Test 5
Which service/tool will you use to create and provide trusted users with temporary security credentials that can control access to your AWS resources?
AWS Security Token (STS)
A corporation would like to have a central user portal to log in to third-party business applications as well as accounts managed under AWS Organizations. As a Cloud Practitioner, which AWS service would you use for this task?
AWS Single Sign-on (SSO)
A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?
AWS System Manager
A media company wants to enable customized content suggestions for the users of its movies streaming platform. Which AWS service can provide these personalized recommendations based on the historic data?
Amazon Personalize
Which of the following are the best practices when using AWS Organizations? (Select TWO)
Restrict account privileges using Service Control Policies (SCP) Create accounts per department
A company using a hybrid cloud would like to store secondary backup copies of the on-premises data. Which S3 Storage Class would you use for a cost-optimal yet rapid access solution?
S3 One Zone - Infrequent Access
Which of the following statements is INCORRECT regarding EBS Volumes?
EBS can be bound to several AZs
Which Amazon EC2 Auto Scaling feature can help with fault tolerance?
Replacing unhealthy instances
Which AWS serverless service allows you to prepare data for analytics?
AWS Glue
A start-up would like to quickly deploy a popular technology on AWS. As a Cloud Practitioner, which AWS tool would you use for this task?
AWS Quick starts references
Which AWS service allows you to quickly and easily add user sign-up, sign-in, and access control to web and mobile applications?
Amazon Cognito
Which of the following AWS services can be used to generate, use, and manage encryption keys on the AWS Cloud?
Cloud HSM
A company would like to create a private, high bandwidth network connection between its on-premises data centers and AWS Cloud. As a Cloud Practitioner, which of the following options would you recommend?
Direct Connect
A start-up would like to monitor its cost on the AWS Cloud and would like to choose an optimal Savings Plan. As a Cloud Practitioner, which AWS service would you use?
Cost Explorer
A company would like to separate cost for AWS services by the department for cost allocation. Which of the following is the simplest way to achieve this task?
Create tags for each department
Which security control tool can be used to deny traffic from a specific IP address?
Network ACL
Which of the following billing timeframes is applied when running a Windows EC2 on-demand instance?
Pay per second
A brand new startup would like to remove its need to manage the underlying infrastructure and focus on the deployment and management of its applications. Which type of Cloud Computing does this refer to?
Platform as a Service (PaaS)
Which of the following criteria are used to charge for Elastic Block Store (EBS) volumes? (Select TWO)
Provisioned IOPS Volume Type
Which of the following options are the benefits of using AWS Elastic Load Balancing (ELB)? (Select TWO)
Fault Tolerance High Availability
Which of the following IAM Security Tools allows you to review permissions granted to a user?
IAM access advisor
A company would like to define a set of rules to manage objects cost-effectively between storage classes. As a Cloud Practitioner, which Amazon S3 feature would you use?
S3 lifecycle management
Which AWS service can be used to send, store, and receive messages between software components at any volume to decouple application tiers?
SQS
A data science team would like to build Machine Learning models for its projects. Which AWS service can it use?
SageMaker
A company would like to optimize Amazon EC2 costs. Which of the following actions can help with this task? (Select TWO)
Set up autoscaling purchase reserved instances
A multinational company has just moved its infrastructure to AWS Cloud and has employees traveling to different offices around the world. How should the company set the AWS accounts?
There is nothing to do, IAM is a global service
Which of the following options is NOT a feature of Amazon Inspector?
Track configuration changes
According to the Well-Architected Framework, which of the following action is recommended in the Security pillar?
Use AWS KMS to encrypt data
Adding more CPU/RAM to an Amazon EC2 instance represents which of the following?
Vertical Scaling
Which AWS service can inspect CloudFront distributions running on any HTTP web-server?
WAF
