AWS Cloud Practitioner Essentials
Your company wants to receive support from an AWS Technical Account Manager (TAM). Which support plan should you choose? (M8) a. Developer b. Enterprise c. Basic d. Business
b. Enterprise
Which statement is TRUE for the AWS global infrastructure? (M3) a. A Region consists of a single Availability Zone b. An Availability Zone consists of two or more Regions c. A Region consists of two or more Availability Zones d. An Availability Zone consists of a single Region
c. A Region consists of two or more Availability Zones
Which migration strategy involves changing how an application is architected and developed, typically by using cloud-native features? (FA) a. Replatforming b. Rehosting c. Refactoring d. Repurchasing
c. Refactoring
What is the storage capacity of AWS Snowmobile? (M9) a. 40 PB b. 60 PB c. 80 PB d. 100 PB
d. 100 PB
Which service is used to manage the DNS records for domain names? (M4) a. Amazon Virtual Private Cloud b. AWS Direct Connect c. Amazon CloudFront d. Amazon Route 53
d. Amazon Route 53
Which component is used to connect a VPC to the internet? (M4) a. Public subnet b. Edge location c. Security group d. Internet gateway
d. Internet gateway
Which AWS Trusted Advisor category includes checks for your service limits and overutilized instances? (FA) a. Security b. Cost Optimization c. Fault Tolerance d. Performance
d. Performance
You want to send and receive messages between distributed application components. Which service should you use? (FA) a. Amazon Route 53 b. Amazon Simple Queue Service (Amazon SQS) c. AWS Snowball d. Amazon ElastiCache
b. Amazon Simple Queue Service (Amazon SQS)
What are the contract length options for Amazon EC2 Reserved Instances? [Select TWO] (M2) a. 1 year b. 2 years c. 3 years d. 4 years d. 5 years
a. 1 year b. 3 years
Which statement best describes an Availability Zone? (FA) a. The server from which Amazon CloudFront gets your files b. A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location c. A fully isolated portion of the AWS global infrastructure d. A separate geographical location with multiple locations that are isolated from each other
c. A fully isolated portion of the AWS global infrastructure
Which action can you perform with consolidated billing? (M8) a. Review how much cost your predicted AWS usage will incur by the end of the month. b. Create an estimate for the cost of your use cases on AWS. c. Combine usage across accounts to receive volume pricing discounts. d. Visualize and manage your AWS costs and usage over time.
c. Combine usage across accounts to receive volume pricing discounts.
Which statement best describes Amazon CloudFront? (M3) a. A service that enables you to run infrastructure in a hybrid cloud approach b. A serverless compute engine for containers c. A service that enables you to send and receive messages between software components through a queue d. A global content delivery service
d. A global content delivery service
Which service enables you to consolidate and manage multiple AWS accounts from a central location? (FA) a. AWS Key Management Service (AWS KMS) b. AWS Artifact c. AWS Identity and Access Management (IAM) d. AWS Organizations
d. AWS Organizations
You want to store data in an object storage service. Which AWS service is best for this type of storage? (M5) a. Amazon Managed Blockchain b. Amazon Elastic File System (Amazon EFS) c. Amazon Elastic Block Store (Amazon EBS) d. Amazon Simple Storage Service (Amazon S3)
d. Amazon Simple Storage Service (Amazon S3)
Which action can you perform with AWS Outposts? (M3) a. Automate actions for AWS services and applications through scripts b. Access wizards and automated workflows to perform tasks in AWS services c. Develop AWS applications in supported programming languages d. Extend AWS infrastructure and services to your on-premises data center
d. Extend AWS infrastructure and services to your on-premises data center
Which factors should be considered when selecting a Region? [Select TWO] (M3) a. Compliance with data governance and legal requirements b. Proximity to your customers c. Access to 24/7 technical support d. Ability to assign custom permissions to different users e. Access to the AWS Command Line Interface (AWS CLI)
