AWS Cloud Practitioner Exam - Coursera Questions
Which service is used to run containerized applications on AWS? a) Amazon EKS b) Amazon Aurora c) Amazon Redshift d) Amazon SageMaker
a) Amazon EKS
Which statement best describes AWS Marketplace? a) An online tool that inspects your AWS environment and provides real-time guidance in accordance with AWS best practices b) A digital catalog that includes thousands of software listings from independent software vendors c) A resource that provides guidance, architectural reviews, and ongoing communication with your company as you plan, deploy, and optimize your applications d) A resource that can answer questions about best practices and assist with troubleshooting issues
b) A digital catalog that includes thousands of software listings from independent software vendors
Which statement best describes an IAM policy? a) An authentication process that provides an extra layer of protection for your AWS account b) A document that grants or denies permissions to AWS services and resources c) An identity that you can assume to gain temporary access to permissions d) The identity that is established when you first create an AWS account
b) A document that grants or denies permissions to AWS services and resources
Which statement best describes Amazon DynamoDB? a) A service that enables you to run relational databases in the AWS Cloud b) A serverless key-value database service c) A service that you can use to migrate relational databases, nonrelational databases, and other types of data stores d) An enterprise-class relational database
b) A serverless key-value database service
Which pricing tool enables you to receive alerts when your service usage exceeds a threshold that you have defined? a) Billing dashboard in the AWS Management Console b) AWS Budgets c) AWS Free Tier d) AWS Cost Explorer
b) AWS Budgets
Which strategies are included in the six strategies for application migration? Select TWO. a) Revisiting b) Retaining c) Remembering d) Redeveloping e) Rehosting
b, e
Your company has an application that uses Amazon EC2 instances to run the customer-facing website and Amazon RDS database instances to store customers' personal information. How should the developer configure the VPC according to best practices? a) Place the Amazon EC2 instances and the Amazon RDS database instances in a private subnet. b) Place the Amazon EC2 instances in a private subnet and the Amazon RDS database instances in a public subnet c) Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet d) Place the Amazon EC2 instances and the Amazon RDS database instances in a public subnet
c) Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet
Which migration strategy involves moving to a different product? a) Refactoring b) Retiring c) Replatforming d) Repurchasing
c) Replatforming
Which virtual private cloud (VPC) component controls inbound and outbound traffic for Amazon EC2 instances? a) Subnet b) Network Access Control List c) Security Group d) Internet Gateway
c) Security Group
Which Support plans include access to all AWS Trusted Advisor checks? (Select TWO.) a) Developer b) Basic c) Enterprise d) Business e) AWS Free Tier
c, d
You are configuring service control policies (SCPs) in AWS Organizations. Which identities and resources can SCPs be applied to? (Select TWO.) a) IAM users b) IAM groups c) An individual member account d) IAM roles e) An organization unit (OU)
c, e
Which tool is used to automate actions for AWS services and applications through scripts? a) Amazon Command Line Interface (CLI) b) Amazon Redshift c) Amazon Snowball d) Amazon QLDB
a) Amazon Command Line Interface (CLI)
Which tasks can you complete in AWS Artifact? Select TWO. a) Access AWS compliance reports on-demand b) Consolidate and manage multiple AWS accounts within a central location c) Create users to enable people and applications to interact with AWS services and resources d) Set permissions for accounts by configuring service control policies (SCPs) e) Review, accept, and manage agreements with AWS
a, e
Which statement best describes Amazon GuardDuty? a) A service that helps protect your applications against distributed denial-of-service (DDoS) attacks b) A service that provides intelligent threat detection for your AWS infrastructure and resources c) A service that checks applications for security vulnerabilities and deviations from security best practices d) A service that lets you monitor network requests that come into your web applications
b) A service that provides intelligent threat detection for your AWS infrastructure and resources
Which statement best describes an Availability Zone? a) A geographical area that contains AWS resources b) A single data center or group of data centers within a Region c) A data center that an AWS service uses to perform service-specific operations d) A service that you can use to run AWS infrastructure within your own on-premises data center in a hybrid approach
