AWS Cloud Practitioner - Final

Which statement best describes AWS Marketplace?

A digital catalog that includes thousands of listings from independent software vendors.

Which statement best describes an Availability Zone?

A fully isolated portion of the AWS global infrastructure. An Availability Zone is a single data center or a group of data centers within a Region.

Which of the following are characteristics of Amazon S3?

A global file system & An object store

Network Access Control List or Network ACL

A network access control list (ACL) is a virtual firewall that controls inbound and outbound traffic at the subnet level.

Which virtual private cloud, VPC component controls inbound and outbound traffic for Amazon EC2 instances?

A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance.

Which statement best describes Elastic Load Balancing?

A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances. As EC2 instances are added or removed, these requests are routed to the load balancer first and then spread across multiple resources that will handle them.

Which statement best describes Amazon GuardDuty?

A service that provides intelligent threat detection for your AWS infrastructure and resources. It identifies threats by continually monitoring the network activity and account behavior within your AWS environment.

Where can the customer view his Reserved Instance usage for the past month?

AWS Billing Console

The use of what AWS feature or service allows companies to track and categorize spending on a detailed level?

AWS Budgets

Which AWS service allows you to set custom alerts that notify you when your service usage exceeds or is forecasted to exceed a certain amount?

AWS Budgets

AWS CloudFormation

AWS CloudFormation is a service that enables developers to create AWS resources in an orderly and predictable fashion. Infrastructure as code.

Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWSSDKs?

AWS CloudTrail

Which service enables you to review details for user activities and API calls that have occurred within your AWS environment?

AWS CloudTrail. View a complete history of user activity and API calls for your applications and resources, updated within 15 minutes after an API call.

Which service's PRIMARY purpose is software version control?

AWS CodeCommit

AWS CodeCommit

AWS CodeCommit is a version control service hosted by Amazon Web Services that you can use to privately store and manage assets such as documents, source code, and binary files in the cloud.

Which tool is used to automate actions for AWS services and applications through scripts?

AWS Command Line Interface

Which tool enables you to visualize, understand, and manage your AWS costs and usage over time?

AWS Cost Explorer. With AWS Cost Explorer, you can quickly create custom reports to analyze your AWS cost and usage data.

Which component or service enables you to establish a dedicated private connection between your data center and virtual private cloud - VPC?

AWS Direct Connect helps you to reduce network costs and increase the amount of bandwidth that can travel through your network.

AWS Elastic Beanstalk

AWS Elastic Beanstalk is an easy-to-use service for deploying and scaling web applications and services. You simply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring. Beanstalk provisions servers so it is not a serverless service.

Which service is used to quickly deploy and scale applications on AWS?

AWS Elastic Beanstalk. You upload your application, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring.

Which service enables you to consolidate and manage multiple AWS accounts from a central location?

AWS Organizations, you can centrally control permissions for the accounts in your organization by using service control policies. Also, you can use the consolidated billing feature in AWS Organizations to combine usage and receive a single bill for multiple AWS accounts.

A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house.Which of the following AWS programs can a customer take advantage of to achieve that outcome?

AWS Partner Network Consulting Partners

AWS Personal Health Dashboard

AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that might affect you. It is not used to get operational insights of AWS resources.

What tool can assist you in estimating your monthly AWS bill?

AWS Pricing Calculator

Which service should be used to estimate the costs of running a new project on AWS?

AWS Pricing Calculator

What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas?

AWS Professional Services

A corporation would like to have a central user portal to log in to third-party business applications as well as accounts managed under AWS Organizations. As a Cloud Practitioner, which AWS service would you use for this task?

AWS Single Sign-on - SSO

Which service is used to transfer up to 100 PB of data to AWS?

AWS Snowmobile is a service that is used for transferring up to 100 PB of data to AWS. Each Snowmobile is a 45-foot long shipping container that is pulled by a semi-trailer truck.

Which mechanism allows developers to access AWS services from application code?

AWS Software Development Kit.

Which of the following inspects AWS environments to find opportunities that can save money for users and also improve system performance?

AWS Trusted Advisor

Which of the following services have Distributed Denial of Service (DDoS) mitigation features?

AWS WAF and CloudFront

Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?

AWS Web Application Firewall (AWS WAF)

Serverless Services

AWS lambda, Amazon S3, DynamoDB, API gateway, Amazon SNS, AWS step functions, Amazon kinesis.

