Cloud Essentials Knowledge Badge Assessment

Cloud Architect Comments: Cloud architect is responsible for building on-premises to cloud migration strategy. Cloud Architect responsibilities includes designing cost effective and high available cloud infrastructure.

A Web application company is migrating their on-premises infrastructure to the AWS Cloud. Their IT team consists of the CTO, Infrastructure/Cloud Architect, System Administrator and Network Administrator to support their on-premises infrastructure. Who in this organization is responsible for building a cloud migration strategy?

Elastic Load Balancing Comments: Elastic Load Balancing automatically distributes your incoming application traffic across all the EC2 instances that you are running.

A company decided to host their new e-commerce application on a fleet of Amazon EC2 instances. Which AWS service should they use so that the user demands can be evenly distributed across the EC2 instances to ensure high availability?

Replatforming Comments: This strategy involves few cloud optimizations. In this case company migrated to cloud native services without any major changes.

A company has an on-premises application that runs on virtual machines and uses a relational database in the backend. As the company migrates to the cloud, it is planning to leverage cloud native services. Which migration strategy is the company adopting in this scenario?

Create a NAT gateway in a public subnet of each Availability Zone in the region, with a default route in the private subnet pointing to it. Comments: Highly available: NAT gateways in each Availability Zone are implemented with redundancy. Create a NAT gateway in each Availability Zone to ensure zone-independent architecture.

A company has its application servers deployed in an AWS region in Amazon VPCs with private and public subnets. The application servers are placed in private subnets and often initiate requests to the internet. Which solution would BEST accomplish this task?

On-Demand Instances Comments: With On-Demand Instances, you pay for compute capacity by the second with no long-term commitments.

A company is looking to launch a new website. In the short term, they are expecting irregular workloads that cannot be interrupted. What purchasing option should a company select to optimize their initial cost?

Amazon EC2 Auto Scaling Comments: With EC2 Auto Scaling, you no longer need to guess how many resources are needed to meet changes in demand. As demand increases, more instances can be added. As demand decreases, instances can be removed to help ensure you do not waste resources.

A company is looking to migrate their compute workloads to AWS. They want to ensure that their resources are able to handle additional demand but don't want to overpay for unused resources. What AWS feature would be best suited for this?

It is the customer's responsibility to manage and protect their encryption keys. Comments: Customers are responsible for managing their data (including encryption options), classifying their assets, and using IAM tools to apply the appropriate permissions.

A company is using AWS services to manage and store their data in the AWS Cloud. To protect their data, they have applied encryption. However, they noticed that their data is getting compromised and leaked. Who is responsible to maintain the data security of this company?

With AWS, you can stop guessing capacity and new IT resources are only a click away. Comments: Idle on-premise resources can be eliminated and any unexpected spikes can be met almost instantaneously. You can access as much or as little capacity as you need, and scale up and down as required with only a few minutes notice.

A company wants to be prepared for any unexpected spikes in demand due to the upcoming holiday season. However, they are dependent on their legacy resources and procuring new servers can take a long time. A member on the board suggested moving to the cloud. What benefit can they achieve by migrating to the cloud with their peak business right around the corner?

AWS CloudTrail Comments: AWS CloudTrail allows you to capture and consolidate user activity and API usage across AWS regions and accounts on a single, centrally controlled platform.

A company would like to monitor all of the API activity inside their AWS account. Which AWS service would track the API activity?

Services available within the region Comments: Customer must review the services available in a region to determine if that region meets their needs.

A customer is planning to setup a new workload in the AWS Cloud. Which of the following is a factor to consider when selecting an AWS region for the new workload?

AWS Partner Network (APN) Consulting Partners Comments: An APN Consulting Partner helps an AWS customer implement and manage an AWS cloud deployment. These types of partners include system integrator, managed services providers, and other consultancies and agencies.

A customer would like to design and build a new workload on the AWS Cloud but does not have the AWS expertise to get started. Which AWS program can a customer take advantage of to achieve that outcome?

1. Geographic proximity to players Comments: One factor for selecting AWS regions is the geographic proximity to users. 2. Data residency requirements for personal data of players

A game company wants to deploy its new blockbuster game on AWS. The multi-player game runs over the Internet and requires low latency for a smooth gaming experience. Which aspects should you consider when selecting an AWS Region to deploy the game? (Select TWO)

Compliance Comments: Companies need to follow the specific regulations for their industry in their country such as HIPPA and HITECH.

