AWS Cloud Practitioner Exam Topics

Which of the following AWS Cloud services can be used to run a customer-managed relational database? A. Amazon EC2 B. Amazon Route 53 C. Amazon ElastiCache D. Amazon DynamoDB

A. Amazon EC2

Which of the following is an advantage of consolidated billing on AWS? A. Volume pricing qualification B. Shared access permissions C. Multiple bills per account D. Eliminates the need for tagging

A. Volume pricing qualification

Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud? A. Amazon VPC B. AWS Direct Connect C. AWS Directory Service D. Amazon API Gateway

B. AWS Direct Connect

Which AWS services provide a way to extend an on-premises architecture to the AWS Cloud? (Choose two.) A. Amazon EBS B. AWS Direct Connect C. Amazon CloudFront D. AWS Storage Gateway E. Amazon Connect

B. AWS Direct Connect D. AWS Storage Gateway

Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console? A. Amazon Connect B. AWS Directory Service C. Amazon Pinpoint D. Amazon Rekognition

B. AWS Directory Service

Which AWS service handles the deployment details of capacity provisioning, load balancing, Auto Scaling, and application health monitoring? A. AWS Config B. AWS Elastic Beanstalk C. Amazon Route 53 D. Amazon CloudFront

B. AWS Elastic Beanstalk

A company has multiple AWS accounts and wants to simplify and consolidate its billing process.Which AWS service will achieve this? A. AWS Cost and Usage Reports B. AWS Organizations C. AWS Cost Explorer D. AWS Budgets

B. AWS Organizations

Which AWS service enables users to consolidate billing across multiple accounts? A. Amazon QuickSight B. AWS Organizations C. AWS Budgets D. Amazon Forecast

B. AWS Organizations

Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts? A. AWS Server Migration Service B. AWS Organizations C. AWS Budgets D. AWS Trusted Advisor

B. AWS Organizations

Which service should a customer use to consolidate and centrally manage multiple AWS accounts? A. AWS IAM B. AWS Organizations C. AWS Schema Conversion Tool D. AWS Config

B. AWS Organizations

Which of the following is a cloud architectural design principle? A. Scale up, not out. B. Loosely couple components. C. Build monolithic systems. D. Use commercial database software.

B. Loosely couple components.

AWS Enterprise Support users have access to which service or feature that is not available to users with other AWS Support plans? A. AWS Trusted Advisor B. AWS Support case C. Concierge team D. Amazon Connect

C. Concierge team

What AWS service would be used to centrally manage AWS access across multiple accounts? A. AWS Service Catalog B. AWS Config C. AWS Trusted Advisor D. AWS Organizations

D. AWS Organizations

What AWS service would be used to centrally manage AWS access policies across multiple accounts? A. AWS Service Catalog B. AWS Config C. AWS Trusted Advisor D. AWS Organizations

D. AWS Organizations

Which of the following are features of Amazon CloudWatch Logs? (Choose two.) A. Summaries by Amazon Simple Notification Service (Amazon SNS) B. Free Amazon Elasticsearch Service analytics C. Provided at no charge D. Real-time monitoring E. Adjustable retention

D. Real-time monitoring E. Adjustable retention

Where should users report that AWS resources are being used for malicious purposes? A. AWS Abuse team B. AWS Shield C. AWS Support D. AWS Developer Forums

A. AWS Abuse team

Where can AWS compliance and certification reports be downloaded? A. AWS Artifact B. AWS Concierge C. AWS Certificate Manager D. AWS Trusted Advisor

A. AWS Artifact

Which AWS service would you use to obtain compliance reports and certificates? A. AWS Artifact B. AWS Lambda C. Amazon Inspector D. AWS Certificate Manager

A. AWS Artifact

When designing a typical three-tier web application, which AWS services and/or features improve availability and reduce the impact failures? (Choose two.) A. AWS Auto Scaling for Amazon EC2 instances B. Amazon VPC subnet ACLs to check the health of a service C. Distributed resources across multiple Availability Zones D. AWS Server Migration Service (AWS SMS) to move Amazon EC2 instances into a different Region E. Distributed resources across multiple AWS points of presence

A. AWS Auto Scaling for Amazon EC2 instances C. Distributed resources across multiple Availability Zones

Which AWS service is used to pay AWS bills, and monitor usage and budget costs? A. AWS Billing and Cost Management B. Consolidated billing C. Amazon CloudWatch D. Amazon QuickSight

A. AWS Billing and Cost Management

Which AWS service needs to be enabled to track all user account changes within the AWS Management Console? A. AWS CloudTrail B. Amazon Simple Notification Service (Amazon SNS) C. VPC Flow Logs D. AWS CloudHSM

A. AWS CloudTrail

If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use? A. AWS Config B. AWS Trusted Advisor C. Amazon CloudWatch D. Amazon Inspector

A. AWS Config

Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.) A. AWS Cost and Usage report B. AWS product pages C. AWS Simple Monthly Calculator D. Billing alerts and Amazon CloudWatch alarms E. AWS Price List API

A. AWS Cost and Usage report D. Billing alerts and Amazon CloudWatch alarms

A Cloud Practitioner needs a consistent and dedicated connection between AWS resources and an on-premises system.Which AWS service can fulfill this requirement? A. AWS Direct Connect B. AWS VPN C. Amazon Connect D. AWS Data Pipeline

A. AWS Direct Connect

Which AWS service or resource is serverless? A. AWS Lambda B. Amazon EC2 instances C. Amazon Lightsail D. Amazon ElastiCache

A. AWS Lambda

Which of the following AWS services provide compute resources? (Choose two.) A. AWS Lambda B. Amazon Elastic Container Service (Amazon ECS) C. AWS CodeDeploy D. Amazon Glacier E. AWS Organizations

A. AWS Lambda B. Amazon Elastic Container Service (Amazon ECS)

A company wants to try a third-party ecommerce solution before deciding to use it long term.Which AWS service or tool will support this effort? A. AWS Marketplace B. AWS Partner Network (APN) C. AWS Managed Services D. AWS Service Catalog

A. AWS Marketplace

Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS? A. AWS Marketplace B. Amazon Lumberyard C. AWS Artifact D. Amazon CloudSearch

A. AWS Marketplace

Which AWS service provides alerts when an AWS event may impact a company's AWS resources? A. AWS Personal Health Dashboard B. AWS Service Health Dashboard C. AWS Trusted Advisor D. AWS Infrastructure Event Management

A. AWS Personal Health Dashboard

Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.) A. AWS Snowball B. AWS Lambda C. AWS ElastiCache D. AWS Database Migration Service (AWS DMS) E. Amazon API Gateway

A. AWS Snowball D. AWS Database Migration Service (AWS DMS)

Which mechanism allows developers to access AWS services from application code? A. AWS Software Development Kit B. AWS Management Console C. AWS CodePipeline D. AWS Config

A. AWS Software Development Kit

A company is planning to migrate from on-premises to the AWS Cloud.Which AWS tool or service provides detailed reports on estimated cost savings after migration? A. AWS Total Cost of Ownership (TCO) Calculator B. Cost Explorer C. AWS Budgets D. AWS Migration Hub

A. AWS Total Cost of Ownership (TCO) Calculator

Which AWS services provide a user with connectivity between the AWS Cloud and on-premises resources? (Choose two.) A. AWS VPN B. Amazon Connect C. Amazon Cognito D. AWS Direct Connect E. AWS Managed Services

A. AWS VPN D. AWS Direct Connect

Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Choose two.) A. AWS WAF B. Amazon DynamoDB C. Amazon EC2 D. Amazon CloudFront E. Amazon Inspector

A. AWS WAF D. Amazon CloudFront

Which of the following are advantages of the AWS Cloud? (Choose two.) A. AWS manages the maintenance of the cloud infrastructure B. AWS manages the security of applications built on AWS C. AWS manages capacity planning for physical servers D. AWS manages the development of applications on AWS E. AWS manages cost planning for virtual servers

A. AWS manages the maintenance of the cloud infrastructure C. AWS manages capacity planning for physical servers

Which service can be used to monitor and receive alerts for AWS account root user AWS Management Console sign-in events? A. Amazon CloudWatch B. AWS Config C. AWS Trusted Advisor D. AWS IAM

A. Amazon CloudWatch

How is asset management on AWS easier than asset management in a physical data center? A. AWS provides a Configuration Management Database that users can maintain. B. AWS performs infrastructure discovery scans on the customer's behalf. C. Amazon EC2 automatically generates an asset report and places it in the customer's specified Amazon S3 bucket. D. Users can gather asset metadata reliably with a few API calls

A. AWS provides a Configuration Management Database that users can maintain.

What can users access from AWS Artifact? A. AWS security and compliance documents B. A download of configuration management details for all AWS resources C. Training materials for AWS services D. A security assessment of the applications deployed in the AWS Cloud

A. AWS security and compliance documents

What function do security groups serve related Amazon Elastic Compute Cloud (Amazon EC2) instance security? A. Act as a virtual firewall for the Amazon EC2 instance. B. Secure AWS user accounts with AWS identity and Access Management (IAM) policies. C. Provide DDoS protection with AWS Shield. D. Use Amazon CloudFront to protect the Amazon EC2 instance.