b) A single data center or group of data centers within a Region
Which service enables you to consolidate and manage multiple AWS accounts from a central location? a) AWS Artifact b) AWS Organizations c) AWS Key Management Service (AWS KMS) d) AWS Identity and Access Management (IAM)
b) AWS Organizations
Which Perspective of the AWS Cloud Adoption Framework helps you design, implement, and optimize your AWS infrastructure based on your business goals and perspectives? a) Business perspective b) Platform perspective c) Operations perspective d) People perspective
b) Platform Perspective
Which process is an example of benefiting from massive economies of scale? a) Deploying an application in multiple Regions around the world b) Receiving lower pay-as-you-go prices as the result of AWS customers' aggregated usage of services c) Paying for compute time as you use it instead of investing upfront costs in data centers d) Scaling your infrastructure capacity in and out to meet demand
b) Receiving lower pay-as-you-go prices as the result of AWS customers' aggregated usage of services
Which Perspective of the AWS Cloud Adoption Framework helps you structure the selection and implementation of permissions? a) Governance Perspective b) Security Perspective c) Operations Perspective d) Business Perspective
b) Security Perspective
Which tasks are the responsibilities of customers? Select TWO a) Maintaining network infrastructure b) Patching software on Amazon EC2 instances c) Implementing physical security controls at data centers d) Setting permissions for Amazon S3 objects e) Maintaining servers that run Amazon EC2 instances
b, d
Which Amazon S3 storage classes are optimized for archival data? Select TWO a) Amazon S3 Standard b) Amazon S3 Glacier Flexible Retrieval c) Amazon S3 Intelligent-Tiering d) Amazon S3 Standard-IA e) Amazon S3 Glacier Deep Archive
b, e
Which categories are included in the AWS Trusted Advisor dashboard? Select TWO. a) Reliability b) Performance c) Scalability d) Elasticity e) Fault Tolerance
b, e (cost optimization, performance, security, fault tolerance, service limits)
Which Perspective of the AWS Cloud Adoption Framework focuses on recovering IT workloads to meet the requirements of your business stakeholders? a) People Perspective b) Business Perspective c) Operations Perspective d) Governance Perspective
c) Operations Perspective
Which pillar of the AWS Well-Architected Framework focuses on using computing resources in ways that meet system requirements? a) Security b) Reliability c) Performance Efficiency d) Operation Excellence
c) Performance Efficiency
What is the storage capacity of AWS Snowmobile? a) 40 PB b) 60 PB c) 80 PB d) 100 PB
d) 100 PB
Which statement best describes Elastic Load Balancing? a) A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances b) A service that provides data that you can use to monitor your applications, optimize resource utilization, and respond to system-wide performance changes c) A service that enables you to set up, manage, and scale a distributed in-memory or cache environment in the cloud d) A service that monitors your applications and automatically adds or removes capacity from your resource groups in response to changing demand
a) A service that distributes incoming traffic across multiple targets, such as Amazon EC2 instances
Which statement best describes Amazon Lex? a) A service that enables you to build conversational interfaces using voice and text b) A machine learning service that automatically extracts text and data from scanned documents c) A document database service that supports MongoDB workloads d) A service that enables you to identify potentially fraudulent online activities
a) A service that enables you to build conversational interfaces using voice and text
You want to store data in a volume that is attached to an Amazon EC2 instance. Which service should you use? a) Amazon Elastic Block Store (Amazon EBS) b) AWS Lambda c) Amazon ElastiCache d) Amazon Simple Storage Service (Amazon S3)
a) Amazon Elastic Block Store (Amazon EBS)
Which service is used to query and analyze data across a data warehouse? a) Amazon Redshift b) Amazon Neptune c) Amazon DocumentDB d) Amazon Elasticache
a) Amazon Redshift
Which action can you perform in Amazon CloudFront? a) Deliver content to customers through a global network of edge locations. b) Provision an isolated section of the AWS Cloud to launch resources in a virtual network that you define. c) Run infrastructure in a hybrid cloud approach. d) Provision resources by using programming languages or a text file.
a) Deliver content to customers through a global network of edge locations.
