. Performance, cost optimization, security, fault tolerance, service limits C. Performance, cost optimization, access control, connectivity, and security D. Security, fault-tolerance, high availability, connectivity, service limits

B. Performance, cost optimization, security, fault tolerance, and service limits

Which of the following are characteristics of Amazon EC2 Auto Scaling? (Choose 3) A. Only supports dynamic scaling B. Responds to changing conditions by adding or terminating instances C. Delivers push notifications D. Launches instances from a specified AMI E. Enforces a minimum number of running Amazon EC2 instances

B. Responds to changing conditions by adding or terminating instances D. Launches instances from a specified AMI E. Enforces a minimum number of running EC2 instances

You need to find an item in an Amazon DynamoDB table using an attribute other than the item's primary key. Which of the following operations should you use? A. PutItem B. Scan C. Query D. GetItem

B. Scan

If your project requires monthly reports that iterate through very large amounts of data, which EC2 purchasing option should you consider? A. Spot Instances B. Scheduled Reserved Instances C. Dedicated Instances D. On-Demand Instances

B. Scheduled Reserved Instances

Which of the following can be used to protect EC2 instances hosted in AWS? A. All of the above B. Security Group C. AMI D. Internet Gateway

B. Security Group

You can run applications and workloads from a Region closer to the end users to _____________ latency. A. increase B. decrease

B. decrease

AWS highly recommends provisioning your compute resources across _____________ Availability Zones. A. no B. multiple C. single D. all

B. multiple

How many IP addresses are available when you create a CIDR block 10.0.1.0/24 (which has 256 total ip addresses)? A. 246 B. 256 C. 251 D. 250

C. 251

The AWS Well-Architected Framework is organized into how many pillars? A. 3 B. 4 C. 5 D. None of these

C. 5

Regarding Amazon S3 Glacier, what is a vault? A. The rules that determine who may (or may not) access archives B. An object C. A container for storing archives D. A policy that identifies who can access content stored in Glacier

C. A container for storing archives

Which of these statements about Availability Zones is NOT true? (Select the best answer) A. Availability Zones are designed for fault isolation B. Availability Zones are made up of one or more data centers C. A data center can be used for more than one Availability Zone D. Availability Zones are connected to each other using high-speed private links

C. A data center can be used for more than one Availability Zone

Which of the following must be configured on an elastic load balancing load balancer to expect incoming traffic? A. A port B. A network interface C. A listener D. An instance

C. A listener

Which component of the AWS Global Infrastructure does Amazon CloudFront use to ensure low-latency delivery? A. AWS Regions B. Amazon VPC C. AWS Edge Locations D. AWS Availability Zones

C. AWS Edge Locations

Which of these are ways to access AWS core services (Choose three) A. Technical Support Calls B. AWS Marketplace C. AWS Management Console D. AWS Command Line Interface (CLI) E. Software Development Kits (SDKs)

C. AWS Management Console D. AWS Command Line Interface (CLI) E. Software Development Kits (SDKs)

After you move to the AWS cloud, you want to ensure that the right security settings are put in place. Which online tool can assist in security compliance? A. Amazon Kinesis B. AWS Support C. AWS Trusted Advisor D. Amazon CloudWatch

C. AWS Trusted Advisor

Which of the following services can help you collect important metrics from Amazon RDS and Amazon EC2 instances? A. Amazon CloudFront B. Amazon CloudSearch C. Amazon CloudWatch D. AWS CloudTrail E. Amazon EC2 Auto Scaling

C. Amazon CloudWatch

If you are exploring an application that requires a database with extremely fast performance, high scalability, and flexibility in the database schema, which service should you consider? A. Amazon RDS B. Amazon ElastiCache C. Amazon DynamoDB D. Amazon Redshift

C. Amazon DynamoDB

Which of the following is a compute service? A. Amazon VPC B. Amazon S3 C. Amazon EC2 D. Amazon CloudFront E. Amazon RedShift

C. Amazon EC2

Which AWS networking service enables a company to create a virtual network within AWS? A. AWS Config B. Amazon Route 53 C. Amazon VPC D. AWS Direct Connect

