Practice Exam
Which AWS service will you use to provision the same AWS infrastructure across multiple AWS accounts and regions? a. AWS CloudFormation b. AWS OpsWorks c. CodeDeploy d. AWS Systems Manager
a. AWS CloudFormation
Which of the following is a container service of AWS? a. AWS Fargate b. AWS Elastic Beanstalk c. Amazon SageMaker d. Amazon Simple Notification Service
a. AWS Fargate
Which of the following are the serverless computing services offered by AWS (Select two) a. AWS Lambda b. AWS LightSail c. Amazon Elastic Compute Cloud (EC2) d. AWS Elastic Beanstalk e. AWS Fargate
a. AWS Lambda e. AWS Fargate
A developer would like to automate operations on his on-premises environment sing Chef and Puppet. Which AWS service can help with this task? a. AWS OpsWorks b. AWS Batch c. AWS CloudFormation d. AWS CodeDeploy
a. AWS OpsWorks
A start-up would like to quickly deploy a popular technology on AWS. As a Cloud Practitioner, which AWS tool would you use for this task? a. AWS Quick Start References b. AWS Whitepapers c. AWS Forums d. AWS CodeDeploy
a. AWS Quick Start References
Which of the following is a hybrid storage service that allows on-premises applications to access data on AWS Cloud? a. AWS Storage Gateway b. AWS Snowball c. AWS Direct Connect d. Amazon EBS
a. AWS Storage Gateway
A financial services company wants to migrate from its on-premises data center to AWS Cloud. As a Cloud Practitioner, which AWS service would you recommend so that the company can compare the cost of running their IT infrastructure on-premises vs AWS Cloud? a. AWS Total Cost of Ownership (TCO) Calculator b. AWS Simple monthly Calculator c. AWS Cost Explorer d. AWS Budgets
a. AWS Total Cost of Ownership (TCO) Calculator
The DevOps team at an e-commerce company is trying to debug performance issues for its serverless application built using a microservices architecture. As a Cloud Practitioner, which AWS service would you recommend addressing this use-case? a. AWS X-Ray b. AWS Trusted Advisor c. Amazon Pinpoint d.AWS CloudFormation
a. AWS X-Ray
A silicon valley based healthcare startup stores anonymized patient health data on Amazon S3. The CTO further wants to ensure that any sensitive data on S3 is discovered and identified. As a Cloud Practitioner, which AWS service would you recommend addressing this use-case? a. Amazon Macie b. Amazon Polly c. Amazon Glue d. Amazon Secrets Manager
a. Amazon Macie
An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model? a. Hybrid deployment b. Private deployment c. Mixed deployment d. Cloud deployment
a. Hybrid deployment
Which benefit of Cloud Computing allows AWS to offer lower pay-as-you-go prices as usage from hundreds of thousands of customers is aggregated in the cloud? a. Massive economies of scale. b. Increased speed and agility. c. Go global in minutes. d. Trade capital expense for variable expense.
a. Massive economies of scale.
What is the primary benefit of deploying an RDS database in a Multi-AZ configuration? a. Multi-AZ enhances database availability b. Multi-AZ reduces database costs c. Multi-AZ protects the database from a regional failure d. Multi-AZ improves database performance for read-heavy workloads
a. Multi-AZ enhances database availability **know the difference between multi-az, multi-region, and Read Replica
Which pillar of the AWS Well-Architected Framework recommends maintaining infrastructure as code? a. Operational Excellence b. Performance Efficiency c. Security d. Cost Optimization
a. Operational Excellence **performs operations as code - IaaS(CloudFormation)
Which of the following S3 storage classes that take the most time to retrieve data (also known as first byte latency) a. S3 Glacier Deep Archive b. S3 Intelligent-Tiering c. S3 Standard d. S3 Glacier
a. S3 Glacier Deep Archive
AWS Organizations provides which of the following benefits? (Select two) a. Share the reserved EC2 instances amongst the member AWS accounts. b. Check vulnerabilities on EC2 instance across the member AWS accounts. c. Provision EC2 Spot Instances across the member AWS accounts d. Deploy patches on EC2 instances across the member AWS accounts. e. Volume discounts to Amazon EC2 and Amazon S3 aggregated across the member AWS accounts.
a. Share the reserved EC2 instances amongst the member AWS accounts. e. Volume discounts to Amazon EC2 and Amazon S3 aggregated across the member AWS accounts.
