AWS Practice Questions (Personal Use - Couple with other Study Sets

Which AWS service can be used to create a Content Distribution Network (CDN) on AWS Cloud?

Amazon CloudFront

Which of the following AWS services are global in scope? (Select two)

Amazon CloudFront AWS Identity and Access Management (IAM)

AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two)

Amazon CloudFront Amazon Elastic Compute Cloud

Which AWS service would you choose for a data processing project to store unstructured data?

Amazon DynamoDB

Which of the following is the best practice for application architecture on AWS Cloud?

Build loosely coupled components

Which of the following AWS Support plans provide programmatic access to AWS Support Center features to create, manage and close your support cases? (Select two)

Business Enterprise

The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)

Cost Optimization Reliability

AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the following categories? (Select two)?

Cost Optimization Service Limits

An e-commerce company uses AWS Cloud and would like to receive separate invoices for development and production environments. As a Cloud Practioner, which of the following solutions would you recommend for this use-case?

Create separate AWS accounts for development and production environments to receive separate invoices

Which of the following can you use to run a bootstrap script while launching an EC2 instance?

EC2 instance user data

Which of the following statements is correct regarding the AWS Elastic File System (EFS) storage service?

EC2 instances can access files on an EFS file system across many Availability Zones, regions and VPCs

Which AWS services support High Availability by default? (Select two)

EFS DynamoDB

Which AWS Route 53 routing policy would you use when you want to route your traffic in an active-passive configuration?

Failover routing policy

Which pillar of the AWS Well-Architected Framework recommends monitoring your application's performance?

Performance Efficiency

Which of the following is correct regarding the AWS RDS service?

You can use Read Replicas for improved read performance and Multi-AZ for Disaster Recovery

An AWS user is trying to launch an EC2 instance in a given region. What is the region-specific constraint that the Amazon Machine Image (AMI) must meet so that it can be used for this EC2 instance?

You must use an AMI from the same region as that of the EC2 instance. The region of the AMI has no bearing on the performance of the EC2 instance

Compared to the On-demand prices, what is the highest possible discount offered for reserved instances?

75

A multi-national company has its business-critical data stored on a fleet of Amazon EC2 instances, in various countries, configured in region-specific compliance rules. To demonstrate compliance, the company needs to submit historical configurations on a regular basis. Which AWS service is best suited for this requirement?

AWS Config

An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?

AWS Config

Which of the following options can be used to access AWS services (Select three)?

AWS Management Console AWS Command Line Interface (CLI) AWS Software Developer Kit (SDK)

A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?

AWS Organizations

Data encryption is automatically enabled for which of the following AWS services? (Select two)?

AWS Storage Gateway Amazon S3 Glacier

Which feature of AWS Cloud offers the ability to innovate faster and rapidly develop, test and launch software applications?

Agility

Which policy describes prohibited uses of the web services offered by Amazon Web Services?

AWS Acceptable Use Policy

An e-commerce company wants to review the Payment Card Industry (PCI) reports on AWS Cloud. Which AWS resource can be used to address this use-case?

AWS Artifact

As per the Shared Responsibility Model, Security and Compliance is a shared responsibility between AWS and the customer. Which of the following security services falls under the purview of AWS under the Shared Responsibility Model?

AWS Shield Standard

A financial services company wants to migrate from its on-premises data center to AWS Cloud. As a Cloud Practitioner, which AWS service would you recommend so that the company can compare the cost of running their IT infrastructure on-premises vs AWS Cloud?

AWS Total Cost of Ownership (TCO) Calculator

An organization maintains separate VPCs for each of its departments. With expanding business, the organization now wants to connect all VPCs for better departmental collaboration. Which AWS service will help the organization tackle the issue effectively?

