AWS Certified Cloud Practitioner Test

What are the default security credentials that are required to access the AWS management console for an IAM user account? ​ a) Security tokens b) A user name and password c) Access keys d) MFA

b) A user name and password

What is the AWS service that enables AWS architects to manage infrastructure as code? ​ a) AWS Config b) AWS CloudFormation c) Amazon EMR d) Amazon SES

b) AWS CloudFormation

AWS allows users to manage their resources using a web based user interface. What is the name of this interface? ​ a) AWS CLI b) AWS Management Console c) AWS SDK d) AWS API

b) AWS Management Console

Which of the following AWS offerings is a MySQL-compatible relational database that can scale capacity automatically based on demand? ​ a) RDS Microsoft SQL Server​ b) Amazon Aurora ​c) RDS PostgreSQL ​d) Amazon Neptune

b) Amazon Aurora

Which of the following are examples of AWS-Managed Services, where AWS is responsible for the operational and maintenance burdens of running the service? (Choose TWO) ​ a) Amazon VPC b) Amazon Elastic MapReduce ​c) Amazon DynamoDB d) AWS IAM ​e) Amazon Elastic Compute Cloud

b) Amazon Elastic MapReduce c) Amazon DynamoDB

Which service provides object-level storage in AWS? a) Amazon EBS b) Amazon S3 c) Amazon EFS d) Amazon Instance Store

b) Amazon S3

Which of the below is a best-practice when designing solutions on AWS? ​ a) Use AWS reservations to reduce costs when testing your production environment b) Automate wherever possible to make architectural experimentation easier c) Provision a large compute capacity to handle any spikes in load d) Invest heavily in architecting your environment, as it is not easy to change your design later

b) Automate wherever possible to make architectural experimentation easier

A Japanese company hosts all of their applications on Amazon EC2 instances in the Tokyo Region. The company has opened new branches in the United States, and the US users are complaining of high latency. What can the company do to reduce latency for the users in the US while reducing costs? ​ a) Building a new data center in the US and implementing a hybrid model b) Deploying new Amazon EC2 instances in a Region located in the US c) Applying the Amazon Connect latency-based routing policy d) Registering a new US domain name to serve the users in the US

b) Deploying new Amazon EC2 instances in a Region located in the US

A company is building an online cloud storage platform. They need a storage service that can scale capacity automatically, while minimizing cost. Which AWS storage service should the company use to meet these requirements? ​ a) Amazon Simple Storage Service b) Amazon Elastic Block Store c) Amazon Elastic Container Service d) AWS Storage Gateway

a) Amazon Simple Storage Service

What is the AWS service that provides a virtual network dedicated to your AWS account? ​ a) Amazon VPC b) AWS Dedicated Hosts ​c) AWS Subnets ​d) AWS VPN

a) Amazon VPC

Which of the following compute resources are serverless? (Choose TWO) ​ a) Amazon EC2 b) Amazon ECS ​c) AWS Lambda d) Amazon EMR ​e) AWS Fargate

c) AWS Lambda e) AWS Fargate

Which of the following AWS services scale automatically without your intervention? (Choose two) ​ a) Amazon EC2 ​b) Amazon EBS ​c) AWS Lambda d) Amazon EMR ​e) Amazon S3

c) AWS Lambda e) Amazon S3

You need to migrate a large number of on-premises workloads to AWS. Which AWS service is the most appropriate? ​ a) AWS File Transfer Acceleration ​b) AWS Database Migration Service c) AWS Server Migration Service d) AWS Application Discovery Service

c) AWS Server Migration Service

Which AWS Service provides the current status of all AWS Services in all AWS Regions? ​ a) AWS Management Console ​b) Amazon CloudWatch ​c) AWS Service Health Dashboard d) AWS Personal Health Dashboard

c) AWS Service Health Dashboard

What AWS tools can be used to call AWS Services from different programming languages? ​ a) AWS CodeDeploy ​b) AWS Command Line Interface ​c) AWS Software Development Kit d) AWS Management Console

c) AWS Software Development Kit

​ What is the AWS Support feature that allows customers to manage support cases programmatically? ​ a) AWS Operations Support ​b) AWS Personal Health Dashboard ​c) AWS Support API d) AWS Trusted Advisor

c) AWS Support API

A company is developing a new application using a microservices framework. The new application is having performance and latency issues. Which AWS Service should be used to troubleshoot these issues? ​ a) AWS CloudTrail b) AWS CodePipeline c) AWS X-Ray d) Amazon Inspector

c) AWS X-Ray

A company is planning to migrate a database with high read/write activity to AWS. What is the best storage option to use? ​ a) Amazon S3 b) Amazon Glacier ​c) Amazon EBS d) AWS Storage Gateway

c) Amazon EBS

Which of the following is NOT a characteristic of Amazon Elastic Compute Cloud (Amazon EC2)? ​ a) Amazon EC2 can launch as many or as few virtual servers as needed ​b) Amazon EC2 eliminates the need to invest in hardware upfront ​c) Amazon EC2 is considered a Serverless Web Service d) Amazon EC2 offers scalable computing

c) Amazon EC2 is considered a Serverless Web Service

What is the AWS data warehouse service that supports a high level of query performance on large amounts of datasets? ​ a) Amazon DynamoDB ​b) Amazon Kinesis ​c) Amazon Redshift d) Amazon RDS

c) Amazon Redshift

​One of the major advantages of using AWS is cost savings. Which of the below options is an example of the cost savings offered by AWS? ​ a) Per-second instance billing b) Low instance start-up fees c) Low monthly instance maintenance costs ​d) Low-cost instance tagging

a) Per-second instance billing

Which AWS service uses Edge Locations to cache content? ​ a) Amazon CloudFront b) Amazon Glacier c) AWS Direct Connect d) AWS KMS

​ a) Amazon CloudFront

Which of the following are use cases for Amazon S3? (Choose two) ​ a) Processing data streams at any scale b) A media store for the CloudFront service c) Hosting websites that require sustained high CPU utilization d) Hosting static websites e) Cost-effective database and log storage

b) A media store for the CloudFront service d) Hosting static websites

A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company? ​ a) APN Technology Partners b) APN Consulting Partners c) AWS Professional Services d) AWS TAM

b) APN Consulting Partners

A company needs to migrate their website from on-premises to AWS. Security is a major concern for them, so they need to host their website on hardware that is NOT shared with other AWS customers. Which of the following EC2 instance options meets this requirement? ​ a) On-demand instances ​b) Reserved instances ​c) Dedicated instances d) Spot instances

c) Dedicated instances

Which AWS service enables you to quickly purchase and deploy SSL/TLS certificates? ​ a) Amazon Guard​Duty ​b) AWS WAF c) AWS Budgets ​d) AWS ACM

d) AWS ACM

Which AWS service provides cost-optimization recommendations? ​ a) AWS X-Ray ​b) AWS TCO ​c) Amazon QuickSight ​d) AWS Trusted Advisor

d) AWS Trusted Advisor

Which of the following is equivalent to a user name and password and is used to authenticate your programmatic access to AWS services and APIs? ​ a) Key pairs b) Instance Password c) MFA d) Access Keys

d) Access Keys

Which AWS Service offers volume discounts based on usage? ​ a) Amazon Lightsail ​b) AWS Cost Explorer ​c) Amazon VPC ​d) Amazon S3

d) Amazon S3

Which service provides DNS in the AWS cloud? ​ a) AWS Config b) Amazon CloudFront c) Amazon EMR d) Route 53

d) Route 53

Which support plan includes AWS Support Concierge Service? ​ a) Enterprise Support b) Premium Support ​c) Business Support ​d) Standard Support

a) Enterprise Support

Who from the following will get the largest discount? ​ a) A user who chooses to buy Reserved, Standard, All upfront instances b) A user who chooses to buy Reserved, Standard, No upfront instances ​c) A user who chooses to buy On-demand, Convertible, Partial upfront instances ​d) A user who chooses to buy Reserved, Convertible, All upfront instances

a) A user who chooses to buy Reserved, Standard, All upfront instances

A developer needs to set up an SSL security certificate for a client's eCommerce website in order to use the HTTPS protocol. Which of the following AWS services can be used to deploy the required SSL server certificates? (Choose TWO) ​ a) AWS ACM b) AWS Data Pipeline c) AWS Directory Service ​d) AWS Identity & Access Management e) Amazon Route 53

a) AWS ACM d) AWS Identity & Access Management

A company is concerned that they are spending money on underutilized compute resources in AWS. Which AWS feature will help ensure that their applications are automatically adding/removing EC2 compute capacity to closely match the required demand? ​ a) AWS Auto Scaling b) AWS Cost Explorer c) AWS Budgets d) AWS Elastic Load Balancer

a) AWS Auto Scaling

What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment? (Choose TWO) ​ a) AWS Config b) ​AWS Transit Gateway c) ​Amazon Comprehend d) ​AWS X-Ray ​e) AWS CloudTrail

a) AWS Config e) AWS CloudTrail

Which of the following services provide real-time auditing for compliance and vulnerabilities? (Choose TWO) ​ a) AWS Config b) Amazon MQ ​c) Amazon Cognito d) Amazon Redshift ​e) AWS Trusted Advisor

a) AWS Config e) AWS Trusted Advisor

Which of the following helps a customer view the Amazon EC2 billing activity for the past month? ​ a) AWS Cost & Usage Reports b) AWS Budgets c) AWS TCO d) AWS Systems Manager

a) AWS Cost & Usage Reports

Which of the below options is true of Amazon VPC? ​ a) AWS Customers have complete control over their Amazon VPC virtual networking environment​ b) Amazon VPC helps customers to review their AWS architecture and adopt best practices ​c) AWS is responsible for all the management and configuration details of Amazon VPC ​d) Amazon VPC allows customers to control user interactions with all other AWS resources

a) AWS Customers have complete control over their Amazon VPC virtual networking environment

