AWS Practice exam 3

Which of the following AWS services are global in scope? (Select two)

Amazon Cloud front AWS Identity and access management

Which of the following AWS services allows a database to have flexible schema and supports document data models?

Amazon DynamoDB

An e-commerce company wants to assess its applications deployed on EC2 instances for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?

Amazon Inspector

A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?

Amazon MQ

A startup is looking for 24x7 phone based technical support for his AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?

Business

The engineering team at an IT company wants to monitor the CPU utilization for its fleet of EC2 instances and send an email to the administrator if the utilization exceeds 80%. As a Cloud Practitioner, which AWS services would you recommend to build this solution? (Select two)

CloudWatch SNS

What are the fundamental drivers of cost with AWS Cloud?

Compute, Storage and Outbound Data Transfer

According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?

Database Encryption

As per the AWS shared responsibility model, which of the following is a responsibility of AWS from a security and compliance point of view?

Edge Location Management

A fleet of Amazon EC2 instances spread across different Availability Zones needs to access, edit and share file-based data stored centrally on a system. As a Cloud Practitioner, which AWS service would you recommend for this use-case?

Elastic File system

Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them?

Elasticity

A multi-national company wants to migrate its IT infrastructure to AWS Cloud and is looking for a concierge support team as well as a response time of around an hour in case the systems go down. As a Cloud Practitioner, which of the following support plans would you recommend to the company?

Enterprise

Which AWS support plan provides access to a Technical Account Manager (TAM)?

Enterprise

Which AWS Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience?

Latency Routing Policy

Which of the following use-cases is NOT supported by Amazon Rekognition?

Quickly resize photos and create thumbnails

Which of the following are examples of Horizontal Scalability (aka Elasticity)? (Select two)

Read Replicas in Amazon RDS Elastic Load Balancing

The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)

Reliability Cost Optimization

Which of the following statements is INCORRECT about AWS Auto Scaling?

You can automatically deploy AWS shield when a DDoS attack is detected

A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?

A VPC Spans all of the availability Zones in the region whereas a subnet spans only one Availability Zone in the Region

Which of the following options can be used to access and manage all AWS services (Select three)?

AWS Command Line interface (CLI) AWS Software Developer Kit (SDK) AWS Management Console

An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?

AWS Config

Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two).

AWS Direct Connect AWS VPN

A developer has written a simple web application in PHP and he wants to just upload his code to AWS Cloud and have AWS handle the deployment automatically but still wants access to the underlying operating system for further enhancements. As a Cloud Practioner, which of the following AWS services would you recommend for this use-case?

AWS Elastic Beanstalk

A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations. Which AWS technology/service will provide the necessary low-latency access to the end-users?

AWS Local Zones

Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?

AWS Marketplace

A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?

AWS Organzations

A company's flagship application runs on a fleet of Amazon EC2 instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to AWS EC2 instances without opening new ports or using public IP addresses. Which tool/service will help you achieve this requirement?

AWS Systems Manager Session Manager

A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?

AWS Web Application Firewall (WAF)

Which of the following is correct about AWS "Developer" Support plan?

Allows one contact to open unlimited cases

A data analytics company has some data stored on Amazon S3 and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for this use case?

Amazon Athena

Which of the following statements are true about AWS Lambda? (Select two)

-AWS Lambda lets you run code without provisioning or managing servers -You pay for the compute time you consume

Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)

-Amazon Cloudfront with route53 -AWS WAF -AWS Shield

AWS Compute Optimizer delivers recommendations for which of the following AWS resources? (Select two)

-Amazon EBS Volumes, AWs Lambda functions -Amazon EC2 Instances, Amazon EC2 Auto scaling groups

An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)

-Lambda -Cloudwatch

Which of the following statements are correct about the AWS account root user (Select two)

-Root user access credentials are the email address and password used to create the AWS Account -It is highly recommended to enable Multi Factor Authentication (MFA) for root user account

Which policy describes prohibited uses of the web services offered by Amazon Web Services?

AWS Acceptable Use Policy

Which AWS technology/service helps you to scale your resources to match supply with demand while still keeping your cloud solution cost-effective?

AWS Auto Scaling

Which AWS service would you use to send alerts when the costs for your AWS account exceed your budgeted amount?

AWS Budgets

Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?

AWS Cloud HSM

Which of the following AWS services is essential for implementing security of resources in AWS Cloud?

AWS Identity and Access Management (IAM)

Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?

AWS Personal Health Dashboard

An organization is planning to move its infrastructure from the on-premises datacenter to AWS Cloud. As a Cloud Practioner, which options would you recommend so that the organization can identify the right AWS services to build solutions on AWS Cloud (Select two)?

AWS Service Catalog AWS Partner Network

Which AWS service publishes up-to-the-minute information on the general status and availability of all AWS services in all the Regions of AWS Cloud?

AWS Service Health Dashboard

Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two)

AWS Service Quotas AWS Trusted Advisors

Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?

AWS Trusted Advisor

Which AWS service can be used to provision resources to run big data workloads on Hadoop clusters?

Amazon EMR

Which AWS compute service provides the EASIEST way to access resizable compute capacity in the cloud with support for per-second billing and access to the underlying OS?

Amazon Elastic Compute Cloud (EC2)

Which AWS service can be used to store, manage, and deploy Docker container images?

Amazon Elastic Container Registry (ECR)

Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?

Amazon Elastic Container Service - Fargate Launch type

A company wants a fully managed, flexible, and scalable file storage system, with low latency access, for its Windows-based applications. Which AWS service is the right choice for the company?

Amazon FSx for Windows File Server

Which of the following AWS services comes under the Software as a Service (SaaS) Cloud Computing Type?

Amazon Rekognition

Which AWS service helps with global application availability and performance using the AWS global network?

Global Accelerator

Multi AZ (Availability Zone) deployment is an example of which of the following?

High Availability

An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model?

Hybrid deployment

Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management entities?

IAM user

Which of the following AWS services are always free to use (Select two)?

Identity and Access Management AWS Auto Scaling

As per the AWS shared responsibility model, which of the following is a responsibility of the customer from a security and compliance point of view?

Managing patches of the guest operating system on Amazon EC2

What is the primary benefit of deploying an RDS database in a Multi-AZ configuration?

Multi-AZ enhances database availability

Which AWS EC2 pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?

On-demand Instances

Which of the following statement is correct regarding the AWS pricing policy for data transfer charges into or out of an AWS Region?

Only outbound data transfer is charged

An online gaming company wants to block users from certain geographies from accessing its content. Which AWS services can be used to accomplish this task? (Select two)

Route 53 AWS WAF

Which of the following is the correct statement regarding the AWS Storage services?

S3 is object based storage, EBS is block based storage and EFS is file based storage

Which of the following statement is correct for a Security Group and a Network Access Control List?

Security Group acts as a firewall at the instance level whereas Network Access Control List acts as a firewall at the subnet level

What are the different gateway types supported by AWS Storage Gateway service?

Tape Gateway, File Gateway, Volume Gateway

A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon S3. The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on S3?

Use S3 one-zone infrequent access (One-zone IA) to store the thumbnails