CPSC 4440 AWS ACF Questions
True or False? By default, all data stored in Amazon S3 is viewable by the public.
False
True or False? Private subnets have direct access to the internet.
False
With Amazon VPC, what is the smallest size subnet you can have in a VPC? A. /28 B. /24 C. /26 D. /30
/28
Which of the following AWS tools help your application scale up or down based on demand? (choose two) A. availability zones B. amazon EC2 auto scaling C. AWS cloudformation D. elastic load balancing E. AWS config
B. amazon EC2 auto scaling D. elastic load balancing
What are the three types of load balancers that Elastic Load Balancing offers? A. Internet load balancer B. application load balancer C. network load balancer D. compute load balancer E. compute load balancer F. classic load balancer G. auto scaling load balancer
B. application load balancer C. network load balancer F. classic load balancer
As AWS grows, the cost of doing business is reduced and savings are passed back to the customer with lower pricing. What is this optimization called? A. expenditure awareness B. economies of scale C. matching supply and demand D. EC2 right sizing
B. economies of scale
What is defined as the ability for a system to remain operational even if some of the components of that system fail? A. high durability B. fault tolerance C. high availability D. high durability
B. fault tolerance
True or False? AWS Key Management Service (KMS) enables you to access, audit, and evaluate the configurations of your AWS resources.
False
True or False? Cloud computing provides a simple way to access servers, storage, databases, and a broad set of application services over the internet. You own the network-connected hardware required for these services and Amazon Web Services provisions what you need.
False
True or False? Edge locations are only located in the same general area as regions.
False
True or False? To receive the discounted rate associated with Reserved Instances, you must make a full, upfront payment for the term of the agreement.
False
True or False? Unlimited services are available with the AWS free tier to new AWS customers for 12 months following their AWS sign up date.
False
With Amazon VPC, what is the maximum size IP address range you can have in a VPC? A. /16 B. /24 C. /28 D. /30
/16
You are a solutions architect who works at a large retail company that is migrating its existing infrastructure to AWS. You recommend that they use a custom VPC. When you create a VPC, you assign it to an IPv4 classless inter-domain routing (CIDR) block of 10.0.1.0/24 (256 total addresses). How many IP addresses are available? A. 251 B. 256 C. 250 D. 246
251, 5 are reserved
The AWS well architected framework is organized into how many pillars? A. 3 B. 4 C. 5 D. None of the above
5
There is an audit at your company and they need to have a log of all access to AWS resources in the account. Which of the following services can assist in providing these details? A. Amazon CloudWatch B. AWS CloudTrail C. Amazon EC2 D. Amazon SNS
B. AWS CloudTrail
Where can a customer go to get more details about Amazon Elastic Compute Cloud (EC2) billing activity that took place 3 months ago? A. Amazon EC2 dashboard B. AWS Cost Explorer C. AWS Trusted Advisor dashboard D. AWS CloudTrail logs stored in Amazon S3
B. AWS Cost Explorer
Which component of the AWS Global Infrastructure does Amazon CloudFront use to ensure low latency delivery? A. AWS regions B. AWS edge locations C. AWS availability zones D. Amazon VPC
B. AWS edge locations
What is the service provided by AWS that enables developers to easily deploy and manage applications in the cloud? A. Amazon Elastic Container service B. AWS elastic beanstalk C. AWS opswork D. AWS cloud formation
B. AWS elastic beanstalk
Which of the following services is a server less compute service in AWS? A. AWS config B. AWS lambda C. AWS OpsWorks D. Amazon EC2
B. AWS lambda
You are designing an ecommerce web application that will scale to hundreds of thousands of concurrent users. Which database technology is best suited to hold the session state in this example? A. Amazon Relational Database Service (RDS) B. Amazon DynamoDB C. Amazon Redshift D. Amazon Simple Storage Service (S3)
B. Amazon DynamoDB (no SQL database)
Which of the following best describes a system that can withstand some measures of degradation, experiences minimal downtime, and requires minimal human intervention? A. scalable B. fault-tolerant C. elastic D. highly available
D. highly available
Which of the following are features of Amazon Elastic Block Store (EBS)? (choose two) A. Amazon EBS data is automatically backed up to tape B. Amazon EBS volumes can be encrypted transparently to workloads on the attached instance C. Data on an Amazon EBS volume is lost when the attached instance is stopped D. Data stored on Amazon EBS is automatically replicated within an AZ
B. Amazon EBS volumes can be encrypted transparently to workloads on the attached instance D. Data stored on Amazon EBS is automatically replicated within an AZ
What is the pricing model that enables AWS customers to pay for resources on an as-needed basis? A. Pay as you decommission B. Pay as you go C. Pay as you buy D. Pay as you reserve
