AWS Cloud Practitioner Test Questions

Which of the following is AWS's responsibility under the AWS shared responsibility model? A) Configuring third-party applications B) Maintaining physical hardware C) Securing application access and data D) Managing custom Amazon Machine Images (AMIs)

(B) Maintaining physical hardware

Which of the following instance types provides you with a significant discount compared to On—Demand Instance pricing? a) Amazon EC2 Instant Instances b) Amazon EC2 Reserved Instances c) Amazon EC2 Dedicated Instances d) Amazon EC2 Dedicated Hosts

(b) Amazon EC2 Reserved Instances

Which components of the AWS infrastructure can be described as multiple, isolated locations within one geographic area? a) S3 Buckets b) Availability Zones c) Regions d) Edge Locations

(b) Availability Zones

A company has 70 employees divided into 10 departments. The IT administrator wants to customize each department's access to AWS. Which of the following options is most appropriate? a) Create a temporary role for each employee, and revise their access as needed. b) Create an IAM group for each department, and assign IAM users to the groups. c) Create an IAM role for each department, and assign IAM users to the roles. d) Make each employee an AWS account root user.

(b) Create an IAM group for each department, and assign IAM users to the groups.

Which of the pillars of the Well—Architected Framework is defined as the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures? a) Performance efficiency b) Operational excellence c) Security d) Reliability

(b) Operational excellence

What is the first step in getting started with AWS Lambda? a) Provision EC2 instances b) Upload your code c) Deploy an OS image d) Pay for estimated compute time

(b) Upload your code

You have been tasked with distributing a newsletter that will be pushed out to administrators by email. Which of the following is the best solution? a) Store the newsletters in an Amazon Simple Storage Service (Amazon SB) bucket and distribute them with AWS Cloudtrail. b) Create a topic in Amazon Simple Notification Service (Amazon SNS) that administrators can subscribe to. c) Create a messaging queue in Amazon CloudFront. d) Route the newsletters to an Amazon ElastiCache store

(b)Create a topic in Amazon Simple Notification Service (Amazon SNS) that administrators can subscribe to.

Which of the following is a managed Distributed Denial of Service (DDoS) protection service? a) AWS Identity and Access Management (IAM) b) Amazon Inspector c) AWS Shield d) AWS Trusted Advisor

(c) AWS Shield

Your company is developing a critical application, and the security of the application is one of the top priorities. Which of the following AWS services will provide recommendations for security optimization for your infrastructure? a) Amazon Aurora b) Amazon CloudWatch c) AWS Trusted Advisor d) Amazon Inspector

(c) AWS Trusted Advisor

Which of the following tasks is the customer's responsibility when creating Amazon VPC security groups? a) Selecting an appropriate load balancing strategy for the network routers. b) Choosing the level of physical security for the network. c) Adding rules regarding inbound traffic to the security group. d) Ensuring that the security groups are linked to Amazon EC2.

(c) Adding rules regarding inbound traffic to the security group.

Which service provides persistent block storage volumes for use with Amazon EC2 instances? a) Amazon S3 b) Amazon DynamoDB c) Amazon EBS d) Amazon EFS

(c) Amazon EBS

What is Elastic Load Balancing? a) Automatically stopping traffic when targets are overloaded b) Automatically monitoring traffic to ensure that costs are kept beneath a specified threshold c) Automatically distributing traffic across multiple targets d) Automatically slowing traffic to decrease latency

(c) Automatically distributing traffic across multiple targets

You have an application composed of individual services. You need to route a request to a service based on the content of the request. Which service should you use? a) EC2 Auto Scaling b) AWS CloudTrail c) Elastic Load Balancing d) Amazon Route 53

(c) Elastic Load Balancing

Security Groups can specify deny rules

False, only allow statements are allowed

Security groups are stateless

False, they are stateful

Security Groups operate at subnet level?

False, they operate at an instance level

Network ACLs are NOT stateless. True or False?

False: they are stateless

Who manages NAT Instances?

You, NAT instances are managed by you.

Which service would you use to send alerts based on Amazon CloudWatch alarms? A) Amazon Simple Notification Service (Amazon SNS) B) AWS CloudTrail C) AWS Trusted Advisor D) Amazon Route 53

(A) Amazon Simple Notification Service (Amazon SNS)

Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud (Amazon EC2) instance is terminated? A) Amazon CloudWatch B) AWS CloudTrail C) AWS X-Ray D) AWS Identity and Access Management (AWS IAM)

(B) AWS CloudTrail

Which AWS service would simplify migration of a database to AWS? A) AWS Storage Gateway B) AWS Database Migration Service (AWS DMS) C) Amazon Elastic Compute Cloud (Amazon EC2) D) Amazon AppStream 2.0

(B) AWS Database Migration Service (AWS DMS)

Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery? A) AWS Regions B) AWS edge locations C) AWS Availability Zones D) Amazon Virtual Private Cloud (Amazon VPC)

(B) AWS edge locations

Why is AWS more economical than traditional data centers for applications with varying compute workloads? A) Amazon Elastic Compute Cloud (Amazon EC2) costs are billed on a monthly basis. B) Customers retain full administrative access to their Amazon EC2 instances. C) Amazon EC2 instances can be launched on-demand when needed. D) Customers can permanently run enough instances to handle peak workloads.