What is another name for on-premises deployment? a) Private cloud deployment b) Cloud-based application c) Hybrid deployment d) AWS Cloud
a) Private cloud deployment
Which compute option reduces costs when you commit to a consistent amount of compute usage for a 1-year or 3-year term? a) Savings plans b) Dedicated Hosts c) Reserved Instances d) Spot Instances
a) Savings plans
Which service is used to transfer up to 80 PB of data to AWS? a) Snowmobile b) CloudFront c) Neptune d) AWS DeepRacer
a) Snowmobile
Which statement best describes security groups? a) They are stateful and deny all inbound traffic by default b) They are stateful and allow all inbound traffic by default c) They are stateless and deny all inbound traffic by default d) They are stateless and allow all inbound traffic by default
a) They are stateful and deny all inbound traffic by default
Which actions can you perform using Amazon CloudWatch? Select TWO. a) Monitor your resources' utilization and performance b) Receive real-time guidance for improving your AWS environment c) Compare your infrastructure to AWS best practices in five categories d) Access metrics from a single dashboard e) Automatically detect unusual account activity
a, d
Which factors should be considered when selecting a Region? select two. a) Proximity to your customers b) Access to the AWS Command Line Interface (AWS CLI) c) Access to 24/7 technical support d) Compliance with data governance and legal requirements
a, d
What are the benefits of cloud computing? Select TWO. a) Increase speed and agility b) Benefit from smaller economies of scale c) Trade variable expense for upfront expense d) Maintain infrastructure capacity e) Stop spending money running and maintaining data centers
a, e
You want to send and receive messages between distributed application components. Which service should you use? a) Amazon Route 53 b) Amazon Simple Queue Service (Amazon SQS) c) AWS Snowball d) Amazon ElastiCache
b) Amazon Simple Queue Service (Amazon SQS)
You want to store data in a key-value database. Which service should you use? a) DocumentDB b) DynamoDB c) RDS d) Aurora
b) DynamoDB
Your company wants to receive support from an AWS Technical Account Manager (TAM). Which support plan should you choose? a) Developer b) Enterprise c) Business d) Basic
b) Enterprise
Which component is used to connect a VPC to the internet? a) Edge Location b) Internet gateway c) Security group d) Public subnet
b) Internet gateway
Which pillar of the AWS Well-Architected Framework includes the ability to run workloads effectively and gain insights into their operations? a) Cost Optimization b) Operational Excellence c) Reliability d) Performance Efficiency
b) Operational Excellence
Which AWS Trusted Advisor category includes checks for high-utilization EC2 instances? a) Cost Optimization b) Performance c) Fault Tolerance d) Security
b) Performance
How does the scale of cloud computing help you to save costs? a) You do not have to invest in technology resources before using them. b) The aggregated cloud usage from a large number of customers results in lower pay-as-you-go prices. c) Accessing services on-demand helps to prevent excess or limited capacity. d) You can quickly deploy applications to customers and provide them with low latency.
b) The aggregated cloud usage from a large number of customers results in lower pay-as-you-go prices.
Which tasks can you perform using AWS CloudTrail? Select TWO. a) Monitor your AWS infrastructure and resources in real time b) Track user activities and API requests throughout your AWS infrastructure c) View metrics and graphs to monitor the performance of resources d) Filter logs to assist with operational analysis and troubleshooting e) Configure automatic actions and alerts in response to metrics
b, d
What are the scenarios in which you should use Amazon Relational Database Service (Amazon RDS)? Select TWO a) Running a serverless database b) Using SQL to organize data c) Storing data in a key-value database d) Scaling up to 10 trillion requests per day e) Storing data in an Amazon Aurora database
b, e
What is the storage capacity of Snowball Edge Storage Optimized? a) 40 TB b) 60 TB c) 80 TB d) 100 TB
c) 80 TB
Which statement is TRUE for the AWS global infrastructure? a) A Region consists of a single Availability Zone b) An Availability Zone consists of two or more Regions c) A Region consists of two or more Availability Zones d) An Availability Zone consists of a single Region
c) A Region consists of two or more Availability Zones
Which statement best describes an Availability Zone? a) The server from which Amazon CloudFront gets your files b) A separate geographical location with multiple locations that are isolated from each other c) A fully isolated portion of the AWS global infrastructure d) A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location
c) A fully isolated portion of the AWS global infrastructure
Which service enables you to review details for user activities and API calls that have occurred within your AWS environment? a) Amazon CloudWatch b) Amazon Inspector c) AWS CloudTrail d) AWS Trusted Advisor
c) AWS CloudTrail