Which of the following AWS services would help you migrate on-premise databases to AWS? ​ a) AWS DMS b) AWS Directory Service ​c) Amazon S3 Transfer Acceleration ​d) AWS Transit Gateway

a) AWS DMS

​Your company requires a response time of less than 15 minutes from support interactions about their business-critical systems that are hosted on AWS if those systems go down. Which AWS Support Plan should this company use? ​ a) AWS Enterprise Support b) AWS Business Support ​c) AWS Basic Support ​d) AWS Developer Support

a) AWS Enterprise Support

A company has infrastructure hosted in an on-premises data center. They currently have an operations team that takes care of identity management. If they decide to migrate to the AWS cloud, which of the following services would help them perform the same role in AWS? ​ a) AWS IAM b) ​AWS Federation ​c) AWS X-Ray ​d) Amazon Redshift

a) AWS IAM

Which AWS Service is used to manage user permissions? ​ a) AWS IAM b) AWS Support c) Amazon ECS d) Security Groups

a) AWS IAM

Which services does AWS offer for free? (Choose TWO) ​ a) AWS IAM b) Amazon EC2 ​c) Elastic Load Balancing d) Amazon RDS ​e) Elastic Beanstalk

a) AWS IAM e) Elastic Beanstalk

An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products? ​ a) AWS Identity and Access Management b) ​Amazon RDS c) ​Amazon EMR ​d) Network Access Control Lists

a) AWS Identity and Access Management

Which of the following can be used to enable the Virtual Multi-Factor Authentication? (Choose TWO) ​ a) AWS Identity and Access Management (IAM) b) Amazon Virtual Private Cloud ​c) Amazon Connect ​d) Amazon SNS ​e) AWS CLI

a) AWS Identity and Access Management (IAM) e) AWS CLI

Which AWS Service is used to manage the keys used to encrypt customer data? ​ a) AWS KMS b) AWS Config c) Multi-Factor Authentication (MFA) ​d) Amazon Macie

a) AWS KMS

Which of the following would you use to manage your encryption keys in the AWS Cloud? (Choose TWO) ​ a) AWS KMS b) AWS CodeCommit ​c) CloudHSM​ d) AWS Certificate Manager ​e) AWS CodeDeploy

a) AWS KMS c) CloudHSM

Which of the following AWS services can be used as a compute resource? (Choose two) ​ a) AWS Lambda b) Amazon VPC c) Amazon S3 d) Amazon EC2 e) Amazon CloudWatch

a) AWS Lambda d) Amazon EC2

​ Which of the following AWS offerings are serverless services? (Choose TWO) ​ a) AWS Lambda b) Amazon RDS ​c) Amazon EMR ​d) Amazon EC2 ​e) Amazon DynamoDB

a) AWS Lambda e) Amazon DynamoDB

What is the AWS feature that provides an additional level of security above the default authentication mechanism of usernames and passwords? a) AWS MFA b) Email verification c) Encrypted keys d) AWS KMS

a) AWS MFA

​ Which AWS Service provides integration with Chef to automate the configuration of EC2 instances? ​ a) AWS OpsWorks b) AWS Config c) AutoScaling ​d) AWS CloudFormation

a) AWS OpsWorks

What is the AWS service that enables you to manage all of your AWS accounts from a single master account? ​ a) AWS Organizations b) ​AWS Trusted Advisor c) ​Amazon Config ​d) AWS WAF

a) AWS Organizations

As part of the AWS Migration Acceleration Program (MAP), what does AWS provide to accelerate Enterprise adoption of AWS? (Choose TWO) ​ a) AWS Partners b) AWS Artifact ​c) AWS Professional Services d) Amazon PinPoint ​e) Amazon Athena

a) AWS Partners c) AWS Professional Services

Which AWS Group assists customers in achieving their desired business outcomes? ​ a) AWS Professional Services b) AWS Concierge Support Team ​c) AWS Trusted Advisor ​d) AWS Security Team

a) AWS Professional Services

Hundreds of thousands of DDoS attacks are recorded every month worldwide. What service does AWS provide to help protect AWS Customers from these attacks? (Choose TWO) ​ a) AWS Shield ​b) AWS KMS ​c) AWS WAF ​d) AWS Config e) Amazon Cognito

a) AWS Shield ​c) AWS WAF

A company has hundreds of VPCs in multiple AWS Regions worldwide. What service does AWS offer to simplify the connection management among the VPCs? ​ a) AWS Transit Gateway b) Security Groups ​c) Amazon Connect ​d) VPC Peering

a) AWS Transit Gateway

A company has moved to AWS recently. Which of the following AWS Services will help ensure that they have the proper security settings? (Choose TWO) ​ a) AWS Trusted Advisor b) Concierge Support Team c) Amazon Inspector d) Amazon SNS e) Amazon CloudWatch

a) AWS Trusted Advisor c) Amazon Inspector

There is a requirement to grant a DevOps team full administrative access to all resources in an AWS account. Who can grant them these permissions? ​ a) AWS account owner b) AWS cloud support engineers c) AWS security team d) AWS technical account manager

a) AWS account owner

Which of the following statements describes the AWS Cloud's agility? ​ a) AWS allows you to provision resources in minutes b) AWS provides customizable hardware at the lowest possible cost ​c) AWS allows you to host your applications in multiple regions around the world d) AWS allows you to pay upfront to reduce costs

a) AWS allows you to provision resources in minutes

The TCO gap between AWS infrastructure and traditional infrastructure has widened over the recent years. Which of the following could be the reason for that? ​ a) AWS continues to lower the cost of cloud computing for its customers ​b) AWS helps customers invest more in capital expenditures ​c) AWS automates all infrastructure operations, so customers save more on human resources costs ​d) AWS secures AWS resources at no additional charge

a) AWS continues to lower the cost of cloud computing for its customers

Data security is one of the top priorities of AWS. How does AWS deal with old storage devices that have reached the end of their useful life? ​ a) AWS destroys the old devices in accordance with industry-standard practices b) AWS sends the old devices for remanufacturing ​c) AWS sells the old devices to other hosting providers ​d) AWS stores the old devices in a secure place

a) AWS destroys the old devices in accordance with industry-standard practices

Which statement best describes AWS? ​ a) AWS is a cloud services provider b) AWS is a networking services provider c) AWS is a hosting services provider d) AWS is a security services provider

a) AWS is a cloud services provider

​ Which features are included in the AWS Business Support Plan? (Choose TWO) ​ a) Access to the Infrastructure Event Management (IEM) feature for additional fee b) 24x7 access to customer service c) Access to Cloud Support Engineers via email only during business hours ​d) Partial access to the core Trusted Advisor checks ​e) 24x7 access to the TAM feature

a) Access to the Infrastructure Event Management (IEM) feature for additional fee b) 24x7 access to customer service

Where can you store files in AWS? (Choose two) ​ a) Amazon EBS b) Amazon ECS c) Amazon SNS d) Amazon EMR e) Amazon EFS

a) Amazon EBS e) Amazon EFS

Both AWS and traditional IT distributors provide a wide range of virtual servers to meet their customers' requirements. What is the name of these virtual servers in AWS? ​ a) Amazon EC2 Instances b) Amazon VPC c) Amazon EBS Snapshots ​d) AWS Managed Servers

a) Amazon EC2 Instances

A company has a large amount of data to be archived. What is the most cost-effective AWS storage service to use? ​ a) Amazon Glacier b) Amazon EBS ​c) Amazon S3 Standard ​d) Amazon EFS

a) Amazon Glacier

Which of the following AWS services can help you perform security analysis and regulatory compliance auditing? (Choose two) ​ a) Amazon Inspector b) Amazon ECS ​c) AWS Virtual Private Gateway d) AWS Config ​e) AWS Batch

a) Amazon Inspector d) AWS Config

Select the services that are server-based: (Choose TWO) ​ a) Amazon RDS b) AWS Fargate ​c) Amazon EMR​ d) AWS Lambda ​e) Amazon DynamoDB

a) Amazon RDS ​c) Amazon EMR

A company is developing an application that will leverage facial recognition to automate photo tagging. Which AWS Service should the company use for facial recognition? ​ a) Amazon Rekognition b) Amazon Polly ​c) AWS IAM ​d) Amazon Kinesis

a) Amazon Rekognition

Which of the following is true regarding the AWS availability zones and edge locations? ​ a) An AWS Availability Zone is an isolated location within an AWS Region, however edge locations are located in multiple cities worldwide b) An Availability Zone is a geographic location where AWS provides multiple, physically separated and isolated edge locations ​c) An availability zone exists within an edge location to distribute content globally with low latency ​d) Edge locations are located in separate Availability Zones worldwide to serve global customers

a) An AWS Availability Zone is an isolated location within an AWS Region, however edge locations are located in multiple cities worldwide

What are the advantages of using Auto Scaling Groups for EC2 instances? ​ a) Auto Scaling Groups scales EC2 instances in multiple Availability Zones to increase application availability and fault tolerance b) Auto Scaling Groups caches the most recent responses at global edge locations to reduce latency and improve performance c) Auto Scaling Groups scales EC2 instances across multiple regions to reduce latency for global users d) Auto Scaling Groups distributes application traffic across multiple Availability Zones to enhance performance

a) Auto Scaling Groups scales EC2 instances in multiple Availability Zones to increase application availability and fault tolerance

How do ELBs improve the reliability of your application? ​ a) By ensuring that only healthy targets receive traffic b) By distributing traffic across multiple S3 buckets ​c) By replicating data to multiple availability zones ​d) By creating database Read Replicas

a) By ensuring that only healthy targets receive traffic

Which of the following should be taken into account when performing a TCO analysis regarding the costs of running an application on AWS VS on-premises? (Choose TWO) ​ a) Cooling and power consumption ​b) Labor and IT costs ​c) Software architecture ​d) Software compatibility ​e) Amazon EBS computing power

a) Cooling and power consumption ​b) Labor and IT costs

Which of the following factors should be considered when determining the region in which AWS Resources will be deployed? (Choose TWO) ​ a) Cost b) ​Geographic proximity to the company's location c) The AWS Region's security level ​d) Data sovereignty e) The planned number of VPCs

a) Cost d) Data sovereignty

Why would an organization decide to use AWS over an on-premises data center? (Choose two) ​ a) Cost Savings b) Elastic resources c) On-site visits for auditing d) Free commercial software licenses e) Free technical support

a) Cost Savings b) Elastic resources

When running a workload in AWS, the customer is NOT responsible for: (Select two) ​ a) Data center operations b) Running penetration tests ​c) Reserving capacity ​d) Infrastructure security e) Auditing and regulatory compliance

a) Data center operations d) Infrastructure security

What does AWS offer to protect your data? (Choose TWO) ​ a) Data encryption b) Physical MFA devices ​c) Load balancing ​d) Access control ​e) Unlimited storage

a) Data encryption ​d) Access control

How are AWS customers billed for Linux-based Amazon EC2 usage? ​ a) EC2 instances will be billed on one second increments, with a minimum of one minute b) EC2 instances will be billed on one minute increments, with a minimum of one hour ​c) EC2 instances will be billed on one hour increments, with a minimum of one day d) EC2 instances will be billed on one day increments, with a minimum of one month

a) EC2 instances will be billed on one second increments, with a minimum of one minute

Which of the following are advantages of using AWS as a cloud computing provider? (Choose TWO) ​ a) Enables customers to trade their capital expenses for operational expenses ​b) Eliminates the need to monitor servers and applications ​c) Manages all the compliance and auditing tasks ​d) Provides custom hardware to meet any specification ​e) Eliminates the need to guess on infrastructure capacity needs

a) Enables customers to trade their capital expenses for operational expenses ​e) Eliminates the need to guess on infrastructure capacity needs

