AWS Cloud Practitioner Exam Preparation

What is the scope of a VPC within a region? ​ a)Spans all Availability Zones within the region ​ b)Spans all Availability Zones globally ​ c)At least 2 data centers per region ​ d)At least 2 subnets per region

a

What is the term for describing the action of automatically running scripts on Amazon EC2 instances when launched to install software? ​ a)Bootstrapping ​ b)Golden Images ​ c)Workflow automation ​ d)Containerization

a

What method can you use to take a backup of an Amazon EC2 instance using AWS tools? ​ a)Take a snapshot to capture the point-in-time state of the instance ​ b)Use Cross-Region Replication (CRR) to copy the instance to another region ​ c)Take application-consistent backups using the EC2 API ​ d)Take full and incremental file-level backups using the backup console

a

Which AWS service can be used to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PC? ​ a) Elastic Transcoder ​ b) Elastic Load Balancer ​ c) Auto Scaling ​ d) Elastic Beanstalk

a

Which service can be used for building and integrating loosely-coupled, distributed applications? ​ a)Amazon SNS ​ b)Amazon EBS ​ c)Amazon EFS ​ d)Amazon RDS

a

Which service can be used to track the CPU usage of an EC2 instance? ​ a)Amazon CloudWatch ​ b)Amazon CloudFormation ​ c)Amazon CloudFront ​ d)Amazon CloudTrail

a

Which service can you use to provision a preconfigured server with little to no AWS experience? ​ a)Amazon LightSail ​ b)AWS Lambda ​ c)Amazon Elastic Beanstalk ​ d)Amazon EC2

a

The AWS global infrastructure is composed of? (choose 2) ​ a)Regions ​ b)Availability Zones ​ c)IP subnets ​ d)Fault Zones ​ e)Clusters

a and b

Under the AWS shared responsibility model, what are the customer's responsibilities? (Select TWO.) ​ a)Data integrity authentication ​ b)Security of data in transit ​ c)Physical network devices including firewalls ​ d)Physical and environmental security ​ e)Storage device decommissioning

a and b

What are two ways that moving to an AWS cloud can benefit an organization? (choose 2) ​ a)Stop guessing about capacity ​ b)Increase speed and agility ​ c)Switch to a CAPEX model ​ d)Gain greater control of data center security ​ e)Depreciate assets over a longer timeframe

a and b

What considerations are there when choosing which region to use? (choose 2) ​ a)Data sovereignty ​ b)Latency ​ c)Available storage capacity ​ d)Available compute capacity ​ e)Pricing in local currency

a and b

Which of the following statements is correct in relation to consolidated billing? (choose 2) ​ a)One bill is provided per AWS organization ​ b)Paying accounts are independent and cannot access the resources of other accounts ​ c)Volume pricing discounts cannot be applied to resources ​ d)Only available to Enterprise customers ​ e)Used to consolidate billing across organizations

a and b

The AWS Identity and Access Management (IAM) service can be used to manage which objects? (choose 2) ​ a)Roles ​ b)Network ACLs ​ c)Access policies ​ d)Security groups ​ e)Key pairs

a and c

Which of the statements below is accurate regarding Amazon S3 buckets? (choose 2) ​ a) Bucket names must be unique globally ​ b) Buckets can contain other buckets ​ c) Bucket names must be unique regionally ​ d) Buckets are region-specific ​ e) Buckets are replicated globally

a and d

Under the AWS shared responsibility to model what is the customer responsible for? (choose 2) ​ a)Encryption of customer data ​ b)Physical security of the data center ​ c)Replacement and disposal of disk drives ​ d)Patch management of infrastructure ​ e)Configuration of security groups

a and e

A company plans to deploy a global commercial application on Amazon EC2 instances. The deployment solution be designed with the highest redundancy and fault tolerance. Based on this situation, how should the EC2 instances be deployed? ​ a)Across multiple Availability Zones in one AWS Region ​ b)Across multiple Availability Zones in two AWS Regions ​ c)In a single Availability Zone in one AWS Region ​ d)In a single Availability Zone in two AWS Regions

b

How can an organization compare the cost of running applications in an on-premise or colocation environment against the AWS cloud? ​ a)AWS Budgets ​ b)TCO Calculator ​ c)AWS Cost Explorer ​ d)AWS Simple Monthly Calculator

b

How does AWS assist organizations' with their capacity requirements? ​ a) With AWS you only pay for what you use ​ b) You don't need to guess your capacity needs ​ c)With AWS you don't pay for data centers ​ d)You don't own the infrastructure

b

What is the most cost-effective support plan that should be selected to provide at least a 1-hour response time for a production system failure? ​ a)Developer ​ b)Business ​ c)Enterprise ​ d)Basic

b

What strategy can assist with allocating metadata to AWS resources for cost tracking and visibility? ​ a)Labelling ​ b)Tagging ​ c)Access Control ​ d)Categorizing

b

Which AWS service can you use to install a third-party database? ​ a)Amazon DynamoDB ​ b)Amazon EC2 ​ c)Amazon EMR ​ d)Amazon RDS