a. Compliance with data governance and legal requirements b. Proximity to your customers
Which tasks are the responsibilities of AWS? [Select TWO] (FA) a. Configuring AWS infrastructure devices b. Training company employees on how to use AWS services c. Creating IAM users and groups d. Configuring security groups on Amazon EC2 instances e. Maintaining virtualization infrastructure
a. Configuring AWS Infrastructure devices e. Maintaining virtualization infrastructure
Which process is an example of Elastic Load Balancing? (M2) a. Ensuring that no single Amazon EC2 instance has to carry the full workload on its own b. Removing unneeded Amazon EC2 instances when demand is low c. Adding a second Amazon EC2 instance during an online store's popular sale d. Automatically adjusting the number of Amazon EC2 instances to meet demand
a. Ensuring that no single Amazon EC2 instance has to carry the full workload on its own
Which statement best describes AWS Marketplace? (FA) a. A resource that can answer questions about best practices and assist with troubleshooting issues b. A digital catalog that includes thousands of software listings from independent software vendors c. An online tool that inspects your AWS environment and provides real-time guidance in accordance with AWS best practices d. A resource that provides guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications
b. A digital catalog that includes thousands of software listings from independent software vendors
Which statement best describes an IAM policy? (M6) a. An authentication process that provides an extra layer of protection for your AWS account b. A document that grants or denies permissions to AWS services and resources c. An identity that you can assume to gain temporary access to permissions d. The identity that is established when you first create an AWS account
b. A document that grants or denies permissions to AWS services and resources
Which statement best describes Amazon DynamoDB? (M5) a. A service that enables you to run relational databases in the AWS Cloud b. A serverless key-value database service c. A service that you can use to migrate relational databases, nonrelational databases, and other types of data stores d. An enterprise-class relational database
b. A serverless key-value database service
Which pricing tool enables you to receive alerts when your service usage exceeds a threshold that you have defined? (M8) a. Billing dashboard in the AWS Management Console b. AWS Budgets c. AWS Free Tier d. AWS Cost Explorer
b. AWS Budgets
Which service is used to quickly deploy and scale applications on AWS? (FA) a. AWS Snowball b. AWS Elastic Beanstalk c. Amazon CloudFront d. AWS Outposts
b. AWS Elastic Beanstalk
You have a workload that will run for a total of 6 months and can withstand interruptions. What would be the most cost-efficient Amazon EC2 purchasing option? (M2) a. Reserved Instance b. Spot Instance c. Dedicated Instance d. On-Demand Instance
b. Spot Instance
Which statement best describes Amazon GuardDuty? (FA) a. A service that helps protect your applications against distributed denial-of-service (DDoS) attacks b. A service that lets you monitor network requests that come into your web applications c. A service that provides intelligent threat detection for your AWS infrastructure and resources d. A service that checks applications for security vulnerabilities and deviations from security best practices
c. A service that provides intelligent threat detection for your AWS infrastructure and resources
Which pricing tool is used to visualize, understand, and manage your AWS costs and usage over time? (M8) a. AWS Pricing Calculator b. AWS Budgets c. AWS Cost Explorer d. AWS Free Tier
c. AWS Cost Explorer
You want to use an Amazon EC2 instance for a batch processing workload. What would be the best Amazon EC2 instance type to use? (M2) a. General purpose b. Memory optimized c. Compute optimized d Storage optimized
c. Compute optimized
Which task can AWS Key Management Service (AWS KMS) perform? (M6) a. Configure multi-factor authentication (MFA). b. Update the AWS account root user password. c. Create cryptographic keys. d. Assign permissions to users and groups.
