AWS Cloud Practitioner Exam #2

Which AWS service can be used to store, manage, and deploy Docker container images?

Amazon Container Registry (ECR)

Which of the following AWS services allows a database to have flexible schema and supports document data models?

Amazon DynamoDB

An e-commerce company wants to assess its applications for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?

Amazon Inspector

A startup is looking for 24x7 phone based technical support for his AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?

Business

An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)

CloudWatch Lambda

What are the fundamental drivers of cost with AWS Cloud?

Compute, Storage and Outbound Data Transfer

According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?

Database encryption

As per the AWS shared responsibility model, which of the following is a responsibility of AWS from a security and compliance point of view?

Edge Location Management

A fleet of Amazon EC2 instances spread across different Availability Zones needs to access, edit and share file-based data stored centrally on a system. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

Elastic File System (EFS)

Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them?

Elasticity

A multi-national company wants to migrate its IT infrastructure to AWS Cloud and is looking for a concierge support team as well as a response time of around an hour in case the systems go down. As a Cloud Practitioner, which of the following support plans would you recommend to the company?

Enterprise

Which AWS support plan provides access to a Technical Account Manager (TAM)?

Enterprise

Which AWS Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience?

Latency routing policy

Due to regulatory and compliance reasons, an organization has deployed its entire IT infrastructure on its on-premises data center. How would you classify this deployment model?

Private

Which of the following use-cases is NOT supported by Amazon Rekognition?

Quickly resize photos to create thumbnails

Which of the following are examples of Horizontal Scalability (aka Elasticity)? (Select two)

Read Replicas in Amazon RDS Elastic Loud Balancing

The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)

Reliability Cost Optimization

Which of the following statements is INCORRECT about AWS Auto Scaling?

You can automatically deploy AWS Shield when a DDoS attack is detected

A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?

A VPC spans all of the Availability Zones in the Region whereas a subnet spans only one Availability Zone in the Region

An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?

AWS Config

A developer has written a simple web application in PHP and he wants to just upload his code to AWS Cloud and have AWS handle the deployment automatically but still wants access to the underlying operating system for further enhancements. As a Cloud Practioner, which of the following AWS services would you recommend for this use-case?

AWS Elastic Beanstalk

Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?

AWS Marketplace

A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?

AWS Organizations

A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?

AWS Web Application Firewall (WAF)

Which of the following is correct about AWS "Developer" Support plan?

Allows one contact to open unlimited cases

A data analytics company has some data stored on Amazon S3 and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for this use case?

Amazon Athena

Which of the following options can be used to access and manage all AWS services (Select three)?

AWS Command Line Interface (CLI) AWS Software Developer (SDK) AWS Management Console

Which policy describes prohibited uses of the web services offered by Amazon Web Services?

AWS Acceptable Use Policy

Which AWS technology/service helps you to scale your resources to match supply with demand while still keeping your cloud solution cost-effective?

AWS Auto Scaling

Which AWS service would you use to send alerts when the costs for your AWS account exceed your budgeted amount?

AWS Budgets

Which AWS service helps you define your infrastructure as code?

AWS CloudFormation

Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?

AWS CloudHSM

Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?

AWS Fargate

Which of the following AWS services is essential for implementing security of resources in AWS Cloud?

AWS IAM

Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two)

AWS IAM AWS Trusted Advisor

Which of the following AWS services are global in scope? (Select two)

AWS IAM Amazon CloudFront

Which of the following statements are true about AWS Lambda? (Select two)

AWS Lambda lets you can code without provisioning or managing servers. You pay only for the compute time you consume.

Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?

AWS Personal Health Dashboard

An organization is planning to move its infrastructure from the on-premises datacenter to AWS Cloud. As a Cloud Practioner, which options would you recommend so that the organization can identify the right AWS services to build solutions on AWS Cloud (Select two)?

AWS Service Catalog AWS Partner Network

Which AWS service publishes up-to-the-minute information on the general status and availability of all AWS services in all the Regions of AWS Cloud?

AWS Service Health Dashboard

Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)

AWS Shield AWS WAF Amazon CloudFront w/ Route 53

Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?

AWS Trusted Advisor

Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two).

AWS VPN AWS Direct Connect

An online gaming company wants to block users from certain geographies from accessing its content. Which AWS services can be used to accomplish this task? (Select two)

AWS WAF Route 53

Which AWS service can be used to provision resources to run big data workloads on Hadoop clusters?

Amazon EMR

Which AWS compute service provides the EASIEST way to access resizable compute capacity in the cloud with support for per-second billing and access to the underlying OS?

Amazon Elastic Compute Cloud (EC2)

Which of the following AWS services comes under the Software as a Service (SaaS) Cloud Computing Type?

Amazon Rekognition

Which AWS service can be used to review the compliance and governance-related documents on AWS?

Artifact

Which AWS service helps with global application availability and performance using the AWS global network?

Global Accelerator

Multi AZ (Availability Zone) deployment is an example of which of the following?

High Availability

An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model?

Hybrid deployment

Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management entities?

IAM User

Which of the following AWS services are always free to use (Select two)?

Identity and Access Management (IAM) AWS Auto Scaling

As per the AWS shared responsibility model, which of the following is a responsibility of the customer from a security and compliance point of view?

Managing patches of the guest operating system on Amazon EC2

What is the primary benefit of deploying an RDS database in a Multi-AZ configuration?

Multi-AZ enhances database availability

Which AWS EC2 pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?

On-demand Instances

Which of the following statement is correct regarding the AWS pricing policy for data transfer charges?

Only outbound data transfer is charged

Which of the following statements are correct about the AWS account root user (Select two)

Root user access credentials are the email address and password used to create the AWS account. It is highly recommended to enable Multi Factor Authentication (MFA) for root user account

Which of the following is the correct statement regarding the AWS Storage services?

S3 is object based storage, EBS is block based storage and EFS is file based storage

The engineering team at an IT company wants to monitor the CPU utilization for its fleet of EC2 instances and send an email to the administrator if the utilization exceeds 80%. As a Cloud Practitioner, which AWS services would you recommend to build this solution? (Select two)

SNS CloudWatch

A log archival application deployed on Amazon EC2 instances runs every Monday between 3 AM and 5 AM. Can you suggest a cost-effective EC2 instance purchasing option for this use-case?

Scheduled Reserved Instances

Which design principle of the AWS Well-Architected Framework can answer the question- "Who did what"?

Security

Which of the following statement is correct for a Security Group and a Network Access Control List?

Security Group acts as a firewall at the instance level whereas Network Access Control List acts as a firewall at the subnet level

What are the different gateway types supported by AWS Storage Gateway service?

Tape Gateway, File Gateway, and Volume Gateway

A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon S3. The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on S3?

Use S3 One-Zone Infrequent Access (One-Zone IA) to store the thumbnails