AWS Certified Cloud Practitioner part 1
Which of the following services can be used by the Security team to investigate & analyze root cause of potential security threats on AWS resources ?
*A. Amazon Detective B. AWS Shield C. Amazon GuardDuty D. AWS Security Hub Amazon Detective can be used to identify the root cause of the potential security threat. It collects & analyses data
A financial Organization has an on-premises Data Center that holds large volumes of customers' financial transaction data on its legacy mainframe systems. While accessing transaction data, they have implemented a caching solution in the AWS cloud that will hold the customer's financial data due to performance issues. The transaction data is extremely confidential & is heavy in bandwidth while transferring to the cloud. What connectivity would you recommend for this data transfer? Select the be
*A. Direct Connect with a VPN connection B. Virtual Private Network (VPN) C. AWS Storage Gateway D. AWS Snowball the on-premises data Center bypassing the internet providing a more secure data transfer mechanism
Which of the below statement is CORRECT regarding AWS Global infrastructure?
*A. Each AWS region has multiple Availability Zones B. Many AWS regions has single availability zone C. Availability zones are also known as AWS Local zones D. To provide High Availability, AWS management console and control plane are isolated to a single region
An online marketplace start-up dealing in real estate is planning to move to the cloud. Which of the below is NOT a benefit of moving to the cloud?
*A. Install on a company's own servers. B. Go global in minutes. C. Stop guessing capacity. D. Benefit from massive economies of scale.
What can be termed as a user-defined label that has a key-value pair of variable character length? It is assigned to AWS resources as metadata for administration and management purposes?
*A. Resource Tag B. Resource Group C. Resource Flag D. Tag key
Your company has set up EC2 Instances in a VPC for their application. The IT Security department needs to understand what security mechanisms are available to protect the Instances when it comes to traffic going in and out of the instance. What are the two layers of security provided by AWS in the VPC? (Select TWO)
*A. Security Groups *B. Network ACLs C. DHCP Options D. Route Tables A security group acts as a virtual firewall for your instance to control inbound and outbound traffic A network access control list (ACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets.
Which AWS service gives the user the ability to group AWS resources across different AWS Regions by application and then collectively view their operational data for monitoring purposes?
*A. Systems Manager B. Management Console C. Resource Groups D. Resource Access Manager (AWS RAM) AWS Systems Manager allows users to control their AWS resources by unifying services into a user interface. One in which they can be able to view, automate and monitor operational tasks.
Which of the following may NOT be an Economic benefit to a client using AWS cloud services?
*A. The Client is running a dedicated MySQL Database Server on AWS with his own CPU bound license (BOYL). B. The Client is running Spot Instances for batch data processing workloads. C. The client is running applications with a relatively predictable & consistent resource Demand using AWS Reserved Instances. D. The client is using S3 Intelligent Tiering storage class while uploading objects. E. The client is using an Active - Passive failover routing strategy of his On - Premise Data Center to AWS cloud.
During an Organization audit, the administrator is requested to provide a dossier of security and compliance reports and online service agreements between the organization and AWS. Which service can they Utilize to acquire this information?
*A. AWS Artifact B. AWS Resource Center C. AWS Service Catalog D. AWS Directory Service AWS Artifact is a comprehensive resources center to have access to the AWS auditor-issued reports and security and compliance .
Which AWS service can the developers use to store the source ?
*A. AWS CodeCommit B. AWS CodeDeploy C. AWS Lambda D. AWS CodeStar AWS CodeCommit is a managed source control service
Move on-premises workload to AWS I need to visualize the service utilization. Which AWS services mention below help me to view and analyze the costs and usages which has been usesd?
*A. AWS Cost explorer B. AWS Budget C. Aws organization D. Cloud watch Dashboard AWS cost explorer view my cost data as graph
A financial company with many resources running on AWS would like a machine learning-driven and proactive security solution that would promptly identify security vulnerabilities particularly flagging suspicious or abnormal data patterns or activity between AWS services. Which AWS service would best meet this requirement ?
