16.

he DevOps team at an IT company wants to centrally manage its servers on AWS Cloud as well as on-premise data center so that it can collect software inventory, run commands, configure and patch servers at scale. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

Systems Manager

this gives you visibility and control of your infrastructure on AWS

Systems Manager

Which AWS Route 53 routing policy would you use to route traffic to a single resource such as a web server for your website?

Simple routing policy

A company would like to move 50 petabytes (PBs) of data from its on-premises data centers to AWS in the MOST cost-effective way. As a Cloud Practitioner, which of the following solutions would you choose?

Snowmobile

What tool provides real time guidance to help you provision your resources following best practices in the areas of cost optimization, performance, security and fault tolerance?

Trusted Advisor

Which AWS service can help you analyze your infrastructure to identify unattached or underutilized EBS volumes?

Trusted Advisor

Which of the following AWS authentication mechanisms supports a Multi-Factor Authentication (MFA) device that you can plug into a USB port on your computer?

U2F security key

Amazon __________ is a neural machine translation service that delivers fast, high-quality, and affordable language translation.

Translate

What is the relationship between subnets and availability zones?

You can create one or more subnets within each availability zone

Which of the following services allows customers to manage their agreements with AWS?

Artifact

This is an interactive query service that makes it easy to analyze data in Amazon S3 using standard SQL.

Athena

A company is planning to move their traditional CRM application running on MySQL to an AWS database service. Which database service is the right fit for this requirement?

Aurora

Which of the below is Amazon's proprietary RDS database?

Aurora

The ______________ pillar focuses on using IT and computing resources efficiently.

performance efficiency

A Cloud Practitioner would like to deploy identical resources across all regions and accounts using templates while estimating costs. Which AWS service can assist with this task?

Cloud Formation

AWS _________ is a cloud-based integrated development environment (IDE) that lets you write, run, and debug your code with just a browser.

Cloud9

This is available from the AWS Marketplace, continuously replicates server-hosted applications and server-hosted databases from any source into AWS using block-level replication of the underlying server.

CloudEndure Disaster Recovery

A developer needs a way to automatically provision a collection of AWS resources. Which AWS service is primarily used for deploying infrastructure as code?

CloudFormation

An architect wants to find a tool for consistently deploying the same resources through a templated configuration. What AWS service can be used?

CloudFormation

This provides a common language for you to describe and provision all the infrastructure resources in your cloud environment.

CloudFormation

This is an open-source software development framework to define your cloud application resources using familiar programming languages.

CDK

Which AWS tool/service will help you define your cloud infrastructure using popular programming languages such as Python and JavaScript?

CDK

This is a content delivery network (CDN) that allows you to store (cache) your content at "edge locations" located around the world

CloudFront

AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two)

CloudFront, EC2

A company has defined a baseline that mentions the number of AWS resources to be used for different stages of application testing. However, the company realized that employees are not adhering to the guidelines and provisioning additional resources via API calls, resulting in higher testing costs. Which AWS service will help the company raise alarms whenever the baseline resource numbers are crossed?

CloudTrail Insights

Which AWS service is used to store and commit code privately and also offer features for version control?

CodeCommit

Which AWS service will help you install application code automatically to an Amazon EC2 instance?

CodeDeploy

_________ fully automates your application deployments eliminating the need for manual operations.

CodeDeploy

The development team at a company manages 300 microservices and it is now trying to automate the code reviews to improve the code quality. Which tool/service is the right fit for this requirement?

CodeGuru

This is a developer tool that provides intelligent recommendations to improve code quality and identify an application's most expensive lines of code.

CodeGuru

AWS _______ accelerates software release with the help of AWS CodePipeline, a continuous integration and continuous delivery (CI/CD) service.

CodeStar

TWO examples of the AWS shared controls.

Configuration & Patch Management

this is a networking service that helps you improve the availability and performance of the applications that you offer to your global users.

Global Accelerator

This is a fully managed ETL service that makes it easy for customers to prepare and load their data for analytics.

Glue

This analyzes trillions of events from multiple data sources such as VPC Flow Logs, AWS CloudTrail logs, and Amazon GuardDuty findings and automatically creates a graph model that provides you with a unified, interactive view of your resources, users, and the interactions between them over time.

Detective

Which support plan is the lowest cost option that allows unlimited cases to be open?

Developer

This is an application testing service that lets you improve the quality of your web and mobile apps by testing them across an extensive range of desktop browsers and real mobile devices; without having to provision and manage any testing infrastructure

Device Farm

A company wants to establish a private, dedicated connection between AWS and its on-premises datacenter. Which AWS service is the right choice for this requirement?