c. Create cryptographic keys
Which site does Amazon CloudFront use to cache copies of content for faster delivery to users at any location? (M3) a. Region b. Availability Zone c. Edge location d. Origin
c. Edge location
Which actions can you perform in Amazon Route 53? [Select TWO] (FA) a. Automate the deployment of workloads into your AWS environment b. Monitor your applications and respond to system-wide performance changes c. Manage DNS records for domain names d. Access AWS security and compliance reports and select online agreements e. Connect user requests to infrastructure in AWS and outside of AWS
c. Manage DNS records for domain names e. Connect user requests to infrastructure in AWS and outside of AWS
Which virtual private cloud (VPC) component controls inbound and outbound traffic for Amazon EC2 instances? (FA) a. Internet gateway b. Subnet c. Security group d. Network access control list
c. Security group
Which action can you perform in Amazon CloudFront? (FA) a. Provision resources by using programming languages or a text file. b. Provision an isolated section of the AWS Cloud to launch resources in a virtual network that you define. c. Run infrastructure in a hybrid cloud approach. d. Deliver content to customers through a global network of edge locations.
d. Deliver content to customers through a global network of edge locations.
What is cloud computing? (M1) a. Backing up files that are stored on desktop and mobile devices to prevent data loss b. Deploying applications connected to on-premises infrastructure c. Running code without needing to manage or provision servers d. On-demand delivery of IT resources and applications through the internet with pay-as-you-go pricing
d. On-demand delivery of IT resources and applications through the internet with pay-as-you-go pricing
Which statement best describes Amazon Lex? (M9) a. A service that enables you to build conversational interfaces using voice and text b. A machine learning service that automatically extracts text and data from scanned documents c. A document database service that supports MongoDB workloads d. A service that enables you to identify potentially fraudulent online activities
a. A service that enables you to build conversational interfaces using voice and text
Which service enables you to review details for user activities and API calls that have occurred within your AWS environment? (FA) a. AWS CloudTrail b. Amazon CloudWatch c. Amazon Inspector d. AWS Trusted Advisor
a. AWS CloudTrail
Which tool is used to automate actions for AWS services and applications through scripts? (FA) a. AWS Command Line Interface b. Amazon Redshift c. AWS Snowball d. Amazon QLDB
a. AWS Command Line Interface
Which service is used to query and analyze data across a data warehouse? (M5) a. Amazon Redshift b. Amazon Neptune c. Amazon DocumentDB d. Amazon ElastiCache
a. Amazon Redshift
Which actions can you perform using Amazon CloudWatch? [Select TWO] (M7) a. Monitor your resources' utilization and performance b. Receive real-time guidance for improving your AWS environment c. Compare your infrastructure to AWS best practices in five categories d. Access metrics from a single dashboard e. Automatically detect unusual account activity
a. Monitor your resources' utilization and performance d. Access metrics from a single dashboard
What is another name for on-premises deployment? (M1) a. Private cloud deployment b. Cloud-based application c. Hybrid deployment d. AWS Cloud
a. Private cloud deployment
Which statement best describes security groups? (M4) a. They are stateful and deny all inbound traffic by default b. They are stateful and allow all inbound traffic by default c. They are stateless and deny all inbound traffic by default d. They are stateless and allow all inbound traffic by default
a. They are stateful and deny all inbound traffic by default
Which service is used to run containerized applications on AWS? (FA) a. Amazon SageMaker b. Amazon Elastic Kubernetes Service (Amazon EKS) c. Amazon Redshift d. Amazon Aurora
b. Amazon Elastic Kubernetes Service (Amazon EKS)
Which pillar of the AWS Well-Architected Framework includes the ability to run workloads effectively and gain insights into their operations? (M10) a. Cost Optimization b. Operational Excellence c. Performance Efficiency d. Reliability
b. Operational Excellence