Which pricing tool is used to visualize, understand, and manage your AWS costs and usage over time? a) AWS Pricing Calculator b) AWS Budgets c) AWS Cost Explorer d) AWS Free Tier
c) AWS Cost Explorer
Which component or service enables you to establish a dedicated private connection between your data center and virtual private cloud (VPC)? a) Internet gateway b) Virtual private gateway c) AWS Direct Connect d) Amazon CloudFront
c) AWS Direct Connect
Which service is used to quickly deploy and scale applications on AWS? a) AWS Snowball b) AWS Outposts c) AWS Elastic Beanstalk d) Amazon CloudFront
c) AWS Elastic Beanstalk
Which service enables you to review the security of your Amazon S3 buckets by checking for open access permissions? a) Amazon CloudWatch b) AWS CloudTrail c) AWS Trusted Advisor d) Amazon GuardDuty
c) AWS Trusted Advisor
Which service enables you to build the workflows that are required for human review of machine learning predictions? a) Amazon Aurora b) Amazon Lex c) Amazon Augmented AI (includes SageMaker) d) Amazon Textract
c) Amazon Augmented AI
You want to store data that is infrequently accessed but must be immediately available when needed. Which Amazon S3 storage class should you use? a) Amazon S3 Intelligent-Tiering b) Amazon S3 Glacier Deep Archive c) Amazon S3 Standard-IA d) S3 Glacier Flexible Retrieval
c) Amazon S3 Standard-IA
Which AWS service is the best choice for publishing messages to subscribers? a) Amazon Simple Queue Service (Amazon SQS) b) Amazon EC2 Auto Scaling c) Amazon Simple Notification Service (Amazon SNS) d) Elastic Load Balancing
c) Amazon Simple Notification Service (Amazon SNS)
Which Support plan includes all AWS Trusted Advisor checks at the lowest cost? a) Basic b) Developer c) Business d) Enterprise
c) Business
Which action can you perform with consolidated billing? a) Review how much cost your predicted AWS usage will incur by the end of the month. b) Create an estimate for the cost of your use cases on AWS. c) Combine usage across accounts to receive volume pricing discounts. d) Visualize and manage your AWS costs and usage over time.
c) Combine usage across accounts to receive volume pricing discounts
Which task can AWS Key Management Service (AWS KMS) perform? a) Configure multi-factor authentication (MFA) b) Update the AWS account root user password c) Create cryptographic keys d) Assign permissions to users and groups
c) Create cryptographic keys
Which statement or statements are TRUE about Amazon EBS volumes and Amazon EFS file systems? a) EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones b) EBS volumes store data across multiple Availability Zones. Amazon EFS file systems store data within a single Availability Zone c) EBS volumes and Amazon EFS file systems both store data within a single Availability Zone d) EBS volumes and Amazon EFS file systems both store data across multiple Availability Zones
c) EBS volumes and Amazon EFS file systems both store data within a single Availability Zone
Which site does Amazon CloudFront use to cache copies of content for faster delivery to users at any location? a) Region b) Availability Zone c) Edge location d) Origin
c) Edge Location
Which statement best describes the principle of least privilege? a) Adding an IAM user into at least one IAM group b) Checking a packet's permissions against an access control list c) Granting only the permissions that are needed to perform specific tasks d) Performing a denial of service attack that originates from at least one device
c) Granting only the permissions that are needed to perform specific tasks
An employee requires temporary access to create several Amazon S3 buckets. Which option would be the best choice for this task? a) AWS account root user b) IAM group c) IAM role d) Service Control Policy (SCP)
c) IAM role
You are running an Amazon EC2 instance and want to store data in an attached resource. Your data is temporary and will not be kept long term. Which resource should you use? a) EBS volume b) Subnet c) Instance Store d) S3 Bucket
c) Instance Store
Which statement best describes an AWS account's default network access control list? a) It is stateless and denies all inbound and outbound traffic b) It is stateful and allows all inbound and outbound traffic c) It is stateless and allows all inbound and outbound traffic d) It is stateful and denies all inbound and outbound traffic
c) It is stateless and allows all inbound and outbound traffic
Which statement is TRUE for AWS Lambda? a) Before using AWS Lambda, you must prepay for your estimated compute time. b) To use AWS Lambda, you must configure the servers that run your code. c) You pay only for compute time while your code is running. d) The first step in using AWS Lambda is provisioning a server.
c) You pay only for compute time while your code is running
Which actions can you perform in Amazon Route 53? (Select TWO.) a) Automate the deployment of workloads into your AWS environment. b) Access AWS security and compliance reports and select online agreements. c) Connect user requests to infrastructure in AWS and outside of AWS. d) Manage DNS records for domain names. e) Monitor your applications and respond to system-wide performance changes.