Which of the following is an AWS Well-Architected Framework design principle related to reliability?

Ability to recover from failure.

Which of the following does the Enterprise support plan provide to customers in AWS? (Select TWO.)

Access to online self-paced labs and Proactive Technical Account Management

Which payment plan will give you the largest discount when purchasing EC2 reserved instances?

All upfront payment for a 3-year term purchase

Which of the following is true regarding the AWS Cost and Usage report? (Select TWO.)

Allows you to load your cost and usage information into Amazon Athena, Amazon Redshift, and AWS QuickSight and Provides you with granular data about your AWS costs and usage

Which service enables you to build the workflows that are required for human review of machine learning predictions?

Amazon Augmented AI - Amazon A2I - provides built-in human review workflows for common machine learning use cases, such as content moderation and text extraction from documents.

Which of the following services is a MySQL-compatible database that automatically grows storage as needed?

Amazon Aurora

You want to store data in a key-value database. Which service should you use?

Amazon DynamoDB. In a key-value database, you can add or remove attributes from items in the table at any time. Additionally, not every item in the table has to have the same attributes.

Which AWS services can host a Microsoft SQL Server database?

Amazon EC2 & Amazon Relational Database Service (Amazon RDS)

Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports?

Amazon EC2 dashboard

Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated?

Amazon EC2 instance store.

Which of the following is an AWS-managed compute service?

Amazon EC2.

You want to store data in a volume that is attached to an Amazon EC2 instance. Which service should you use?

Amazon Elastic Block Store. Amazon EBS provides block-level storage volumes that you can use with Amazon EC2 instances. If you stop or terminate an Amazon EC2 instance, all the data on the attached EBS volume remains available.

Which service is used to run containerized applications on AWS?

Amazon Elastic Kubernetes Service - Amazon EKS. Kubernetes is open-source software that enables you to deploy and manage containerized applications at scale.

Amazon Lex

Amazon Lex is a service that enables you to build conversational interfaces using voice and text.

What time-savings advantage is offered with the use of Amazon Rekognition?

Amazon Rekognition provides automatic detection of objects appearing in pictures.

Which services can be used across hybrid AWS Cloud architectures?

Amazon Route 53 & Virtual Private Gateway

Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities?

Amazon S3

You want Amazon S3 to monitor your objects' access patterns. Which storage class should you use?

Amazon S3 Intelligent-Tiering. If you haven't accessed an object for 30 consecutive days, Amazon S3 automatically moves it to the infrequent access tier, Amazon S3 Standard-IA.

In the S3 Intelligent-Tiering storage class, Amazon S3 moves objects between a frequent access tier and an infrequent access tier. Which storage classes are used for these tiers?

Amazon S3 Standard-IA - Infrequent access tier. Amazon S3 Standard - Frequent access tier.

You want to send and receive messages between distributed application components. Which service should you use?

Amazon Simple Queue Service or Amazon SQS. Using Amazon SQS, you can send, store, and receive messages between software components at any volume size, without losing messages or requiring other services to be available.

Amazon Textract

Amazon Textract is a machine learning service that automatically extracts text and data from scanned documents.

Cost Explorer

Analyze cost and usage.

Elastic Load Balancing supports the following types of load balancers:

Application Load Balancers, Network Load Balancers, and Classic Load Balancers.

Compliance Reports

Artifact

Security group

Attached at instance level.

Which actions can you perform in Amazon Route 53?

Connect user requests to infrastructure in AWS and outside of AWS. Manage DNS records for domain names.

Trusted Advisor Five Categories

Cost Optimization. Performance. Security. Fault Tolerance. Service Limits.

Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses?

Dedicated Hosts

Which action can you perform in Amazon CloudFront?

Deliver content to customers through a global network of edge locations. This content might be video files, photos, webpages, and so on.

Which architectural principle is used when deploying an Amazon Relational Database Service (Amazon RDS) instance in Multiple Availability Zone mode?

Design for failure

What is the lowest support plan that allows an unlimited number of technical support cases to be opened?

Developer

Which AWS characteristics make AWS cost effective for a workload with dynamic user demand?

Elasticity & Pay-as-you-go pricing

How can a customer increase security to AWS account logons? (Choose two.)