Which of the following activities may help reduce your AWS monthly costs? ​ a) Enabling Amazon EC2 Auto Scaling for all of your workloads ​b) Deploying your AWS resources across multiple Availability Zones c) Removing all of your Cost Allocation Tags d) Using the AWS Network Load Balancer (NLB) to load balance the incoming HTTP requests

a) Enabling Amazon EC2 Auto Scaling for all of your workloads

What is the name of the DynamoDB replication capability that provides fast read \ write performance for globally deployed applications? ​ a) Global Tables b) AWS Global Accelerator ​c) DynamoDB DAX d) ​DynamoDB Point-In-Time Recovery

a) Global Tables

Your application has recently experienced significant global growth, and international users are complaining of high latency. What is the AWS characteristic that can help improve your international users' experience? ​ a) Global reach b) Data durability c) High availability d) Elasticity

a) Global reach

Which of the following is a benefit of running an application in multiple Availability Zones? ​ a) Increases the availability of your application​ b) Allows you to exceed AWS service limits ​c) Increases available compute capacity ​d) Reduces application response time between servers and global users

a) Increases the availability of your application

Which of the following are true regarding the languages that are supported on AWS Lambda? (Choose TWO) ​ a) Lambda natively supports a number of programming languages such as ​Node.js, Python, and Java ​b) Lambda doesn't support programming languages; it is a serverless compute service ​c) Lambda is AWS' proprietary programming language for microservices ​d) Lambda can support any programming language using an API e) Lambda only supports Python and Node.js, but third party plugins are available to convert code in other languages to these formats

a) Lambda natively supports a number of programming languages such as ​Node.js, Python, and Java d) Lambda can support any programming language using an API

What is the AWS IAM feature that provides an additional layer of security on top of user-name and password authentication? ​ a) MFA​ b) SDK c) Key Pair d) Access Keys

a) MFA​

Why does every AWS Region contain multiple Availability Zones? ​ a) Multiple Availability Zones allows you to build resilient and highly available architectures b) Multiple Availability Zones within a region increases the storage capacity available in that region c) Multiple Availability Zones allows for data replication and global reach d) Multiple Availability Zones results in lower total cost compared to deploying in a single Availability Zone

a) Multiple Availability Zones allows you to build resilient and highly available architectures

For managed services like Amazon DynamoDB, which of the below is AWS responsible for? (Choose two) ​ a) Patching the database software b) Creating access policies ​c) Protecting Credentials ​d) Operating system maintenance e) Logging access activity

a) Patching the database software d) Operating system maintenance

According to the AWS Shared responsibility model, which of the following are the responsibility of the customer? (Choose two) ​ a) Protecting the confidentiality of data in transit in Amazon S3 ​b) Patching applications installed on Amazon EC2 c) Managing environmental events of AWS data centers d) Controlling physical access to AWS Regions e) Ensuring that the underlying EC2 host is configured properly

a) Protecting the confidentiality of data in transit in Amazon S3 b) Patching applications installed on Amazon EC2

What is one benefit and one drawback of buying a reserved EC2 instance? (Select TWO) ​ a) Reserved instances require at least a one-year pricing commitment b) There is no additional charge for using dedicated instances ​c) Reserved instances are best suited for periodic workloads ​d) Reserved instances provide a significant discount compared to on-demand instances ​e) Instances can be shut down by AWS at any time with no notification

a) Reserved instances require at least a one-year pricing commitment d) Reserved instances provide a significant discount compared to on-demand instances

Which of the following describes the payment model that AWS makes available for customers that can commit to using Amazon EC2 over a one or 3-year term to reduce their total computing costs? ​ a) Save when you reserve b) Pay less as AWS grows c) Pay as you go ​d) Pay less by using more

a) Save when you reserve

Which of the following will affect how much you are charged for storing objects in S3? (Choose TWO) ​ a) The storage class used for the objects stored​ b) Creating and deleting S3 buckets ​c) The total size in gigabytes of all objects stored d) Using default encryption for any number of S3 buckets ​e) The number of EBS volumes attached to your instances

a) The storage class used for the objects stored ​c) The total size in gigabytes of all objects stored

How does AWS notify customers about security and privacy events pertaining to AWS services? ​ a) Using Security Bulletins b) ​Using the AWS ACM service c) Using the AWS Management Console ​d) Using Compliance Resources

a) Using Security Bulletins

Which of the following strategies help analyze costs in AWS? ​ a) Using tags to group resources​ b) Using AWS CloudFormation to automate the deployment of resources ​c) Configuring Amazon inspector to automatically analyze costs and email reports d) Deploying resources of the same type in different regions

a) Using tags to group resources

Which of the below options are use cases of the Amazon Route 53 service? (Choose TWO) ​ a) ​DNS configuration and management ​b) Domain Registration ​c) Point-to-point connectivity between an on-premises data center and AWS ​d) Provides infrastructure security optimization recommendations ​e) Detects configuration changes in the AWS environment

a) ​DNS configuration and management ​b) Domain Registration

Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)? (Choose TWO) ​ a) AWS CodeCommit ​b) AWS CLI c) AWS SDKs ​d) AWS Network Access Control Lists ​e) AWS Security Groups

b) AWS CLI c) AWS SDKs

An organization uses a hybrid cloud architecture to run their business. Which AWS service enables them to deploy their applications to any AWS or on-premises server? ​ a) Amazon QuickSight ​b) AWS CodeDeploy c) Amazon Athena ​d) Amazon Kinesis

b) AWS CodeDeploy

What is the AWS tool that can help a company visualize their AWS spending in the last few months? ​ a) AWS Consolidated Billing ​b) AWS Cost Explorer c) AWS Simple Monthly Calculator d) AWS Budgets

b) AWS Cost Explorer

App development companies move their business to AWS to reduce time-to-market and improve customer satisfaction, what are the AWS automation tools that help them deploy their applications faster? (Choose two) ​ a) AWS IAM ​b) AWS Elastic Beanstalk c) Amazon Macie ​d) AWS Cloud​Formation e) AWS Migration Hub

b) AWS Elastic Beanstalk d) AWS Cloud​Formation

A global company with a large number of AWS accounts is seeking a way in which they can centrally manage billing and security policies across all accounts. Which AWS Service will assist them in meeting these goals? ​ a) AWS Trusted Advisor b) AWS Organizations c) AWS Config ​d) IAM Groups

b) AWS Organizations

You manage a blog on AWS that has different environments: development, testing, and production. What can you use to create a custom console for each environment to view and manage your resources easily? ​ a) AWS Placement Groups b) AWS Resource Groups c) AWS Management Console ​d) AWS Tag Editor

b) AWS Resource Groups

Which of the following services can help protect your web applications from SQL injection and other vulnerabilities in your application code? ​ a) Amazon Cognito b) AWS WAF c) AWS IAM d) Amazon Aurora

b) AWS WAF

Which of the following are examples of AWS-managed databases? (Choose TWO) ​ a) Microsoft SQL Server on Amazon EC2 ​b) Amazon DocumentDB c) Amazon CloudSearch ​d) Amazon RDS for MySQL e) MySQL on Amazon EC2

b) Amazon DocumentDB d) Amazon RDS for MySQL

Which AWS Service can be used to register a new domain name? ​ a) Amazon ECR ​b) Amazon Route 53 c) AWS KMS d) ​AWS Config

b) Amazon Route 53

A hospital needs to store medical records for a minimum period of 10 years. The records being stored will only need to be recalled if there is a legal or audit need, which is expected to be extremely infrequent. Which AWS Service offers the most cost-effective method for storing the records? ​ a) Amazon S3 Intelligent-Tiering ​b) Amazon S3 Glacier c) Amazon Elastic Block Store ​d) Amazon S3 Standard

b) Amazon S3 Glacier

Which of the following are examples of the customer's responsibility to implement "security IN the cloud"? (Choose TWO) ​ a) Patch management of the underlying infrastructure b) Building a schema for an application c) Replacing physical hardware ​d) File system encryption e) Creating a new hypervisor

b) Building a schema for an application ​d) File system encryption

A company has discovered that multiple S3 buckets were deleted, but it is unclear who deleted the buckets. Which of the following can the company use to determine the identity that deleted the buckets? ​ a) SQS logs ​b) CloudTrail logs c) CloudWatch Logs ​d) SNS logs

b) CloudTrail logs

Which of the following enables you to monitor and collect log files from your Amazon EC2 instances? ​ a) AWS CloudTrail b) CloudWatch Logs c) AWS Storage Gateway d) Amazon Inspector

b) CloudWatch Logs

Which of the following are valid Amazon EC2 Reserved Instance types? (Choose TWO) ​ a) Bulk ​b) Convertible c) Spot d) Standard​ e) Expedited

b) Convertible d) Standard

Which of the following has the greatest impact on cost? (Choose TWO) ​ a) The number of IAM roles provisioned ​b) Data Transfer Out charges c) Compute charges​ d) ​The number of services used e) Data Transfer In charges

b) Data Transfer Out charges c) Compute charges

For Amazon RDS databases, what does AWS perform on your behalf? (Choose TWO) ​ a) Network traffic protection b) Database setup c) Management of the operating system d) Access management ​e) Management of firewall rules

b) Database setup c) Management of the operating system

In order to implement best practices when dealing with a "Single Point of Failure," you should attempt to build as much automation as possible in both detecting and reacting to failure. Which of the following AWS services would help? (Choose TWO) ​ a) Amazon Athena b) ELB ​c) Auto Scaling d) ECR e) Amazon EC2

b) ELB c) Auto Scaling

Which AWS Support Plan gives customers access to a "Well-Architected Review" for business critical workloads? ​ a) Business Support ​b) Enterprise Support c) Developer Support ​d) Basic Support

b) Enterprise Support

Under the Shared Responsibility Model, which of the following controls do customers fully inherit from AWS? (Choose two) ​ a) Database controls b) Environmental controls c) Physical controls d) Awareness & Training e) Patch management controls

b) Environmental controls c) Physical controls

What are the capabilities of AWS X-Ray? (Choose TWO) ​ a) Deploys applications to Amazon EC2 instances ​b) Helps improve application performance c) Facilitates tracking of user requests to identify application issues d) Deploys applications to on-premises servers ​e) Automatically decouples application components

b) Helps improve application performance c) Facilitates tracking of user requests to identify application issues

Which IAM entity can best be used to grant temporary access to your AWS resources? ​ a) Key Pair ​b) IAM Roles c) IAM Users ​d) IAM Groups

b) IAM Roles

Using Amazon EC2 falls under which of the following cloud computing models? ​ a) SaaS b) IaaS c) IaaS & SaaS d) PaaS

b) IaaS

Which of the following is NOT a factor when estimating the cost of Amazon CloudFront? ​ a) The number and type of requests (HTTP or HTTPS) made b) Inbound traffic​ c) The edge location through which your content is served ​d) Data Transfer Out

b) Inbound traffic

What are some key design principles for designing public cloud systems? (Choose TWO) ​ a) Servers instead of managed services ​b) Loose coupling over tight coupling c) Reserved capacity instead of on demand ​d) Multi-AZ deployments instead of multi-region deployments e) Disposable resources instead of fixed servers

b) Loose coupling over tight coupling e) Disposable resources instead of fixed servers