A. Act as a virtual firewall for the Amazon EC2 instance.

A customer needs to run a MySQL database that easily scales.Which AWS service should they use? A. Amazon Aurora B. Amazon Redshift C. Amazon DynamoDB D. Amazon ElastiCache

A. Amazon Aurora

Which AWS service can be used to automatically scale an application up and down without making capacity planning decisions? A. Amazon AutoScaling B. Amazon Redshift C. AWS CloudTrail D. AWS Lambda

A. Amazon AutoScaling

A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data.Which of the following services will help fulfill this requirement? A. Amazon CloudFront B. AWS Direct Connect C. Amazon Route 53 global DNS D. Amazon Simple Storage Service (Amazon S3) transfer acceleration

A. Amazon CloudFront

Users are reporting latency when connecting to a website with a global customer base.Which AWS service will improve the customer experience by reducing latency? A. Amazon CloudFront B. AWS Direct Connect C. Amazon EC2 Auto Scaling D. AWS Transit Gateway

A. Amazon CloudFront

Which services use AWS edge locations? (Choose two.) A. Amazon CloudFront B. AWS Shield C. Amazon EC2 D. Amazon RDS E. Amazon ElastiCache

A. Amazon CloudFront B. AWS Shield

Which AWS services can host a Microsoft SQL Server database? (Select TWO.) A. Amazon EC2 B. Amazon Relational Database Service (Amazon RDS) C. Amazon Aurora D. Amazon Redshift E. Amazon S3

A. Amazon EC2 B. Amazon Relational Database Service (Amazon RDS)

A company wants to migrate a MySQL database to AWS but does not have the budget for Database Administrators to handle routine tasks including provisioning, patching, and performing backups.Which AWS service will support this use case? A. Amazon RDS B. Amazon DynamoDB C. Amazon DocumentDB D. Amazon ElastiCache

A. Amazon RDS

Which of the following is an AWS managed Domain Name System (DNS) web service? A. Amazon Route 53 B. Amazon Neptune C. Amazon SageMaker D. Amazon Lightsail

A. Amazon Route 53

Which services can be used across hybrid AWS Cloud architectures? (Choose two.) A. Amazon Route 53 B. Virtual Private Gateway C. Classic Load Balancer D. Auto Scaling E. Amazon CloudWatch default metrics

A. Amazon Route 53 B. Virtual Private Gateway

Which services can be used across hybrid AWS Cloud architectures? (Select TWO.) A. Amazon Route 53 B. Virtual Private Gateway C. Classic Load Balancer D. Auto Scaling E. Amazon CloudWatch default metrics

A. Amazon Route 53 B. Virtual Private Gateway

Which AWS services are defined as global instead of regional? (Choose two.) A. Amazon Route 53 B. Amazon EC2 C. Amazon S3 D. Amazon CloudFront E. Amazon DynamoDB

A. Amazon Route 53 D. Amazon CloudFront

Which AWS services are defined as global instead of regional? (Select TWO.) A. Amazon Route 53 B. Amazon EC2 C. Amazon S3 D. Amazon CloudFront E. Amazon DynamoDB

A. Amazon Route 53 D. Amazon CloudFront

What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval? A. Amazon S3 B. Amazon Glacier C. Amazon EBS D. Amazon EC2 Instance Store

A. Amazon S3

How would an AWS customer easily apply common access controls to a large set of users? A. Apply an IAM policy to an IAM group. B. Apply an IAM policy to an IAM role. C. Apply the same IAM policy to all IAM users with access to the same workload. D. Apply an IAM policy to an Amazon Cognito user pool.

A. Apply an IAM policy to an IAM group.

Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links? A. Availability Zone B. Edge location C. Region D. Private networking

A. Availability Zone

How can a company reduce its Total Cost of Ownership (TCO) using AWS? A. By minimizing large capital expenditures B. By having no responsibility for third-party license costs C. By having no operational expenditures D. By having AWS manage applications

A. By minimizing large capital expenditures

How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (Choose two.) A. By the time it takes for the Lambda function to execute. B. By the number of versions of a specific Lambda function. C. By the number of requests made for a given Lambda function. D. By the programming language that is used for the Lambda function. E. By the total number of Lambda functions in an AWS account.

A. By the time it takes for the Lambda function to execute. C. By the number of requests made for a given Lambda function.

Which of the following are valid ways for a customer to interact with AWS services? (Select TWO.) A. Command line interface B. On-premises C. Software Development Kits D. Software-as-a-service E. Hybrid

A. Command line interface C. Software Development Kits

Which of the following are valid ways for a customer to interact with AWS services? (Choose two.) A. Command line interface B. On-premises C. Software Development Kits D. Software-as-a-service E. Hybrid

A. Command line interface C. Software Development Kits

When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Choose three.) A. Compute costs B. Facilities costs C. Storage costs D. Data transfer costs E. Network infrastructure costs F. Hardware lifecycle costs

A. Compute costs C. Storage costs D. Data transfer costs

Which actions represent best practices for using AWS IAM? (Choose two.) A. Configure a strong password policy B. Share the security credentials among users of AWS accounts who are in the same Region C. Use access keys to log in to the AWS Management Console D. Rotate access keys on a regular basis E. Avoid using IAM roles to delegate permissions

A. Configure a strong password policy D. Rotate access keys on a regular basis

When comparing AWS with on-premises Total Cost of Ownership (TCO), what costs are included? A. Data center security B. Business analysis C. Project management D. Operating system administration

A. Data center security

A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server.Which Amazon EC2 instance pricing option will meet these requirements? A. Dedicated Hosts B. Dedicated Instances C. Spot Instances D. Reserved Instances

A. Dedicated Hosts

When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)? A. Dedicated Hosts B. Reserved Instances C. On-Demand Instances D. No Upfront Reserved Instances

A. Dedicated Hosts

Which principles are used to architect applications for reliability on the AWS Cloud? (Choose two.) A. Design for automated failure recovery B. Use multiple Availability Zones C. Manage changes via documented processes D. Test for moderate demand to ensure reliability E. Backup recovery to an on-premises environment

A. Design for automated failure recovery B. Use multiple Availability Zones

Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Choose two.) A. Ensuring that application data is encrypted at rest B. Ensuring that AWS NTP servers are set to the correct time C. Ensuring that users have received security training in the use of AWS services D. Ensuring that access to data centers is restricted E. Ensuring that hardware is disposed of properly

A. Ensuring that application data is encrypted at rest C. Ensuring that users have received security training in the use of AWS services

Which is the MINIMUM AWS Support plan that provides designated Technical Account Managers? A. Enterprise B. Business C. Developer D. Basic

A. Enterprise

Which of the following are categories of AWS Trusted Advisor? (Choose two.) A. Fault Tolerance B. Instance Usage C. Infrastructure D. Performance E. Storage Capacity

A. Fault Tolerance D. Performance

Which of the following are categories of AWS Trusted Advisor? (Select TWO.) A. Fault Tolerance B. Instance Usage C. Infrastructure D. Performance E. Storage Capacity

A. Fault Tolerance D. Performance

The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.) A. Information on Amazon S3 bucket permissions B. AWS service outages C. Multi-factor authentication enabled on the AWS account root user D. Available software patches E. Number of users in the account

A. Information on Amazon S3 bucket permissions C. Multi-factor authentication enabled on the AWS account root user

How does AWS MOST effectively reduce computing costs for a growing start-up company? A. It provides on-demand resources for peak usage. B. It automates the provisioning of individual developer environments. C. It automates customer relationship management. D. It implements a fixed monthly computing budget.

A. It provides on-demand resources for peak usage.

What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)? A. It simplifies relational database administration tasks. B. It provides 99.99999999999% reliability and durability. C. It automatically scales databases for loads. D. It enabled users to dynamically adjust CPU and RAM resources.

A. It simplifies relational database administration tasks

Which Amazon RDS feature can be used to achieve high availability? A. Multiple Availability Zones B. Amazon Reserved Instances C. Provisioned IOPS storage D. Enhanced monitoring

A. Multiple Availability Zones

Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours? A. On-Demand Instances B. Reserved Instances C. Spot Instances D. Dedicated Instances

A. On-Demand Instances

Which of the following common IT tasks can AWS cover to free up company IT resources? (Choose two.) A. Patching databases software B. Testing application releases C. Backing up databases D. Creating database schema E. Running penetration tests

A. Patching databases software C. Backing up databases

Which of the following common IT tasks can AWS cover to free up company IT resources? (Select TWO.) A. Patching databases software B. Testing application releases C. Backing up databases D. Creating database schema E. Running penetration tests

A. Patching databases software C. Backing up databases

How do customers benefit from Amazon's massive economies of scale? A. Periodic price reductions as the result of Amazon's operational efficiencies B. New Amazon EC2 instance types providing the latest hardware C. The ability to scale up and down when needed D. Increased reliability in the underlying hardware of Amazon EC2 instances

A. Periodic price reductions as the result of Amazon's operational efficiencies

A customer is deploying a new application and needs to choose an AWS Region.Which of the following factors could influence the customer's decision? (Choose two.) A. Reduced latency to users B. The application's presentation in the local language C. Data sovereignty compliance D. Cooling costs in hotter climates E. Proximity to the customer's office for on-site visits

A. Reduced latency to users C. Data sovereignty compliance

Which of the following are recommended practices for managing IAM users? (Choose two.) A. Require IAM users to change their passwords after a specified period of time B. Prevent IAM users from reusing previous passwords C. Recommend that the same password be used on AWS and other sites D. Require IAM users to store their passwords in raw text E. Disable multi-factor authentication (MFA) for IAM users

A. Require IAM users to change their passwords after a specified period of time B. Prevent IAM users from reusing previous passwords

What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.) A. Rotate passwords and access keys. B. Remove MFA tokens. C. Move resources to a different AWS Region. D. Delete AWS CloudTrail Resources. E. Contact AWS Support.

A. Rotate passwords and access keys. E. Contact AWS Support.

Which scenarios represent the concept of elasticity on AWS? (Choose two.) A. Scaling the number of Amazon EC2 instances based on traffic. B. Resizing Amazon RDS instances as business needs change. C. Automatically directing traffic to less-utilized Amazon EC2 instances. D. Using AWS compliance documents to accelerate the compliance process. E. Having the ability to create and govern environments using code.

A. Scaling the number of Amazon EC2 instances based on traffic. B. Resizing Amazon RDS instances as business needs change.