*A. AWS Detective B. AWS Macie C. AWS Shield D. Amazon Cloud Watch Anomaly Detection AWS Detective is a persistent machine learning-driven service that automatically collates log data from all AWS resources.
A developer team is creating a new mobile app using AWS resources which will be accessed by thousands of users. Which of the following services can be used for creating a directory for managing sign-in for these users?
*A. Amazon Cognito Users pools B. Amazon Cognito identity pools C. AWS IAM Identity Center D. AWS IAM - Amazon Cognito User Pools is a managed service that can be used to manage user authentication to mobile applications
When an administrator is looking to deploy shared files access Linux-based workloads which will require up to petabytes of data stores, what is the best- suited file storage option to use?
*A. Amazon EFS B. Amazon S3 C. AWS Snowball D. Amazon EBS Amazon Elastic file Storage (EFS) is the best-suited file storage option for the described scenario. It is designed for shared file access and scaling to petabyte data store
A business analyst move away static spreadsheets and to high-level management. To Publish insightful, graphically appealing reports with interactive dashboards which service can they use to accomplish this?
*A. Amazon QuickSight B. Business intelligence on Amazon Redshift C. Amazon CloudWatch Dashboards D. Amazon Athena integrated with Amazon Glue Amazon QuickSight is a fully-managed service that allows for insightful business intelligence reporting with creative data deliver methods, including graphical and interactive dashboards.
Which AWS service automates infrastructure provisioning and administrative tasks for an analytical data warehouse?
*A. Amazon Redshift B. Amazon Dynamo DB C. Amazon Elastic Cache D. Amazon Aurora Amazon Redshift is a fully managed , petabyte-scale data warehouse service in the cloud.
There is a requirement to store objects. The objects must be downloadable via a URL. Which storage option would you choose?
*A. Amazon S3 B. Amazon Glacier C. Amazon Storage Gateway D. Amazon EBS Amazon S3 is the perfect storage option. It also provided the facility of assigning a url to each object
Which f the following service can be used to optimize performance for global users to transfer larger-sized data objects to a centralized Amazon S3 bucket in us-west-1 region?
*A. Enable S3 Transfer Acceleration on Amazon S3 bucket s B. Use Amazon CloudFront Put./Post Commands C. Use Multipart upload D. use Amazon ElasticCache S3 Transfer Acceleration can optimize performance for data transfer between users & object in Amazon S3 buckets
Which support plan can be chosen to get AWS Technical Account Manager proactively monitor a business- critical application on AWS?
*A. Enterprise plan B. Business plan C. Developer Plan D. Enterprise on-Ramp Plan
Which Amazon Route 53 routing policy can be implemented to route traffic to multiple resources based upon user location?
*A. Geolocation routing policy B. Geoproximity routing policy c. Simple routing policy D. Latency routing policy Geolocation routing policy will route traffic to resources based upon user location
What is the value of having AWS cloud services accessible through an application programming interface (API)
*A. it allows developers to work with AWS resources programmatically B. AWS resources will always be cost-optimized C. All application testing can be managed by AWS D. Customer-Owned, on -premises infrastructure becomes programmable It allows developers to easily work with the various AWS resources programmatically
A new department has recently joined the organization and the administrator needs to compose access permission for the group of users. Given that they have various roles and access need, what is the best- practice approach when granting access?
*C. The administrator should grant all users the least privilege nd ad more privileges to only to those who need it
Which of the following AWS resources or the AWS features (cloud concepts) does NOT provide automation capabilities?
A. AWS Elastic Beanstalk B. Amazon DynamoDB C. AWS CloudFormation *D. RDS manual snapshot Unlike automated backups, manual snapshots are taken care of by users when needed. It is not an automation method
What is a valid difference between AWS Global Accelerator and Amazon CloudFront? Choose TWO responses.
