CCP Practice Exam 1

Which of the following is correct? -# of Edge Locations > # of Availability Zones > # of Regions -# of Regions > # of Availability Zones > # of Edge Locations -# of Availability Zones > # of Regions > # of Edge Locations -# of Availability Zones > # of Edge Locations > # of Regions

-# of Edge Locations > # of Availability Zones > # of Regions

Which of the following is correct? -# of Regions > # of Availability Zones > # of Edge Locations -# of Availability Zones > # of Edge Locations > # of -Regions -# of Availability Zones > # of Regions > # of Edge Locations -# of Edge Locations > # of Availability Zones > # of Regions

-# of Edge Locations > # of Availability Zones > # of Regions

The AWS Web Application Firewall can go down to which of the following OSI layers? -4 -5 -6 -7

-7

What is an AWS Region? -A region is a geographical area divided into Availability Zones. Each region contains at least two Availability Zones. -A region is an independent data center, located in different countries around the globe. -A region is a subset of AWS technologies. For example, the Compute region consists of EC2, ECS, Lambda, etc. -A region is a collection of Edge Locations available in specific countries.

-A region is a geographical area divided into Availability Zones. Each region contains at least two Availability Zones.

Which of the following best describes a Resource Group? -A resource group is a collection of resources of the same type (EC2, S3, etc.) that are deployed in the same Availability Zone. -A resource group is a collection of resources that are deployed in the same Availability Zone. -A resource group is a collection of resources of the same type (EC2, S3, etc.) that share one or more tags or portions of tags. -A resource group is a collection of resources that share one or more tags (or portions of tags.)

-A resource group is a collection of resources that share one or more tags (or portions of tags.)

Which of the following best describes EBS? -A NoSQL database service -A Virtual Hard Disk in the cloud -A bitcoin-mining service -A Managed Database service

-A virtual hard disk in the cloud

Which of the following are Migration services? (multiple answer) -AWS OpsWorks -AWS Application Discover Service -AWS Snowball -AWS Config

-AWS Application Discover Service -AWS Snowball

You are an AWS Enterprise customer with questions about billing and you overall AWS account? Which of the following AWS support personnel should you contact? -AWS Support -AWS Technical Account Manager -AWS Billing and Accounts -AWS Concierge

-AWS Concierge

Which of the following are storage services? (multiple answer) -AWS EFS -S3 -AWS VPC -AWS RDS

-AWS EFS -S3

Which of the following are storage services? (multiple answer) -AWS VPC -AWS RDS -AWS Elastic File System -S3

-AWS Elastic File System -S3

Which of the following AWS services can assist you with cost optimization? -AWS Shield -AWS Trusted Advisor -AWS WAF -AWS Inspector

-AWS Trusted Advisor

Which of the following AWS services can help you assess the fault-tolerance of your AWS environment? -AWS WAF -AWS Trusted Advisor -AWS Shield -AWS Inspector

-AWS Trusted Advisor

Which of the following are best practices when it comes to securing your Root AWS account? (multiple answer) -Use groups to assign permissions. -Delete your Root account password. -Activate MFA on the Root Account. -Create individual IAM users. -Store your Root account keys on your application for easy access. -Apply an IAM password policy. -Delete your Root access keys.

-Activate MFA on the Root Account. -Use groups to assign permissions. -Create individual IAM users. -Apply an IAM password policy. -Delete your Root access keys.

Which of the following are principles of sound cloud design? (multiple answer) -Tightly-coupled components -Limit the number of 3rd-party services. -Assume *everything* will fail. -Disposable resources -Infrastructure as code -Treat your servers like pets, not cattle. -Scalability

-Assume *everything* will fail. -Disposable resources -Infrastructure as code -Scalability

Which of the following is AWS' managed database service that is up to 5X faster than a traditional MySQL database. -PostgreSQL -MariaDB -Aurora -DynamoDB

-Aurora

With RDS, read-replicas are available for which of the following? (multiple answer) -MS SQLServer -Aurora -Oracle -MariaDB -MySQL -PostgreSQL

-Aurora -Oracle -MariaDB -MySQL -PostgreSQL

The load on your application fluctuates by day of the week. Wednesdays have the most traffic; Saturdays have the least traffic. Which AWS service allows you to ensure you have the correct amount of compute capacity while also optimizing on a cost basis? -CloudWatch -EC2 Container Service -Trusted Advisor -Auto Scaling