Which of the following AWS authentication mechanisms supports a Multi-Factor Authentication (MFA) device that you can plug into a USB port on your computer? a. U2F security key b. Virtual MFA device c. SMS text messaged-based MFA d. Hardware MFA device
a. U2F security key
A company uses reserved EC2 instances across multiple units with each unit having its own AWS account. However, some of the units under-utilize their reserved instances while other units need more reserved instances. As a Cloud Practitioner, which of the following would you recommend as the most cost-optimal solution? a. Use AWS Organizations to manage AWS accounts of all units and then share the reserved EC2 instances amongst all units. b. Use AWS Trusted Advisor to manage AWS accounts of all units and then share the reserved EC2 instances amongst all units. c. Use AWS Cost Explorer to manage AWS accounts of all units and then share the reserved EC2 instances amongst all units. d. Use AWS Systems Manager to manage AWS accounts of all units and then share the reserved EC2 instances amongst all units.
a. Use AWS Organizations to manage AWS accounts of all units and then share the reserved EC2 instances amongst all units.
A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon S3. The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on S3? a. Use S3 One-Zone Infrequent Access (One-Zone IA) to store the thumbnails. b. Use S3 Standard to store the thumbnails. c. Use S3 Standard Infrequent Access (Standard-IA) to store the thumbnails. d. Use S3 Glacier to store the thumbnails.
a. Use S3 One-Zone Infrequent Access (One-Zone IA) to store the thumbnails. **review over all the S3 options
An AWS user is trying to launch an EC2 instance in a given region. What is the region-specific constraint that the Amazon Machine Image (AMI) must meet so that it can be used for this EC2 instance? a. You must use an AMI from the same region as that of the EC2 instance. The region of the AMI has no bearing on the performance of the EC2 instance. b. You can use an AMI from a different region, but it degrades the performance of the EC2 instance. c. You should us an AMI from the same region, as it improves the performance of the EC2 instance. d. An AMI is a global entity, so the region is NOT applicable.
a. You must use an AMI from the same region as that of the EC2 instance. The region of the AMI has no bearing on the performance of the EC2 instance. **review
A multi-national corporation wants to get expert professional advice on migrating to AWS and managing their applications on AWS Cloud. Which of the following entities would you recommend for this engagement? a. APN Technology Partner b. APN Consulting Partner c. AWS Trusted Advisor d. Concierge Support Team
b. APN Consulting Partner
Which policy describes prohibited uses of the web services offered by Amazon Web Services? a. AWS Trusted Advisor b. AWS Acceptable Use Policy c. AWS Fair Use Policy d. AWS Applicable Use Policy
b. AWS Acceptable Use Policy **other services don't exist
A Cloud Practitioner would like to deploy identical resources across all regions and accounts using templates while estimating costs. Which AWS service can assist with this task? a. Amazon LightSail b. AWS CloudFormation c. AWS Directory Service d. AWS CodeDeploy
b. AWS CloudFormation
Which AWS service helps you define your infrastructure as code? a. AWS Config b. AWS CloudFormation c. AWS Service Catalog d. AWS CloudTrail
b. AWS CloudFormation (Technology)
Which AWS service can be used to automate code deployment to EC2 instances as well as on-premises instances? a. AWS CodePipeline b. AWS CodeDeploy c. AWS CodeCommit d. AWS CloudFormation
b. AWS CodeDeploy
Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two) a. Amazon CloudWatch b. AWS Identity and Access Management (IAM) c. AWS CloudFormation d.AWS Trusted Advisor e. AWS CloudTrail
b. AWS Identity and Access Management (IAM) d.AWS Trusted Advisor **review
Which AWS service can help you analyze your infrastructure to identify unattached or underutilized EBS volumes? a. AWS Config b. AWS Trusted Advisor c. AWS Inspector d. Amazon CloudWatch
b. AWS Trusted Advisor
An IT company is on a cost-optimization spree and wants to identify all EC2 instances that are under-utilized. Which AWS services can be used to address this use-case? (Select two) a. AWS Budgets b. AWS Trusted Advisor c. AWS Cost & Usage Support d. AWS Cost Explorer e. Amazon CloudWatch
b. AWS Trusted Advisor d. AWS Cost Explorer **One of the 5 categories of Trusted Advisor is "Cost Optimization" that locates LOW utilization of EC2 instances.