b

Which feature of AWS allows you to deploy a new application for which the requirements may change over time? ​ a)High availability ​ b)Elasticity ​ c)Disposable resources ​ d)Fault tolerance

b

Which of the following is a principle of good AWS Cloud architecture design? ​ a)Implement single points of failure ​ b)Implement loose coupling ​ c)Implement vertical scaling ​ d)Implement monolithic design

b

Which service allows you to automatically expand and shrink your application in response to demand? ​ a)Amazon DynamoDB ​ b)Amazon EC2 Auto Scaling ​ c)AWS ElastiCache ​ d)Amazon Elastic Load Balancing

b

Which service records API activity on your account and delivers log files to an Amazon S3 bucket? ​ a)Amazon CloudWatch ​ b)AWS CloudTrail ​ c)Amazon S3 Event Notifications ​ d)Amazon CloudWatch Logs

b

Which statement below is incorrect in relation to Security Groups? ​ a)They support allow rules only ​ b)They are stateless ​ c)They operate at the instance level ​ d)They evaluate all rules before making a decision

b

Which storage service allows you to connect multiple EC2 instances concurrently using file-level protocols? ​ a)Amazon Glacier ​ b)Amazon EFS ​ c)Amazon EBS ​ d)Amazon S3

b

Which AWS services can be used to connect the AWS Cloud and on-premises resources? (Select TWO.) ​ a)Amazon CloudHSM ​ b)AWS Direct Connect ​ c)AWS Managed VPN ​ d)AWS Managed Services ​ e)Amazon Connect

b and c

Which of the following are accurate descriptions of AWS IAM users and groups? (Select TWO.) ​ a) All new users are automatically added to a default group ​ b) A user can be a member of multiple groups ​ c) A user can only be a member of a single group at one a time ​ d) Groups can contain users only and cannot be nested ​ e) Groups can be nested and can contain other groups

b and c

What advantages does deploying Amazon CloudFront provide? (choose 2) ​ a)Automated deployment of resources ​ b)Improved performance for end-users ​ c)Provides serverless compute services ​ d)Reduced latency ​ e)A private network link to the AWS cloud

b and d

Under the shared responsibility model, what are examples of shared controls? (choose 2) ​ a)Physical and environmental ​ b)Patch management ​ c)Storage system patching ​ d)Service and Communications Protection ​ e)Configuration management

b and e

What benefits does Amazon EC2 provide over using non-cloud servers? (choose 2) ​ a)Complete control of the hypervisor layer ​ b)Elastic web-scale computing ​ c)Fault tolerance ​ d)High-availability with an SLA of 99.999% ​ e)Inexpensive

b and e

For which services does Amazon not charge customers? (choose 2) ​ a)Amazon SNS ​ b)Amazon S3 ​ c)Amazon CloudFormation ​ d)Amazon EBS ​ e)Amazon VPC

c

What architectural best practice aims to reduce the interdependencies between services? ​ a)Removing Single Points of Failure ​ b)Automation ​ c)Loose Coupling ​ d)Services, Not Servers

c

What can you use to quickly connect your office securely to your Amazon VPC? ​ a)Direct Connect ​ b)Internet Gateway ​ c)AWS managed VPN ​ d)Route Table

c

What is an availability zone composed of? ​ a)A collection of edge locations ​ b)One or more regions ​ c)One or more data centers in a location ​ d)A collection of VPCs

c

Which AWS service allows you to connect to storage from on-premise servers using standard file protocols? ​ a)Amazon EBS ​ b)Amazon S3 ​ c)Amazon EFS ​ d)Amazon Glacier

c

Which AWS service can an organization use to automate operational tasks on EC2 instances using existing Chef cookbooks? ​ a)AWS CodeDeploy ​ b)AWS Config ​ c)AWS OpsWorks ​ d)AWS Service Catalog

c

Which AWS service is primarily used for software version control? ​ a)AWS CodeStar ​ b)AWS Cloud9 ​ c)AWS CodeCommit ​ d)AWS CodeDeploy

c

Which AWS storage technology can be considered a "virtual hard disk in the cloud"? ​ a)Amazon Glacier archive ​ b)Amazon Elastic File Storage (EFS) filesystem ​ c)Amazon Elastic Block Storage (EBS) volume ​ d)Amazon S3 object

c

Which feature can you use to grant read/write access to an Amazon S3 bucket? ​ a)IAM Group ​ b)IAM Role ​ c)IAM Policy ​ d)IAM User

c

Which feature of Amazon Rekognition can assist with saving time? ​ a)Provides on-demand access to compliance-related information ​ b)Identification of the language of text in a document ​ c)Identification of objects in images and videos ​ d)Adds automatic speech recognition (ASR) to applications

c

Which pricing model should you use for EC2 instances that will be used in a lab environment for several hours on a weekend and must run uninterrupted? ​ a)Dedicated Instance ​ b)Reserved ​ c)On-Demand ​ d)Spot

c

Which service allows you to run code as functions without needing to provision or manage servers? ​ a)Amazon EKS ​ b)Amazon EC2 ​ c)AWS Lambda ​ d)AWS CodeDeploy