Which of the following are advantages of AWS consolidated billing? (Choose two.) A. The ability to receive one bill for multiple accounts B. Service limits increasing by default in all accounts C. A fixed discount on the monthly bill D. Potential volume discounts, as usage in all accounts is combined E. The automatic extension of the master account's AWS support plan to all accounts

A. The ability to receive one bill for multiple accounts D. Potential volume discounts, as usage in all accounts is combined

What approach to transcoding a large number of individual video files adheres to AWS architecture principles? A. Using many instances in parallel B. Using a single large instance during off-peak hours C. Using dedicated hardware D. Using a large GPU instance type

A. Using many instances in parallel

Which of the following are benefits of hosting infrastructure in the AWS Cloud? (Choose two.) A. There are no upfront commitments. B. AWS manages all security in the cloud. C. Users have the ability to provision resources on demand. D. Users have access to free and unlimited storage. E. Users have control over the physical infrastructure.

A. There are no upfront commitments. C. Users have the ability to provision resources on demand.

What are the advantages of Reserved Instances? (Choose two.) A. They provide a discount over on-demand pricing. B. They provide access to additional instance types. C. They provide additional networking capability. D. Customers can upgrade instances as new types become available. E. Customers can reserve capacity in an Availability Zone.

A. They provide a discount over on-demand pricing. E. Customers can reserve capacity in an Availability Zone.

According to the AWS Well-Architected Framework, what change management steps should be taken to achieve reliability in the AWS Cloud? (Choose two.) A. Use AWS Config to generate an inventory of AWS resources B. Use service limits to prevent users from creating or making changes to AWS resources C. Use AWS CloudTrail to record AWS API calls into an auditable log file D. Use AWS Certificate Manager to whitelist approved AWS resources and services E. Use Amazon GuardDuty to validate configuration changes made to AWS resources

A. Use AWS Config to generate an inventory of AWS resources C. Use AWS CloudTrail to record AWS API calls into an auditable log file

Which of the following is an important architectural design principle when designing cloud applications? A. Use multiple Availability Zones. B. Use tightly coupled components. C. Use open source software. D. Provision extra capacity.

A. Use multiple Availability Zones.

What is an advantage of using the AWS Cloud over a traditional on-premises solution? A. Users do not have to guess about future capacity needs. B. Users can utilize existing hardware contracts for purchases. C. Users can fix costs no matter what their traffic is. D. Users can avoid audits by using reports from AWS.

A. Users do not have to guess about future capacity needs.

How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center? A. Users do not have to wait for infrastructure provisioning. B. The AWS Cloud infrastructure is much faster than an on-premises data center infrastructure. C. AWS takes over application configuration management on behalf of users. D. Users do not need to address security and compliance issues.

A. Users do not have to wait for infrastructure provisioning.

What is the value of using third-party software from AWS Marketplace instead of installing third-party software on Amazon EC2? (Choose two.) A. Users pay for software by the hour or month depending on licensing. B. AWS Marketplace enables the user to launch applications with 1-Click. C. AWS Marketplace data encryption is managed by a third-party vendor. D. AWS Marketplace eliminates the need to upgrade to newer software versions. E. Users can deploy third-party software without testing.

A. Users pay for software by the hour or month depending on licensing. B. AWS Marketplace enables the user to launch applications with 1-Click.

When is it beneficial for a company to use a Spot Instance? A. When there is flexibility in when an application needs to run. B. When there are mission-critical workloads. C. When dedicated capacity is needed. D. When an instance should not be stopped.

A. When there is flexibility in when an application needs to run.

An application designed to span multiple Availability Zones is described as: A. being highly available B. having global reach C. using an economy of scale D. having elasticity

A. being highly available

AWS CloudFormation is designed to help the user: A. model and provision resources. B. update application code. C. set up data lakes. D. create reports for billing.

A. model and provision resources.

The financial benefits of using AWS are: (Choose two.) A. reduced Total Cost of Ownership (TCO). B. increased capital expenditure (capex). C. reduced operational expenditure (opex). D. deferred payment plans for startups. E. business credit lines for stratups.

A. reduced Total Cost of Ownership (TCO). C. reduced operational expenditure (opex).

The financial benefits of using AWS are: (Select TWO.) A. reduced Total Cost of Ownership (TCO). B. increased capital expenditure (capex). C. reduced operational expenditure (opex). D. deferred payment plans for startups. E. business credit lines for stratups.

A. reduced Total Cost of Ownership (TCO). C. reduced operational expenditure (opex).

The pay-as-you-go pricing model for AWS services: A. reduces capital expenditures. B. requires payment up front for AWS services. C. is relevant only for Amazon EC2, Amazon S3, and Amazon RDS. D. reduces operational expenditures.

A. reduces capital expenditures.

Which AWS tools assist with estimating costs? (Select three.) A. Detailed billing report B. Cost allocation tags C. AWS Simple Monthly Calculator D. AWS Total Cost of Ownership (TCO) Calculator E. Cost Estimator

B . Cost allocation tagsC . AWS Simple Monthly CalculatorD . AWS Total Cost of Ownership (TCO) Calculator

Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster? (Select TWO.) A. AWS Concierge B. AWS CloudFormation C. Amazon Simple Storage Service (Amazon S3) D. Amazon EC2 Auto Scaling E. AWS Management Console

B. AWS CloudFormation E. AWS Management Console

Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within theAWS Cloud? A. AWS Secrets Manager B. AWS CloudHSM C. AWS Key Management Service (AWS KMS) D. AWS Directory Service

B. AWS CloudHSM

What is Amazon CloudWatch? A. A code repository with customizable build and team commit features. B. A metrics repository with customizable notification thresholds and channels. C. A security configuration repository with threat analytics. D. A rule repository of a web application firewall with automated vulnerability prevention features.

B. A metrics repository with customizable notification thresholds and channels.

How many Availability Zones should compute resources be provisioned across to achieve high availability? A. A minimum of one B. A minimum of two C. A minimum of three D. A minimum of four or more

B. A minimum of two

Which AWS service offers on-demand access to AWS security and compliance reports? A. AWS CloudTrail B. AWS Artifact C. AWS Health D. Amazon CloudWatch

B. AWS Artifact

Which of the following services provides on-demand access to AWS compliance reports? A. AWS IAM B. AWS Artifact C. Amazon GuardDuty D. AWS KMSB. AWS Artifact

B. AWS Artifact

Which AWS service can a customer use to set up an alert notification when the account is approaching a particular dollar amount? A. AWS Cost and Usage reports B. AWS Budgets C. AWS Cost Explorer D. AWS Trusted Advisor

B. AWS Budgets

Which AWS service enables users to deploy infrastructure as code by automating the process of provisioning resources? A. Amazon GameLift B. AWS CloudFormation C. AWS Data Pipeline D. AWS Glue

B. AWS CloudFormation

Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster? (Choose two.) A. AWS Concierge B. AWS CloudFormation C. Amazon Simple Storage Service (Amazon S3) D. Amazon EC2 Auto Scaling E. AWS Management Console

B. AWS CloudFormation E. AWS Management Console

Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWSSDKs? A. Amazon CloudWatch B. AWS CloudTrail C. AWS Config D. AWS Health

B. AWS CloudTrail

Which AWS service allows users to identify the changes made to a resource over time? A. Amazon Inspector B. AWS Config C. AWS Service Catalog D. AWS IAM

B. AWS Config

Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time? A. AWS Budgets B. AWS Cost Explorer C. AWS Organizations D. Consolidated billing

B. AWS Cost Explorer

A company requires a dedicated network connection between its on-premises servers and the AWS Cloud.Which AWS service should be used? A. AWS VPN B. AWS Direct Connect C. Amazon API Gateway D. Amazon Connect

B. AWS Direct Connect

A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet.Which service will facilitate private hybrid connectivity? A. Amazon Virtual Private Cloud (Amazon VPC) NAT Gateway B. AWS Direct Connect C. Amazon Simple Storage Service (Amazon S3) Transfer Acceleration D. AWS Web Application Firewall (AWS WAF)

B. AWS Direct Connect

Which of the following allows users to provision a dedicated network connection from their internal network to AWS? A. AWS CloudHSM B. AWS Direct Connect C. AWS VPN D. Amazon Connect

B. AWS Direct Connect

A company is planning to launch an ecommerce site in a single AWS Region to a worldwide user base.Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (Choose two.) A. Application Load Balancer B. AWS Global Accelerator C. AWS Direct Connect D. Amazon CloudFront E. AWS Lambda

B. AWS Global Accelerator D. Amazon CloudFront

A company wants to reduce the physical compute footprint that developers use to run code.Which service would meet that need by enabling serverless architectures? A. Amazon Elastic Compute Cloud (Amazon EC2) B. AWS Lambda C. Amazon DynamoDB D. AWS CodeCommit

B. AWS Lambda

Where can users find a catalog of AWS-recognized providers of third-party security solutions? A. AWS Service Catalog B. AWS Marketplace C. AWS Quick Start D. AWS CodeDeploy

B. AWS Marketplace

Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.) A. AWS Trusted Advisor B. AWS Online Tech Talks C. AWS Blog D. AWS Forums E. AWS Classroom Training

B. AWS Online Tech Talks E. AWS Classroom Training

Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Select TWO.) A. AWS Trusted Advisor B. AWS Online Tech Talks C. AWS Blog D. AWS Forums E. AWS Classroom Training

B. AWS Online Tech Talks E. AWS Classroom Training

Which of the following services could be used to deploy an application to servers running on-premises? (Select TWO.) A. AWS Elastic Beanstalk B. AWS OpsWorks C. AWS CodeDeploy D. AWS Batch E. AWS X-Ray

B. AWS OpsWorks C. AWS CodeDeploy

Which of the following services could be used to deploy an application to servers running on-premises? (Choose two.) A. AWS Elastic Beanstalk B. AWS OpsWorks C. AWS CodeDeploy D. AWS Batch E. AWS X-Ray