B. Pay as you go
Which of these is NOT a benefit of cloud computing over on-premises computing? A. Increase speed and agility B. Pay for racking, stacking, and powering servers C. Eliminate guessing on your infrastructure capacity needs D. Trade capital expense for variable expense E. Benefit from massive economies of scale
B. Pay for racking, stacking, and powering servers
You can use Amazon Elastic Filesystem (EFS) to: A. provide simple, scalable, elastic file storage for use only within AWS B. implement storage for Amazon EC2 instances that multiple virtual machines can access at the same time C. hos ta robust CDN to deliver entire web sites with dynamic, static, and streaming content D. generate user-specific content
B. implement storage for Amazon EC2 instances that multiple virtual machines can access at the same time
Amazon S3 replicates all object __________. A. on multiple volumes within an AZ B. in multiple AZ within the same region C. across multiple regions for higher durability D. on multiple S3 buckets
B. in multiple AZ within the same region
Which of the following is the responsibility of AWS under the AWS shared responsibility model? A. configuring third party applications B. maintaining physical hardware C. security application access and data D. managing custom AMIs
B. maintaining physical hardware
Amazon Elastic Block Store (EBS) is recommended when data _________ and _________. A. requires object level storage B. must be quickly accessible, requiring long-term persistence C. requires an encryption solution D. needs to be stored in a different AZ than the one the EC2 instance is in
B. must be quickly accessible, requiring long-term persistence C. requires an encryption solution
Which of the following are characteristics of Amazon EC2 auto scaling? (choose three) A. only supports dynamic scaling B. responds to changing conditions by adding or terminating instances C. delivers push notifications D. launches instances from a specified amazon machine image (AMI) E. enforces a minimum number of running amazon EC2 instances
B. responds to changing conditions by adding or terminating instances D. launches instances from a specified amazon machine image (AMI) E. enforces a minimum number of running amazon EC2 instances
If your project requires monthly reports that iterate through very large amounts of data, which Amazon EC2 purchasing option should you consider? A. spot instances B. scheduled reserved instances C. dedicated hosts D. on-demand instances
B. scheduled reserved instances
Which of the statements about Availability Zones is not true? A. Availability zones are designed for fault isolation B. AZ are made up of one or more data centers C. A data center can be used for more than one AZ D. AZ are connected to each other using high speed private links
C. A data center can be used for more than one AZ
Which of these are ways to access AWS core services? (Choose three) A. Technical support calls B. AWS Marketplace C. AWS Management Console D. AWS Command Line Interface E. Software Development Kits
C. AWS Management Console D. AWS Command Line Interface E. Software Development Kits
Which component of AWS Global Infrastructure does Amazon CloudFront use to ensure low latency delivery? A. VPC B. Availability Zones C. AWS edge locations D. AWS regions
C. AWS edge locations
After you move to the AWS cloud, you want to ensure that the right security settings are put in place. Which online tool can assist in security compliance? A. Amazon Kinesis B. AWS support C. AWS trusted advisor D. Amazon cloudwatch
C. AWS trusted advisor
What happens when you use VPC to create a new VPC? A. an internet gateway is created by default B. three subnets are created by default: one for each AZ C. three subnets are created by default in one AZ D. A main route table is created by default
D. A main route table is created by default
Why is AWS more economical than traditional data centers for applications with varying compute workloads? A. Amazon EC2 costs are billed on a monthly basis B. customers retain full administrative access to their Amazon EC2 instances C. customers can permanently run enough instances to handle peak workloads D. Amazon EC2 instances can be launched on-demand when needed
D. Amazon EC2 instances can be launched on-demand when needed
Which AWS cloud service is best suited for analyzing data by using standard structured query language (SQL) and your existing business intelligence (BI) tools? A. Amazon Relational Database Service (RDS) B. Amazon Simple storage service glacier C. amazon DynamoDB D. Amazon Redshift
D. Amazon Redshift (best for analyzing data)
What AWS tool lets you explore AWS services and create an estimate for the cost of your use cases on AWS? A. AWS pricing calculator B. AWS budgets C. AWS cost and usage report D. AWS billing dashboard
A. AWS pricing calculator
Which of the following must be specified when launching a new Amazon EC2 windows instance? (choose two) A. Amazon machine image (AMI) B. Amazon EC2 instance type C. password for the administrator account D. the amazon EC2 instance ID