What should you do if you see resources, which you don't remember creating, in the AWS Management Console? (Choose TWO) ​ a) Check the AWS CloudTrail logs and delete all IAM users that have access to your resources ​b) Open an investigation and delete any potentially compromised IAM users c) Give your root account password to AWS Support so that they can assist in troubleshooting and securing the account ​d) Stop all running services and open an investigation e) Change your AWS root account password and the passwords of any IAM users

b) Open an investigation and delete any potentially compromised IAM users e) Change your AWS root account password and the passwords of any IAM users

Which of the following can be used to protect data at rest on Amazon S3? (Choose two) ​ a) Decryption ​b) Permissions c) Conversion ​d) Deduplication ​e) Versioning

b) Permissions e) Versioning

Which of the below are responsibilities of the customer when using Amazon EC2? (Choose TWO) ​ a) Patching of the underlying infrastructure ​b) Protecting sensitive data c) Installing and configuring third-party software d) Maintaining consistent hardware components ​e) Setup and operation of managed databases

b) Protecting sensitive data c) Installing and configuring third-party software

Which of the following Amazon RDS features facilitates offloading of database read activity? ​ a) Database Snapshots ​b) Read Replicas ​c) Automated Backups ​d) Multi-AZ Deployments

b) Read Replicas

A company is migrating a web application to AWS. The application's compute capacity is continually utilized throughout the year. Which of the below options offers the company the most cost-effective solution? ​ a) On-demand Instances ​b) Reserved Instances ​c) Spot Instances ​d) Dedicated Hosts

b) Reserved Instances

Which of the following S3 storage classes is most appropriate to host static assets for a popular e-commerce website with stable access patterns? ​ a) S3 Intelligent-Tiering ​b) S3 Standard c) S3 Glacier Deep Archive d) S3 Standard-IA

b) S3 Standard

Which of the following AWS security features is associated with an EC2 instance and functions to filter incoming traffic requests? ​ a) AWS X-Ray ​b) Security Groups c) AWS IAM ​d) NACL

b) Security Groups

Jessica is managing an e-commerce web application in AWS. The application is hosted on six EC2 instances. One day, three of the instances crashed; but none of her customers were affected. What has Jessica done correctly in this scenario? ​ a) She has properly built an encrypted system b) She has properly built a fault tolerant system c) She has properly built a scalable system d) She has properly built an elastic system

b) She has properly built a fault tolerant system

A customer is planning to move billions of images and videos to be stored on Amazon S3. The customer has approximately one Exabyte of data to move. Which of the following AWS Services is the best choice to transfer the data to AWS? ​ a) Snowball b) Snowmobile c) S3 Transfer Acceleration ​d) Amazon VPC

b) Snowmobile

What are the benefits of implementing a tagging strategy for AWS resources? (Choose two) ​ a) Quickly identify software solutions on AWS ​b) Track AWS spending across multiple resources c) Quickly identify deleted resources and their metadata ​d) Track API calls in your AWS account e) Quickly identify resources that belong to a specific project

b) Track AWS spending across multiple resources e) Quickly identify resources that belong to a specific project

Which of the following approaches will help you eliminate human error and automate the process of creating and updating your AWS environment? ​ a) Use Software test automation tools ​b) Use code to provision and operate your AWS infrastructure c) Migrate all of your applications to a dedicated host ​d) Use AWS CodeDeploy to build and automate your AWS environment

b) Use code to provision and operate your AWS infrastructure

​ Which design principles relate to performance efficiency in AWS? (Choose TWO) ​ a) Implement strong Identity and Access controls ​b) Use serverless architectures c) Build multi-region architectures to better serve global customers d) Apply security at all layers e)​ Enable audit logging

b) Use serverless architectures c) Build multi-region architectures to better serve global customers

Why are Serverless Architectures more economical than Server-based Architectures? ​ a) With Serverless Architectures you have the ability to scale automatically up or down as demand changes b) With the Server-based Architectures, compute resources continue to run all the time but with serverless architecture, compute resources are only used when code is being executed​ c) When you reserve serverless capacity, you will get large discounts compared to server reservation ​d) Serverless Architectures use new powerful computing devices

b) With the Server-based Architectures, compute resources continue to run all the time but with serverless architecture, compute resources are only used when code is being executed

Which statement is true in relation to the security of Amazon EC2? ​ a) You should deploy critical components of your application in the Availability Zone that you trust ​b) You should regularly patch the operating system and applications on your EC2 instances c) You can track all API calls using Amazon Athena ​d) You should use instance store volumes to store login data

b) You should regularly patch the operating system and applications on your EC2 instances

An AWS customer has used one Amazon Linux instance for 2 hours, 5 minutes and 9 seconds, and one Windows instance for 4 hours, 23 minutes and 7 seconds. How much time will the customer be billed for? ​ a) 3 hours for the Linux instance and 5 hours for the Windows instance b) 2 hours, 5 minutes and 9 seconds for the Linux instance and 4 hours, 23 minutes and 7 seconds for the Windows instance ​c) 2 hours, 5 minutes and 9 seconds for the Linux instance and 5 hours for the Windows instance d) 3 hours for the Linux instance and 4 hours, 23 minutes and 7 seconds for the Windows instance

c) 2 hours, 5 minutes and 9 seconds for the Linux instance and 5 hours for the Windows instance

Which of the following AWS Services helps with planning application migration to the AWS Cloud? ​ a) AWS Snowball Migration Service b) AWS Migration Hub ​c) AWS Application Discovery Service d) AWS DMS

c) AWS Application Discovery Service

A company needs to track resource changes using the API call history. Which AWS service can help the company achieve this goal? ​ a) AWS Config ​b) Amazon CloudWatch ​c) AWS CloudTrail d) AWS CloudFormation

c) AWS CloudTrail

An external auditor is requesting a log of all accesses to the AWS resources in the company's account. Which of the following services will provide the auditor with the requested information? ​ a) Amazon CloudWatch ​b) Amazon CloudFront ​c) AWS CloudTrail d) AWS CloudFormation

c) AWS CloudTrail

You have noticed that several critical Amazon EC2 instances have been terminated. Which of the following AWS services would help you determine who took this action? ​ a) AWS Trusted Advisor b) EC2 Instance Usage Report c) AWS CloudTrail d) Amazon Inspector

c) AWS CloudTrail

A media company has an application that requires the transfer of large data sets to and from AWS every day. This data is business critical and should be transferred over a consistent connection. Which AWS service should the company use? ​ a) AWS Snowmobile ​b) Amazon Comprehend ​c) AWS Direct Connect d) AWS VPN

c) AWS Direct Connect

Which AWS Service can be used to establish a dedicated, private network connection between AWS and your datacenter? ​ a) AWS Snowball ​b) Amazon Route 53 ​c) AWS Direct Connect d) Amazon CloudFront

c) AWS Direct Connect

What does Amazon CloudFront use to distribute content to global users with low latency? ​ a) AWS Regions b) AWS Global Accelerator c) AWS Edge Locations d) AWS Data Centers

c) AWS Edge Locations

A company is seeking to deploy an existing .NET application onto AWS as quickly as possible. Which AWS Service should the customer use to achieve this goal? ​ a) Amazon SNS ​b) AWS Trusted Advisor ​c) AWS Elastic Beanstalk d) AWS Systems Manager

c) AWS Elastic Beanstalk

Which service can you use to route traffic to the endpoint that provides the best application performance for your users worldwide? ​ a) AWS Data Pipeline b) AWS Transfer Acceleration ​c) AWS Global Accelerator d) AWS DAX Accelerator

c) AWS Global Accelerator

What is the AWS Compute service that executes code only when triggered by events? ​ a) Amazon CloudWatch ​b) AWS Transit Gateway ​c) AWS Lambda d) Amazon EC2

c) AWS Lambda

A company has an AWS Enterprise Support plan. They want quick and efficient guidance with their billing and account inquiries. Which of the following should the company use? ​ a) AWS Support API b) AWS Personal Health Dashboard ​c) AWS Support Concierge d) AWS Operations Support

c) AWS Support Concierge

TYMO Cloud Corp is looking forward to migrating their entire on-premises data center to AWS. What tool can they use to perform a cost-benefit analysis of moving to the AWS Cloud? ​ a) AWS Simple Monthly Calculator ​b) AWS Budgets ​c) AWS TCO Calculator d) AWS Cost Explorer

c) AWS TCO Calculator

Which tool can a non-AWS customer use to compare the cost of on-premises environment resources to AWS? ​ a) AWS Simple Monthly Calculator ​b) AWS Cost Explorer ​c) AWS TCO Calculator​ d) AWS Budgets

c) AWS TCO Calculator

Which of the following services can be used to monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront? ​ a) AWS Cloud9 ​b) AWS CloudTrail ​c) AWS WAF d) Amazon CloudWatch

c) AWS WAF

Your web application currently faces performance issues and suffers from long load times. Which of the following AWS services could help fix these issues and improve performance? ​ a) AWS Shield ​b) Amazon Aurora ​c) AWS X-Ray d) AWS OpsWorks

c) AWS X-Ray

The owner of an E-Commerce application notices that the compute capacity requirements vary heavily from time to time. What makes AWS more economical than traditional data centers for this type of application? ​ a) AWS allows customers to choose cheaper types of EC2 instances that best fit their needs ​b) AWS allows customers to launch powerful EC2 instances to handle spikes in load ​c) AWS allows customers to launch and terminate EC2 instances based on demand d) AWS allows customers to pay upfront to get bigger discounts

c) AWS allows customers to launch and terminate EC2 instances based on demand

What is the AWS service that provides five times the performance of a standard MySQL database? ​ a) Amazon Redshift b) Amazon DynamoDB c) Amazon Aurora d) Amazon SimpleDB

c) Amazon Aurora

Which of the below options is true of Amazon Cloud Directory? ​ a) Amazon Cloud Directory allows for registration and management of domain names ​b) Amazon Cloud Directory enables the analysis of video and data streams in real time ​c) Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions d) Amazon Cloud Directory allows users to access AWS with their existing Active Directory credentials

c) Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions

A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS Service should the company use for this purpose? ​ a) Amazon Inspector b) Amazon GuardDuty ​c) Amazon Cognito d) Amazon EBS

c) Amazon Cognito

Which AWS Service offers a filesystem that can be mounted concurrently from multiple EC2 instances? ​ a) Amazon Elastic Block Store ​b) AWS Storage Gateway ​c) Amazon Elastic File System d) Amazon Simple Storage Service

c) Amazon Elastic File System

A customer is seeking to store objects in their AWS environment and to make those objects downloadable over the internet. Which AWS Service can be used to accomplish this? ​ a) Amazon EBS ​b) Amazon EFS ​c) Amazon S3 d) Amazon Instance Store

c) Amazon S3

To protect against data loss, you need to backup your database regularly. What is the most cost-effective storage option that provides immediate retrieval of your backups? ​ a) Amazon EBS b) Instance Store ​c) Amazon S3​ d) Amazon Glacier

c) Amazon S3

An organization has a legacy application designed using monolithic-based architecture. Which AWS Service can be used to decouple the components of the application? ​ a) Amazon CloudFront ​b) Virtual Private Gateway ​c) Amazon SQS d) AWS Artifact

c) Amazon SQS

Which AWS Service creates a virtual network in AWS? ​ a) AWS VPN b) AWS Direct Connect ​c) Amazon VPC d) Amazon VPS

c) Amazon VPC

Which statement best describes the concept of an AWS region? ​ a) An AWS Region is a virtual network dedicated only to a single AWS customer ​b) An AWS Region represents the country where the AWS infrastructure exist ​c) An AWS Region is a geographical location with a collection of Availability Zones d) An AWS Region is a geographical location with a collection of Edge locations

c) An AWS Region is a geographical location with a collection of Availability Zones