B. AWS OpsWorks C. AWS CodeDeploy

What can assist in evaluating an application for migration to the cloud? (Choose two.) A. AWS Trusted Advisor B. AWS Professional Services C. AWS Systems Manager D. AWS Partner Network (APN) E. AWS Secrets Manager

B. AWS Professional Services D. AWS Partner Network (APN)

Which service should be used to estimate the costs of running a new project on AWS? A. AWS TCO Calculator B. AWS Simple Monthly Calculator C. AWS Cost Explorer API D. AWS Budgets

B. AWS Simple Monthly Calculator

A company is considering migrating its applications to AWS. The company wants to compare the cost of running the workload on-premises to running the equivalent workload on the AWS platform.Which tool can be used to perform this comparison? A. AWS Simple Monthly Calculator B. AWS Total Cost of Ownership (TCO) Calculator C. AWS Billing and Cost Management console D. Cost Explorer

B. AWS Total Cost of Ownership (TCO) Calculator

What will help a company perform a cost benefit analysis of migrating to the AWS Cloud? A. Cost Explorer B. AWS Total Cost of Ownership (TCO) Calculator C. AWS Simple Monthly Calculator D. AWS Trusted Advisor

B. AWS Total Cost of Ownership (TCO) Calculator

Which AWS service identifies security groups that allow unrestricted access to a user's AWS resources? A. AWS CloudTrail B. AWS Trusted Advisor C. Amazon CloudWatch D. Amazon Inspector

B. AWS Trusted Advisor

Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports? A. AWS Organizations B. AWS Trusted Advisor C. AWS Usage Report D. Amazon EC2 dashboard

B. AWS Trusted Advisor

Which managed AWS service provides real-time guidance on AWS security best practices? A. AWS X-Ray B. AWS Trusted Advisor C. Amazon CloudWatch D. AWS Systems Manager

B. AWS Trusted Advisor

Which of the following inspects AWS environments to find opportunities that can save money for users and also improve system performance? A. AWS Cost Explorer B. AWS Trusted Advisor C. Consolidated billing D. Detailed billing

B. AWS Trusted Advisor

Which of the following security-related services does AWS offer? (Choose two.) A. Multi-factor authentication physical tokens B. AWS Trusted Advisor security checks C. Data encryption D. Automated penetration testing E. Amazon S3 copyrighted content detection

B. AWS Trusted Advisor security checks C. Data encryption

Which of the following security-related services does AWS offer? (Select TWO.) A. Multi-factor authentication physical tokens B. AWS Trusted Advisor security checks C. Data encryption D. Automated penetration testing E. Amazon S3 copyrighted content detection

B. AWS Trusted Advisor security checks C. Data encryption

Why should a company choose AWS instead of a traditional data center? A. AWS provides users with full control over the underlying resources. B. AWS does not require long-term contracts and provides a pay-as-you-go model. C. AWS offers edge locations in every country, supporting global reach. D. AWS has no limits on the number of resources that can be created

B. AWS does not require long-term contracts and provides a pay-as-you-go model.

Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.) A. It verifies that hosted workloads are automatically compliant with the controls of supported compliance frameworks. B. AWS is responsible for the maintenance of common compliance framework documentation. C. It assures customers that AWS is maintaining physical security and data protection. D. It ensures the use of compliance frameworks that are being used by other cloud providers. E. It will adopt new compliance frameworks as they become relevant to customer workloads.

B. AWS is responsible for the maintenance of common compliance framework documentation. C. It assures customers that AWS is maintaining physical security and data protection.

Amazon Relational Database Service (Amazon RDS) offers which of the following benefits over traditional database management? A. AWS manages the data stored in Amazon RDS tables. B. AWS manages the maintenance of the operating system. C. AWS automatically scales up instance types on demand. D. AWS manages the database type.

B. AWS manages the maintenance of the operating system.

Which of the following is a benefit of using the AWS Cloud? A. Permissive security removes the administrative burden. B. Ability to focus on revenue-generating activities. C. Control over cloud network hardware. D. Choice of specific cloud hardware vendors.

B. Ability to focus on revenue-generating activities.

Which of the following is an AWS Well-Architected Framework design principle related to reliability? A. Deployment to a single Availability Zone B. Ability to recover from failure C. Design for cost optimization D. Perform operations as code

B. Ability to recover from failure

What exclusive benefit is provided to users with Enterprise Support? A. Access to a Technical Project Manager B. Access to a Technical Account Manager C. Access to a Cloud Support Engineer D. Access to a Solutions Architect

B. Access to a Technical Account Manager

Which solution provides the FASTEST application response times to frequently accessed data to users in multiple AWS Regions? A. AWS CloudTrail across multiple Availability Zones B. Amazon CloudFront to edge locations C. AWS CloudFormation in multiple regions D. A virtual private gateway over AWS Direct Connect

B. Amazon CloudFront to edge locations

A company wants to monitor the CPU usage of its Amazon EC2 resources.Which AWS service should the company use? A. AWS CloudTrail B. Amazon CloudWatch C. AWS Cost and Usage report D. Amazon Simple Notification Service (Amazon SNS)

B. Amazon CloudWatch

Which AWS service can be used to generate alerts based on an estimated monthly bill? A. AWS Config B. Amazon CloudWatch C. AWS X-Ray D. AWS CloudTrail

B. Amazon CloudWatch

Which AWS service is a managed NoSQL database? A. Amazon Redshift B. Amazon DynamoDB C. Amazon Aurora D. Amazon RDS for MariaDB

B. Amazon DynamoDB

Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking? A. Amazon RDS B. Amazon EC2 C. Amazon ElastiCache D. AWS Fargate

B. Amazon EC2

Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated? A. Amazon EBS B. Amazon EC2 instance store C. Amazon EFS D. Amazon S3

B. Amazon EC2 instance store

Which AWS service should be used for long-term, low-cost storage of data backups? A. Amazon RDS B. Amazon Glacier C. AWS Snowball D. AWS EBS

B. Amazon Glacier

Which of the following AWS features enables a user to launch a pre-configured Amazon Elastic Compute Cloud (Amazon EC2) instance? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon Machine Image C. Amazon EC2 Systems Manager D. Amazon AppStream 2.0

B. Amazon Machine Image

Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS? A. Amazon GuardDuty B. Amazon Macie C. Amazon Inspector D. AWS Shield

B. Amazon Macie

Which AWS services should be used for read/write of constantly changing data? (Choose two.) A. Amazon Glacier B. Amazon RDS C. AWS Snowball D. Amazon Redshift E. Amazon EFS

B. Amazon RDS E. Amazon EFS

Which AWS services should be used for read/write of constantly changing data? (Select TWO.) A. Amazon Glacier B. Amazon RDS C. AWS Snowball D. Amazon Redshift E. Amazon EFS

B. Amazon RDS E. Amazon EFS

What time-savings advantage is offered with the use of Amazon Rekognition? A. Amazon Rekognition provides automatic watermarking of images. B. Amazon Rekognition provides automatic detection of objects appearing in pictures. C. Amazon Rekognition provides the ability to resize millions of images automatically. D. Amazon Rekognition uses Amazon Mechanical Turk to allow humans to bid on object detection jobs.

B. Amazon Rekognition provides automatic detection of objects appearing in pictures.

Which of the following AWS services can be used to serve large amounts of online video content with the lowest possible latency? (Select TWO.) A. AWS Storage Gateway B. Amazon S3 C. Amazon Elastic File System (EFS) D. Amazon Glacier E. Amazom CloudFront

B. Amazon S3 E. Amazom CloudFront

Which of the following AWS services can be used to serve large amounts of online video content with the lowest possible latency? (Choose two.) A. AWS Storage Gateway B. Amazon S3 C. Amazon Elastic File System (EFS) D. Amazon Glacier E. Amazom CloudFront

B. Amazon S3 E. Amazom CloudFront

What are the benefits of using the AWS Cloud for companies with customers in many countries around the world? (Choose two.) A. Companies can deploy applications in multiple AWS Regions to reduce latency. B. Amazon Translate automatically translates third-party website interfaces into multiple languages. C. Amazon CloudFront has multiple edge locations around the world to reduce latency. D. Amazon Comprehend allows users to build applications that can respond to user requests in many languages. E. Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world, which reduces latency.

B. Amazon Translate automatically translates third-party website interfaces into multiple languages. C. Amazon CloudFront has multiple edge locations around the world to reduce latency.

Which situation should be reported to the AWS Abuse team? A. In Availability Zone has a service disruption B. An intrusion attempt is made from an AWS IP address C. A user has trouble accessing an Amazon S3 bucket from an AWS IP address D. A user needs to change payment methods due to a compromise

B. An intrusion attempt is made from an AWS IP address

Which of the following are characteristics of Amazon S3? (Choose two.) A. A global file system B. An object store C. A local file store D. A network file system E. A durable storage system

B. An object store E. A durable storage system

Which of the following are characteristics of Amazon S3? (Select TWO.) A. A global file system B. An object store C. A local file store D. A network file system E. A durable storage system

B. An object store E. A durable storage system

When a company provisions web servers in multiple AWS Regions, what is being increased? A. Coupling B. Availability C. Security D. Durability

B. Availability

A new service using AWS must be highly available. Yet, due to regulatory requirements, all of its Amazon EC2 instances must be located in a single geographic area.According to best practices, to meet these requirements, the EC2 instances must be placed in at least two:

B. Availability Zones

A new service using AWS must be highly available. Yet, due to regulatory requirements, all of its Amazon EC2 instances must be located in a single geographic area.According to best practices, to meet these requirements, the EC2 instances must be placed in at least two: A. AWS Regions B. Availability Zones C. subnets D. placement groups

B. Availability Zones

Which element of the AWS global infrastructure consists of one or more discrete data centers, each with redundant power, networking, and connectivity, which are housed in separate facilities? A. AWS Regions B. Availability Zones C. Edge locations D. Amazon CloudFront

B. Availability Zones

A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources.What combination of actions will enable the company to accomplish this goal? (Choose two.) A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated. B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC. C. Use Amazon Athena to query data from the on-premises database servers. D. Connect the company's on-premises data center to AWS using AWS Direct Connect. E. Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers.