c

Which service can be used to help you to migrate databases to AWS quickly and securely? ​ a)AWS Key Management Service (KMS) ​ b)AWS DataSync ​ c)AWS Database Migration Service (DMS) ​ d)AWS Server Management Service (SMS)

c

Which tool enables you to visualize your usage patterns over time and to identify your underlying cost drivers? ​ a)AWS Budgets ​ b)Total Cost of Ownership (TCO) Calculator ​ c)AWS Cost Explorer ​ d)AWS Simple Monthly Calculator

c

What benefits are provided by Amazon CloudFront? (choose 2) ​ a)Used to enable private subnet instances to access the Internet ​ b)Allows you to register domain names ​ c) Built-in Distributed Denial of Service (DDoS) attack protection ​ d) Content is cached at Edge Locations for fast distribution to customers ​ e) Provides a worldwide distributed DNS service

c and d

Which types of pricing policies does AWS offer? (choose 2) ​ a)Enterprise license agreement (ELA) ​ b)Non-peak hour discounts ​ c)Pay-as-you-go ​ d)Save when you reserve ​ e)Global usage discounts

c and d

When instantiating compute resources, what are two techniques for using automated, repeatable processes that are fast and avoid human error? (choose 2) ​ a)Snapshotting ​ b)Fault tolerance ​ c)Infrastructure as code ​ d)Performance monitoring ​ e)Bootstrapping

c and e

Which AWS service can be used to generate encryption keys that can be used to encrypt data? (Select TWO.) ​ a)Amazon Macie ​ b)AWS Certificate Manager ​ c)AWS CIoudHSM ​ d)AWS Secrets Manager ​ e)AWS Key Management Service (AWS KMS)

c and e

Which services can be used for asynchronous integration between application components? (choose 2) ​ a)AWS CloudFormation ​ b)AWS Route 53 ​ c)AWS Step Functions ​ d)Amazon EC2 Auto Scaling ​ e)Amazon SQS

c and e

A company plans to create a hybrid cloud architecture. What technology will allow them to create a hybrid cloud? ​ a)VPC Peering ​ b)Elastic Network Interface ​ c)Internet Gateway ​ d)AWS Direct Connect

d

A company stores copies of backups on Amazon S3 and requires rapid access but low resiliency. Which storage class is optimized for these requirements? ​ a) Amazon S3 Glacier Deep Archive ​ b) Amazon S3 Standard ​ c) Amazon S3 Glacier ​ d) Amazon S3 One Zone-Infrequent Access

d

A company would like to maximize their potential volume and Reserved Instance discounts across multiple accounts and also apply service control policies on member accounts. Which service or tool can they use to gain these benefits? ​ a)AWS Cost Explorer ​ b)AWS Budgets ​ c)AWS IAM ​ d)AWS Organizations

d

What is the most cost-effective EC2 pricing option to use for a non-critical overnight workload? a)Dedicated Host ​ b)On-Demand ​ c)Reserved Instance ​ d)Spot

d

Which AWS service can be used to process a large amount of data using the Hadoop framework? ​ a)AWS Glue ​ b)Amazon Athena ​ c)Amazon Kinesis ​ d)Amazon EMR

d

Which AWS service is used to enable multi-factor authentication? ​ a)AWS KMS ​ b)Amazon STS ​ c)Amazon EC2 ​ d)AWS IAM

d

Which AWS support plan should you use if you need a response time of < 15 minutes for a business-critical system failure? ​ a)Basic ​ b)Business ​ c)Developer ​ d)Enterprise

d

Which benefit of the AWS Cloud eliminates the need for users to try estimating future infrastructure usage? ​ a)Security of the AWS Cloud ​ b)Economies of scale ​ c)Easy global deployments ​ d)Elasticity of the AWS Cloud

d

Which of the following is a method of backup available in the AWS cloud? ​ a)Amazon EFS File Systems ​ b)Availability Zones ​ c)Amazon Route 53 Alias Record ​ d)Amazon EBS Snapshots

d

Which service supports the resolution of public domain names to IP addresses or AWS resources? ​ a)Amazon CloudFront ​ b)Amazon SNS ​ c)Hosted Zones ​ d)Amazon Route 53

d

Which statement below is incorrect in relation to Network ACLs? ​ a)They support allow and deny rules ​ b)They process rules in order ​ c)They are stateless ​ d)They operate at the Availability Zone level

d

What advantages do you get from using the AWS cloud? (choose 2) ​ a)Increased capital expenditure ​ b)Comply with all local security compliance programs ​ c)Gain greater control of the infrastructure layer ​ d)Stop guessing about capacity ​ e)Trade capital expense for variable expense

d and e

Which items can be configured from within the VPC management console? (choose 2) ​ a)Auto Scaling ​ b)Regions ​ c)Load Balancing ​ d)Subnets ​ e)Security Groups

d and e

Which of the following are features of Amazon CloudWatch? (choose 2) ​ a)It is used for auditing of API calls ​ b)It records account activity and service events from most AWS services ​ c)It provides visibility into user activity by recording actions taken on your account ​ d)It is used to gain system-wide visibility into resource utilization ​ e)It can be accessed via API, command-line interface, AWS SDKs, and the AWS Management Console

d and e