Your CTO has asked you to contact AWS support using the chat feature to ask for guidance related to EBS. However, when you open the AWS support center you can't see a way to contact support via Chat. What should you do? ​ a) ​Upgrade from the Basic Support plan to Developer Support b) The chat feature is available for all plans for an additional fee, but you have to request it first ​c) At a minimum, upgrade to Business support plan​ d) There is no chat feature in AWS support

c) At a minimum, upgrade to Business support plan

What are the benefits of using DynamoDB? (Choose TWO) ​ a) Provides resizable instances to match the current demand ​b) Supports the most popular NoSQL database engines such as CouchDB and MongoDB ​c) Automatically scales to meet required throughput capacity d) Supports both relational and non-relational data models e) Offers extremely low (single-digit millisecond) latency

c) Automatically scales to meet required throughput capacity e) Offers extremely low (single-digit millisecond) latency

A customer spent a lot of time configuring a newly deployed Amazon EC2 instance. After the workload increases, the customer decides to provision another EC2 instance with an identical configuration. How can the customer achieve this? ​ a) By creating an EBS Snapshot of the old instance b) By installing Aurora on EC2 and launching a new instance from it ​c) By creating an AMI from the old instance and launching a new instance from it d) By creating an AWS Config template from the old instance and launching a new instance from it

c) By creating an AMI from the old instance and launching a new instance from it

How can you view the distribution of AWS spending in one of your AWS accounts? ​ a) By using Amazon VPC console b) By contacting the AWS Support team c) By using AWS Cost Explorer d) By contacting the AWS Finance team

c) By using AWS Cost Explorer

Which of the following AWS services are free to use? (Choose two) ​ a) CloudWatch b) Amazon EC2 c) CloudFormation d) Route53 e) Auto-scaling

c) CloudFormation e) Auto-scaling

Which of the following services will help businesses ensure compliance in AWS? ​ a) CloudWatch ​b) CloudFront ​c) CloudTrail d) ​CloudEndure

c) CloudTrail

Under the shared responsibility model, Which of the following is the AWS' responsibility? ​ a) Filtering traffic with Security Groups b) Client-side encryption c) Configuring infrastructure devices d) Server-side encryption

c) Configuring infrastructure devices

What does AWS offer to secure your network? ​ a) Instance reservations ​b) Optimized instance types ​c) Customer-controlled encryption in transit d) AWS-controlled network access control lists

c) Customer-controlled encryption in transit

What are two advantages of using Cloud Computing over using traditional data centers? (Choose TWO) ​ a) Reserved Compute capacity b) Dedicated hosting c) Eliminating Single Points of Failure (SPOFs) d) Virtualized compute resources e) Distributed infrastructure

c) Eliminating Single Points of Failure (SPOFs) e) Distributed infrastructure

Which of the following can help secure your sensitive data in Amazon S3? (Choose TWO) ​ a) Delete all IAM users that have access to S3 ​b) With AWS you do not need to worry about encryption ​c) Encrypt the data prior to uploading it d) Delete the encryption keys once your data is encrypted ​e) Enable S3 Encryption

c) Encrypt the data prior to uploading it e) Enable S3 Encryption

Which of the following is a cloud computing deployment model that connects infrastructure and applications between cloud-based resources and existing resources not located in the cloud? ​ a) Cloud ​b) Mixed ​c) Hybrid d) On-premises

c) Hybrid

An organization has a large number of technical employees who operate their AWS Cloud infrastructure. What does AWS provide to help organize them into teams and then assign the appropriate permissions for each team? ​ a) IAM users b) IAM roles ​c) IAM Groups d) AWS Organizations

c) IAM Groups

Which of the following are types of AWS Identity and Access Management (IAM) identities? (Choose TWO) ​ a) AWS Resource Groups ​b) IAM Policies ​c) IAM Users d) AWS Organizations ​e) IAM Roles

c) IAM Users e) IAM Roles

What is the benefit of using an API to access AWS Services? ​ a) It reduces the time needed to provision AWS resources ​b) It reduces the number of developers necessary ​c) It allows for programmatic management of AWS resources d) It improves the performance of AWS resources

c) It allows for programmatic management of AWS resources

What are the benefits of using an AWS-managed service? (Choose two) ​ a) Eliminates the need to encrypt data ​b) Allows developers to control all patching related activities ​c) Lowers operational complexity d) Allows customers to deliver new solutions faster e) Provides complete control over the virtual infrastructure

c) Lowers operational complexity d) Allows customers to deliver new solutions faster

What is the most cost-effective purchasing option for running a set of EC2 instances that must always be available for a period of two months? ​ a) Reserved Instances - All Upfront b) Reserved Instances - No Upfront c) On-Demand Instances d) Spot Instances

c) On-Demand Instances

What are the benefits of using the Amazon Relational Database Service? (Choose two) ​ a) Supports the document and key-value data structure b) Complete control over the underlying host ​c) Resizable compute capacity d) Lower administrative burden e) Scales automatically to larger or smaller instance types

c) Resizable compute capacity d) Lower administrative burden

What is the AWS' recommendation regarding access keys? ​ a) Delete all access keys and use passwords instead ​b) Only share them with trusted people ​c) Rotate them regularly d) Save them within your application code

c) Rotate them regularly

AWS provides the ability to create backups of any block-level Amazon EC2 volume. What is the name of this backup? ​ a) Image b) Version ​c) Snapshot d) Copy

c) Snapshot

As part of the Enterprise support plan, who is the primary point of contact for ongoing support needs? ​ a) EFS b) IEM c) TAM d) IAM

c) TAM

You have just hired a skilled sys-admin to join your team. As usual, you have created a new IAM user for him to interact with AWS services. On his first day, you ask him to create snapshots of all existing Amazon EBS volumes and save them in a new Amazon S3 bucket. However, the new member reports back that he is unable to create neither EBS snapshots nor S3 buckets. What might prevent him from doing this simple task? ​ a) The systems administrator must contact AWS Support first to activate his new IAM account ​b) There is not enough space in S3 to store the snapshots ​c) There is a non-explicit deny to all new users d) EBS and S3 are accessible only to the root account owner

c) There is a non-explicit deny to all new users

Amazon Glacier is an Amazon S3 storage class that is suitable for storing ____________ & ______________. (Choose two) ​ a) Cached data b) Active databases c) ​Long-term analytic data d) ​Active archives e) ​Dynamic websites' assets

c) ​Long-term analytic data d) ​Active archives

A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly? ​ a) Transit VPC ​b) AWS Global Accelerator ​c) Amazon CloudFront ​d) AWS Application Load Balancer (ALB)

d) AWS Application Load Balancer (ALB)

Which of the following services gives you access to all AWS auditor-issued reports and certifications? ​ a) AWS CloudTrail b) AWS Config ​c) Amazon CloudWatch ​d) AWS Artifact

d) AWS Artifact

What is the framework created by AWS Professional Services that helps organizations design a road map to successful cloud adoption? ​ a) AWS WAF b) Amazon SWF ​c) Amazon EFS ​d) AWS CAF

d) AWS CAF

What is the AWS tool that enables you to use scripts to manage all AWS services and resources? ​ a) AWS Service Catalog b) AWS OpsWorks c) AWS Console d) AWS CLI

d) AWS CLI

Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects? ​ a) AWS Auto Scaling ​b) AWS CloudTrail ​c) AWS Config ​d) AWS CloudFormation

d) AWS CloudFormation

What are the connectivity options that can be used to build hybrid cloud architectures? (Choose two) ​ a) AWS CloudTrail ​b) AWS Cloud9 ​c) AWS Artifact ​d) AWS Direct Connect e) AWS VPN

d) AWS Direct Connect e) AWS VPN

Which of the following AWS services uses Puppet to automate how EC2 instances are configured? ​ a) AWS CloudFormation b) AWS Quick Starts ​c) AWS CloudTrail ​d) AWS OpsWorks

d) AWS OpsWorks

A company is planning to use Amazon S3 and Amazon CloudFront to distribute its video courses globally. What tool can the company use to estimate the costs of these services? ​ a) AWS Budgets b) AWS Cost Explorer c) AWS TCO Calculator d) AWS Simple Monthly Calculator

d) AWS Simple Monthly Calculator

​Which AWS Service helps enterprises extend their on-premises storage to AWS in a cost-effective manner? ​ a) Amazon EFS ​b) Amazon Aurora ​c) AWS Data Pipeline ​d) AWS Storage Gateway

d) AWS Storage Gateway

You are facing a lot of problems with your current contact center. Which service provides a cloud-based contact center that can deliver a better service for your customers? ​ a) AWS Direct Connect ​b) AWS Elastic Beanstalk c) Amazon Lightsail ​d) Amazon Connect

d) Amazon Connect

What is the primary storage service used by Amazon RDS database instances? ​ a) Amazon Glacier ​b) Amazon EFS c) Amazon S3 d) Amazon EBS

d) Amazon EBS

An organization needs to analyze and process a large number of data sets. Which AWS service should they use? ​ a) Amazon SQS b) ​Amazon SNS ​c) Amazon MQ d) Amazon EMR

d) Amazon EMR

You have a real-time IoT application that requires sub-millisecond latency. Which of the following services should you use? ​ a) Amazon Athena ​b) Amazon Redshift ​c) AWS Cloud9 d) Amazon ElastiCache for Redis

d) Amazon ElastiCache for Redis

A customer is planning to migrate their Microsoft SQL Server databases to AWS. Which AWS Services can the customer use to run their Microsoft SQL Server database on AWS? (Choose TWO) ​ a) AWS Fargate ​b) AWS Lambda ​c) AWS Database Migration service (DMS) d) Amazon Elastic Compute Cloud e) Amazon RDS

d) Amazon Elastic Compute Cloud e) Amazon RDS

Which AWS service can be used to store and reliably deliver messages across distributed systems? ​ a) Amazon Simple Email Service b) AWS Storage Gateway c) Amazon Simple Storage Service d) Amazon Simple Queue Service

d) Amazon Simple Queue Service

You have just set up your AWS environment and have created six IAM user accounts for the DevOps team. What is the AWS recommendation when granting permissions to these IAM accounts? ​ a) Create six different IAM passwords ​b) Attach a separate IAM policy for each individual account ​c) For security purposes, you should not grant any permission to the DevOps team ​d) Apply the Principle of Least Privilege

d) Apply the Principle of Least Privilege

Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities? (Choose two) ​ a) Patching the database software b) Installing the database software c) Performing backups d) Building the relational database schema e) Managing the database settings

d) Building the relational database schema e) Managing the database settings

What is the minimum level of AWS support that provides 24x7 access to technical support engineers via phone and chat? ​ a) Basic Support ​b) Developer Support ​c) Enterprise Support d) Business Support

d) Business Support

One of the most important AWS best-practices to follow is the cloud architecture principle of elasticity. How does this principle improve your architecture's design? ​ a) By automatically scaling your AWS resources using an Elastic Load Balancer b) By reducing interdependencies between application components wherever possible c) By automatically scaling your on-premises resources based on changes in demand d) By automatically provisioning the required AWS resources based on changes in demand

d) By automatically provisioning the required AWS resources based on changes in demand