C. Amazon VPC

Which of the following is a principle when designing cloud-based systems? A. Build tightly-coupled components B. Make infrequent, large batch changes C. Assume everything will fail D. Use as many services as possible

C. Assume everything will fail

Which Amazon EC2 feature ensures your instances will not share a physical host with instances from any other AWS customer? A. Amazon VPC B. Placement Groups C. Dedicated Instances D. Reserved Instances

C. Dedicated Instances

How would a system administrator add an additional layer of login security to a user's AWS Management Console? A. Use Amazon Cloud Directory B. Audit AWS IAM roles C. Enable MFA D. Enable AWS CloudTrail

C. Enable MFA

Your web application needs four instances to support steady traffic all of the time. On the last day of the month, the traffic triples, What is the most cost-effective way to handle this pattern? A. Run 12 Reserved Instances all of the time B. Run four on-demand instances constantly, then add 8 more on demand instances on the last day of each month. C. Run four Reserved Instances constantly, then add eight on-demand instances on the last day of each month. D. Run four on-demand instances constantly, then add eight reserved instances on the last day of each month.

C. Run four reserved instances constantly, then add eight more on-demand instances on the last day of each month.

In the shared responsibility model, which of the following are examples of "security in the cloud"? (Choose two) A. Compliance with compute security standards and regulations B. Physical security of the facilities in which the services operate C. Security Group Configurations D. Encryption of data at rest and data in transit E. protecting the global infrastructure

C. Security Group Configurations D. Encryption of data at rest and data in transit

Which of these is NOT a cloud deployment model? A. Platform as a service B. Infrastructure as a service C. System administration as a service D. Software as a service

C. System administration as a service

Which of the following is not one of the four areas of the Performance Efficiency pillar of the AWS Well-Architected Framework? A. Tradeoffs B. Selection C. Traceability D. Monitoring

C. Traceability

Which of the following use cases is appropriate for using Amazon RDS? A. Massive read/write rates B. Simple GET or PUT requests C. Complex Transactions D. All of the above

C. complex transactions

In Amazon DynamoDB, what does the query operation enable you to do? A. Query a table using the partition key and an optional sort key filter B. Query any secondary indexes that exist for a table C. Efficiently retrieve items from a table or secondary index. D. All of the above

D. All of the above

What is included in an AMI? A. A template for the root volume for the instance B. Launch permissions that control which AWS accounts can use the AMI to launch instances. C. A block device mapping that specifies the volumes to attach at the instance when it's launched. D. All of the above

D. All of the above

Why is AWS more economical than traditional data centers for applications with varying compute workloads? A. Amazon EC2 costs are billed on a monthly basis B. Customers can retain full admirative access to their EC2 instances C. Customers can permanently run enough instances to handle peak workloads D. Amazon EC2 instances can be launched on-demand when needed

D. Amazon Instances can be launched on-demmand when needed.

Which AWS Cloud Service is best suited for analyzing your data by using SQL and your existing business intelligence tools? A. Amazon RDS B. Amazon S3 Glacier C. Amazon DynamoDB D. Amazon Redshift

D. Amazon Redshift

Which of the following should be done by the AWS account root user? A. Secure access for applications B. Integrate with other AWS services C. Change granular permissions D. Change the AWS support plan

D. Change the AWS support plan

After initial login, what does AWS recommend as the best practice for the AWS account root user? A. Delete the AWS account root user B. Revoke the permissions on the AWS account root user C. Restrict the permission on the AWS account root user D. Delete the access keys of the AWS account root user

D. Delete the access keys of the AWS account root user

Which of the following best describes a system that can withstand some measures of degradation, experiences minimal downtime, and requires minimal human intervention? A. Scalable B. Fault-tolerant C. Elastic D. Highly available

D. Highly available

What should you consider when choosing a database type? A. Data size B. Data access period C. Query frequency D. Highly available E. All of the above

E. All of the above

What are the advantages of cloud computing over computing on-premises? A. Avoid large capital expenditures B. Use on-demand capacity C. Go global in minutes D. Increase speed and agility E. All of the above

E. All the above

True of False? Containers contain an entire operating system.

False