-Auto Scaling

Which of the following are a collection of data centers within a specific region? -Edge Locations -Availability Zones -Regions -AWS Origins

-Availability Zones

Which of the following support plans features a < 4-hour response time in the event of an impaired production system? -Developer -Individual -Basic -Business

-Business

Which of the following AWS services are free to use? (multiple answer) -RDS -CloudFormation -Auto-Scaling -EBS -Elastic Beanstalk -EC2 -IAM -S3 -VPC -Route53

-CloudFormation -Auto-Scaling -IAM -Elastic Beanstalk -VPC

Which of the following are components of the AWS Assurance Program? (multiple answer) -Partner Validations -Certifications/Assertions -Following industry best practices -Complianace with Laws and Regulations -Customer Testimonials

-Complianace with Laws and Regulations -Certifications/Assertions

Under the Shared Responsibility model, for which of the following does AWS not assume responsibility? -Customer Data -Physical security of AWS Facilities -Hypervisors -Networking

-Customer Data

Which of the following support plans features unlimited (customer-side) contacts and unlimited support cases? (multiple answer) -Developer -Business -Enterprise -Basic

-Developer -Business -Enterprise

Which of the following best describes Availability Zones? -Distinct locations from within an AWS region that are engineered to be isolated from failures -A Content Distribution Network used to deliver content to users -Two zones containing compute resources that are designed to automatically maintain synchronized copies of each other's data. -Restricted areas designed specifically for the creation of Virtual Private Clouds.

-Distinct locations from within an AWS region that are engineered to be isolated from failures

You need a "virtual hard disk" for your EC2 instance. Which of the following should you use? -S3 -DDB -EBS -RDS

-EBS

Which of the following are AWS Compute Services? (multiple answer) -SNS -EC2 -Lambda -RDS

-EC2 -Lambda

Which of the following below can be specified as an origin when creating a CloudFront distribution? (multiple answer) -An RDS Instance -An ELB -A domain name -An S3 bucket

-ELB/Domain name/S3 bucket

You want to run your application on a PaaS infrastructure, and you need to be able to select both your instance type and your database. Which of the following services should you choose? -Elastic Beanstalk -Lightsail -Lambda -EC2

-Elastic Beanstalk

Which of the following is not a compute service? -Elastic Beanstalk -Elastic Block Store -Lambda -EC2

-Elastic Block Store

Which of the following best describes the ability to scale computing resources up or down easily, while only paying for the resources used? -High Availability -Scalability -Fault Tolerance -Elasticity

-Elasticity

Which of the following best describes a system that will remain operational even in the event of a component failure? -Highly available -Scalable -Elastic -Fault Tolerant

-Fault Tolerant

You are using your corporate directory to grant your users access to AWS services. What is this called? -User Group Access -Multifactor Authentication Access -Federated Access -Role-based access

-Federated Access

Which of the following Compliance guarantees attests to the fact that the AWS Platform has met the standard required for the secure storage of medical records in the US? -HITECH -HIPAA -HIPPA -GLBA -FERPA

-HIPAA

Which of the following are principles of sound design when it comes to security? (multiple answers) -Secure your physical resources. -Apply security at all layers. -Apply security to your application only. -Implement the Principle of Least Privilege -Enable traceability.

-Implement the Principle of Least Privilege -Enable traceability -Apply security at all layers.

Which of the following are advantages of cloud computing? (multiple answer) -Requires large amounts of capital -Increased speed and agility -Variable expense -The ability to 'go global' in minutes -Elasticity - you need not worry about capacity.

-Increased speed and agility -Variable expense -The ability to 'go global' in minutes -Elasticity - you need not worry about capacity.

You need to run your code, but you don't want to worry about provisioning or managing servers. Which of the following AWS services would you choose? -VMWare cloud -Elastic Container Service -Lambda -EC2

-Lambda

Which of the following are criteria affecting your billing for RDS? -Data transfer in -Additional storage -Clock hours of server time -Standby time -Number of requests

-Number of requests -Clock hours of server time -Additional storage

Which of the following are characteristics of cloud computing? (multiple answer) -On Demand Delivery -Pay as you go pricing -Services are delivered via the internet -Cloud charges are capital expenditures

-On Demand Delivery -Pay as you go pricing -Services are delivered via the internet

Which of the following Compliance certifications attests to the security of the AWS platform regarding credit card transactions? -SOC1 -SOC2 -ISO 27001 -PCI DSS Level 1

-PCI DSS Level 1

Which of the following are types of cloud computing deployments? (multiple answer) -Public cloud -Private cloud -Hybrid cloud -Mixed cloud

-Public cloud -Private cloud -Hybrid cloud

You need to re-create an EBS volume that you have used previously. How might you go about doing that? -Re-create the volume from a snapshot. -Use a CloudFormation template to recreate the volume. -Copy the AMI the volume was based on and spin it up. -Use the copy that lives in the Auto Scaling group.