A startup runs its proprietary application on docker containers. As a Cloud Practitioner, which AWS service would you recommend so that the startup can run containers and still have access to the underlying servers? a. Amazon Elastic Container Registry (ECR) b. Amazon Elastic Container Service (Amazon ECS) c. AWS Lambda d. AWS Fargate
b. Amazon Elastic Container Service (Amazon ECS) **ECS keyword is "run Docker container on AWS"
Which AWS service can be used to review the compliance and governance-related documents on AWS? a. Service Catalog b. Artifact c. Trusted Advisor d. Secrets Manager
b. Artifact **review
A financial services company wants to ensure that its AWS account activity meets the governance, compliance and auditing norms. As a Cloud Practitioner, which AWS service would you recommend for this use-case? a. Config b. CloudTrail c. Trusted Advisor d. CloudWatch
b. CloudTrail
A company would like to separate cost for AWS services by the department for cost allocation. Which of the following actions can assist with this task? a. Create one account for each department and share this account b. Create tags for each department c. Create different VPCs for different departments d. Create different accounts for different departments
b. Create tags for each department
Which of the following AWS services offer block-level storage? (Select two) a. S3 b. EBS c. ECS d. EFS e. Instance Store
b. EBS
A data analytics company is running a proprietary batch analytics application on AWS and wants to use a storage service which would be accessed by hundreds of EC2 instances simultaneously to append data to existing files. As a Cloud Practitioner, which AWS service would you suggest for this use-case? a. S3 b. EFS c. Instance Store d. EBS
b. EFS
Which of the following AWS Support plans provides access to online training with self-paced labs? a. Business b. Enterprise c. Developer d. Basic
b. Enterprise
Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two) a. Configuration Management is the responsibility of the customer. b. For abstracted services like Amazon S3, AWS operate the infrastructure layer, the operating system, and platforms c. AWS is responsible for Security "of" the Cloud. d. For a service like Amazon EC2, that falls under infrastructure as a Service, AWS is responsible for maintaining guest operating system
b. For abstracted services like Amazon S3, AWS operate the infrastructure layer, the operating system, and platforms c. AWS is responsible for Security "of" the Cloud.
Multi AZ (Availability Zone) deployment is an example of which of the following? a. Horizontal Scaling b. High Availability c. Performance Efficiency d. Vertical Scaling
b. High Availability
Which of the following AWS services are always free to use (Select two)? a. Simple Storage Service (Amazon S3) b. Identity and Access Management (IAM) c. Elastic Compute Cloud (Amazon EC2) d. DynamoDB e. AWS Auto Scaling
b. Identity and Access Management (IAM) e. AWS Auto Scaling
Which of the following are advantages of using the AWS Cloud? (Select TWO) a. AWS is responsible for security in the cloud b. Increase speed and agility c. Stop guessing about capacity d. Limited scaling e. Trade operational expense for capital expense
b. Increase speed and agility c. Stop guessing about capacity
A startup wants to provision an EC2 instance for the lowest possible cost for a long-term duration but needs to make sure that the instance would never be interrupted. As a Cloud Practitioner, which of the following options would you recommend? a. Spot Instance b. Reserved Instance c. Dedicated Host d. On-Demand Instance
b. Reserved Instance Reserved Instances provide you with significant savings (up to 75%) on your Amazon EC2 costs compared to On-Demand Instance pricing. Reserved Instances are not physical instances, but rather a billing discount applied to the use of On-Demand Instances in your account. You can purchase a Reserved Instance for a one-year or three-year commitment, with the three-year commitment offering a bigger discount. Reserved instances cannot be interrupted.