A healthcare company is planning to migrate its on-premises infrastructure to the AWS Cloud. Their primary focus is to meet all the relevant regulations in order to protect patient data and privacy. Which cloud acquisition principle is MOST important in this situation?

Security: The Security pillar helps customer with design principles to enable traceability, apply security at all layers, protect data in transit and at rest, automate security best practices and prepare for security events.

A healthcare provider plans to migrate its applications and highly sensitive patient data to the AWS Cloud. As a solutions architect, you need to make sure all the data is protected at rest and in transit. Additionally, you need to protect your workload in all layers of the cloud. Which pillar of the AWS Well-Architected Framework includes the guidance to achieve this?

Amazon CloudWatch Alarms

A web development firm wants to cut cost by stopping Amazon EC2 instances that are inactive or unused for a long period of time. Which solution can help the company to achieve their objective with minimal effort?

Scalability Comments: Customers had to over provision to ensure they had enough resources on hand to handle projected growth. The AWS Cloud allows them to scale up or down as needed.

AWS Global Infrastructure allows companies to be flexible and not plan for capacity. Which feature of the cloud can help to achieve this benefit?

AWS CloudTrail Comments: AWS CloudTrail tracks user activity in your AWS account. AWS CloudTrail allows you to understand who has done what and when in your AWS account.

After auditing the configurations of your Amazon EC2 instances, you figure out that one of them has been modified and its instance type doesn't match the expected one. Which AWS service will you use to identify who has performed the Amazon EC2 instance modification?

Amazon CloudFront Comments: Amazon CloudFront is a content delivery network (CDN) service built for high performance, security, and developer convenience. It helps to securely deliver content with low latency and high transfer speeds. Amazon CloudFront uses edge locations to store cached copies of customer content closer to customers for faster delivery.

An e-commerce application is hosted in an AWS region. The end users are located in various countries across the globe and they require low latency access to the web application content. Which AWS service will BEST achieve this goal?

Stop guessing capacity. Comments: By leveraging tools like Amazon EC2 Auto Scaling, companies can stop trying to guess capacity needs and configure their applications and infrastructure to scale elastically.

AnyCompany has developed multiple workloads with unpredictable utilization in their data center and is looking to migrate to AWS. Which benefit of moving to the cloud can help address this challenge?

On-premises deployment provides the greatest level of control over infrastructure, while requiring more management and hardware maintenance at greater overall cost. Comments: On-premises deployment provides the greatest level of control and security, but also requires the organization to manage and maintain the hardware, leading to higher costs compared to cloud-based deployment. This option accurately reflects the logical rationale behind the trade-off between control and cost for on-premises deployment in AWS.

AnyCompany is planning to move their infrastructure and workloads to the cloud but they have specific requirements in regards to infrastructure management, security control, and cost considerations. What is the impact of maintaining an on-premises deployment over cloud-based or hybrid deployment?

Flexible acquisition process Comments: Flexible acquisition processes help enable you to get the latest innovations at the best prices.

As a solutions architect, you are assisting your company to redefine the IT procurement strategy as they prepare to move to the AWS Cloud. Which is the BEST benefit of cloud acquisition when compared to traditional IT?

AWS Well-Architected Framework Comments: The AWS Well-Architected Framework describes key concepts, design principles, and architectural best practices for designing and running workloads in the cloud.

The solutions architect at AnyCompany has been asked by the managers to recommend an approach for reducing costs and improving the security posture of their AWS services usage. Which set of principles and guidelines should the solutions architect recommend to measure AnyCompany's architecture against best practices to identify areas for improvement in cost optimization and security?

Platform Comments: The Platform perspective helps you build an enterprise-grade, scalable, hybrid cloud platform, modernize existing workloads, and implement new cloud-native solutions. Common stakeholders include CTO, technology leaders, architects, and engineers.

You work for a large financial institution that is looking to modernize its IT infrastructure and move its workloads to the cloud. To guide the company's cloud adoption journey, you recommend using the AWS Cloud Adoption Framework (CAF). Which Perspective of the AWS CAF includes principles and patterns for implementing new solutions and migrating on-premises workloads to the cloud?

Cost and Usage Report Comments: AWS Cost and Usage Reports (AWS CUR) contains the most comprehensive set of cost and usage data available.