What is the main purpose of using Amazon SWF? ​ a) High-performance file system integrated with S3 ​b) Threat detection ​c) Host and manage active directory d) Coordinate tasks across distributed application components

d) Coordinate tasks across distributed application components

Which DynamoDB feature can be used to reduce the latency of requests to a database from milliseconds to microseconds? ​ a) Memcached ​b) Read Replica c) Multi-AZ ​d) DAX

d) DAX

AWS recommends some practices to help organizations avoid unexpected charges on their bill. Which of the following is NOT one of these practices? ​ a) Releasing unused Elastic IPs after terminating an EC2 instance b) Deleting unused EBS volumes after terminating an EC2 instance ​c) Deleting unused Elastic Load Balancers ​d) Deleting unused AutoScaling launch configuration

d) Deleting unused AutoScaling launch configuration

A company has developed an eCommerce web application in AWS. What should they do to ensure that the application has the highest level of availability? ​ a) Deploy the application across multiple Availability Zones and Edge locations b) Deploy the application across multiple VPC's and subnets c) Deploy the application across multiple Availability Zones and subnets d) Deploy the application across multiple Regions and Availability Zones

d) Deploy the application across multiple Regions and Availability Zones

Which of the below options is a best practice for making your application on AWS highly available? ​ a) Deploy the application code on at least two servers in the same Availability Zone ​b) Use AWS Direct Connect to access the application ​c) Rewrite the application code to handle all incoming requests ​d) Deploy the application to at least two Availability Zones

d) Deploy the application to at least two Availability Zones

AWS has created a large number of Edge Locations as part of its Global Infrastructure. Which of the following is NOT a benefit of using Edge Locations? ​ a) Edge locations are used by CloudFront to improve your end users' experience when uploading files b) Edge locations are used by CloudFront to cache the most recent responses c) Edge locations are used by CloudFront to distribute content to global users with low latency ​d) Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency

d) Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency

Which of the following are use cases for Amazon EMR? (Choose TWO) ​ a) Enables you to move Exabyte-scale data from on-premises datacenters into AWS ​b) Enables you to backup extremely large amounts of data at very low costs ​c) Enables you to easily run and manage Docker containers ​d) Enables you to analyze and process extremely large amounts of data in a timely manner e) Enables you to easily run and scale Apache Spark, Hadoop,and other Big Data frameworks

d) Enables you to analyze and process extremely large amounts of data in a timely manner e) Enables you to easily run and scale Apache Spark, Hadoop,and other Big Data frameworks

A company is introducing a new product to their customers, and is expecting a surge in traffic to their web application. As part of their Enterprise Support plan, which of the following provides the company with architectural and scaling guidance? a) AWS Support Concierge Service b) AWS Personal Health Dashboard c) AWS Support API d) Infrastructure Event Management

d) Infrastructure Event Management

A company is seeking to better secure its AWS account from unauthorized access. Which of the below options can the customer use to achieve this goal? ​ a) Create one IAM account for each department in the company (Development, QA, Production), and share it across all staff in that department ​b) Restrict any API call made through SDKs or CLI ​c) Set up two login passwords ​d) Require Multi-Factor Authentication (MFA) for all IAM User access

d) Require Multi-Factor Authentication (MFA) for all IAM User access

A company has developed a media transcoding application in AWS. The application is designed to recover quickly from hardware failures. Which one of the following types of instance would be the most cost-effective choice to use? ​ a) Reserved instances ​b) On-Demand instances ​c) Dedicated instances ​d) Spot Instances

d) Spot Instances

How much data can you store in S3? ​ a) You can store up to 1 PetaByte of data, then you are required to pay an additional fee b) There is a soft limit of 100 TeraBytes for each AWS account c) You can store up to 1 PetaByte of data d) Storage capacity is virtually unlimited

d) Storage capacity is virtually unlimited

For compliance and regulatory purposes, a government agency requires that their applications must run on hardware that is dedicated to them only. How can you meet this requirement? ​ a) Use EC2 Reserved Instances ​b) Use EC2 Spot Instances ​c) Use EC2 On-demand Instances ​d) Use EC2 Dedicated Hosts

d) Use EC2 Dedicated Hosts

You have migrated your application to AWS recently. How can you view the AWS costs applied to your account? ​ a) Using the AWS Total Cost of Ownership (TCO) dashboard b) Using the AWS CloudWatch logs dashboard ​c) Using the Amazon VPC dashboard ​d) Using the AWS Cost & Usage Report

d) Using the AWS Cost & Usage Report

You are working on two projects that require completely different network configurations. Which AWS service will allow you to isolate resources and network configurations? ​ a) Edge Locations b) Security Groups c) Amazon CloudFront d) Virtual Private Cloud

d) Virtual Private Cloud

Which of the following is a type of MFA device that customers can use to protect their AWS resources? ​ a) AWS CloudHSM ​b) AWS Key Pair ​c) AWS Access Keys d) ​U2F Security Key

d) ​U2F Security Key

The principle "design for failure and nothing will fail" is very important when designing your AWS Cloud architecture. Which of the following would help adhere to this principle? (Choose two) ​ a) AWS Elastic Load Balancer b) Amazon Elastic MapReduce c) AWS KMS d) Availability Zones e) Amazon Elastic File System

​ a) AWS Elastic Load Balancer d) Availability Zones

Which of the following is an example of horizontal scaling in the AWS Cloud? ​ a) Adding more EC2 instances of the same size to handle an increase in traffic b) Adding more RAM capacity to an EC2 instance c) Replacing an existing EC2 instance with a larger, more powerful one d) Increasing the compute capacity of a single EC2 instance to address the growing demands of an application

​ a) Adding more EC2 instances of the same size to handle an increase in traffic

Which of the following is one of the benefits of AWS security? ​ a) Scales quickly with your AWS usage b) Increases Capital expenditure (CapEx) c) Free for AWS premium members d) Starts automatically once you upload your data

​ a) Scales quickly with your AWS usage

Which statement best describes the operational excellence pillar of the AWS Well-Architected Framework? ​ a) The ability to provision resources on-demand b) The ability to manage datacenter operations more efficiently c) The ability to monitor systems and improve supporting processes and procedures d) The ability of a system to recover gracefully from failure

​ c) The ability to monitor systems and improve supporting processes and procedures

Sarah has deployed an application in the Northern California (us-west-1) region. After examining the application's traffic, she notices that about 30% of the traffic is coming from Asia. What can she do to reduce latency for the users in Asia? ​ a) Migrate the application to a hosting provider in Asia b) Replicate the current resources across multiple Availability Zones within the same region c) Recreate the website content d) Create a CDN using CloudFront, so that content is cached at Edge Locations close to and in Asia

​ d) Create a CDN using CloudFront, so that content is cached at Edge Locations close to and in Asia

A company is trying to analyze the costs applied to their AWS account recently. Which of the following provides them the most granular data about their AWS costs and usage? ​ a) Amazon CloudWatch ​b) AWS Cost & Usage Report c) Amazon Machine Image ​d) AWS Cost Explorer

​b) AWS Cost & Usage Report

Which of the following allows you to create new RDS instances? (Choose two) ​ a) AWS DMS ​b) AWS Management Console ​c) AWS Quick Starts ​d) AWS CloudFormation ​e) AWS CodeDeploy

​b) AWS Management Console ​d) AWS CloudFormation

You decide to buy a reserved instance for a term of one year. Which option provides the largest total discount? ​ a) All reserved instance payment options provide the same discount level ​b) All up-front reservation ​c) No up-front reservation d) Partial up-front reservation

​b) All up-front reservation

Which AWS Service enables customers to set up an AWS billing alarm to inform them when their spending exceeds a certain threshold? ​ a) AWS Cost Explorer ​b) Amazon CloudWatch c) Amazon Inspector ​d) Consolidated Billing

​b) Amazon CloudWatch

Amazon EBS volumes can be attached to which of the following compute resources? ​ a) Lambda@Edge ​b) Amazon EC2 instances​ c) AWS Fargate ​d) AWS Lambda

​b) Amazon EC2 instances

Which of the following services allows you to run containerized applications on a cluster of EC2 instances? ​ a) AWS Personal Health Dashboard ​b) Amazon ECS c) AWS Data Pipeline d) AWS Cloud9

​b) Amazon ECS

Which of the following is not a benefit of Amazon S3? (Choose TWO) ​ a) Amazon S3 provides unlimited storage for any type of data ​b) Amazon S3 can be scaled manually to store and retrieve any amount of data from anywhere c) Amazon S3 can run any type of application or backend system d) Amazon S3 stores any number of objects, but with object size limits e) Amazon S3 provides 99.999999999% (11 9's) of data durability

​b) Amazon S3 can be scaled manually to store and retrieve any amount of data from anywhere c) Amazon S3 can run any type of application or backend system

Which of the following AWS services is designed with native Multi-AZ fault tolerance in mind? (Choose two) ​ a) Amazon Redshift ​b) Amazon Simple Storage Service c) ​Amazon EBS ​d) Amazon DynamoDB e) ​AWS Snowball

​b) Amazon Simple Storage Service d) Amazon DynamoDB

What is AWS Lambda? ​ a) An AWS Service that provides object storage ​b) An AWS Service that allows customers to run code without provisioning or managing servers c) A fully managed non-relational database service ​d) An AWS Service that deploys containerized applications to Amazon EC2 instances

​b) An AWS Service that allows customers to run code without provisioning or managing servers

What are AWS shared controls? ​ a) Controls that a customer inherits from AWS ​b) Controls that apply to both the infrastructure layer and customer layers c) Controls that are solely the responsibility of the customer based on the application they are deploying within AWS services ​d) Controls that the customer and AWS collaborate together upon to secure the infrastructure

​b) Controls that apply to both the infrastructure layer and customer layers

A company is using EC2 Instances to run their e-commerce site on the AWS platform. If the site becomes unavailable, the company will lose a significant amount of money for each minute the site is unavailable. Which design principle should the company use to minimize the risk of an outage? ​ a) Multi-threading ​b) Fault Tolerance ​c) Least Privilege ​d) Pilot Light

​b) Fault Tolerance

What can you use to assign permissions directly to an IAM user? ​ a) IAM Group ​b) IAM Policy c) ​IAM Role ​d) IAM Identity