A company would like to optimize Amazon EC2 costs. Which of the following actions can help with this task? (Select TWO) a. Vertically scale the EC2 instances b. Set up Auto Scaling Groups to align the number of instances with demand c. Purchase EC2 Reserved Instances d. Opt for a higher AWS Support plan e. Build its own servers
b. Set up Auto Scaling Groups to align the number of instances with demand c. Purchase EC2 Reserved Instances
Which of the following options is NOT a feature of Amazon Inspector? a. Automate security assessments b. Track configuration changes c. Analyze against unintended network accessibility d. Inspect running operating systems (OS) against known vulnerabilities
b. Track configuration changes **didn't see this option in the aws service pdf description
Which AWS Route 53 routing policy would you use to route traffic to multiple resources and also choose how much traffic is routed to each resource? a. Failover routing policy b. Weighted routing policy c. Simple routine policy d. Latency routing policy
b. Weighted routing policy *honestly no clue...
Which of the following options are the benefits of using AWS Elastic Load Balancing (ELB)? (select two) a) Storage b) Agility c) Fault Tolerance d) Less costly e) High availability
c) Fault Tolerance e) High availability
An intern at an IT company provisioned a Linux based On-demand EC2 instance with per-second billing but terminated it within 30 seconds as he wanted to provision another instance type. What is the duration for which the instance would be charged? a. 600 seconds b. 300 seconds c. 60 seconds d. 30 seconds
c. 60 seconds (Billing and Pricing)
Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement? a. AWS Trusted Advisor b. AWS Key Management Service (KMS) c. AWS CloudHSM d. AWS Secrets Manager
c. AWS CloudHSM
Which of the following AWS services can be used to forecast your AWS account usage and costs? a. AWS Budgets b. AWS Cost and Usage Reports c. AWS Cost Explorer d. AWS Simple Monthly Calculator
c. AWS Cost Explorer
A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task? a. Amazon Trusted Advisor b. Amazon Inspector c. AWS Systems Manager d. AWS Personal Health Dashboard
c. AWS Systems Manager
Which entry ensures that your application on Amazon EC2 always has the right amount of capacity to handle the current traffic demand? a. Application Load Balancer b. Multi AZ deployment c. Auto Scaling d. Network Load Balancer
c. Auto Scaling
Which of the following statements is the MOST accurate when describing AWS Elastic Beanstalk? a. It is an infrastructure as Code which allow you to model and provision resources needed for an application. b. It is a Platform as a Service (PaaS) which allows you to model and provision resources needed for an application c. It is a Platform as a Service (PaaS) which allows you to deploy and scale web applications and services. d. It is an Infrastructure as a Service (IaaS) which allows you to deploy and scale web applications and services.
c. It is a Platform as a Service (PaaS) which allows you to deploy and scale web applications and services.