Which categories are included in the AWS Trusted Advisor dashboard? [Select TWO] (M7) a. Reliability b. Performance c. Scalability d. Elasticity e. Fault tolerance
b. Performance e. Fault tolerance
Your company has an application that uses Amazon EC2 instances to run the customer-facing website and Amazon RDS database instances to store customers' personal information. How should the developer configure the VPC according to best practices? (M4) a. Place the Amazon EC2 instances in a private subnet and the Amazon RDS database instances in a public subnet b. Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet c. Place the Amazon EC2 instances and the Amazon RDS database instances in a public subnet d. Place the Amazon EC2 instances and the Amazon RDS database instances in a private subnet
b. Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet
Which strategies are included in the six strategies for application migration? [Select TWO] (M9) a. Revisiting b. Retaining c. Remembering d. Redeveloping e. Rehosting
b. Retaining e. Rehosting
Which Amazon S3 storage classes are optimized for archival data? [Select TWO] (M5) a. S3 Standard b. S3 Glacier c. S3 Intelligent-Tiering d. S3 Standard-IA e. S3 Glacier Deep Archive
b. S3 Glacier e. S3 Glacier Deep Archive
You want to deploy and manage containerized applications. Which service should you use? (M2) a. AWS Lambda b. Amazon Simple Notification Service (Amazon SNS) c. Amazon Simple Queue Service (Amazon SQS) d. Amazon Elastic Kubernetes Service (Amazon EKS)
d. Amazon Elastic Kubernetes Service (Amazon EKS)
Which Perspective of the AWS Cloud Adoption Framework focuses on recovering IT workloads to meet the requirements of your business stakeholders? (FA) a. Business Perspective b. Governance Perspective c. People Perspective d. Operations Perspective
d. Operations Perspective
Which pillar of the AWS Well-Architected Framework focuses on using computing resources in ways that meet system requirements? (FA) a. Security b. Reliability c. Operational Excellence d. Performance Efficiency
d. Performance Efficiency
Which statement is TRUE for AWS Lambda? (FA) a. Before using AWS Lambda, you must prepay for your estimated compute time. b. To use AWS Lambda, you must configure the servers that run your code. c. The first step in using AWS Lambda is provisioning a server. d. You pay only for compute time while your code is running.
d. You pay only for compute time while your code is running.
Which component or service enables you to establish a dedicated private connection between your data center and virtual private cloud (VPC)? (FA) a. AWS Direct Connect b. Amazon CloudFront c. Virtual private gateway d. Internet gateway
a. AWS Direct Connect
Which service or resource is used to find third-party software that runs on AWS? (M8) a. AWS Marketplace b. AWS Free Tier c. AWS Support d. Billing dashboard in the AWS Management Console
a. AWS Marketplace
Which service enables you to build the workflows that are required for human review of machine learning predictions? (FA) a. Amazon Augmented AI b. Amazon Aurora c. Amazon Lex d. Amazon Textract
a. Amazon Augmented AI
You want to store data in a volume that is attached to an Amazon EC2 instance. Which service should you use? (FA) a. Amazon Elastic Block Store (Amazon EBS) b. Amazon Simple Storage Service (Amazon S3) c. Amazon ElastiCache d. AWS Lambda
a. Amazon Elastic Block Store (Amazon EBS)
Which statement or statements are TRUE about Amazon EBS volumes and Amazon EFS file systems? (M5) a. EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones b. EBS volumes store data across multiple Availability Zones. Amazon EFS file systems store data within a single Availability Zone c. EBS volumes and Amazon EFS file systems both store data within a single Availability Zone d. EBS volumes and Amazon EFS file systems both store data across multiple Availability Zones
a. EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones
Which Support plans include access to all AWS Trusted Advisor checks? [Select TWO] (FA) a. Enterprise b. AWS Free Tier c. Business d. Developer e. Basic
a. Enterprise b. Business
What are the benefits of cloud computing? [Select TWO] (M10) a. Increase speed and agility b. Benefit from smaller economies of scale c. Trade variable expense for upfront expense d. Maintain infrastructure capacity e. Stop spending money running and maintaining data centers