-Re-create the volume from a snapshot.

Which of the following AWS services is a fast, fully managed data warehouse that makes it simple and cost-effective to analyze all your data using standard SQL and your existing Business Intelligence tools. -DynamoDB -Elastic Map Reduce (EMR) -Kinesis -Redshift

-Redshift

Which of the following are geographical areas that host two or more Availability Zones? -Edge Locations -AWS Origins -Compute Zones -Regions

-Regions

Which of the following are valid EC2 pricing options? -Enterprise -Reserved -On Demand -Stop

-Reserved -On Demand

Which of the following EC2 options is best for long-term workloads with predictable usage patterns? -Dedicated Hosts -On Demand Instances -Reserved Instances -Spot Instances

-Reserved Instances

Which of the following are components of the AWS Risk and Compliance Program? (multiple answer) -Risk Management -Identity and Access Management -Environment Automation -Control Environment -Physical Security -Security Principles -Information Security

-Risk Management -Control Environment -Information Security

Which of the following best describes the ability to scale computing resources up or down easily, while only paying for the resources used? -Elasticity -High Availability -Fault-tolerance -Scalability

-Scalability

You need to find an item in a DynamoDB table using an attribute other than the item's primary key. Which of the following operations should you use? -POST -GET -Scan -Query

-Scan

Which of the following is not part of the AWS Global infrastructure? -Regions -Edge Locations -Security Groups -Availability Zones

-Security Groups

You have a project that will require 90 hours of computing time. There is no deadline, and the work can be stopped and restarted without adverse effect. Which of the following computing options offers the most cost-effective solution? -Spot instances -On demand instances -Reserved instances -Dedicated instances

-Spot instances

Which of the following are principles of sound design when it comes to reliability? (multiple answer) -When in doubt, over-provision -Manage change at the individual resource level -Stop guessing about capacity requirements -Scale horizontally

-Stop guessing about capacity requirements -Scale horizontally

Which AWS Load Balancer types uses a Round-Robin load distribution strategy? (multiple answer) -The ALB uses a Round-Robin strategy 1st to select an ELB node, then selects a target based on the routing rules. -The ALB 1st selects a target based on the routing rule, then uses a -Round-Robin strategy to select a node. -The Classic uses a Round-Robin strategy for HTTP / HTTPS only. -The Classic uses a Round-Robin strategy for TCP listeners only.

-The ALB 1st selects a target based o n the routing rule, then uses a -Round-Robin strategy to select a node. -The Classic uses a Round-Robin strategy for TCP listeners only. Explanation:The Classic will use Round-Robin only for TCP. The ALB will use it for final web server selection after parsing the routing rules.

Your Development team uses four on-demand EC2 instances and your QA team has 5 reserved instances, only three of which are being used. Assuming all AWS accounts are under a single AWS Organization, how will the Development team's instances be billed? -All the Dev instances will be billed at the reserved instance rate. -The pricing for the reserved instances will shift from QA to Dev. -The Dev team will be billed for two instances at on-demand prices and two instances at the reserved instance price -All the Dev team's instances will be billed at the on-demand rate.

-The Dev team will be billed for two instances at on-demand prices and two instances at the reserved instance price -->Assuming all instances are in the same AWS Organization, the reserved instance pricing for the unused QA instances will be applied to two of the four Dev instances.

Which of the following are advantages of cloud computing? (multiple answer) -Requires large amounts of capital -The ability to 'go global' in minutes -Elasticity - you need not worry about capacity. -Variable expense -Increased speed and agility

-The ability to 'go global' in minutes -Elasticity - you need not worry about capacity. -Variable expense -Increased speed and agility

With AWS Relational Database Service (RDS), you are responsible for which of the following? -Database backups -Database software installation and patching -Scaling -The optimization of your application using RDS -Operating system installation and patching

-The optimization of your application using RDS

Which of the following are principles of sound design when it comes to performance efficiency? (multiple answer) -Use Serverless architectures. -Democratize advanced technologies. -Have your IT staff master all new technologies. -Mechanical empathy -Deploy into multiple Regions to go global in minutes.