A. AWS Global Accelerator uses the Anycast techniques to accelerate latency-sensitive applications Amazon CloudFront uses Unicast. B. Amazon CloudFront makes use of Edge Locations and edge infrastructure, whilst AWS Global Accelerator does not. *C. AWS Global Accelerator does not include the content caching capability that Amazon CloudFront does. *D. AWS Global Accelerator is suitable for applications that are non-HTTP/S such as VoIP, MTTQ and gaming whereas Amazon CloudFront enhances the performance of HTTP-based content such as dynamic web applications, images and videos. E. For the resource endpoint, Amazon CloudFront offers static public IP addresses whilst AWS Global Accelerator does not. AWS Global Accelerator uses the highly available, high-speed AWS global network and anycast routing techniques to greatly improve the availability and network performance of the customer application
Which of the following services can be used as an application firewall in AWS?
A. AWS Snowball *B. AWS WAF (AWS Web Application Firewall ) C. AWS Network Firewall D. AWS Shield AWS WAF is a web application firewall that lets you monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront or an Application Load Balancer. AWS WAF also lets you control access to your content.
I need to migrate millions of customers' financial transaction data from the On-Premise Mainframe system to a non-relational database in AWS. The database should also provide good performance for data retrieval and data analytics. Which of the following Database services is the most suitable?
A. Amazon RDS B. Amazon RedShift C. Amazon ElastiCache *D. Amazon DynamoDB DynamoDB provides DynamoDB Accelerator (DAX) which is a fully managed, highly available in-memory cache. This will help us speed up the performance of data retrieval that we require
Which of the following is the responsibility of the customer to ensure the availability and backup of the EBS volumes?
A. Delete the data and create a new EBS volume. *B. Create EBS snapshots. C. Attach new volumes to EC2 Instances. D. Create copies of EBS Volumes. Snapshots are incremental backups, which means that only the blocks on the device that have changed after your most recent snapshot are saved.
My application has low invocations and short execution times. Which compute technology will provide me with the best pricing?
A. EC2 B. Fargate *C. Lambda D. Both B & C since they are serverless technologies
A weather tracking system is designed to track weather conditions of any particular flight route. Flight travellers all over the world make use of this information prior to booking their flights. Travellers expect quick turnaround time in which the weather display & flight booking will happen which is critical to their business. You have designed this website and are using AWS Route 53 DNS. The routing policy that you will apply to this website is?
A. GeoLocation routing policy B. Failover routing policy C. Multivalue answer routing policy *D. Latency based routing policy
Which of the below listed 2 design principles relates to the "Operational Excellence" pillar of the Well-Architected framework? (Choose 2)
A. Implement a strong identity foundation B. Enable traceability *C. Anticipate Failure D. Manage change in automation *E. Perform operations as code The operational excellence pillar of a well-architected framework has below 5 design principles. - Perform operations as code - Make frequent, small, reversible changes - Refine operations procedures frequently - Anticipate failure - Learn from all operational failures
A client has a set of On-Premise applications. He wishes to use his existing SQL Server licenses on AWS cloud provided on a CPU core basis. What pricing model will best suit the client's requirements?
A. On demand EC2 Dedicated Instances B. Shared Reserved EC2 Instances *C. On demand EC2 Dedicated Hosts D. On demand EC2 shared Instance On reading the question carefully, we can see that the existing SQL server licenses are hardware-driven, which means that the client needs to have dedicated hardware to host his existing SQL Server database
A customer's Data center and its applications are connected to AWS using a dedicated network (Direct Connect).What is the Cloud deployment model?
A. Public Cloud B. Multi Cloud C. Private Cloud *D. Hybrid Cloud
An architect is asked to design a solution for a distributed system in which the system's components operate in a way that components of one system do not negatively impact other components of the system. Which of the below listed architectural best practice can help to achieve this?