(C) Amazon EC2 instances can be launched on-demand when needed.

How would a system administrator add an additional layer of login security to a user's AWS Management Console? A) Use AWS Cloud Directory B) Audit AWS Identity and Access Management (IAM) roles C) Enable Multi-Factor Authentication D) Enable AWS CloudTrail

(C) Enable Multi-Factor Authentication

Where can a customer find information about prohibited actions on AWS infrastructure? A) AWS Trusted Advisor B) AWS Identity and Access Management (IAM) C) AWS Billing Console D) AWS Acceptable Use Policy

(D) AWS Acceptable Use Policy

Which AWS offering enables customers to find, buy, and immediately start using software solutions in their AWS environment? A) AWS Config B) AWS OpsWorks C) AWS SDK D) AWS Marketplace

(D) AWS Marketplace

Which AWS networking service enables a company to create a virtual network within AWS? A) AWS Config B) Amazon Route 53 C) AWS Direct Connect D) Amazon Virtual Private Cloud (Amazon VPC)

(D) Amazon Virtual Private Cloud (Amazon VPC)

Which of the following statements best describes AWS Trusted Advisor? a) A tool that provides you real time guidance to help you provision your resources following AWS best practices. b) A tool that helps customers estimate their monthly AWS bill more efficiently. c) A tool that estimates the cost savings when using AWS and provides a detailed set of reports. d) A tool that enables you to view and analyze your costs and usage.

(a) A tool that provides you real time guidance to help you provision your resources following AWS best practices.

Which AWS service enables you to repeatedly and predictably provision resources to power your applications? a) AWS CloudFormation b) AWS Cloud Map c) AWS CloudTrail d) Amazon CloudFront

(a) AWS CloudFormation

Which method would you use to access AWS services through an easy~to~use graphical interface? a) AWS Management Console b) Software Development Kits (AWS SDKs) c) AWS EasyLaunch d) AWS Command Line Interface (AWS CLI)

(a) AWS Management Console

You have an application composed of individual services and you need to route a request to a service based on the content of the request. What type of load balancer should you use? a) Application Load Balancer b) Classic Load Balancer c) Network Load Balancer d) VPN Load Balancer

(a) Application Load Balancer

How is storage typically priced on AWS Cloud? a) Charged per GB b) Charged per hour or second c) Charged by instance type d) Charged by speed of transfer

(a) Charged per GB

Which of the following terms refers to the power to scale computing resources up or down easily? a) Elasticity b) Economy c) Expediency d) Efficiency

(a) Elasticity

Which of the following use cases is appropriate for Amazon CloudFront? (Select Three.) a) Security and encryption b) Live on-demand video streaming c) Schema generation d) Static asset caching e) Auto Scaling f) Database backups

(a) Security and encryption (b) Live on-demand video streaming (d) Static asset caching

Which of the following statements best describes Amazon CloudFront? a) Speeds up the delivery of your content to viewers across the globe b) Provides a common language for you to describe and provision all the infrastructure resources in your cloud environment c) Provides you with data and actionable insights to monitor your applications d) Provides topics for high—throughput, push—based, many—to—many messaging

(a) Speeds up the delivery of your content to viewers across the globe

What are the benefits of using Amazon EC2 instances compared to physical servers in your infrastructure? (Select two.) a) The ability to have different storage requirements b) Pay only for the capacity you use c) Automatic automated backups d) The ability to hot-add additional RAM e) Resizable

(a) The ability to have different storage requirements (b) Pay only for the capacity you use

Which of the following AWS concepts refers to "Established best practices developed through lessons learned by working with customers"? a) Well-Architected Framework b) AWS Trusted Advisor c) Security of the Cloud d) Reference architecture

(a) Well-Architected Framework

Which of the following defines the AWS Command Line Interface (AWS CLI)? a) A suite of utilities that can be launched from a command program in Linux, macOS, or Windows. b) A systematic approach to evaluating and implementing architectures. c) Packages that enable access to AWS in a variety of programming languages. d) A rich graphical interface to a majority of the features offered by AWS.

(a)A suite of utilities that can be launched from a command program in Linux, macOS, or Windows.