A. Amazon machine image (AMI) B. Amazon EC2 instance type
Which of the following are NOT benefits of AWS Cloud Computing? (Choose two) A. Multiple procurement cycles B. High availability C. High latency D. Temporary and disposable resources E. Fault-tolerant databases
A. Multiple procurement cycles C. High latency
Which of the following can be used as a storage class for an S3 object lifecycle policy? (choose three) A. S3 standard access B. AWS storage gateway C. S3 infrequent access D. Simple storage service glacier E. S3 reduced redundancy storage F. Amazon Dynamo DB
A. S3 standard access C. S3 infrequent access D. Simple storage service glacier
In Amazon DynamoDB, an attribute is __________. A. a fundamental data element B. a collection of items C. a collection of attributes
A. a fundamental data element
What is true about regions? (choose two) A. a region is a physical location that has multiple AZ B. all regions are located in one specific geographic area C. each region is located in a separate geographic area D. they are the physical location of your customers
A. a region is a physical location that has multiple AZ C. each region is located in a separate geographic area
Which of the following elements are used to create an Amazon EC2 auto scaling launch configuration? (choose three) A. amazon machine image (AMI) B. load balancer C. instance type D. virtual private cloud (VPC) and subnets E. amazon elastic block store (EBS) volumes
A. amazon machine image (AMI) C. instance type E. amazon elastic block store (EBS) volumes
Which service would you use to send alerts based on Amazon CloudWatch alarms? A. amazon simple notification service (SNS) B. AWS cloudTrail C. AWS trusted advisor D. Amazon route 53
A. amazon simple notification service (SNS)
What are the four support plans offered by AWS support? A. Basic, developer, business, enterprise B. Basic, startup, business, enterprise C. Free, bronze, silver, gold D. All support is free
A. basic, developer, business, enterprise
Which design principles are recommended when considering performance efficiency? (choose two) A. democratize advanced technologies B. analyze and attribute expenditure C. enable traceability D. match supply with demand E. use server-less architectures
A. democratize advanced technologies E. use server-less architectures
Which of the following are elements of an Auto Scaling group? (choose three) A. minimum size B. health checks C. desired capacity D. maximum size
A. minimum size C. desired capacity D. maximum size
Which of the following are pillars of the AWS well-architected framework? (choose three) A. security B. persistence C. operational excellence D. cost optimization
A. security C. operational excellence D. cost optimization
In Elastic Load Balancing, when the load balancer detects an unhealthy target, which of the following are true? (choose three) A. stops routing traffic to that target B. triggers an alarm C. resumes routing traffic when it detects that the target is healthy again D. resumes routing traffic when manually restarted E. routes traffic to a healthy target
A. stops routing traffic to that target C. resumes routing traffic when it detects that the target is healthy again E. routes traffic to a healthy target
The name of an S3 bucket must be unique ________. A. worldwide across all AWS accounts B. within a region C. across all your AWS accounts D. within your AWS account
A. worldwide across all AWS accounts
For certain services like Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Relational Database Service (Amazon RDS), you can invest in reserved capacity. What options are available for Reserved Instances? (Choose three) A. AURI B. MURI C. NURI D. PURI E. DURI
AURI, NURI, PURI
Which of the following are geographic areas that host two or more Availability Zones? A. AWS origins B. AWS regions C. Compute Zones D. Edge locations
AWS regions
Economies of scale result from ______. A. having many different cloud providers B. having hundreds of thousands of customers aggregated in the cloud C. having hundreds of cloud services available over the internet D. having to invest heavily in data centers and servers
B. having hundreds of thousands of customers aggregated in the cloud
A company has an application, which consists of a .NET layer that connects to a mySQL database. They want to move this application on to AWS and use AWS features such as high availability and automated backups. Which of the following would be an ideal database for this use case? A. Amazon RDS B. Amazon DynamoDB C. Amazon Aurora D. Amazon Redshift
C. Amazon Aurora (mySQL and postgreSQL compatible)
Which of the following services can help you collect important metrics from Amazon Relational Database Service (RDS) and Amazon Elastic Compute Cloud (EC2) instances? A. Amazon CloudFront B. Amazon CloudSearch C. Amazon CloudWatch D. Amazon CloudTrail E. Amazon EC2 Auto Scaling
C. Amazon CloudWatch
Which of the following a compute service? A. Amazon VPC B. Amazon S3 C. Amazon EC2 D. Amazon CloudFront E. Amazon Redshift
C. Amazon EC2