Direct Connect

To access EFS file systems from on-premises, you must have an AWS ___________ or AWS _________ connection between your oterm-4n-premises datacenter and your Amazon VPC.

Direct Connect, VPN

Amazon ___________ provides a simple and secure way to connect to your instances using Secure Shell (SSH)

EC2 Instance Connect

What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container Service (ECS)

ECR

this is a compute engine for Amazon ECS that allows you to run containers without having to manage servers or clusters.

Fargate

this improves performance for a wide range of applications over TCP or UDP by proxying packets at the edge to applications running in one or more AWS Regions.

Global Accelerator

This is a fully managed data security and data privacy service that uses machine learning and pattern matching to discover and protect your sensitive data in AWS.

Macie

Which AWS service can a company use to discover and protect sensitive data that is stored in Amazon S3 buckets.

Macie

According to the Well-Architected Framework, which of the following statements are recommendations in the Operational Excellence pillar? (Select two)

Make frequent, small, reversible changes & Anticipate Failure

By default, which of the following events are logged by AWS CloudTrail?

Management Events

An e-commerce company would like to build a chatbot for its customer service using Natural Language Understand (NLU). As a Cloud Practitioner, which AWS service would you use?

Lex

This is a service for building conversational interfaces using voice and text.

Lex

An engineering team is new to the AWS Cloud and it would like to launch a dev/test environment with low monthly pricing. Which AWS service can address this use-case?

LightSail

Amazon _______ is designed to be the easiest way to launch and manage a virtual private server with AWS.

Lightsail

Which of the following are NoSQL database services from AWS? (Select two)

Neptune, DocumentDB

A __________ has separate inbound and outbound rules, and each rule can either allow or deny traffic

Network ACL

Which pillar of AWS Well-Architected Framework is responsible for making sure that you select the right resource types and sizes based on your workload requirements?

Performance Efficiency

Amazon _______ can be used to personalize the end-user experience over any digital channel.

Personalize

Which feature/functionality will help you organize your AWS resources, manage and automate tasks on large numbers of resources at a time?

Resource Groups

An organization would like to copy data across different Availability Zones (AZs) using EBS snapshots. Where are EBS snapshots stored in the AWS Cloud?

S3

this feature provides settings for access points, buckets, and accounts to help you manage public access to Amazon S3 resources

S3 Block Public Access

A media company uses Amazon Simple Storage Service (Amazon S3) for storing all its data. Which storage class should it consider for cost-optimal storage of the data that has random access patterns?

S3 Intelligent-Tiering

Which S3 storage class is best for data with unpredictable access patterns?

S3 Intelligent-Tiering

A supply chain company is looking for a database that provides a centrally verifiable history of all changes made to data residing in it. This functionality is critical for the product and needs to be available off-the-shelf without the need for any customizations. Which of the following databases is the right choice for this use-case?

QLDB

This is a fully managed ledger database that provides a transparent, immutable, and cryptographically verifiable transaction log ‎owned by a central trusted authority.

QLDB

An e-commerce application sends out messages to a downstream application whenever an order is created. The downstream application processes the messages and updates its own systems. Currently, the two applications directly communicate with each other. Which service will you use to decouple this architecture, without any communication loss between the two systems?

SQS

Which AWS service can be used to send, store, and receive messages between software components at any volume to decouple application tiers?

SQS

A corporation would like to have a central user portal to log in to third-party business applications as well as accounts managed under AWS Organizations. As a Cloud Practitioner, which AWS service would you use for this task?

SSO

A data science team would like to build Machine Learning models for its projects. Which AWS service can it use?

SageMaker

Amazon ______ is a fully-managed platform that enables developers and data scientists to quickly and easily build, train, and deploy machine learning models at any scale.

SageMaker

Which types of monitoring can be provided by Amazon CloudWatch? (Select TWO)

App Performance, Resource utilization

A company is looking for ways to make its desktop applications available to the employees from browsers on their devices/laptops. Which AWS service will help achieve this requirement without having to procure servers or maintain infrastructure?

AppStream 2.0

A company would like to reserve EC2 compute capacity for three years to reduce costs. The company also plans to increase their workloads during this period. As a Cloud Practitioner, which EC2 Reserved Instance type would you recommend?

Convertible RIs

Provisioned IOPS SSD supports up to _____ IOPS per GiB with up to ______ IOPS per volume

50, 32,000

This shows the service permissions granted to a user and when those services were last accessed.

Access Advisor

Which of the following IAM Security Tools allows you to review permissions granted to a user?