Which of the following AWS services has no additional charge associated with its use? (The resources provisioned within the service may incur costs.) a) Amazon Elastic Compute Cloud (Amazon EC2) b) AWS Identity and Access Management (IAM) c) Amazon Simple Storage Service (Amazon S3) d) Amazon Elastic Block Store (Amazon EBS)

(b) AWS Identity and Access Management (IAM)

Which of the following is a responsibility of the customer according to the shared responsibility model? a) Physical security of the facilities in which the services operate b) AWS Identity and Access Management (IAM) c) Protection of the global infrastructure d) Availability of third-party audit reports

(b) AWS Identity and Access Management (IAM)

Which AWS service is a managed DDoS protection service that safeguards applications running on AWS? a) AWS Identity and Access Management b) AWS Shield c) Amazon Inspector d) Amazon CloudWatch

(b) AWS Shield

Which service sends notifications or automatically makes changes to the resources being monitored based on rules you established? a) Elastic Load Balancing b) Amazon CloudWatch c) Amazon EC2 d) Amazon Aurora

(b) Amazon CloudWatch

Users of your services are reporting latency. With on-premises architecture you would notify your Administrator to launch another server to balance the load. How can this be automated using AWS? a) Create a new template using AWS CloudFormation. b) Enable AWS CloudTrail to monitor latency issues. c) Enable an Amazon CloudWatch alarm to trigger a scaling policy. d) Create six Amazon EC2 instances in different Availability Zones.

(c) Enable an Amazon CloudWatch alarm to trigger a scaling policy.

Which parts of the AWS infrastructure support increased resilience? a) Multiple edge locations within a region b) Multiple Regions distributed globally c) Multiple Availability Zones within a region d) Multiple AWS Direct Connect (DX) gateways within a data center

(c) Multiple Availability zones within a region

Which of the following is NOT a pillar of the AWS Well- Architected Framework? a) Cost Optimization b) Operational Excellence c) Persistence d) Security

(c) Persistence

Your web application requires temporary authorization to use AWS services. Which IAM entity should be used? a) User b) MFA c) Role d) Group

(c) Role

Which of the following examples best demonstrates the agility that cloud computing offers? a) Protect your data by centralizing your applications in one Availability Zone. b) Increase network throughput with AWS Direct Connect (DX) nodes. c) Spin up servers in minutes, and shut down servers when you don't need them. d) Quickly deploy multi—factor authentication (MFA) to multiple data centers.

(c) Spin up servers in minutes, and shut down servers when you don't need them.

Which of the following statements is true of Amazon Virtual Private Clouds (VPC)? a) Each AWS account can have only one VPC associated with it b) A VPC acts as a physical firewall for your cloud infrastructure c) You can create many subnets in a VPC, though fewer is recommended to limit complexity d) Each VPC is a private, dedicated network connection from your premises to AWS

(c) You can create many subnets in a VPC, though fewer is recommended to limit complexity

What is Amazon Route 53? a) A monitoring and management service that collects and tracks metrics b) A fast and flexible nonrelational database service for all applications that need consistent, single—digit millisecond latency at any scale c) A cloud service solution that establishes private connectivity between AWS and your data center, office, or colocation environment d) A highly available and scalable Domain Name System (DNS) web service

(d) A highly available and scalable Domain Name System (DNS) web service

Who is responsible for security of the cloud according to the shared responsibility model? a) IAM roles b) Customer c) AWS Support d) AWS

(d) AWS

Which of the following services provides you with data and actionable insights to monitor your applications, understand and respond to system—wide performance changes, optimize resource utilization, and get a unified view of operational health? a) AWS CloudTrail b) AWS Cloud9 c) AWS CloudFormation d) Amazon CloudWatch

(d) Amazon CloudWatch

Which component of the AWS global infrastructure supports the caching of content for faster access? a) Regions b) AWS Direct Connect locations c) Availability Zones d) Edge locations

(d) Edge locations

Which of the following components is included in the value proposition of the AWS Cloud? a) Physical relocation of your servers b) Fully independent development without parameters c) Informal security restrictions d) Massive economies of scale

(d) Massive economies of scale

Which of the following is a best practice for adding an additional layer of security when logging into the AWS Management Console? a) Secondary password b) Root access permissions c) Secondary user name d) Multi-factor authentication (MFA)

(d) Multi-factor authentication (MFA)

Which of the following options describes the most common AWS billing model? a) Pay in advance b) Annual billing c) Daily billing d) Pay as you go

(d) Pay as you go

Which category of services includes Amazon S3? a) Migration b) Security c) Computing d) Storage

(d) Storage

Who manages NAT Gateway

AWS

Who manages NAT Instance

User

Network Access Control List apply to all instances in subnet?

True, Automatically applies to all instances in the subnets its associated with