B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC. D. Connect the company's on-premises data center to AWS using AWS Direct Connect.

Which is the MINIMUM AWS Support plan that allows for one-hour target response time for support cases? A. Enterprise B. Business C. Developer D. Basic

B. Business

Which is the MINIMUM AWS Support plan that provides technical support through phone calls? A. Enterprise B. Business C. Developer D. Basic

B. Business

Which of the following is an example of how moving to the AWS Cloud reduces upfront cost? A. By replacing large variable costs with lower capital investments B. By replacing large capital investments with lower variable costs C. By allowing the provisioning of compute and storage at a fixed level to meet peak demand D. By replacing the repeated scaling of virtual servers with a simpler fixed-scale model

B. By replacing large capital investments with lower variable costs

Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS CommandLine Interface (AWS CLI)? A. IAM group B. IAM user C. IAM role D. IAM policy

B. IAM user

How can one AWS account use Reserved Instances from another AWS account? A. By using Amazon EC2 Dedicated Instances B. By using AWS Organizations consolidated billing C. By using the AWS Cost Explorer tool D. By using AWS Budgets

B. By using AWS Organizations consolidated billing

What are the immediate benefits of using the AWS Cloud? (Choose two.) A. Increased IT staff. B. Capital expenses are replaced with variable expenses. C. User control of infrastructure. D. Increased agility. E. AWS holds responsibility for security in the cloud.

B. Capital expenses are replaced with variable expenses. D. Increased agility.

Which AWS feature allows a company to take advantage of usage tiers for services across multiple member accounts? A. Service control policies (SCPs) B. Consolidated billing C. All Upfront Reserved Instances D. AWS Cost Explorer

B. Consolidated billing

Which AWS tools assist with estimating costs? (Choose three.) A. Detailed billing report B. Cost allocation tags C. AWS Simple Monthly Calculator D. AWS Total Cost of Ownership (TCO) Calculator E. Cost Estimator

B. Cost allocation tags C. AWS Simple Monthly Calculator D. AWS Total Cost of Ownership (TCO) Calculator

Which methods can be used to identify AWS costs by departments? (Choose two.) A. Enable multi-factor authentication for the AWS account root user. B. Create separate accounts for each department. C. Use Reserved Instances whenever possible. D. Use tags to associate each instance with a particular department. E. Pay bills using purchase orders

B. Create separate accounts for each department. D. Use tags to associate each instance with a particular department.

What does AWS Shield Standard provide? A. WAF rules B. DDoS protection C. Identity and Access Management (IAM) permissions and access to resources D. Data encryption

B. DDoS protection

What is the AWS customer responsible for according to the AWS shared responsibility model? A. Physical access controls B. Data encryption C. Secure disposal of storage devices D. Environmental risk management

B. Data encryption

What can AWS edge locations be used for? (Choose two.) A. Hosting applications B. Delivering content closer to users C. Running NoSQL database caching services D. Reducing traffic on the server by caching responses E. Sending notification messages to end users

B. Delivering content closer to users D. Reducing traffic on the server by caching responses

What can AWS edge locations be used for? (Select TWO.) A. Hosting applications B. Delivering content closer to users C. Running NoSQL database caching services D. Reducing traffic on the server by caching responses E. Sending notification messages to end users

B. Delivering content closer to users D. Reducing traffic on the server by caching responses

Which architectural principle is used when deploying an Amazon Relational Database Service (Amazon RDS) instance in Multiple Availability Zone mode? A. Implement loose coupling. B. Design for failure. C. Automate everything that can be automated. D. Use services, not servers

B. Design for failure.

A Cloud Practitioner is asked how to estimate the cost of using a new application on AWS.What is the MOST appropriate response? A. Inform the user that AWS pricing allows for on-demand pricing. B. Direct the user to the AWS Simple Monthly Calculator for an estimate. C. Use Amazon QuickSight to analyze current spending on-premises. D. Use Amazon AppStream 2.0 for real-time pricing analytics.

B. Direct the user to the AWS Simple Monthly Calculator for an estimate.

According to the AWS shared responsibility model, what is the sole responsibility of AWS? A. Application security B. Edge location management C. Patch management D. Client-side data

B. Edge location management

Which of the following services will automatically scale with an expected increase in web traffic? A. AWS CodePipeline B. Elastic Load Balancing C. Amazon EBS D. AWS Direct Connect

B. Elastic Load Balancing

Which of the following are benefits of the AWS Cloud? (Choose two.) A. Unlimited uptime B. Elasticity C. Agility D. Colocation E. Capital expenses

B. Elasticity C. Agility

How can a customer increase security to AWS account logons? (Choose two.) A. Configure AWS Certificate Manager B. Enable Multi-Factor Authentication (MFA) C. Use Amazon Cognito to manage access D. Configure a strong password policy E. Enable AWS Organizations

B. Enable Multi-Factor Authentication (MFA) D. Configure a strong password policy

Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Choose two.) A. Patching operating system components for Amazon Relational Database Server (Amazon RDS) B. Encrypting data on the client-side C. Training the data center staff D. Configuring Network Access Control Lists (ACL) E. Maintaining environmental controls within a data center

B. Encrypting data on the client-side D. Configuring Network Access Control Lists (ACL)

What is an example of high availability in the AWS Cloud? A. Consulting AWS technical support at any time day or night B. Ensuring an application remains accessible, even if a resource fails C. Making any AWS service available for use by paying on demand D. Deploying in any part of the world using AWS Regions

B. Ensuring an application remains accessible, even if a resource fails

Which AWS support plan includes a dedicated Technical Account Manager? A. Developer B. Enterprise C. Business D. Basic

B. Enterprise

Which feature of the AWS Cloud will support an international company's requirement for low latency to all of its customers? A. Fault tolerance B. Global reach C. Pay-as-you-go pricing D. High availability

B. Global reach

Which of the following security measures protect access to an AWS account? (Choose two.) A. Enable AWS CloudTrail. B. Grant least privilege access to IAM users. C. Create one IAM user and share with many developers and users. D. Enable Amazon CloudFront. E. Activate multi-factor authentication (MFA) for privileged users.

B. Grant least privilege access to IAM users. E. Activate multi-factor authentication (MFA) for privileged users.

Which of the following security measures protect access to an AWS account? (Select TWO.) A. Enable AWS CloudTrail. B. Grant least privilege access to IAM users. C. Create one IAM user and share with many developers and users. D. Enable Amazon CloudFront. E. Activate multi-factor authentication (MFA) for privileged users.

B. Grant least privilege access to IAM users. E. Activate multi-factor authentication (MFA) for privileged users.

Which AWS IAM feature is used to associate a set of permissions with multiple users? A. Multi-factor authentication B. Groups C. Password policies D. Access keys

B. Groups

A system in the AWS Cloud is designed to withstand the failure of one or more components.What is this an example of? A. Elasticity B. High Availability C. Scalability D. Agility

B. High Availability

A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle? A. Think parallel B. Implement elasticity C. Decouple your components D. Design for failure

B. Implement elasticity

Which of the following is an AWS Cloud architecture design principle? A. Implement single points of failure. B. Implement loose coupling. C. Implement monolithic design. D. Implement vertical scaling.

B. Implement loose coupling.

Which statement best describes Elastic Load Balancing? A. It translates a domain name into an IP address using DNS. B. It distributes incoming application traffic across one or more Amazon EC2 instances. C. It collects metrics on connected Amazon EC2 instances. D. It automatically adjusts the number of Amazon EC2 instances to support incoming traffic.

B. It distributes incoming application traffic across one or more Amazon EC2 instances.

How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.) A. It identifies software vulnerabilities in applications running on AWS B. It provides a list of cost optimization recommendations based on current AWS usage C. It detects potential security vulnerabilities caused by permissions settings on account resources D. It automatically corrects potential security issues caused by permissions settings on account resources E. It provides proactive alerting whenever an Amazon EC2 instance has been compromised

B. It provides a list of cost optimization recommendations based on current AWS usage C. It detects potential security vulnerabilities caused by permissions settings on account resources

Which of the following provides the ability to share the cost benefits of Reserved Instances across AWS accounts? A. AWS Cost Explorer between AWS accounts B. Linked accounts and consolidated billing C. Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instance Utilization Report D. Amazon EC2 Instance Usage Report between AWS accounts

B. Linked accounts and consolidated billing

Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.) A. Maintaining the underlying Amazon EC2 hardware. B. Managing the VPC network access control lists. C. Encrypting data in transit and at rest. D. Replacing failed hard disk drives. E. Deploying hardware in different Availability Zones.