AWS Transit Gateway

A multi-national organization has separate VPCs for each of its business units on the AWS Cloud. The organization also wants to connect its on-premises data center with all VPCs for better organization-wide collaboration. Which AWS services can be combined to build the MOST efficient solution for this use-case? (Select two)

AWS Transit Gateway AWS Direct Connect

An IT company is on a cost-optimization spree and wants to identify all EC2 instances that are under-utilized. Which AWS service can be used to address this use-case?

AWS Trusted Advisor

Which AWS service can help you analyze your infrastructure to identify unattached or underutilized EBS volumes?

AWS Trusted Advisor

Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two).

AWS VPN AWS Direct Connect

Which AWS service can be used to provision resources to run big data workloads on Hadoop clusters?

Amazon EMR

Which of the following AWS storage services can be directly used with on-premises systems?

Amazon Elastic File System (Amazon EFS)

Which AWS service can be used for online analytical processing?

Amazon Redshift

Which of the following AWS services offer LifeCycle Management for cost-optimal storage?

Amazon S3

Which AWS service can be used to host a static website with the LEAST effort?

Amazon Simple Storage Service (Amazon S3)

Which of the following AWS services is an example of Software as a Service (SaaS)?

Amazon Simple Storage Service (Amazon S3)

A streaming media company wants to convert English language subtitles into Spanish language subtitles. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

Amazon Translate

According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for IAM? (Select two)

Analyze user access patterns and review IAM permissions Enable MFA on all accounts

Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management entities?

IAM User

Which of the following entities should be used for an Amazon EC2 Instance to access a DynamoDB table?

IAM role

Which pillar of AWS Well-Architected Framework is responsible for making sure that you focus on continually improving your processes and procedures?

Operational Excellence

Which pillar of the AWS Well-Architected Framework recommends maintaining infrastructure as code?

Operational Excellence

Which of the following S3 storage classes do not charge any data retrieval fee? (Select two)

S3 Standard S3 Intelligent-Tiering

Which of the following statements are true regarding Amazon Simple Storage Service (S3) (Select two)?

S3 is a key value based object storage service S3 stores data in a flat non-hierarchical structure

AWS Organizations provides which of the following benefits? (Select two)

Share the reserved EC2 instances amongst the member AWS accounts Volume discounts for Amazon EC2 and Amazon S3 aggregated across the member AWS accounts

The DevOps team at an IT company wants to centrally manage its servers on AWS Cloud as well as on-premise data center so that it can run commands, configure and patch servers at scale. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

Systems Manager

AWS Lambda pricing is based on which of the following criteria? (Select two)

The time it takes for the lambda function to execute Number of requests for the lambda function

Which of the following AWS authentication mechanisms supports a Multi-Factor Authentication (MFA) device that you can plug into a USB port on your computer?

U2F security key

A financial services company wants to ensure that all customer data uploaded on its data lake on Amazon S3 always stays private. Which of the following is the MOST efficient solution to address this compliance requirement?

Use Amazon S3 Block Public Access to ensure that all S3 resources stay private

An IT company has a hybrid cloud architecture and it wants to centralize the server logs for its EC2 instances and on-premises servers. Which of the following is the MOST effective for this use-case?

Use CloudWatch Logs for both the EC2 instance and the on-premises servers

Which AWS entity enables you to privately connect your VPC to an Amazon SQS queue?

VPC Interface Endpoint

An organization maintains a separate Virtual Private Cloud (VPC) for each of its business units. Two units need to privately share data. Which is the most optimal way of privately sharing data between the two VPCs?

VPC Peering

Which of the following are components of an AWS Site-to-Site VPN? (Select two)

Virtual Private Gateway Customer Gateway

Which of the following are benefits of the AWS Web Application Firewall (WAF)? (Select two)

WAF can check for the presence of SQL code that is likely to be malicious (known as SQL injection) WAF can block all requests except the ones that you specify

AWS Trusted Advisor can provide alerts on which of the following common security misconfigurations? (Select two)?

When you don't turn on user activity logging (AWS CloudTrail) When you allow public access to Amazon S3 buckets