Access Advisor

A company is looking at a service/tool to automate and minimize the time spent on keeping the server images up-to-date. These server images are used by EC2 instances as well as the on-premises systems. Which AWS service will help achieve the company's need?

Amazon EC2 AMI

Which of the following is best-suited for load-balancing HTTP and HTTPS traffic?

App Load Balancer

It's a fully managed, multi-Region, multi-master, durable database with built-in security, backup and restore, and in-memory caching for internet-scale applications.

DynamoDB

This is a key-value and document database that delivers single-digit millisecond performance at any scale.

DynamoDB

Amazon S3 supports two types of replication

CRR,SRR

Amazon _____________ is a natural language processing (NLP) service that uses machine learning to find meaning and insights in text.

Comprehend

this db supports unstructured data?

DynamoDB

A production company would like to establish an AWS managed VPN service between its on-premises network and AWS. Which item needs to be set up on the company's side?

Customer gateway

Which AWS service can be used to view the most comprehensive billing details for the past month?

Cost & Usage Reports

A start-up would like to monitor its cost on the AWS Cloud and would like to choose an optimal Savings Plan. As a Cloud Practitioner, which AWS service would you use?

Cost Explorer

This lets you explore your AWS costs and usage at both a high level and at a detailed level of analysis, and empowering you to dive deeper using several filtering dimensions

Cost Explorer

____________ pillar focuses on avoiding un-needed costs.

Cost Optimization

What should you do in order to keep the data on EBS volumes safe? (Choose TWO)

Create EBS Snapshots, Ensure that EBS data is encrypted at rest

What is the availability model of Amazon DynamoDB?

Data is synchronously replicated across 3 facilities in a region

AWS ___________ is the fastest and simplest way to get web applications up and running on AWS

Elastic Beanstalk

Developers simply upload their application code and ____________ automatically handles all the details such as resource provisioning, load balancing, auto-scaling, and monitoring.

Elastic Beanstalk

Which AWS service is designed to be used for operational analytics?

Elasticsearch

ETL

Extract Transform Load

Which feature can you use to grant read/write access to an Amazon S3 bucket?

IAM Policy

Which of the following options are the benefits of using AWS ELB?

High availability, Fault tolerance

What advantages does deploying Amazon CloudFront provide? (Select TWO.)

Improved performance & Reduced Latency

This is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

Inspector

Which of the following entities are part of a VPC in the AWS Cloud? (Select two)

Internet Gateway, Subnet

Which AWS service allows you to connect any number of IoT devices to the cloud without requiring you to provision or manage servers?

IoT Core

With public cloud the consumer organization typically incurs _____ as they do not own the infrastructure and just pay usage costs

OPEX costs

The ___________ pillar includes the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures.

Operational Excellence

This is a configuration management service that provides managed instances of Chef and Puppet.

OpsWorks

Which of the following billing timeframes is applied when running a Windows EC2 on-demand instance?

Pay per Second

You can use Amazon _____ to turn text into lifelike speech thereby allowing you to create applications that talk.

Polly

How do AWS charge for the use of NAT Gateways? (Select TWO.)

Price per GB processed & Price per gateway hour

Which of the following criteria are used to charge for EBS volumes? (Select TWO)

Provisioned IOPS, Volume Type

QLDB

Quantum Ledger Database

Amazon ______________ , you can identify objects, people, text, scenes, and activities in images and videos, as well as to detect any inappropriate content.

Rekognition

_______ pillar refers to the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as misconfigurations or transient network issues.

Reliability

This helps you protect secrets needed to access your applications, services, and IT resources.

Secrets Manager

What are the fundamental charges for an Amazon EC2 instance?

Server uptime & Data storage

______________ is a hybrid cloud storage service that gives you on-premises access to virtually unlimited cloud storage

Storage Gateway

A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?

Systems Manager

Which AWS service can be used to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PC?

Transcoder

What is the AWS service that provides a virtual network dedicated to your AWS account?

VPC

Which AWS entity enables you to privately connect your VPC to an Amazon SQS queue?

VPC Interface Endpoint

_______________ connection is a networking connection between two VPCs that enables you to route traffic between them privately.

VPC peering

Which AWS service can inspect CloudFront distributions running on any HTTP web-server?

WAF

AWS _________ is an AWS Infrastructure offering optimized for mobile edge computing applications.

Wavelength

This helps developers analyze and debug production, distributed applications, such as those built using a microservices architecture.

X-Ray

With the private cloud the consumer organization typically owns and manages the _________

infrastructure