​b) IAM Policy

What does Amazon ElastiCache provide? ​ a) A domain name system in the cloud ​b) In-memory caching for read-heavy applications c) An Ehcache compatible in-memory data store d) An online software store that allows Customers to launch pre-configured software with just few clicks

​b) In-memory caching for read-heavy applications

What does AWS Service Catalog provide? ​ a) It enables customers to explore the different catalogs of AWS services ​b) It simplifies organizing and governing commonly deployed IT services c) It enables customers to quickly find descriptions and use cases for AWS services d) It allows provisioning of cloud infrastructure using code

​b) It simplifies organizing and governing commonly deployed IT services

Which of the following is used to control network traffic in AWS? (Choose two) ​ a) Access Keys ​b) Network Access Control Lists (NACLs) c) IAM Policies d) Security Groups e) Key Pairs

​b) Network Access Control Lists (NACLs) d) Security Groups

Which of the following is NOT a factor when estimating the costs of Amazon EC2? (Choose TWO) ​ a) The amount of time the instances will be running ​b) Number of security groups c) Number of Hosted Zones d) Number of instances ​e) Allocated Elastic IP Addresses

​b) Number of security groups c) Number of Hosted Zones

According to best practices, which of the below options is best suited for processing a large number of binary files? ​ a) Running RDS instances in parallel ​b) Running EC2 instances in parallel c) Vertically scaling EC2 instances d) Vertically scaling RDS instances

​b) Running EC2 instances in parallel

Why do many startup companies prefer AWS over traditional on-premises solutions? (Choose TWO) ​ a) AWS allows them to pay later when their business succeed ​b) Using AWS, they can reduce time-to-market by focusing on business activities rather than on building and managing data centers c) AWS removes the need to invest in operational expenditure​ d) AWS can build complete data centers faster than any other Cloud provider e) Using AWS allows companies to replace large capital expenditure with low variable costs

​b) Using AWS, they can reduce time-to-market by focusing on business activities rather than on building and managing data centers e) Using AWS allows companies to replace large capital expenditure with low variable costs

Which AWS Service allows customers to download AWS SOC & PCI reports? ​ a) Amazon Chime ​b) AWS Glue ​c) AWS Artifact d) AWS Well-Architected Tool

​c) AWS Artifact

What is the AWS serverless service that allows you to run your applications without any administrative burden? ​ a) Amazon RDS instances ​b) Amazon LightSail ​c) AWS Lambda d) Amazon EC2 instances

​c) AWS Lambda

​ Which AWS Service can perform health checks on Amazon EC2 instances? ​ a) AWS Cloud​Formation b) Amazon Chime ​c) Amazon Route 53 d) Amazon Aurora

​c) Amazon Route 53

A company's AWS workflow requires that it periodically perform large-scale image and video processing jobs. The customer is seeking to minimize cost and has stated that the amount of time it takes to process these jobs is not critical, but that cost minimization is the most important factor in designing the solution. Which EC2 instance class is best suited for this processing? ​ a) ​EC2 Reserved Instances - No Upfront ​b) EC2 On-Demand Instances ​c) EC2 Spot Instances ​d) EC2 Reserved Instances - All Upfront

​c) EC2 Spot Instances

What does AWS Cost Explorer provide to help manage your AWS spend? ​ a) Cost comparisons between AWS Cloud environments and on-premises environments ​b) Accurate estimates of AWS service costs based on your expected usage ​c) Highly accurate cost forecasts for up to 12 months ahead d) Consolidated billing

​c) Highly accurate cost forecasts for up to 12 months ahead

Which of the following is a feature of Amazon RDS that performs automatic failover when the primary database fails to respond? ​ a) RDS Single-AZ ​b) RDS Write Replica ​c) RDS Multi-AZ​ d) RDS Snapshots

​c) RDS Multi-AZ

A key practice when designing solutions on AWS is to minimize dependencies between components so that the failure of a single component does not impact other components. What is this practice called? ​ a) Tightly coupling ​b) Elastic coupling ​c) Scalable coupling ​d) Loosely coupling

​d) Loosely coupling

Amazon RDS supports multiple database engines to choose from. Which of the following is not one of them? ​ a) Oracle ​b) PostgreSQL ​c) Microsoft SQL Server ​d) Teradata

​d) Teradata

Which of the following are factors in determining the appropriate database technology to use for a specific workload? (Choose two) ​ a) Software bugs ​b) Data sovereignty c) Availability Zones ​d) The number of reads and writes per second e) The nature of the queries

​d) The number of reads and writes per second e) The nature of the queries

Which service is used to ensure that messages between software components are not lost if one or more components fail? ​ a) Amazon SQS b) AWS Direct Connect c) Amazon SES d) Amazon Connect

a) Amazon SQS

Your company is developing a critical web application in AWS, and the security of the application is a top priority. Which of the following AWS services will provide infrastructure security optimization recommendations? ​ a) AWS Trusted Advisor ​b) Amazon Aurora c) AWS Management Console d) AWS Shield

a) AWS Trusted Advisor

What are the benefits of having infrastructure hosted in AWS? (Choose two) ​ a) All of the physical security and most of the data/network security are taken care of for you b) Increase speed and agility c) Competitive upfront costs d) There is no need to worry about security ​e) Gaining complete control over the physical infrastructure

a) All of the physical security and most of the data/network security are taken care of for you b) Increase speed and agility

You have deployed your application on multiple Amazon EC2 instances. Your customers complain that sometimes they can't reach your application. Which AWS service allows you to monitor the performance of your EC2 instances to assist in troubleshooting these issues? ​ a) Amazon CloudWatch​ b) AWS Config ​c) AWS Lambda d) AWS CloudTrail

a) Amazon CloudWatch

A company is deploying a new two-tier web application in AWS. Where should the most frequently accessed data be stored so that the application's response time is optimal? ​ a) Amazon ElastiCache b) AWS Storage Gateway c) AWS OpsWorks d) Amazon EBS volume

a) Amazon ElastiCache

The identification process of an online financial services company requires that new users must complete an online interview with their security team. The completed recorded interviews are only required in the event of a legal issue or a regulatory compliance breach. What is the most cost-effective service to store the recorded videos? ​ a) Amazon Glacier b) AWS Marketplace c) S3 Intelligent-Tiering d) Amazon EBS

a) Amazon Glacier

What is the AWS service that performs automated network assessments of Amazon EC2 instances to check for vulnerabilities? ​ a) Amazon Inspector b) AWS Network Access Control Lists ​c) Security groups ​d) Amazon Kinesis

a) Amazon Inspector

Which S3 storage class is best for data with unpredictable access patterns? ​ a) Amazon S3 Intelligent-Tiering b) Amazon S3 Glacier c) Amazon S3 Standard d) Amazon S3 Standard-Infrequent Access

a) Amazon S3 Intelligent-Tiering

Which of the below options are related to the reliability of AWS? (Choose two) ​ a) Automatically provisioning new resources to meet demand b)​ Applying the principle of least privilege to all of its resources ​c) Ability to recover quickly from failures ​d) All AWS services are considered Global Services, and this design helps customers serve their international users ​e) Providing compensation to customers if issues occur

a) Automatically provisioning new resources to meet demand c) Ability to recover quickly from failures

Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose two) ​ a) Creating hypervisors b) Hardware maintenance ​c) Monitoring network performance d) Configuring Access Control Lists (ACLs) ​e) Installing software on EC2 instances

a) Creating hypervisors b) Hardware maintenance

Which of the below is a best-practice when building applications on AWS? ​ a) Decouple the components of the application so that they run independently b) ​Use IAM policies to maintain performance ​c) Strengthen physical security by applying the principle of least privilege ​d) Ensure that the application runs on hardware from trusted vendors

a) Decouple the components of the application so that they run independently

Which of the following EC2 instance purchasing options supports the Bring Your Own License (BYOL) model for almost every BYOL scenario? ​ a) Dedicated Hosts b) Reserved Instances c) On-demand Instances d) Dedicated Instances

a) Dedicated Hosts

What does the AWS Personal Health Dashboard provide? (Choose two) ​ a) Detailed troubleshooting guidance to address AWS events impacting your resources b) Published information about the current status and availability of all AWS services c) Recommendations for Cost Optimization d) Personalized view of AWS service health e) A dashboard detailing vulnerabilities in your applications

a) Detailed troubleshooting guidance to address AWS events impacting your resources d) Personalized view of AWS service health

What should you do in order to keep the data on EBS volumes safe? (Choose two) ​ a) Ensure that EBS data is encrypted at rest b) Create EBS snapshots c) Store a backup daily in an external drive d) Prevent any unauthorized access to AWS data centers e) Regularly update firmware on EBS devices

a) Ensure that EBS data is encrypted at rest b) Create EBS snapshots

What are the Amazon RDS features that can be used to improve the availability of your database? (Choose two) ​ a) Multi-AZ Deployment b) Read Replicas c) AWS Regions d) Edge Locations e) Automatic patching

a) Multi-AZ Deployment b) Read Replicas

You want to run a questionnaire application for only one day (without interruption), which Amazon EC2 purchase option should you use? ​ a) On-demand instances b) Reserved instances c) Spot instances d) Dedicated instances

a) On-demand instances

Which of the following aspects of security are managed by AWS? (Choose two) ​ a) Securing global physical infrastructure b) Access permissions c) VPC security ​d) Hardware patching e) Encryption of EBS volumes

a) Securing global physical infrastructure d) Hardware patching

A startup company is operating on limited funds and is extremely concerned about cost overruns. Which of the below options can be used to notify the company when their monthly AWS bill exceeds $2000? ​ a) Setup a CloudWatch billing alarm that triggers an SNS notification to their email address ​b) Configure the Amazon Connect Service to send an SNS billing notification to their email address ​c) Setup a CloudTrail billing alarm that triggers an SNS notification to their email address d) Configure the Amazon Simple Email Service to send an SNS billing notification to their email address

a) Setup a CloudWatch billing alarm that triggers an SNS notification to their email address

Which statement is correct with regards to AWS service limits? (Choose two) ​ a) You can use the AWS Trusted Advisor to monitor your service limits b) There are no service limits on AWS c) You can contact AWS support to increase the service limits d) Each IAM user has the same service limits e) The Amazon Simple Email Service is responsible for sending email notifications when usage approaches a service limit

a) You can use the AWS Trusted Advisor to monitor your service limits c) You can contact AWS support to increase the service limits

What does the "Principle of Least Privilege" refer to? ​ a) You should grant your users only the permissions they need when they need them and nothing more b) All IAM users should have at least the necessary permissions to access the core AWS services c) IAM users should not be granted any permissions; to keep your account safe d) All trusted IAM users should have access to any AWS service in the respective AWS account

a) You should grant your users only the permissions they need when they need them and nothing more