Enable Multi-Factor Authentication (MFA). Use Amazon Cognito to manage access.

Under the shared responsibility model, which of the following is the customer responsible for?

Ensuring that data is encrypted at rest.

A customer is choosing the best AWS support plan which includes a dedicated Technical Account Manager. Which of the following should they choose?

Enterprise

You have a mission-critical server that is currently down in AWS, and you need to bring it back up within 15 minutes for service continuity. Which of the following support plans will allow you to contact technical support to immediately resolve this issue?

Enterprise

Which Support plans include access to all AWS Trusted Advisor checks?

Enterprise and Business

Which AWS Support plan provides a full set of AWS Trusted Advisor checks?

Enterprise and Business Support

Geoproximity versus Geolocation

Geolocation is location of the user. Geoproximity is location of the resource.

Distributing workloads across multiple Availability Zones supports which cloud architecture design principle?

Implement automation.

CloudFront

Improves performance of cachable web content.

Which of the following AWS services offer block-level storage?

Instance Store and EBS

You are running an Amazon EC2 instance and want to store data in an attached resource. Your data is temporary and will not be kept long term. Which resource should you use?

Instance stores are ideal for temporary data that does not need to be kept long term. When an Amazon EC2 instance is stopped or terminated, all the data that has been written to the attached instance store is deleted.

AWS Compliance

It assures customers that AWS is maintaining physical security and data protection. AWS is responsible for the maintenance of common compliance framework documentation.

How does AWS MOST effectively reduce computing costs for a growing start-up company?

It provides on-demand resources for peak usage.

CodeDeploy

Large scale software deployment to EC2 or on-prem.

Which tasks are the responsibilities of AWS?

Maintaining virtualization infrastructure. Configuring AWS infrastructure devices.

Which disaster recovery scenario offers the lowest probability of down time?

Multi-site active-active

Which Perspective of the AWS Cloud Adoption Framework focuses on recovering IT workloads to meet the requirements of your business stakeholders?

Operations Perspective

Which AWS Trusted Advisor category includes checks for high-utilization EC2 instances?

Performance. AWS Trusted Advisor also helps improve the performance of your services by providing recommendations for how to take advantage of provisioned throughput.

Which migration strategy involves changing how an application is architected and developed, typically by using cloud-native features?

Refactoring.

Reserved Instances

Reserved Instances are a billing discount that is applied to the use of On-Demand Instances. You can purchase Standard and Convertible Reserved Instances for a one-year or three-year term, and Scheduled Reserved Instances for a one-year term. Unlike Savings Plans, Reserved Instances do not require you to commit to a consistent amount of compute usage over the duration of the contract.

Which compute option reduces costs when you commit to a consistent amount of compute usage for a 1-year or 3-year term?

Savings Plans. Amazon EC2 Savings Plans enable you to reduce your compute costs by committing to a consistent amount of compute usage for a 1-year or 3-year term. This results in savings of up to 72% over On-Demand Instance costs.

CodeCommit

Secure code storage.

Which of the following purchase options offers the most significant discount compared to On-Demand instance pricing to process steady-state workloads that will continuously be running for a year?

Standard Reserved Instance

Global Accelerator

Suitable for applications that are non-http/s

Which pillar of the AWS Well-Architected Framework focuses on using computing resources in ways that meet system requirements?

The Performance Efficiency pillar focuses on using computing resources efficiently to meet system requirements, and to maintain that efficiency as demand changes and technologies evolve.

Foundations

The services that are part of foundations are: Amazon VPC, AWS Trusted Advisor, AWS Service Quotas.

In serverless services such as AWS Lambda, what are the implications of the Shared Responsibility Model?

The user is responsible for IAM roles and identities that can invoke the AWS Lambda functions.

AWS Directory Service

Use to enable single sign on - SSO

AWS Certificates Manager

Use to offload SSL. Import third party certificates.

Network ACL

Used at the subnet level.

Cognito Users Pools

Used to manage user authentication to mobile apps.

AWS Detective

Uses machine learning to conduct security investigations.

Systems Manager

View, automate and monitor operational tasks.

Which statement is TRUE for AWS Lambda?

You pay only for compute time while your code is running.

You have an Amazon Linux EC2 instance running for an hour and thirty minutes. How will AWS bill you in terms of usage?

You will be billed for an hour and thirty minutes according to the per-second billing rule