B. Managing the VPC network access control lists. C. Encrypting data in transit and at rest.

What is a value proposition of the AWS Cloud? A. AWS is responsible for security in the AWS Cloud B. No long-term contract is required C. Provision new servers in days D. AWS manages user applications in the AWS Cloud

B. No long-term contract is required

What are the advantages of the AWS Cloud? (Choose two.) A. Fixed rate monthly cost B. No need to guess capacity requirements C. Increased speed to market D. Increased upfront capital expenditure E. Physical access to cloud data centers

B. No need to guess capacity requirements C. Increased speed to market

Under the shared responsibility model, which of the following is a shared control between a customer and AWS? A. Physical controls B. Patch management C. Zone security D. Data center auditing

B. Patch management

Under the shared responsibility model; which of the following areas are the customer's responsibility? (Choose two.) A. Firmware upgrades of network infrastructure B. Patching of operating systems C. Patching of the underlying hypervisor D. Physical security of data centers E. Configuration of the security group

B. Patching of operating systems E. Configuration of the security group

Which of the following BEST describe the AWS pricing model? (Choose two.) A. Fixed-term B. Pay-as-you-go C. Colocation D. Planned E. Variable cos

B. Pay-as-you-go E. Variable cost

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.) A. Multiple Availability Zones B. Performance efficiency C. Security D. Encryption usage E. High availability

B. Performance efficiency C. Security

For which auditing process does AWS have sole responsibility? A. AWS IAM policies B. Physical security C. Amazon S3 bucket policies D. AWS CloudTrail Logs

B. Physical security

Under the AWS shared responsibility model, AWS is responsible for which security-related task? A. Lifecycle management of IAM credentials B. Physical security of global infrastructure C. Encryption of Amazon EBS volumes D. Firewall configuration

B. Physical security of global infrastructure

Which of the following is the responsibility of AWS? A. Setting up AWS Identity and Access Management (IAM) users and groups B. Physically destroying storage media at end of life C. Patching guest operating systems D. Configuring security settings on Amazon EC2 instances

B. Physically destroying storage media at end of life

A company is considering moving its on-premises data center to AWS.What factors should be included in doing a Total Cost of Ownership (TCO) analysis? (Choose two.) A. Amazon EC2 instance availability B. Power consumption of the data center C. Labor costs to replace old servers D. Application developer time E. Database engine capacity

B. Power consumption of the data center C. Labor costs to replace old servers

Which of the following is a correct relationship between regions, Availability Zones, and edge locations? A. Data centers contain regions. B. Regions contain Availability Zones. C. Availability Zones contain edge locations. D. Edge locations contain regions.

B. Regions contain Availability Zones.

A user deploys an Amazon RDS DB instance in multiple Availability Zones.This strategy involves which pillar of the AWS Well-Architected Framework? A. Performance efficiency B. Reliability C. Cost optimization D. Security

B. Reliability

Which of the following steps should be taken by a customer when conducting penetration testing on AWS? A. Conduct penetration testing using Amazon Inspector, and then notify AWS support. B. Request and wait for approval from the customer's internal security team, and then conduct testing. C. Notify AWS support, and then conduct testing immediately. D. Request and wait for approval from AWS support, and then conduct testing.

B. Request and wait for approval from the customer's internal security team, and then conduct testing.

A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports.What is the SIMPLEST way to do this? A. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0. B. Run AWS Trusted Advisor and review the findings. C. Open the AWS IAM console and check the inbound rule filters for open access. D. In AWS Config, create a custom rule that invokes an AWS Lambda function to review rules for inbound access.

B. Run AWS Trusted Advisor and review the findings.

Under the AWS shared responsibility model, the customer manages which of the following? (Choose two.) A. Decommissioning of physical storage devices B. Security group and ACL configuration C. Patch management of an Amazon RDS instance operating system D. Controlling physical access to data centers E. Patch management of an Amazon EC2 instance operating system

B. Security group and ACL configuration E. Patch management of an Amazon EC2 instance operating system

What does AWS Marketplace allow users to do? (Choose two.) A. Sell unused Amazon EC2 Spot Instances. B. Sell solutions to other AWS users. C. Buy third-party software that runs on AWS. D. Purchase AWS security and compliance documents. E. Order AWS Snowball.

B. Sell solutions to other AWS users. C. Buy third-party software that runs on AWS

Which of the following are components of Amazon VPC? (Choose two.) A. Objects B. Subnets C. Buckets D. Internet gateways E. Access key

B. Subnets D. Internet gateways

What is an advantage of deploying an application across multiple Availability Zones? A. There is a lower risk of service failure if a natural disaster causes a service disruption in a given AWS Region. B. The application will have higher availability because it can withstand a service disruption in one Availability Zone. C. There will be better coverage as Availability Zones are geographically distant and can serve a wider area. D. There will be decreased application latency that will improve the user experience.

B. The application will have higher availability because it can withstand a service disruption in one Availability Zone.

When comparing the total cost of ownership (TCO) of an on-premises infrastructure to a cloud architecture, what costs should be considered? (Choose two.) A. The credit card processing fees for application transactions in the cloud. B. The cost of purchasing and installing server hardware in the on-premises data. C. The cost of administering the infrastructure, including operating system and software installations, patches, backups, and recovering from failures. D. The costs of third-party penetration testing. E. The advertising costs associated with an ongoing enterprise-wide campaign.

B. The cost of purchasing and installing server hardware in the on-premises data. C. The cost of administering the infrastructure, including operating system and software installations, patches, backups, and recovering from failures.

Which of the following describes the relationships among AWS Regions, Availability Zones, and edge locations? (Choose two.) A. There are more AWS Regions than Availability Zones. B. There are more edge locations than AWS Regions. C. An edge location is an Availability Zone. D. There are more AWS Regions than edge locations. E. There are more Availability Zones than AWS Regions.

B. There are more edge locations than AWS Regions. E. There are more Availability Zones than AWS Regions.

How do Amazon EC2 Auto Scaling groups help achieve high availability for a web application? A. They automatically add more instances across multiple AWS Regions based on global demand of the application. B. They automatically add or replace instances across multiple Availability Zones when the application needs it. C. They enable the application's static content to reside closer to end users. D. They are able to distribute incoming requests across a tier of web server instances.

B. They automatically add or replace instances across multiple Availability Zones when the application needs it.

How can a company isolate the costs of production and non-production workloads on AWS? A. Create Identity and Access Management (IAM) roles for production and non-production workloads. B. Use different accounts for production and non-production expenses. C. Use Amazon EC2 for non-production workloads and other services for production workloads. D. Use Amazon CloudWatch to monitor the use of services.

B. Use different accounts for production and non-production expenses.

According to best practices, how should an application be designed to run in the AWS Cloud? A. Use tighly coupled components. B. Use loosely coupled components. C. Use infrequently coupled components. D. Use frequently coupled components.

B. Use loosely coupled components.

Which AWS feature or service can be used to capture information about incoming and outgoing traffic in an AWS VPC infrastructure? A. AWS Config B. VPC Flow Logs C. AWS Trusted Advisor D. AWS CloudTrail

B. VPC Flow Logs

To use the AWS CLI, users are required to generate: A. a password policy. B. an access/secret key. C. a managed policy. D. an API key.

B. an access/secret key.

The AWS Cloud's multiple Regions are an example of: A. agility. B. global infrastructure. C. elasticity. D. pay-as-you-go pricing.

B. global infrastructure.

A characteristic of edge locations is that they: A. host Amazon EC2 instances closer to users. B. help lower latency and improve performance for users. C. cache frequently changing data without reaching the origin server. D. refresh data changes daily.

B. help lower latency and improve performance for users.

Access keys in AWS Identity and Access Management (IAM) are used to: A. log in to the AWS Management Console. B. make programmatic calls to AWS from AWS APIs. C. log in to Amazon EC2 instances. D. authenticate to AWS CodeCommit repositories.

B. make programmatic calls to AWS from AWS APIs.

Amazon Route 53 enables users to: A. encrypt data in transit B. register DNS domain names C. generate and manage SSL certificates D. establish a dedicated network connection to AWS

B. register DNS domain names

AWS Budgets can be used to: A. prevent a given user from creating a resource B. send an alert when the utilization of Reserved Instances drops below a certain percentage C. set resource limits in AWS accounts to prevent overspending D. split an AWS bill across multiple forms of payment

B. send an alert when the utilization of Reserved Instances drops below a certain percentage

Which service enables customers to audit and monitor changes in AWS resources? A. AWS Trusted Advisor B. Amazon GuardDuty C. Amazon Inspector D. AWS Config

D. AWS Config

Where are AWS compliance documents, such as an SOC 1 report, located? A. Amazon Inspector B. AWS CloudTrail C. AWS Artifact D. AWS Certificate Manager

C. AWS Artifact

The use of what AWS feature or service allows companies to track and categorize spending on a detailed level? A. Cost allocation tags B. Consolidated billing C. AWS Budgets D. AWS Marketplace

C. AWS Budgets

Which AWS services can be used to gather information about AWS account activity? (Choose two.) A. Amazon CloudFront B. AWS Cloud9 C. AWS CloudTrail D. AWS CloudHSM E. Amazon CloudWatch

C. AWS CloudTrail E. Amazon CloudWatch

Which AWS services can be used to gather information about AWS account activity? (Select TWO.) A. Amazon CloudFront B. AWS Cloud9 C. AWS CloudTrail D. AWS CloudHSM E. Amazon CloudWatch

C. AWS CloudTrail E. Amazon CloudWatch

Which AWS Cost Management tool allows you to view the most granular data about your AWS bill? A. AWS Cost Explorer B. AWS Budgets C. AWS Cost and Usage report D. AWS Billing dashboard

C. AWS Cost and Usage report

A company wants to use an AWS service to monitor the health of application endpoints, with the ability to route traffic to healthy regional endpoints to improve application availability.Which service will support these requirements? A. Amazon Inspector B. Amazon CloudWatch C. AWS Global Accelerator D. Amazon CloudFront

C. AWS Global Accelerator

Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users? A. A public and private key-pair B. Amazon Inspector C. AWS Identity and Access Management (IAM) policies D. Security Groups

C. AWS Identity and Access Management (IAM) policies

Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users? A. A public and private key-pair B. Amazon Inspector C. AWS Identity and Access Management (IAM) policies D. Security Groups

C. AWS Identity and Access Management (IAM) policies

Which AWS service is used to provide encryption for Amazon EBS? A. AWS Certificate Manager B. AWS Systems Manager C. AWS KMS D. AWS Config

C. AWS KMS

Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.) A. Amazon Macie B. AWS Certificate Manager C. AWS Key Management Service (AWS KMS) D. AWS Secrets Manager E. AWS CloudHSM

C. AWS Key Management Service (AWS KMS) E. AWS CloudHSM

Which AWS service is suitable for an event-driven workload? A. Amazon EC2 B. AWS Elastic Beanstalk C. AWS Lambda D. Amazon Lumberyard

C. AWS Lambda

Which of the following is an AWS-managed compute service? A. Amazon SWF B. Amazon EC2 C. AWS Lambda D. Amazon Aurora