When are free data transfers applicable across AWS? (Choose two) A. Free inbound data transfer across all AWS services in all regions B. Free outbound data transfer across all AWS services in all regions C. Free inbound data transfer for EC2 instances D. Free outbound data transfer between AWS services within the same region
C. Free inbound data transfer for EC2 instances D. Free outbound data transfer between AWS services within the same region
There is no charge for which of the following? (Choose two) A. compute B. storage C. inbound data transfer (with some exceptions) D. outbound data transfer E. data transfer between services within the same AWS region
C. Inbound data transfer (with some exceptions) E. data transfer between services within the same AWS region
Which of these is NOT a cloud computing model? A. Platform as a service B. Infrastructure as a service C. System administration as a service D. Software as a service
C. System administration as a service
Regarding Amazon S3 glacier, what is a vault? A. the rules that determine who may or may not access archives B. an object (photos, videos, files, or documents) C. a container for storing archives D. a policy that identifies who can access content stored in Glacier
C. a container for storing archives
Which of the following must be configured on an elastic load balancing load balancer to expect incoming traffic? A. a port B. a network interface C. a listener D. an instance
C. a listener
If you are developing an application that requires a database with extremely fast performance, fast scalability, and flexibility in the database schema, which service should you consider? A. Amazon relational database service (RDS) B. amazon elasticache C. amazon dynamodb D. amazon redshift
C. amazon dynamodb
Which of the following is a principle when designing cloud-based systems? A. build tightly coupled components B. make infrequent, large batch changes C. assume everything will fail D. use as many services as possible
C. assume everything will fail
Which of the following use cases is appropriate for using Amazon Relational Database Service (RDS)? A. massive read/write rates B. simple GET or PUT requests C. complex transactions D. all of the above
C. complex transactions
Which Amazon EC2 feature ensures your instances will not share a physical host with instances from any other AWS customer? A. amazon VPC B. placement groups C. dedicated instances D. reserved instances
C. dedicated instances
How would a system administrator add an additional layer of login security to a user's AWS management console? A. use amazon cloud directory B. audit AWS IAM roles C. enable multi-factor authentication D. enable AWS CloudTrail
C. enable multi-factor authentication
__________ means the infrastructure has built in component and redundancy and _________ means that resources dynamically adjust to increases or decreases in capacity requirements. A. no human intervention, fault tolerant B. elastic and scalable, no human intervention C. fault tolerant, elastic and scalable D. fault tolerant, no human intervention E. elastic and scalable, fault tolerant
C. fault tolerant, elastic and scalable
Which of the following are best practices to secure your account using AWS identity and access management? (choose two) A. provide users with default administrative privileges B. leave unused and unnecessary users and credentials in place C. manage access to AWS resources D. avoid using IAM groups to grant the same access permissions to multiple users E. define fine-grained access rights
C. manage access to AWS resources E. define fine-grained access rights
Which of the following is an optional security control that can be applied at the subnet layer of a VPC? A. security group B. web app firewall C. network ACL D. firewall
C. network ACL
AWS Trusted Advisor provides insight regarding which five categories of an AWS account? A. performance, cost optimization, access control, connectivity, security B. security, access control, high availability, performance, service limits C. performance, cost optimization, security, fault tolerance, service limits D. security, fault tolerance, high availability, connectivity, service limits
C. performance, cost optimization, security, fault tolerance, service limits
When creating an AWS IAM policy what are the two types of access that can be granted to a user? (choose two) A. institutional access B. authorized access C. programmatic access D. AWS management console access E. administrative root access
C. programmatic access D. AWS management console access
Which Amazon EC2 option is best for long-term workloads with predictable usage patterns? A. spot instances B. on-demand instances C. reserved instances
C. reserved instances
Your web application needs for instances to support steady traffic all of the time. On the last day of the month, the traffic triples. What is the most cost effective way to handle this pattern? A. run 12 reserved instance all the time B. run four on-demand instances constantly, then add eight more on-demand instances on the last day of each month C. run four reserved instances constantly, then add eight on-demand instances on the last day of each month D. run four on-demand instances constantly, then add eight reserved instances on the last day of each month