a. Increase speed and agility e. Stop spending money running and maintaining data centers
In the S3 Intelligent-Tiering storage class, Amazon S3 moves objects between a frequent access tier and an infrequent access tier. Which storage classes are used for these tiers? [Select TWO] (FA) a. S3 Glacier Deep Archive b. S3 Standard c. S3 Glacier d. S3 One Zone-IA e. S3 Standard-IA
b. S3 Standard e. S3 Standard-IA
You want Amazon S3 to monitor your objects' access patterns. Which storage class should you use? (FA) a. S3 Glacier b. S3 intelligent-Tiering c. S3 One Zone-IA d. S3 Standard-IA
b. S3 intelligent-Tiering
Which compute option reduces costs when you commit to a consistent amount of compute usage for a 1-year or 3-year term? (FA) a. Dedicated Hosts b. Savings Plans c. Reserved Instances d. Spot Instances
b. Savings Plans
Which Perspective of the AWS Cloud Adoption Framework helps you structure the selection and implementation of permissions? (M9) a. Governance Perspective b. Security Perspective c. Operations Perspective d. Business Perspective
b. Security Perspective
How does the scale of cloud computing help you to save costs? (M1) a. You do not have to invest in technology resources before using them b. The aggregated cloud usage from a large number of customers results in lower pay-as-you-go prices c. Accessing services on-demand helps to prevent excess or limited capacity d. You can quickly deploy applications to customers and provide them with low latency
b. The aggregated cloud usage from a large number of customers results in lower pay-as-you-go prices
Which tool enables you to visualize, understand, and manage your AWS costs and usage over time? (FA) a. AWS Budgets b. AWS Pricing Calculator c. AWS Cost Explorer d. AWS Artifact
c. AWS Cost Explorer
Which component can be used to established a private dedicated connection between your company's data center and AWS? (M4) a. Private subnet b. DNS c. AWS Direct Connect d. Virtual private gateway
c. AWS Direct Connect
Which service enables you to review the security of your Amazon S3 buckets by checking for open access permissions? (M7) a. Amazon CloudWatch b. AWS CloudTrail c. AWS Trusted Advisor d. Amazon GuardDuty
c. AWS Trusted Advisor
You want to store data in a key-value database. Which service should you use? (FA) a. Amazon Aurora b. Amazon RDS c. Amazon DynamoDB d. Amazon DocumentDB
c. Amazon DynamoDB
Which statement best describes the principle of least privilege? (M6) a. Adding an IAM user into at least one IAM group b. Checking a packet's permissions against an access control list c. Granting only the permissions that are needed to perform specific tasks d. Performing a denial of service attack that originates from at least one device
c. Granting only the permissions that are needed to perform specific tasks
An employee requires temporary access to create several Amazon S3 buckets. Which option would be the best choice for this task? (M6) a. AWS account root user b. IAM group c. IAM role d. Service control policy (SCP)
c. IAM role
You are running an Amazon EC2 instance and want to store data in an attached resource. Your data is temporary and will not be kept long term. Which resource should you use? (FA) a. Amazon S3 bucket b. Subnet c. Amazon Elastic Block Store (Amazon EBS) volume d. Instance store
c. Instance store
Which statement best describes Elastic Load Balancing? (FA) a. A service that monitors your applications and automatically adds or removes capacity from your resource groups in response to changing demand b. A service that enables you to set up, manage, and scale a distributed in-memory or cache environment in the cloud c. A service that provides data that you can use to monitor your applications, optimize resource utilization, and respond to system-wide performance changes d. A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances
d. A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances
Which service helps protect your applications against distributed denial-of-service (DDoS) attacks? (M6) a. Amazon GuardDuty b. Amazon Inspector c. AWS Artifact d. AWS Shield
d. AWS Shield
Which service is used to transfer up to 100 PB of data to AWS? (FA) a. Amazon CloudFront b. AWS DeepRacer c. Amazon Neptune d. AWS Snowmobile
d. AWS Snowmobile