Your company has a Business Intelligence (BI) team and they have been tasked to build a detailed overall cost intelligence dashboard to visualize cost consumption and provide insights into the trends. They need the source data from AWS to build the dashboard. Which report will provide the source data to build a BI dashboard?

Savings Plans

Your company has a predictable workload and the compute resources change very little month over month. The workload is not flexible and needs minimum disruptions. Which is the most cost-effective pricing model?

AWS Organizations Comments: AWS Organizations allow a user to consolidate and centrally manage multiple AWS accounts.

Your company has fully migrated their infrastructure to the AWS Cloud. The company leadership wants to assign a different account to each department. What service can BEST assist with managing the various AWS accounts?

AWS enables you to go global in minutes. Comments: The AWS Cloud global footprint enables you to quickly deploy applications to customers around the world, while providing them with low latency.

Your company has its main location in the United States and is planning to open another branch in Europe to service its new customers in that region. What is one benefit of moving to the AWS cloud that can help address the need for continued expansion?

Edge Locations Comments: Edge locations provide Points of Presence (PoPs) around the globe to help provide access to your content with the lowest latency possible.

Your company hosts images that are used by several web applications. You want to ensure that those images are served with the lowest latency possible to a global set of customers. Which AWS infrastructure component could be used to help in providing this low latency?

AWS Outposts Comments: AWS Outposts help extend AWS cloud services to on-prem DCs.

Your company is considering adopting cloud technology, but your Chief Technology Officer has concerns about data residency and latency issues for certain applications. They would prefer to run these applications on-premises while still being able to take advantage of AWS services and tools such as Amazon EC2. Which option would BEST fulfill these requirements?

AWS Budgets

Your company is currently hosting its data and services in the AWS Cloud and wants help to control cost and spend. Which AWS service can help with this?

AWS Instance Role Comments: Instance roles are associated with EC2 instances and are the most appropriate role for granting permissions to access Amazon S3.

Your company is hosting a new application on AWS using Amazon Elastic Compute Cloud (EC2) instances. The application needs to access data stored in Amazon Simple Storage Service (S3), and your manager has asked you to choose the most appropriate role for granting access to Amazon S3 for the EC2 instances. Which AWS role should be used to grant permissions?

Protecting the applications as well as the operating systems running on the Amazon EC2 instances. Comments: Security is a shared responsibility between AWS and the customer: AWS is responsible for securing the underlying infrastructure, including physical facilities and the virtualization layer, while the customer is responsible for the security of everything they create and put in the AWS cloud. For Amazon EC2, this includes patching the operating systems as well as the applications running on the instances.

Your company is migrating its applications from on-premises to Amazon Elastic Compute Cloud (Amazon EC2). According to the AWS Shared Responsibility Model, which option are you responsible for?

AWS Elastic Beanstalk Comments: With Elastic Beanstalk, you can quickly deploy and manage applications in the AWS Cloud without having to learn about the infrastructure that runs those applications.

Your company is migrating legacy Apache web applications from on-premises to the AWS cloud. Currently, there is not enough cloud expertise within the company so you are tasked with finding the easiest way to migrate and operate workloads in the cloud. Which service will BEST accomplish this task?

AWS Identity and Access Management (IAM) Comments: IAM enables you to securely control access to AWS services and resources for users.

Your company is planning to use AWS for hosting its production workloads. Your manager has tasked you with identifying the AWS service to use for configuring user access and permissions. Which AWS service BEST accomplishes this task?

Deploy the new application in the cloud. Comments: When deploying on the cloud, the company would be able to keep the legacy applications on premises while benefiting from the increased speed and agility that deploying the new application in the cloud brings.

Your company maintains several legacy applications that are deployed in their on-premises data center. A new business process requires the development of a completely new application for data processing and visualization to leverage modern technologies. Which strategy should be used for the deployment of this new application?

1. You receive significant cost savings when moving to the AWS Cloud. 2. You can focus more on innovation and worry less about infrastructure. Comments: AWS handles the hardware for you. Customers only need to worry about their application.

Your company needs to expand its on-premises infrastructure and is considering migrating to the cloud. What are the benefits of moving to the AWS Cloud? (Select TWO)

Notify users when they are impacted by events.

Your company wants to ensure that they are following the guidance of the Well Architected Framework. What is an example of an Operational Excellence best practice?