C. AWS Lambda

Which of the following services is in the category of AWS serverless platform? A. Amazon EMR B. Elastic Load Balancing C. AWS Lambda D. AWS Mobile Hub

C. AWS Lambda

Which of the following will enhance the security of access to the AWS Management Console? (Choose two.) A. AWS Secrets Manager B. AWS Certificate Manager C. AWS Multi-Factor Authentication (AWS MFA) D. Security groups E. Password policies

C. AWS Multi-Factor Authentication (AWS MFA) E. Password policies

Which AWS service provides a quick and automated way to create and manage AWS accounts? A. AWS QuickSight B. Amazon Lightsail C. AWS Organizations D. Amazon Connect

C. AWS Organizations

A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house.Which of the following AWS programs can a customer take advantage of to achieve that outcome? A. AWS Partner Network Technology Partners B. AWS Marketplace C. AWS Partner Network Consulting Partners D. AWS Service Catalog

C. AWS Partner Network Consulting Partners

Which AWS service provides a customized view of the health of specific AWS services that power a customer's workloads running on AWS? A. AWS Service Health Dashboard B. AWS X-Ray C. AWS Personal Health Dashboard D. Amazon CloudWatch

C. AWS Personal Health Dashboard

What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas? A. AWS Enterprise Support B. AWS Solutions Architects C. AWS Professional Services D. AWS Account Managers

C. AWS Professional Services

How should a customer forecast the future costs for running a new web application? A. Amazon Aurora Backtrack B. Amazon CloudWatch Billing Alarms C. AWS Simple Monthly Calculator D. AWS Cost and Usage report

C. AWS Simple Monthly Calculator

Which services are parts of the AWS serverless platform? A. Amazon EC2, Amazon S3, Amazon Athena B. Amazon Kinesis, Amazon SQS, Amazon EMR C. AWS Step Functions, Amazon DynamoDB, Amazon SNS D. Amazon Athena, Amazon Cognito, Amazon EC2

C. AWS Step Functions, Amazon DynamoDB, Amazon SNS

Which AWS hybrid storage service enables on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols? A. AWS Direct Connect B. AWS Snowball C. AWS Storage Gateway D. AWS Snowball Edge

C. AWS Storage Gateway

Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage? A. Amazon Glacier B. AWS Snowball C. AWS Storage Gateway D. Amazon Elastic Block Storage (Amazon EBS)

C. AWS Storage Gateway

A user wants guidance on possible savings when migrating from on-premises to AWS.Which tool is suitable for this scenario? A. AWS Budgets B. Cost Explorer C. AWS Total Cost of Ownership (TCO) Calculator D. AWS Well-Architected Tool

C. AWS Total Cost of Ownership (TCO) Calculator

Which AWS tool is used to compare the cost of running an application on-premises to running the application in the AWS Cloud? A. AWS Trusted Advisor B. AWS Simple Monthly Calculator C. AWS Total Cost of Ownership (TCO) Calculator D. Cost Explorer

C. AWS Total Cost of Ownership (TCO) Calculator

How can an AWS user with an AWS Basic Support plan obtain technical assistance from AWS? A. AWS Senior Support Engineers B. AWS Technical Account Managers C. AWS Trusted Advisor D. AWS Discussion Forums

C. AWS Trusted Advisor

Within the AWS shared responsibility model, who is responsible for security and compliance? A. The customer is responsible. B. AWS is responsible. C. AWS and the customer share responsibility. D. AWS shares responsibility with the relevant governing body.

C. AWS and the customer share responsibility.

What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Choose two.) A. AWS automatically distributes the data globally for higher durability. B. AWS will take care of operating the application. C. AWS makes it easy to architect for high availability. D. AWS can easily accommodate application demand changes. E. AWS takes care application security patching.

C. AWS makes it easy to architect for high availability. D. AWS can easily accommodate application demand changes.

Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses? A. On-premises B. Hybrid C. Cloud D. Platform as a service

C. Cloud

Which of the following security-related actions are available at no cost? A. Calling AWS Support B. Contacting AWS Professional Services to request a workshop C. Accessing forums, blogs, and whitepapers D. Attending AWS classes at a local university

C. Accessing forums, blogs, and whitepapers

A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market.Which AWS Cloud feature can provide this? A. Elasticity B. High availability C. Agility D. Reliability

C. Agility

Which Amazon EC2 pricing model offers the MOST significant discount when compared to On-Demand Instances? A. Partial Upfront Reserved Instances for a 1-year term B. All Upfront Reserved Instances for a 1-year term C. All Upfront Reserved Instances for a 3-year term D. No Upfront Reserved Instances for a 3-year term

C. All Upfront Reserved Instances for a 3-year term

Which AWS service is a content delivery network that securely delivers data, video, and applications to users globally with low latency and high speeds? A. AWS CloudFormation B. AWS Direct Connect C. Amazon CloudFront D. Amazon Pinpoint

C. Amazon CloudFront

Which AWS service should be used to create a billing alarm? A. AWS Trusted Advisor B. AWS CloudTrail C. Amazon CloudWatch D. Amazon QuickSight

C. Amazon CloudWatch

Which of the following is a fast and reliable NoSQL database service? A. Amazon Redshift B. Amazon RDS C. Amazon DynamoDB D. Amazon S3

C. Amazon DynamoDB

Which AWS service can be used to manually launch instances based on resource requirements? A. Amazon EBS B. Amazon S3 C. Amazon EC2 D. Amazon ECS

C. Amazon EC2

Which service is best for storing common database query results, which helps to alleviate database access load? A. Amazon Machine Learning B. Amazon SQS C. Amazon ElastiCache D. Amazon EC2 Instance Store

C. Amazon ElastiCache

Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads? A. Amazon Rekognition B. AWS Trusted Advisor C. Amazon GuardDuty D. Amazon CloudWatch

C. Amazon GuardDuty

Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities? A. Amazon Glacier B. AWS Storage Gateway C. Amazon S3 D. Amazon EBS

C. Amazon S3

Which AWS service provides inbound and outbound network ACLs to harden external connectivity to Amazon EC2? A. AWS IAM B. Amazon Connect C. Amazon VPC D. Amazon API Gateway

C. Amazon VPC

Which Amazon Virtual Private Cloud (Amazon VPC) feature enables users to connect two VPCs together? A. Amazon VPC endpoints B. Amazon Elastic Compute Cloud (Amazon EC2) ClassicLink C. Amazon VPC peering D. AWS Direct Connect

C. Amazon VPC peering

What is an AWS Identity and Access Management (IAM) role? A. A user associated with an AWS resource B. A group associated with an AWS resource C. An entity that defines a set of permissions for use with an AWS resource D. An authentication credential associated with a multi-factor authentication (MFA) token

C. An entity that defines a set of permissions for use with an AWS resource

How does the AWS Enterprise Support Concierge team help users? A. Supporting application development B. Providing architecture guidance C. Answering billing and account inquires D. Answering questions regarding technical support cases

C. Answering billing and account inquires

What is one of the customer's responsibilities according to the AWS shared responsibility model? A. Virtualization infrastructure B. Network infrastructure C. Application security D. Physical security of hardware

C. Application security

A company wants to expand from one AWS Region into a second AWS Region.What does the company need to do to start supporting the new Region? A. Contact an AWS Account Manager to sign a new contract B. Move an Availability Zone to the new Region C. Begin deploying resources in the second Region D. Download the AWS Management Console for the new Region

C. Begin deploying resources in the second Region

Which load balancer types are available with Elastic Load Balancing (ELB)? (Choose two.) A. Public load balancers with AWS Application Auto Scaling capabilities B. F5 Big-IP and Citrix NetScaler load balancers C. Classic Load Balancers D. Cross-zone load balancers with public and private IPs E. Application Load Balancers

C. Classic Load Balancers E. Application Load Balancers

Under the AWS shared responsibility model, customer responsibilities include which one of the following? A. Securing the hardware, software, facilities, and networks that run all products and services. B. Providing certificates, reports, and other documentation directly to AWS customers under NDA. C. Configuring the operating system, network, and firewall. D. Obtaining industry certifications and independent third-party attestations.

C. Configuring the operating system, network, and firewall.

Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value? A. Dedicated RIs B. Scheduled RIs C. Convertible RIs D. Standard RIs

C. Convertible RIs

If each department within a company has its own AWS account, what is one way to enable consolidated billing? A. Use AWS Budgets on each account to pay only to budget. B. Contact AWS Support for a monthly bill. C. Create an AWS Organization from the payer account and invite the other accounts to join. D. Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon Redshift, and then run a billing report.

C. Create an AWS Organization from the payer account and invite the other accounts to join.

Which functions can users perform using AWS KMS? A. Create and manage AWS access keys for the AWS account root user B. Create and manage AWS access keys for an AWS account IAM user C. Create and manage keys for encryption and decryption of data D. Create and manage keys for multi-factor authentication

C. Create and manage keys for encryption and decryption of data

What feature of Amazon RDS helps to create globally redundant databases? A. Snapshots B. Automatic patching and updating C. Cross-Region read replicas D. Provisioned IOPS

C. Cross-Region read replicas

What costs are included when comparing AWS Total Cost of Ownership (TCO) with on-premises TCO? A. Project management B. Antivirus software licensing C. Data center security D. Software development

C. Data center security

Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses? A. Spot Instances B. Reserved Instances C. Dedicated Hosts D. On-Demand Instances

C. Dedicated Hosts

How can a user protect against AWS service disruptions if a natural disaster affects an entire geographic area? A. Deploy applications across multiple Availability Zones within an AWS Region. B. Use a hybrid cloud computing deployment model within the geographic area. C. Deploy applications across multiple AWS Regions. D. Store application artifacts using AWS Artifact and replicate them across multiple AWS Regions.