C. run four reserved instances constantly, then add eight on-demand instances on the last day of each month
In the shared responsibility model, which of the following are examples of "security in the cloud"? (Choose two) A. compliance with compute security standards and regulations B. physical security of the facilities in which the services operate C. security group configurations D. encryption of data at rest and data in transit E. protecting the global infrastructure
C. security group configurations D. encryption of data at rest and data in transit
Which of the following is not one of the four areas of the Performance Efficiency Pillar of the AWS well-architected framework? A. tradeoffs B. selection C. traceability D. monitoring
C. traceability
Which of the following should be done by the AWS account root user? A. secure access for applications B. integrate with other AWS services C. change granular permissions D. change the AWS support plan
D. change the AWS support plan
After initial login, what does AWS recommend as the best practice for the AWS account root user? A. delete the AWS account root user B. revoke all permissions on the AWS account root user C. restrict permission on the AWS account root user D. delete the access keys of the AWS account root user
D. delete the access keys of the AWS account root user
What are the advantages of cloud computing over computing on-premises? A. Avoid large capital purchases B. Use on-demand capacity C. Go global in minutes D. Increase speed and agility E. All of the above
E. All of the above
True or False? Containers contain an entire operating system.
False, containers are smaller than VMs
You need to allow resources in a private subnet to access the internet. Which of the following must be present to enable this access? A. network access control lists B. security groups C. route tables D. NAT gateway
NAT gateway
True or False? AWS Organizations enables you to consolidate multiple AWS accounts so that you centrally manage them.
True
True or False? AWS offers some services at no charge, such as, Amazon Virtual Private Cloud, AWS Identity and Access Management, Consolidated Billing, AWS Elastic Beanstalk, automatic scaling, AWS OpsWorks, and AWS CloudFormation. However, you might be charged for other AWS services that you use in conjunction with these services.
True
True or False? AWS owns and maintains the network-connected hardware required for application services, while you provision and use what you need.
True
True or False? Amazon Simple Storage Service (S3) is an object storage suitable for the storage of flat files like Microsoft Word documents, photos, etc.
True
True or False? Availability Zones within a region are connected through low latency links.
True
True or False? Networking, storage, compute, and databases are examples of service categories that AWS offers.
True
True or False? When you create a bucket in Amazon S3, it is associated with a specific AWS region.
True
True or false? Amazon RDS automatically patches the database software and backs up your database, storing the backups for a user-defined retention periods and enabling point in time recovery.
True
Which AWS networking service enables a company to create a virtual network within AWS? A. AWS config B. Amazon VPC C. Amazon Route 53 D. AWS Direct Connect
VPC
In Amazon DynamoDB, what does the query operation enable you to do? A. query a table using the partition key and an optional sort key filter B. query any secondary indexes that exist for a table C. efficiently retrieve items from a table or secondary index D. all of the above
all of the above
What is included in an Amazon Machine Image (AMI)? A. a template for the root volume for the instance B. launch permissions that control which AWS accounts can use the AMI to launch instances C. a block device mapping that specifies the volumes to attach to the instance when it's launched D. all of the above
all of the above
What should you consider when choosing a database type? A. data size B. data access period C. query frequency D. highly available E. all of the above
all of the above
You can run applications and workloads from a region closer to the end users to __________ latency. A. increase B. decrease
decrease
AWS highly recommends provisioning your compute resources across ________ AZs. A. no B. multiple C. all D. single
multiple
Which of the following is a measure of your system's ability to provide functionality when desired by the user? A. availability B. fault tolerance C. reliability D. performance efficiency
reliability
You need to find an item in an Amazon dynamoDB table using an attribute other than the item's primary key. Which of the following operations should you use? A. PutItem B. Scan C. Query D. GetItem
scan
Which of the following can be used to protect Amazon EC2 instances hosted in AWS? A. AMI B. Security group C. Internet gateway D. All of the above
security group
In the shared responsibility model, AWS is responsible for providing what? A. security of the cloud B. security to the cloud C. security for the cloud D. security in the cloud
security of the cloud