A. Request Throttling B. Using stateless services C. Enabling automatic data backup *D. Implement loose coupling
When designing a highly available architecture, what is the difference between vertical scaling (scaling-up) and horizontal scaling (scaling-out)?
A. Scaling up provides for high availability whilst scaling out brings fault-tolerance. B. Scaling out is not cost-effective compared to scaling up. *C. Scaling up adds more resources to an instance, scaling out adds more instances. D. Autoscaling groups require scaling up whilst launch configurations use scaling out. In high availability architectures, Autoscaling is used to give elasticity to the design. Horizontal scaling (scaling-out) uses Autoscaling groups to increase processing capacity in response to changes in preset threshold parameters
Which of the following statements are incorrect regarding NoSQL databases?
A. They are not relational. *B. They need to have a well defined schema. C. NoSQL databases are horizontally scalable. D. Amazon DynamoDB is a NoSQL database that supports atomicity, consistency, isolation, and durability (ACID) transactions. NoSQL databases do not support a predefined schema like a relational database does (e.g. A record of type Book will have a fixed set of attributes defining a schema like ID, Name, Description, Author)
Which service can be best suited to import third-party SSL/ TLS certificates that can be used to deploy on Amazon Elastic Load Balancer?
A. AWS Artifacts B. AWS secrets Manager *C. AWS Certificate Manager D. AWS Systems Manager Parameter Store -can be used to store &provision SSL/TLS certificates
Development team is looking to offload SSL processing from existing Web servers. Which Service can be used for this purpose?
A. AWS Certificate Manager *B. AWS Cloud HSM C. AWS KMS D. AWS secrets Manager AWS Cloud HSM is managed hardware security model for generating and managing encryption keys on the AWS cloud
Which of the following services can be used to automate software deployments on a large number of Amazon EC2 instance and on-premise servers?
A. AWS CodePipeline B. AWS CloudFormation *C. AWS CodeDeploy D. AWS Config AWS CodeDeploy is managed service that automates software deployment on an large scale to ec2 instances and on-premises servers
Development team has purchased a new application with limited licenses. Administrator wants to be alerted when usage of license is exceeded on Amazon EC2 instance. Which service can be used to meet this requirement ?
A. AWS Control Tower B. AWS Config C. AWS service Catalog *D. AWS License Manager -AWS License Manager provisions & tracks license usage across multiple AWS account
A client is planning to move their on-premise workloads AWS. Since they are very cost conscious. They would like to get first-hand information on the expenses that will incur using AWS services. Which of the following will help them do that?
A. AWS Cost Explorer B. AWS Organization C. AWS Budgets *D. AWS Pricing Calculator AWS pricing calculator a client can estimate costs
An organization has a persistently high amount of throughput. it requires connectivity with no jitter and very low latency between its on-premise infrastructure and it AWS cloud build to support live streaming and real-time services. What is the most appropriate solution to meet this requirement
A. AWS Data Streams B. AWS Kinesis C. Kinesis Data Firehose *D. AWS Direct Connect AWS Direct Connect is a cloud service solution that make it easy to establish a dedicated network connection from the organization premises to aws
A web administrator maintains several public and private web-based resources for an organization. Which service can they use to keep track of the expiry dates of SSL/TLS certificates as well as updating and renewal?
A. AWS Data lifecycle Manger B. AWS License Manger C. AWS Firewall Manger *D. AWS certificate Manger allows the web administrator to maintain one or several SSL/TLS certificates, both private and public certificates including their update and renewal
Developing a web application that requires real time updates and interactions and want to use AWS service to handle the backend logic. database, and authentication easily. Which option would be best suit?
A. AWS Device B. AWS Amplify *C AWS Iot Core D. AWS AppSync AWS Amplify offers features like real-time data synchronization, backend logic with Aws Lambda, Database integration and authentication service
While making changes to aws resources e.g. adding a new Security group ingress rule, I need to capture & record all these changes that will be helpful during an audit. Which of the following AWS service helps me do that ?