c, d
Which tasks are the responsibilities of AWS? (Select TWO.) a) Configuring security groups on Amazon EC2 instances b) Creating IAM users and groups c) Configuring AWS infrastructure devices d) Training company employees on how to use AWS services e) Maintaining virtualization infrastructure
c, e
The AWS Free Tier includes offers that are available to new AWS customers for a certain period of time following their AWS sign-up date. What is the duration of this period? a) 3 months b) 6 months c) 9 months d) 12 months
d) 12 months
Which statement best describes Amazon CloudFront? a) A service that enables you to run infrastructure in a hybrid cloud approach b) A serverless compute engine for containers c) A service that enables you to send and receive messages between software components through a queue d) A global content delivery service
d) A global content delivery system
Which component can be used to establish a private dedicated connection between your company's data center and AWS? a) Private subnet b) DNS c) Virtual Private Gateway d) AWS Direct Connect
d) AWS Direct Connect
Which service enables you to quickly build, train, and deploy machine learning models? a) Amazon Textract b) Amazon Lex d) AWS DeepRacer d) AWS SageMaker
d) AWS SageMaker
Which service helps protect your applications against distributed denial-of-service (DDoS) attacks? a) Amazon GuardDuty b) Amazon Inspector c) AWS Artifact d) AWS Shield
d) AWS Shield
Which service is used to manage the DNS records for domain names? a) Amazon Virtual Private Cloud b) AWS Direct Connect c) Amazon CloudFront d) Amazon Route 53
d) Amazon Route 53
You want Amazon S3 to monitor your objects' access patterns. Which storage class should you use? a) Amazon S3 Glacier Flexible Retrieval b) Amazon S3 One Zone-IA c) Amazon S3 Standard-IA d) Amazon S3 Intelligent-Tiering
d) Amazon S3 Intelligent-Tiering
You want to store data in an object storage service. Which AWS service is best for this type of storage? a) Amazon Managed Blockchain b) Amazon Elastic File System (Amazon EFS) c) Amazon Elastic Block Store (Amazon EBS) d) Amazon Simple Storage Service (Amazon S3)
d) Amazon Simple Storage Service (Amazon S3)
Which action can you perform with AWS Outposts? a) Automate actions for AWS services and applications through scripts b) Access wizards and automated workflows to perform tasks in AWS services. c) Develop AWS applications in supported programming languages d) Extend AWS infrastructure and services to your on-premises data center
d) Extend AWS infrastructure and services to your on-premises data center
Which service or resource is used to find third-party software that runs on AWS? a) AWS Marketplace b) AWS Free Tier c) AWS Support d) Billing dashboard in the AWS Management Console
a) AWS Marketplace
Which tool enables you to visualize, understand, and manage your AWS costs and usage over time? a) AWS Pricing Calculator b) AWS Budgets c) AWS Cost Explorer d) AWS Artifact
c) AWS Cost Explorer
Which migration strategy involves changing how an application is architected and developed, typically by using cloud-native features? a) Rehosting b) Refactoring c) Replatforming d) Repurchasing
c) Refactoring
What is Cloud Computing? a) Backing up files that are stored on desktop and mobile devices to prevent data loss b) Deploying applications connected to on-premises infrastructure c) Running code without needing to manage or provision servers d) On-demand delivery of IT resources and applications through the internet with pay-as-you-go pricing
d) On-demand delivery of IT resources and applications through the internet with pay-as-you-go pricing
Which pillar of the AWS Well-Architected Framework focuses on the ability of a workload to consistently and correctly perform its intended functions? a) Operational Excellence b) Performance Efficiency c) Security d) Reliability
d) Reliability
Which statement best describes DNS resolution? a) Launching resources in a virtual network that you define b) Storing local copies of content at edge locations around the world c) Connecting a VPC to the internet d) Translating a domain name to an IP address
d) Translating a domain name to an IP address
In the S3 Intelligent-Tiering storage class, Amazon S3 moves objects between a frequent access tier and an infrequent access tier. Which storage classes are used for these tiers? (Select TWO.) a) Amazon S3 Glacier Flexible Retrieval b) Amazon S3 One Zone-IA c) Amazon S3 Glacier Deep Archive d) Amazon S3 Standard e) Amazon S3 Standard-IA
d, e