An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two) a. Step Function b. EC2 Instance c. Lambda d. Systems Manager e. CloudWatch
c. Lambda e. CloudWatch
What is the primary benefit of deploying an RDS database in a Read Replica configuration? a. Read Replica reduces database usage costs b. Read Replica protects the database from a regional failure c. Read Replica improves database scalability d. Read Replica enhances database availability
c. Read Replica improves database scalability
A medical device company is looking for a durable and cost-effective way of storing their historic data. Due to compliance requirements, the data must be stored for 10 years. Which AWS Storage solution will you suggest? a. Amazon EFS b. S3 Glacier c. S3 Glacier Deep Archive d. AWS Storage Gateway
c. S3 Glacier Deep Archive
Which design principle of the AWS Well-Architected Framework can answer the question- "Who did what"? a. Performance Efficiency b. Reliability c. Security d. Operational Excellence
c. Security
An organization maintains a separate Virtual Private Cloud (VPC) for each of its business units. Two units need to privately share data. Which is the most optimal way of privately sharing data between the two VPCs? a. AWS Direct Connect b. VPC Endpoint c. VPC Peering d. Site to Site VPN
c. VPC Peering
Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues? a. Amazon CloudWatch b. AWS Inspector c. AWS Service Health Dashboard d. AWS Personal Health Dashboard
d. AWS Personal Health Dashboard
Which AWS service can be used to subscribe to an RSS feed to be notified of services' interruptions? a. Amazon SNS b. AWS Lambda c. AWS Personal Health Dashboard d. AWS Service Health Dashboard
d. AWS Service Health Dashboard
A corporation would like to have a central user portal to log in to third-party business applications as well as accounts managed under AWS Organizations. As a Cloud Practitioner, which AWS service would you use for this task? a. AWS Command Line Interface (CLI) b. AWS Cognito c. AWS Identity and Access Management (IAM) d. AWS Single Sign-On (SSO)
d. AWS Single Sign-On (SSO)
AWS Marketplace facilitates which of the following use-cases? (Select two) a. Raise request for purchasing AWS Direct Connect connection b. Buy Amazon EC2 Standard Reserved instances c. Purchase compliance documents from third-party vendors d. AWS customer can buy software that has been bundled into customized AMI's by the AWS Marketplace sellers e. Sell SaaS solutions to AWS customers
d. AWS customer can buy software that has been bundled into customized AMI's by the AWS Marketplace sellers e. Sell SaaS solutions to AWS customers **review
Which AWS service would you choose for a data processing project to store unstructured data? a. Amazon RDS b. Amazon RedShift c. Amazon Aurora d. Amazon DynamoDB
d. Amazon DynamoDB
Data encryption is automatically enabled for which of the following AWS services? (Select two) a. Amazon RedShift b. Amazon EBS volumes c. Amazon EFS drives d. Amazon S3 Glacier e. AWS Storage Gateway
d. Amazon S3 Glacier e. AWS Storage Gateway
A cyber-security agency uses AWS Cloud and wants to carry out security assessments on their own AWS infrastructure without any prior approval from AWS. Which of the following describes/facilitates this practice? a. AWS Secrets Manager b. Amazon Inspector c. Network Stress Testing d. Penetration Testing
d. Penetration Testing
Which of the following are the best practices when using AWS Organizations? (Select two) a. Do not use AWS Organizations to automate AWS account creation b. Never use tags for billing c. Disable CloudTrail on several accounts d. Restrict account privileges using Service Control Policies (SCP) e. Create accounts per department
d. Restrict account privileges using Service Control Policies (SCP) e. Create accounts per department
A unicorn startup is building an analytics application with support for a speech-based interface. The application will accept speech-based input from users and then convey results via speech. As a Cloud Practitioner, which solution would you recommend for the given use-case? a. Use Amazon Polly to convert speech to text for downstream analysis. Then use Amazon Translate to convey the text results via speech. b. Use Amazon Translate to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech. c. Use Amazon Polly to convert speech to text for downstream analysis. Then use Amazon Transcribe to convey the text results via speech. d. Use Amazon Transcribe to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech.
d. Use Amazon Transcribe to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech.
An IT company has a hybrid cloud architecture and it wants to centralize the server logs for its EC2 instances and on-premises servers. Which of the following is the MOST effective for this use-case? a. Use CloudWatch Logs for the EC2 instance and CloudTrail for the on-premises servers. b. Use AWS Lambda to send log data from EC2 instance as well as on premise servers to CloudWatch Logs. c. Use CloudTrail for the EC2 instance and CloudWatch Logs for the on-premise servers. d. Use CloudWatch Logs for both the EC2 instance and the on-premise servers
d. Use CloudWatch Logs for both the EC2 instance and the on-premise servers
A financial services enterprise plans to enable Multi-Factor Authentication (MFA) for its employees. For ease of travel, they prefer not to use any physical devices to implement MFA. Which of the below options is best suited for this use case? a. Soft Token MFA device b. Hardware MFA device c. U2F security key d. Virtual MFA device
d. Virtual MFA device