Operational Excellence Comments: This pillar helps the customer to understand how to run and monitor systems and process to deliver business value by continually improving processes and procedures.

Your company wants you to focus on running and monitoring your cloud applications in a way that drives continuous improvement to procedures and processes. Which AWS Well-Architected pillar will help you identify the responsibilities in this scenario?

Automate security responses. Comments: AWS provides services such as AWS Config that monitor your account to make sure that services are used in a manner consistent with your organization's best practices.

Your company's Chief Information Security Officer wants to ensure that you are following the best practices of the AWS Well-Architected Framework. What is an example of a security detection best practice?

AWS Cost and Usage Report (CUR) Comments: AWS CUR is the best solution because it can deliver detailed billing data to a persistent store (AWS Simple Storage Service Bucket) in multiple formats that are compatible with most business intelligence tools.

Your company's finance team wants to use their own business intelligence tool to visualize cost and usage. They want detailed billing line items for the last three years automatically available in a persistent store for their business intelligence tool without writing any scripts. Which AWS tool meets their requirements?

AWS Elastic Beanstalk Comments: AWS Elastic Beanstalk is a service for deploying and scaling web applications and services. Upload your code and Elastic Beanstalk automatically handles the deployment from capacity provisioning, load balancing, and auto scaling to application health monitoring.

Your company's on-premises website is experiencing high traffic and crashes frequently. You need a solution to quickly deploy and scale the web application in the cloud. Which is the BEST service to use?

Amazon CloudFront Comments: CloudFront caches content in edge locations, and that content can be served directly from the cache. Since the edge location is physically much closer to the user than the origin server, it has lower latency.

Your e-commerce website has been experiencing slow load times and high latency, especially for customers in regions that are far away from your server location. Which AWS service uses Edge Locations to reduce latency?

Compliance Comments: Customers need to work inside certain geographic requirements or comply with specific regulations.

Your organization is considering cloud adoption in the near future. Which aspect of the cloud acquisition strategy BEST supports the organization's requirements of following industry regulations?

Shared Responsibility Model Comments: Program managers need to think about the shared responsibility model. How can they deploy new programs or projects that exploit the greater visibility and control they have in their new cloud environment.

Your organization is new to the AWS Cloud and you are tasked with creating a cloud procurement strategy. This strategy should include considerations for all internal stakeholders and roles. What is a key consideration for the company leadership when using the cloud?

AWS Comments: AWS has the responsibility of managing the underlying hardware and infrastructure under the Shared Responsibility Model.

In your organization, the systems administrator is responsible for all the physical on-premise infrastructure. After you move the infrastructure to the AWS Cloud, who will be responsible for the physical infrastructure?

Work with a partner from the AWS Partner Network: DDoS simulation testing must be performed by an APN that has been pre-approved by AWS to conduct DDoS simulation tests.

You are a new enterprise customer and your company has just deployed an application on AWS. You do not have the resources within your company for security testing. How can you BEST perform a penetration test and DDoS simulation to determine how resilient your application is to attacks?

Operational Excellence Comments: The Operational Excellence pillar focuses on- Perform operations as code, Make frequent, small, reversible changes, Refine operations procedures frequently, Anticipate failure, Learn from all operational failures.

You are a solutions architect designing a new application for the AWS Cloud. This application will need to be frequently changed using DevOps principles to align with customer needs. Which AWS Well-Architected Framework pillar recommends implementing frequent, small and reversible changes?

Amazon S3 Comments: Amazon S3 is object storage built to store and retrieve any amount of data and any type of data. It offers industry leading durability and virtually unlimited scalability at very low cost.

You are building a Data Lake that should store exponentially growing data that is generated by various applications used in your company. The storage must provide high levels of scalability and data durability at low cost. Which AWS service will you choose to meet the requirements?

AWS Trusted Advisor Comments: AWS Trusted Advisor is a web service that inspects your AWS environment and provides real-time recommendations in accordance with AWS best practices.

You have been tasked with building out AWS solutions in your organization and need to ensure that the resources being built in your environment are following AWS best practices. Which service can provide recommendations around those best practices?

* AWS Cost Anomaly detection

You have just joined a company that recently migrated from on-premises to the AWS Cloud. Your team is currently focusing on building effective cost optimization and monitoring tools. Which tool can help identify irregular spend and identify root causes?