A. AWS Trusted Advisor B. AWS CloudWatch *C. AWS Config D. AWS CloudFormation AWS Config records & capture all configuration changes done to AWS resources using Configuration Recorder
Which service can be used to download AWS security & compliance documents?
A. AWS Well-Architected tool B. AWS Audit Manager C. AWS Trusted Advisor *D. AWS Artifact AWS User can uses AWS Artifact to downloads AWS security & Compliance documents
Which AWS service provides infrastructure security optimization recommendations?
A. AWS application programming interface (API) B. Reserved Instance *C. Aws Trusted Advisor D. Amazon Elastic Compute Cloud (Amazon EC2) Spotfleet An online resource to help you reduce cost, increase performance and improved security by optimizing your AWS environment
Which tool can you use to forecast your AWS-spending
A. AWS organization B. Amazon S3 C. AWS Trusted Advisor *D. AWS Cost Explorer -cost explorer is a free tool that you can use to view your costs
What best describes the "Principle of Least Privilege"? Choose the correct answer from the options give below.
A. All users should have the same baseline permissions granted to them to use basic AWS services *B Users should be granted permission to access only resources they need to do their assigned job C. User should submit all access requests in written form so that their is paper trail of who needs access to different AWS resources D. User should always have a little more permission that they need
Which of the following AWS services is suitable to be used as a fully managed data warehouse ?
A. Amazon Athena *B Amazon Redshift C. Amazon CloudWatch D. Amazon Relational Database Service(Amazon RDS) Amazon Redshift is a fully managed, petabyte-scale data warehouse service
There is an external audit being carried-out on your company. The auditor needs to have a log of who made the request to the AWS resources from the company's account. Which of the following services can assist in providing these details?
A. Amazon CloudWatch *B. AWS CloudTrail C. Amazon EC2 D. Amazon SNS Using CloudTrail one can monitor all the API activity conducted on all AWS services
A mobile app that requires real-time data synchronization and offline capabilities. She needs a managed service to easily create and manage GraphQL APIs for her app. Which AWS service is the most suitable?
A. Amazon ECS *B. AWS APPSync C. AWS Amplify D. AWS Device Farm AWS app sync its a managed service that simplifies the process of creating and deploying GraphQL APIs for apps
A team of engineers is developing an industrial IoT solution for a factory that operates in a remote location with intermittent connectivity. The factory requires real-time monitoring of critical machinery nd immediate local response to certain events without relying solely on cloud communication. Which AWS service provide the best solution for this scenario?
A. Amazon S3 B. AWS Iot Core *C. AWS Iot Greengrass D. Amazon Redshift AWS IoT Greengrass enables devices to perform local data processing and real-time event handing , even when cloud connectivity is not available
A radio station complies a list of the most popular songs each year. The songs are frequently fetched within 180 days. After that , users will have a default retrieval time of 12-48 hours for downloading the files. The files should be stored for over 10 years. which is the most cost-effective object storage after 180 days?
A. Amazon S3 Glacier B. Amazon s3 One Zone - infrequently accessed *C. Amazon S3 Glacier Deep Archive D. Amazon S3 standard- infrequently accessed Amazon S3 glacier deep archive most cost-effective object sotarage when info get accessed the retrieval is not instant.
A file-sharing service uses Amazon s3 to store files uploaded by users. files are accessed with random frequency. Popular ones are downloaded every day whilst others not so often and some rarely. what is the most cost-effect Amazon S3 object storage class to implement?
A. Amazon S3 Standard B. Amazon S3 Glacier C. Amazon S3 One Zone-Infrequently Accessed *D. Amazon S3 intelligent-tiering S3 intelligent -tiering is a new Amazon S3 storage class designed for customers who want to optimize storage.
Team group of designers use laptops, tablets, and smartphones. Which Amazon service should you consider to ensure efficient across to the application while meeting device diversity?
