AWS Cloud Practitioner Udemy Exam 5

A production company would like to establish an AWS managed VPN service between its on-premises network and AWS. Which item needs to be set up on the company's side? A VPC endpoint interface A customer gateway A virtual private gateway A security group

A customer gateway

Which service/tool will you use to create and provide trusted users with temporary security credentials that can control access to your AWS resources? AWS Single Sign-On (SSO) AWS Web Application Firewall (AWS WAF) AWS Security Token Service (AWS STS) Amazon Cognito

AWS Security Token Service (AWS STS)

A corporation would like to have a central user portal to log in to third-party business applications as well as accounts managed under AWS Organizations. As a Cloud Practitioner, which AWS service would you use for this task? AWS Cognito AWS Command Line Interface (CLI) AWS Identity and Access Management (IAM) AWS Single Sign-On (SSO)

AWS Single Sign-On (SSO)

A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task? AWS Personal Health Dashboard AWS Systems Manager AWS Trusted Advisor Amazon Inspector

AWS Systems Manager

Which AWS service can inspect CloudFront distributions running on any HTTP web-server? AWS GuardDuty AWS Elastic Load Balancer AWS WAF Amazon Inspector

AWS WAF

The IT infrastructure at a university is deployed on AWS Cloud and it's experiencing a read-intensive workload. As a Cloud Practitioner, which AWS service would you use to take the load off databases? Amazon Relational Database Service (RDS) AWS Glue Amazon ElastiCache Amazon EMR

Amazon ElastiCache

An e-commerce company would like to build a chatbot for its customer service using Natural Language Understand (NLU). As a Cloud Practitioner, which AWS service would you use? Amazon SageMaker Amazon Lex Amazon Comprehend Amazon Rekognition

Amazon Lex

An engineering team is new to the AWS Cloud and it would like to launch a dev/test environment with low monthly pricing. Which AWS service can address this use-case? AWS CloudFormation Amazon LightSail Amazon EC2 Amazon ECS

Amazon LightSail

An organization would like to copy data across different Availability Zones (AZs) using EBS snapshots. Where are EBS snapshots stored in the AWS Cloud? Amazon S3 Amazon EC2 Amazon RDS Amazon EFS

Amazon S3

A company would like to define a set of rules to manage objects cost-effectively between storage classes. As a Cloud Practitioner, which Amazon S3 feature would you use? S3 Transfer Acceleration S3 Bucket policies S3 Lifecycle management S3 Cross-Region Replication (CRR)

S3 Lifecycle management

A company would like to optimize Amazon EC2 costs. Which of the following actions can help with this task? (Select TWO) -Purchase EC2 Reserved instances -Build its own servers -Set up Auto Scaling groups to align the number of instances with demand -Opt for a higher AWS Support plan -Vertically scale the EC2 instances

-Purchase EC2 Reserved instances -Set up Auto Scaling groups to align the number of instances with demand

Which of the following AWS services can be used to generate, use, and manage encryption keys on the AWS Cloud? AWS Secrets Manager AWS GuardDuty AWS CloudHSM Amazon Inspector

AWS CloudHSM

A company needs to use a secure online data transfer tool/service that can automate the ongoing transfers from on-premises systems into AWS while providing support for incremental data backups. Which AWS tool/service is an optimal fit for this requirement? AWS DataSync AWS Snowcone AWS Storage Gateway AWS Snowmobile

AWS DataSync

A company is planning to implement Chaos Engineering to expose any blind spots that can disrupt the resiliency of the application. Which AWS service will help implement this requirement with the least effort? AWS Trusted Advisor Amazon Inspector AWS GuardDuty AWS Fault Injection Simulator

AWS Fault Injection Simulator

Which AWS serverless service allows you to prepare data for analytics? AWS Glue Amazon Athena Amazon Redshift Amazon EMR

AWS Glue

A start-up would like to quickly deploy a popular technology on AWS. As a Cloud Practitioner, which AWS tool would you use for this task? AWS Forums AWS CodeDeploy AWS Quick Starts references AWS Whitepapers

AWS Quick Starts references

The development team at a company manages 300 microservices and it is now trying to automate the code reviews to improve the code quality. Which tool/service is the right fit for this requirement? AWS CodeBuild Amazon CodeGuru AWS X-Ray AWS Trusted Advisor

Amazon CodeGuru

Which AWS service allows you to quickly and easily add user sign-up, sign-in, and access control to web and mobile applications? AWS Organizations AWS Identity and Access Management (IAM) AWS Single Sign-On (SSO) Amazon Cognito

Amazon Cognito

Which types of monitoring can be provided by Amazon CloudWatch? (Select TWO) Performance and availability of AWS services Resource utilization Account management Application performance API access

Application performance Resource utilization

According to the Shared Responsibility Model, which of the following is both the responsibility of AWS and the customer? (Select two) Configuration management Data center security Customer data Operating system (OS) configuration Disposal of disk drives

Configuration management Operating system (OS) configuration

A company would like to reserve EC2 compute capacity for three years to reduce costs. The company also plans to increase their workloads during this period. As a Cloud Practitioner, which EC2 Reserved Instance type would you recommend? Adaptable Reserved Instances Convertible Reserved Instances Standard Reserved Instances Scheduled Reserved Instances

Convertible Reserved Instances

A company would like to separate cost for AWS services by the department for cost allocation. Which of the following is the simplest way to achieve this task? Create one account for all departments and share this account Create different VPCs for different departments Create different accounts for different departments Create tags for each department

Create tags for each department

Which of the following IAM Security Tools allows you to review permissions granted to a user? IAM policies IAM access advisor IAM credentials report Multi-Factor Authentication (MFA)

IAM access advisor

Which of the following criteria are used to charge for Elastic Block Store (EBS) volumes? (Select TWO) Data type Provisioned IOPS The EC2 instance type the EBS volume is attached to Volume type Data transfer IN

Provisioned IOPS Volume type

According to the Well-Architected Framework, which of the following statements are recommendations in the Operational Excellence pillar? (Select two) Make frequent, small, reversible changes Anticipate failure Enable traceability Automatically recover from failure Use serverless architectures

Make frequent, small, reversible changes Anticipate failure

Which security control tool can be used to deny traffic from a specific IP address? AWS GuardDuty Network ACL Security Group VPC Flow Logs

Network ACL

Which of the following billing timeframes is applied when running a Windows EC2 on-demand instance? Pay per minute Pay per second Pay per hour Pay per day

Pay per second

Which of the following services are provided by Amazon Route 53? (Select TWO) Load balancing Health checks and monitoring Domain registration IP routing Transfer acceleration

Health checks and monitoring Domain registration

A company using a hybrid cloud would like to store secondary backup copies of the on-premises data. Which S3 Storage Class would you use for a cost-optimal yet rapid access solution? S3 Standard - Infrequent Access S3 Glacier S3 Standard - General Purposes S3 One Zone - Infrequent Access

S3 One Zone - Infrequent Access

A company would like to move its infrastructure to AWS Cloud. Which of the following should be included in the Total Cost of Ownership (TCO) estimate? (Select TWO) Electronic equipment at office Application advertising Number of end-users Server administration Power/Cooling

Server administration Power/Cooling