-Use Serverless architectures. -Democratize advanced technologies. -Deploy into multiple Regions to go global in minutes.

Which of the following are best practices when it comes to securing your Root AWS account? (multiple answer) -Create individual IAM users. -Apply an IAM password policy. -Store your Root account keys on your application for easy access. -Delete your Root access keys. -Activate MFA on the Root Account. -Delete your Root account password. -Use groups to assign permissions.

-Use groups to assign permissions. -Delete your Root access keys. -Activate MFA on the Root Account. -Create individual IAM users. -Apply an IAM password policy.

Which of the following AWS services are free to use? (multiple answer) -VPC -Elastic Beanstalk -EC2 -Route53 -IAM -Auto-Scaling -EBS -RDS -S3 -CloudFormation

-VPC -Elastic Beanstalk -IAM -Auto-Scaling -CloudFormation

Which of the following are advantages of Cloud Computing? (multiple answer) -Variable Expense -Elasticity -Increased Speed and Agility -The ability to 'go global' in minutes -Requires large amounts of capital

-Variable Expense -Elasticity -Increased Speed and Agility -The ability to 'go global' in minutes

Generally there are at least ________ Availability Zones per region?

2

Which of the following are payment options for reserved instances? -AURI -DURI -PURI -MURI -NURI

AURI - all upfront PURI - partial upfront NURI - none upfront

Which of the following is AWS' managed DDoS protection service? -AWS WAF -Security Groups -Access Control Lists -AWS Shield

AWS Shield

______________________________ is a highly scalable, high performance container management service that supports Docker containers and allows you to easily run distributed applications on a managed cluster of Amazon EC2 instances

Amazon Elastic Container Service (ECS)

______________________________ is an Amazon Web Services (AWS) tool for big data processing and analysis.

Amazon Elastic Map Reduce (EMR)

Which of the following AWS Support plan levels offers 24x7 support via phone or chat? -Business -Developer -Individual -Basic

Business

Which of the following is not a fundamental AWS charge? -Data out -Storage -Data in -Compute

Data in

True or False: AWS is responsible for security in the cloud.

False

True or False: For IaaS resources, AWS is responsible for the security of everything above the hypervisor layer.

False

True or False: Objects stored in S3 are stored in a single, central location within AWS.

False

True or False: Private subnets have direct, private access to the internet.

False

True or False: There are more Regions than there are Availability Zones?

False

True or False: With Consolidated Billing, the Paying Account can make changes to any of the resources owned by a Linked Account.

False, The Paying Account cannot make changes to any of the resources owned by a Linked Account.

True or False: The Standard version of AWS Shield offers automated application (layer 7) traffic monitoring.

False, only AWS Shield advanced offers automated application layer monitoring

True or False: To restrict access to an entire bucket, you use bucket control lists; and to restrict access to an individual object, you use bucket policies.

False, policies restrict entire bucket access and control lists restrict access to individual objects

True or False: To complete the process of creating a Multi-AZ RDS instance, you must copy the primary instance to a public subnet in a second Availability Zone.

False, you must copy the primary instance to a private subnet

IAM Policy documents are written in which of the following formats? -YAML -XML -SGML -JSON

JSON

You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? -Security Groups -NAT Gateway -Route Tables -Network Access Control Lists

NAT Gateway: A NAT Gateway is required to allow resources in a private subnet to access the internet.

True or False: A Distribution is what we call a series of Edge locations that make up CDN.

True

True or False: AWS is responsible for security of the cloud.

True

True or False: AWS is responsible for the security of Edge Locations.

True

True or False: AWS is responsible for the security of managed Foundation Services, such as Amazon RDS.

True

True or False: By default, the Root user of every AWS account has full access to all AWS services. As such, the Root user should never be used for normal daily operations.

True

True or False: Customer responsibility for the security of services in the cloud vary by service

True

True or False: For IaaS resources, Users are not responsible for security of everything above the hypervisor.

True

True or False: If you create a Classic Load Balancer via the AWS Management Console, cross-Availability Zone load balancing is enabled by default.

True

True or False: S3 is object storage suitable for the storage of "flat" files like Word documents, photos, etc.

True

True or False: With AWS Organizations, you can use either just the Consolidated Billing feature, or all the offered features.

True

True or False: With DynamoDB, you can specify the amount of throughput you need for read and write operations.

True