What do you gain from setting up consolidated billing for five different AWS accounts under another master account? ​ a) Each AWS account gets six times the free-tier services capacity b) Each AWS account gets volume discounts c) The consolidated billing feature is just for organizational purposes d) AWS services' costs will be reduced to half the original price

b) Each AWS account gets volume discounts

Adjusting compute capacity dynamically to reduce cost is an implementation of which AWS cloud best practice? ​ a) Parallelize tasks b) Implement elasticity c) Build security in every layer d) Adopt monolithic architecture

b) Implement elasticity

Which of the following does NOT belong to the AWS Cloud Computing models? ​ a) Infrastructure as a Service (IaaS) b) Networking as a Service (NaaS) c) Platform as a Service (PaaS) d) Software as a Service (SaaS)

b) Networking as a Service (NaaS)

A company needs to host a database in Amazon RDS for at least three years. Which of the following options would be the most cost-effective solution? ​ a) Reserved instances - No Upfront ​b) Reserved instances - Partial Upfront c) On-Demand instances d) Spot Instances

b) Reserved instances - Partial Upfront

Which of the following can help protect your EC2 instances from DDoS attacks? (Choose two) ​ a) AWS IAM b) Security Groups c) AWS Batch d) Network Access Control Lists e) AWS CloudHSM

b) Security Groups d) Network Access Control Lists

In the AWS Shared responsibility Model, which of the following are the responsibility of the customer? (Choose TWO) ​ a) Disk disposal b) Setting password complexity rules​ c) Patching the Network infrastructure d) Controlling physical access to compute resources e) Configuring network access rules

b) Setting password complexity rules e) Configuring network access rules

You are working on a project that involves creating thumbnails of millions of images. Consistent uptime is not an issue, and continuous processing is not required. Which EC2 buying option would be the most cost-effective? a) Reserved Instances b) Spot Instances c) On-demand Instances d) Dedicated Instances

b) Spot Instances

When using the AWS TCO tool, what information is required to calculate the potential savings of using AWS vs. on-premises? ​ a) The number of end users you are currently serving b) The number of on-premise virtual machines c) The number of on-premise applications ​d) The number of active databases

b) The number of on-premise virtual machines

Which of the following procedures will help reduce your Amazon S3 costs? ​ a) Pick the right Availability Zone for your S3 bucket ​b) Use the right combination of storage classes based on different use cases c) ​Move all the data stored in S3 standard to EBS ​d) Use the Import/Export feature to move old files automatically to Amazon Glacier

b) Use the right combination of storage classes based on different use cases

Which of the following is NOT correct regarding Amazon EC2 On-demand instances? a) The on-demand instances follow the AWS pay-as-you-go pricing model b) You have to pay a start up fee when launching a new instance for the first time c) With on-demand instances, no longer term commitments or upfront payments are needed d) When using on-demand Linux instances, you are charged per second based on an hourly rate

b) You have to pay a start up fee when launching a new instance for the first time

In your on-premises environment, you can create as many virtual servers as you need from a single template. What can you use to perform the same in AWS? ​ a) EBS Snapshot ​b) An internet gateway ​c) AMI ​d) IAM

c) AMI

Which of the following services allows customers to manage their agreements with AWS? ​ a) AWS Organizations ​b) AWS Systems Manager ​c) AWS Artifact d) AWS Certificate Manager

c) AWS Artifact

Which of the following must an IAM user provide to interact with AWS services using the AWS Command Line Interface (AWS CLI)? ​ a) Secret token b) User name and password c) Access keys d) User ID

c) Access keys

A company is planning to host an educational website on AWS. Their video courses will be streamed all around the world. Which of the following AWS services will help achieve high transfer speeds? ​ a) AWS CloudFormation b) Amazon Kinesis Video Streams c) Amazon CloudFront d) Amazon SNS

c) Amazon CloudFront

What are the AWS services\features that can help you maintain a highly available and fault-tolerant architecture in AWS? (Choose two) ​ a) CloudFormation b) Network ACLs c) Amazon EC2 Auto Scaling d) Elastic Load Balancer e) AWS Direct Connect

c) Amazon EC2 Auto Scaling d) Elastic Load Balancer

You work as an on-premises MySQL DBA. The work of database configuration, backups, patching, and DR can be time-consuming and repetitive. Your company has decided to migrate to the AWS Cloud. Which of the following can help save time on database maintenance so you can focus on data architecture and performance? ​ a) Amazon CloudWatch b) Amazon Redshift c) Amazon RDS d) Amazon DynamoDB

c) Amazon RDS

You have AWS Basic support, and you have discovered that some AWS resources are being used maliciously, and those resources could potentially compromise your data. What should you do? a) Contact the AWS Concierge team b) Contact the AWS Security team c) Contact the AWS Abuse team d) Contact the AWS Customer Service team

c) Contact the AWS Abuse team

An organization has decided to reserve EC2 compute capacity for three years in order to reduce costs. It is possible that the application workloads could change during the reservation time period. What is the EC2 Reserved Instance (RI) type that will allow the company to modify the reservation if they need to? a) Elastic RIs b) Scheduled RIs c) Convertible RIs d) Standard RIs

c) Convertible RIs

Availability Zones within a Region are connected over low-latency links. Which of the following is a benefit of these links? ​ a) Achieve global high availability b) Automate the process of provisioning new compute resources c) Make synchronous replication of your data possible d) Create private connection to your data center

c) Make synchronous replication of your data possible

According to the AWS Acceptable Use Policy, which of the following statements is true regarding penetration testing of EC2 instances? ​ a) Penetration testing is performed automatically by AWS to determine vulnerabilities in your AWS infrastructure ​b) The AWS customers are only allowed to perform penetration testing on services managed by AWS ​c) Penetration testing can be performed by the customer on their own instances without prior authorization from AWS d) Penetration testing is not allowed in AWS

c) Penetration testing can be performed by the customer on their own instances without prior authorization from AWS

What is the advantage of the AWS-recommended practice of "decoupling" applications? a) Allows treating an application as a single, cohesive unit b) Allows updates of any monolithic application quickly and easily c) Reduces inter-dependencies so that failures do not impact other components of the application d) Allows tracking of any API call made to any AWS service

c) Reduces inter-dependencies so that failures do not impact other components of the application

Which statement is true regarding the AWS Shared Responsibility Model? ​ a) Patching the guest OS is always the responsibility of AWS b) Security of the IaaS services is the responsibility of AWS c) Responsibilities vary depending on the services used ​d) Security of the managed services is the responsibility of the customer

c) Responsibilities vary depending on the services used

What does Amazon Elastic Beanstalk provide? ​ a) A compute engine for Amazon ECS ​b) A scalable file storage solution for use with AWS and on-premises servers c) A NoSQL database service ​d) A PaaS solution to automate application deployment

d) A PaaS solution to automate application deployment

A company has deployed a new web application on multiple Amazon EC2 instances. Which of the following should they use to ensure that the incoming HTTP traffic is distributed evenly across the instances? ​ a) AWS Auto Scaling ​b) AWS Network Load Balancer c) AWS EC2 Auto Recovery ​d) AWS Application Load Balancer

d) AWS Application Load Balancer

A company has decided to migrate its Oracle database to AWS. Which AWS service can help achieve this without negatively impacting the functionality of the source database? ​ a) AWS OpsWorks ​b) AWS Application Discovery Service ​c) AWS Server Migration Service ​d) AWS Database Migration Service

d) AWS Database Migration Service

What does AWS provide to deploy popular technologies - such as IBM MQ - on AWS with the least amount of effort and time? ​ a) Amazon CloudWatch b) AWS OpsWorks c) Amazon Aurora d) AWS Quick Start reference deployments

d) AWS Quick Start reference deployments

A developer is planning to build a two-tier web application that has a MySQL database layer. Which of the following AWS database services would provide automated backups for the application? ​ a) Amazon DynamoDB b) A MySQL database installed on an EC2 instance c) Amazon DocumentDB d) Amazon Aurora

d) Amazon Aurora

Which of the following can be described as a global content delivery network (CDN) service? ​ a) AWS VPN b) AWS Regions c) AWS Direct Connect d) Amazon CloudFront

d) Amazon CloudFront

What is the AWS database service that allows you to upload data structured in key-value format? ​ a) Amazon RDS ​b) Amazon Redshift ​c) Amazon Aurora d) Amazon DynamoDB

d) Amazon DynamoDB

Your company has a data store application that requires access to a NoSQL database. Which AWS database offering would meet this requirement? ​ a) Amazon Elastic Block Store b) Amazon Redshift c) Amazon Aurora d) Amazon DynamoDB

d) Amazon DynamoDB

What is the AWS service that provides you the highest level of control over the underlying virtual infrastructure? ​ a) Amazon DynamoDB ​b) Amazon RDS ​c) Amazon Redshift ​d) Amazon EC2

d) Amazon EC2

A company has a large amount of structured data stored in their on-premises data center. They are planning to migrate all the data to AWS, what is the most appropriate AWS database option? ​ a) Amazon ElastiCache b) Amazon SNS c) Amazon DynamoDB d) Amazon RDS

d) Amazon RDS

Your company is designing a new application that will store and retrieve photos and videos. Which of the following services should you recommend to be used as the underlying storage mechanism? ​ a) Amazon SQS b) Amazon Instance store c) Amazon EBS d) Amazon S3

d) Amazon S3

Select TWO examples of the AWS shared controls. a) Data Center Operations b) VPC Management c) IAM Management d) Configuration Management e) Patch Management

d) Configuration Management e) Patch Management

Which of the following will impact the price paid for an EC2 instance? (Choose two) ​ a) Number of private IPs b) The Availability Zone where the instance is provisioned c) Number of buckets d) Instance type e) Storage capacity

d) Instance type e) Storage capacity

Which of the following are important design principles you should adopt when designing systems on AWS? (Choose two) ​ a) Always use Global Services in your architecture rather than Regional Services b) Treat servers as fixed resources c) Always choose to pay as you go d) Remove single points of failure e) Automate wherever possible

d) Remove single points of failure e) Automate wherever possible

What is the AWS service\feature that takes advantage of Amazon CloudFront's globally distributed edge locations to transfer files to S3 with higher upload speeds? ​ a) AWS Snowball ​b) AWS Snowmobile ​c) AWS WAF ​d) S3 Transfer Acceleration

d) S3 Transfer Acceleration

What does AWS Snowball provide? ​ a) A catalog of third-party software solutions that customers need to build solutions and run their businesses b) An Exabyte-scale data transfer service that allows you to move extremely large amounts of data to AWS c) A hybrid cloud storage between on-premises environments and the AWS Cloud d) Secure transfer of large amounts of data into and out of the AWS Cloud

d) Secure transfer of large amounts of data into and out of the AWS Cloud

You have set up consolidated billing for several AWS accounts. One of the accounts has purchased a number of reserved instances for 3 years. Which of the following is true regarding this scenario? ​ a) The Reserved Instance discounts can only be shared with the master account ​b) The purchased instances will have better performance than On-demand instances ​c) All accounts can receive the hourly cost benefit of the Reserved Instances d) There are no cost benefits from using consolidated billing; It is for informational purposes only

​c) All accounts can receive the hourly cost benefit of the Reserved Instances