A. Amazon WorkSpaces B. Amazon WorkSpaces Web *C Amazon AppStream D. AWS Lamba Amazon AppStream- enables streaming of resources-intensive applications to a variety of devices, providing a consistent experience across different platforms
Which AWS service can be used to store files? choose 2 answer from the options give below
A. Amazon cloudWatch *B. Amazon simple storage service (Amazon S3) *C. Amazon Elastic Block Store(Amazon EBS) D. AWS Config E. Amazon Athena Amazon S3 is object storage built to store and retrieve any amount of data from anywhere website mobile apps Amazon EBS - provided persistent block storage volumes for use with amazon ec2 instances
A smart agriculture company wants to optimize is crop yield by monitoring soil moisture levels and weather condition in their vast fields. They need to collect data from sensor spread across the fields, process it in real time, and generate alerts if certain thresholds are crossed. which AWS service would be the most suitable for fulfilling this requirements?
A. Amazon quicksight B. AWS Lamba *C. AWS Iot core D. AWS Iot Greengrass Aws Iot Core enables secure and efficient communication between devices and the cloud
Which of the following are advantage of having infrastructure hosted on he AWS Cloud?
A. Complete control over the physical infrastructure *B. Pay-as-you-go-model C. no Upfront costs D. Security is handled by AWS
Teachers has an application that hosts an exam results. The resources is idle for the most of the learning cycle and becomes excessively busy when exam results are released. How can is architecture with severs be improved to cost-efficient?
A. Configure AWS Elastic load-balancing between the webserver and database cluster B. configure RDS multi-availability zones for performance optimization *C. configure serverless architecture leveraging AWS Lambada functions. D. Migrate the web servers onto Amazon EC2 Spot Instances Leveraging AWS Lambda functions will remove the need to run a dedicated web server for the organizations
Grant temporary to its lambda functions setup on AWS. These developers would be signing-in via Facebook authentication. Which service is the most appropriate to grant secure access?
A. Create users credentials using identity access management(Iam) *B Use Amazon Cognito for web-identity federation C. Use Access keys to provide temporary access D. Use a third party web Id, Federated access provider Amazon cognito web identity federation service actsu as a broker that allows authenticated users to access AWS resources
Which AWS Global infrastructure component below, in an AWS Region provides high bandwidth, low-latency networking and fully redundant connectivity
A. Data Centers B. Edge Location *C. Availability Zones D. Regional Cache Availability Zones are physically isolated &connected via low latency redundant link
Which Amazon Route 53 routing policy will be best suited to divert traffic in proportions to multiple resources?
A. Latency routing policy *B. Weighted routing policy C. failover routing policy D. Multivalve answer routing policy Weighted routing policy is suitable to route traffic to multiple resources based upon defined
According to the AWS, what is the benefit of Elasticity
A. Minimize storage requirements by reducing logging and auditing activates *B. Create systems that scale to the required capacity based on changes in demand C. Enable AWS to automatically select the most cost-effective services D. Accelerate the design process because recovery from failure is automated, reducing the need for testing -Elasticity application having the ability to scale up and down based on demand
I have a website that hosts mission-critical applications and requires 99.999% uptime what routing policy will I apply while using Route 53?
A. Multi value answer routing *B. Failover Routing C. Weighted Routing D. Simple routing failover routing is usually used in disaster Recovery scenarios where an active-passive or active-active disaster recovery configuration is required
Which five categories does Trusted Advisor service provide insight for an AWS account?
A. Security, fault tolerance, high availability, connectivity and Service Limits B. Security, access control, high availability, performance and Service Limits *C Performance, cost optimization, security, fault tolerance and service limits D. Performance, cost optimization, access control, connectivity and service limits
Which is the correct statement for spot price with respect to spot instance?
A. Spot Price is static & changes every 6 hours B. Spot price is static & changes every 24 hours *C. Spot price varies based upon demand D. Spot price is always less than spot instances request A spot-instance uses the free amazon EC2 capacity & is available at lesser prices than On-Demand Amazon EC2 instance is hourly price
There is a requirement to host a database sever for a minimum period of one year. Which of the following would result in the least cost?
A. Spot instances B. On-Demand C. No Upfront costs Reserved *D. Partial Upfront costs Reserved
Which of the following routing policies can be used to provide the best resources that serve your traffic bases on the geographic location of your users?
A. Use Route 53 weighted routing policy. B. Use Route 53 latency routing policy C. Use Route 53 Geopromiximity routing policy *D. Use Route 53 Geolocation routing policy
Which of the following is an optional Security-layer attached to a subnet within a vpc for controlling traffic in & out of the vpc?
A. VPC Flow Logs B. Web Application Firewall C. Security Group *D. Network ACL Network
Which of the following statements regarding billing, cost optimization, and cost management in AWS is accurate?
A. When considering migrating to the cloud, the AWS Total Cost of Ownership (TCO) calculator is guaranteed to save up to 80% of the cost of running on-premise infrastructure B. In AWS Budgets, utilizing Cost and Usage budgets will optimize and reduce the overall spend by 79% C. The AWS pricing Calculator will workout a revised bill that can reduce the overall spend by 60% if you commit to a long term usage plan *D. When using Saving plans, 72% savings can be made on Amazon EC2, AWS Faregate, and AWS Lambda usage. Saving plans are flexible discount pricing models that offer reduced rates
Which option best suits the implementation of an Amazon RDS databased instance instead of a noSQL/non-relational database?
A. Where datasets are constantly evolving and cannot be confined to a static data schema B. Where vertical scaling of the database's resources is not permissible and is seldom necessary C. In an organization whose datasets are dynamic and document-based *D. In an organisation where only a finite number of processes query the database in predictable and well-structured schemas Amazon RDS - best for anticipated and somewhat finite Amazon Aurora, MariaDB, PostgresSQL
For which of the following scenarios are the Amazon Elastic Compute Cloud (Amazon EC2) spot instances most appropriate
A. Workloads that are only run in the morning and stopped at night *B. Workloads where the availability of the Amazon EC2 instances can be flexible C. Workloads that need to run for long periods of time without interruptions D. Workloads that are critical and need Amazon EC2 instances with termination protection Spot instances are a cost-effective choice if you can be flexible
What is the AWS feature that enables fast, easy and secure transfer of files over long distance between your client and your Amazon S3 bucket?
A. file transfer B. HTTP Transfer *C. Amazon S3 Transfer Acceleration D. S3 Acceleration Amazon S3 Transfer Acceleration enables fast, easy , and secure transfers of files over long distances between your client and an S3 bucket.
Which of the following is a customer responsibility under AWS Shared Responsibility model?
A. patching of host OS deployed on Amazon S3 B. logical access controls for underlying infrastructure C. physical security of the facilities *D. Patching of guest OS deployed on Amazon EC2 instances customers must take care of the resources they launched within AWS
AWS Organization help managed multiple accounts effectively in a large enterprise. Which of the following statements related to AWS Organizations are correct?
AWS Organizations help manage multiple accounts effectively in a large enterprise. Which of the following statements related to AWS Organizations are correct? (Select TWO.) *A. An Organizational Unit(OU) can have only one parent. B. An account can be a member of multiple Organizational Units (OU). C. An SCP policy only impacts a particular AWS account even if it is applied at the root account. *D. Organizational level policies are known as Service Control Policies. E. Service Control Policies (SCPs) can only allow actions instead of deny actions. hide An Organizational Unit(OU) can have a single branch going up, e.g. It can either inherit a root or another OU but not both AWS Organizations automate creation of AWS Accounts, OUs and their hierarchy. They use Service Control Policies (SCP) at OUs