C. Deploy applications across multiple AWS Regions.

What should users do if they want to install an application in geographically isolated locations? A. Install the application using multiple internet gateways. B. Deploy the application to an Amazon VPC. C. Deploy the application to multiple AWS Regions. D. Configure the application using multiple NAT gateways.

C. Deploy the application to multiple AWS Regions.

Distributing workloads across multiple Availability Zones supports which cloud architecture design principle? A. Implement automation. B. Design for agility. C. Design for failure. D. Implement elasticity.

C. Design for failure.

Which design principle should be considered when architecting in the AWS Cloud? A. Think of servers as non-disposable resources B. Use synchronous integration of services C. Design loosely coupled components D. Implement the least permissive rules for security groups

C. Design loosely coupled components

Which AWS feature will reduce the customer's total cost of ownership (TCO)? A. Shared responsibility security model B. Single tenancy C. Elastic computing D. Encryption

C. Elastic computing

Which benefit of the AWS Cloud supports matching the supply of resources with changing workload demands? A. Security B. Reliability C. Elasticity D. High availability

C. Elasticity

Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Choose two.) A. High availability B. Shared security model C. Elasticity D. Pay-as-you-go pricing E. Reliability

C. Elasticity D. Pay-as-you-go pricing

Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Select TWO.) A. High availability B. Shared security model C. Elasticity D. Pay-as-you-go pricing E. Reliability

C. Elasticity D. Pay-as-you-go pricing

Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.) A. Visualization management B. Hardware management C. Encryption management D. Facilities management E. Firewall management

C. Encryption management E. Firewall management

Which is a recommended pattern for designing a highly available architecture on AWS? A. Ensure that components have low-latency network connectivity. B. Run enough Amazon EC2 instances to operate at peak load. C. Ensure that the application is designed to accommodate failure of any single component. D. Use a monolithic application that handles all operations.

C. Ensure that the application is designed to accommodate failure of any single component.

Under the shared responsibility model, which of the following is the customer responsible for? A. Ensuring that disk drives are wiped after use. B. Ensuring that firmware is updated on hardware devices. C. Ensuring that data is encrypted at rest. D. Ensuring that network cables are category six or higher.

C. Ensuring that data is encrypted at rest.

Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud? A. Managing edge locations B. Physical security C. Firewall configuration D. Global infrastructure

C. Firewall configuration

A company's web application currently has tight dependencies on underlying components, so when one component fails the entire web application fails.Applying which AWS Cloud design principle will address the current design issue? A. Implementing elasticity, enabling the application to scale up or scale down as demand changes. B. Enabling several EC2 instances to run in parallel to achieve better performance. C. Focusing on decoupling components by isolating them and ensuring individual components can function when other components fail. D. Doubling EC2 computing resources to increase system fault tolerance.

C. Focusing on decoupling components by isolating them and ensuring individual components can function when other components fail.

What is an AWS Cloud design best practice? A. Tight coupling of components B. Single point of failure C. High availability D. Overprovisioning of resources

C. High availability

Web servers running on Amazon EC2 access a legacy application running in a corporate data center.What term would describe this model? A. Cloud-native B. Partner network C. Hybrid architecture D. Infrastructure as a service

C. Hybrid architecture

Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Choose two.) A. Use manual monitoring. B. Use fixed servers. C. Implement loose coupling. D. Rely on individual components. E. Design for scalability.

C. Implement loose coupling. E. Design for scalability.

Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Select TWO.) A. Use manual monitoring. B. Use fixed servers. C. Implement loose coupling. D. Rely on individual components. E. Design for scalability.

C. Implement loose coupling. E. Design for scalability.

What is AWS Trusted Advisor? A. It is an AWS staff member who provides recommendations and best practices on how to use AWS. B. It is a network of AWS partners who provide recommendations and best practices on how to use AWS. C. It is an online tool with a set of automated checks that provides recommendations on cost optimization, performance, and security. D. It is another name for AWS Technical Account Managers who provide recommendations on cost optimization, performance, and security.

C. It is an online tool with a set of automated checks that provides recommendations on cost optimization, performance, and security.

According to the AWS shared responsibility model, who is responsible for configuration management? A. It is solely the responsibility of the customer. B. It is solely the responsibility of AWS. C. It is shared between AWS and the customer. D. It is not part of the AWS shared responsibility model.

C. It is shared between AWS and the customer.

What is a benefit of loose coupling as a principle of cloud architecture design? A. It facilitates low-latency request handling. B. It allows applications to have dependent workflows. C. It prevents cascading failures between different components. D. It allows companies to focus on their physical data center operations.

C. It prevents cascading failures between different components.

How does AWS shorten the time to provision IT resources? A. It supplies an online IT ticketing platform for resource requests. B. It supports automatic code validation services. C. It provides the ability to programmatically provision existing resources. D. It automates the resource request process from a company's IT vendor list.

C. It provides the ability to programmatically provision existing resources.

A company will be moving from an on-premises data center to the AWS Cloud.What would be one financial difference after the move? A. Moving from variable operational expense (opex) to upfront capital expense (capex). B. Moving from upfront capital expense (capex) to variable capital expense (capex). C. Moving from upfront capital expense (capex) to variable operational expense (opex). D. Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex)

C. Moving from upfront capital expense (capex) to variable operational expense (opex).

Which of the following is the customer's responsibility under the AWS shared responsibility model? A. Patching underlying infrastructure B. Physical security C. Patching Amazon EC2 instances D. Patching network infrastructure

C. Patching Amazon EC2 instances

A company is hosting a web application in a Docker container on Amazon EC2.AWS is responsible for which of the following tasks? A. Scaling the web application and services developed with Docker B. Provisioning or scheduling containers to run on clusters and maintain their availability C. Performing hardware maintenance in the AWS facilities that run the AWS Cloud D. Managing the guest operating system, including updates and security patches

C. Performing hardware maintenance in the AWS facilities that run the AWS Cloud

A company has multiple AWS accounts within AWS Organizations and wants to apply the Amazon EC2 Reserved Instances benefit to a single account only.Which action should be taken? A. Purchase the Reserved Instances from master payer account and turn off Reserved Instance sharing. B. Enable billing alerts in the AWS Billing and Cost Management console. C. Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level. D. Enable Reserved Instance sharing in the AWS Billing and Cost Management console.

C. Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level.

What is a characteristic of Amazon S3 cross-region replication? A. Both source and destination S3 buckets must have versioning disabled B. The source and destination S3 buckets cannot be in different AWS Regions C. S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts D. The source S3 bucket owner must have the source and destination AWS Regions disabled for their account

C. S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts

Which of the following tasks is the responsibility of AWS? A. Encrypting client-side data B. Configuring AWS Identity and Access Management (IAM) roles C. Securing the Amazon EC2 hypervisor D. Setting user password policies

C. Securing the Amazon EC2 hypervisor

Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Choose two.) A. Amazon CloudFront distributions B. Amazon Route 53 C. Security Groups D. Subnets E. Elastic Load Balancing

C. Security Groups D. Subnets

Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Select TWO.) A. Amazon CloudFront distributions B. Amazon Route 53 C. Security Groups D. Subnets E. Elastic Load Balancing

C. Security Groups D. Subnets

Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances? A. On-Demand Instances B. Reserved Instances C. Spot Instances D. Convertible Reserved Instances

C. Spot Instances

When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.) A. Software development B. Project management C. Storage hardware D. Physical servers E. Antivirus software license

C. Storage hardware D. Physical servers

Which of the following is an advantage of using AWS? A. AWS audits user data. B. Data is automatically secure. C. There is no guessing on capacity needs. D. AWS manages compliance needs.

C. There is no guessing on capacity needs.

What is the benefit of using AWS managed services, such as Amazon ElastiCache and Amazon Relational Database Service (Amazon RDS)? A. They require the customer to monitor and replace failing instances. B. They have better performance than customer-managed services. C. They simplify patching and updating underlying OSs. D. They do not require the customer to optimize instance type or size selections.

C. They simplify patching and updating underlying OSs.

Which of the following Reserved Instance (RI) pricing models provides the highest average savings compared to On-Demand pricing? A. One-year, No Upfront, Standard RI pricing B. One-year, All Upfront, Convertible RI pricing C. Three-year, All Upfront, Standard RI pricing D. Three-year, No Upfront, Convertible RI pricing

C. Three-year, All Upfront, Standard RI pricing

Which task is AWS responsible for in the shared responsibility model for security and compliance? A. Granting access to individuals and services B. Encrypting data in transit C. Updating Amazon EC2 host firmware D. Updating operating systems

C. Updating Amazon EC2 host firmware

What is a responsibility of AWS in the shared responsibility model? A. Updating the network ACLs to block traffic to vulnerable ports. B. Patching operating systems running on Amazon EC2 instances. C. Updating the firmware on the underlying EC2 hosts. D. Updating the security group rules to block traffic to the vulnerable ports

C. Updating the firmware on the underlying EC2 hosts.

A company is migrating from on-premises data centers to the AWS Cloud and is looking for hands-on help with the project.How can the company get this support? (Choose two.) A. Ask for a quote from the AWS Marketplace team to perform a migration into the company's AWS account. B. Contact AWS Support and open a case for assistance C. Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company's AWS account D. Select a partner from the AWS Partner Network (APN) to assist with the migration E. Use Amazon Connect to create a new request for proposal (RFP) for expert assistance in migrating to the AWS Cloud.

C. Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company's AWS account D. Select a partner from the AWS Partner Network (APN) to assist with the migration

A customer is using multiple AWS accounts with separate billing.How can the customer take advantage of volume discounts with minimal impact to the AWS resources? A. Create one global AWS acount and move all AWS resources to tha account. B. Sign up for three years of Reserved Instance pricing up front. C. Use the consolidated billing feature from AWS Organizations. D. Sign up for the AWS Enterprise support plan to get volume discounts.

C. Use the consolidated billing feature from AWS Organizations.

A company wants to build its new application workloads in the AWS Cloud instead of using on-premises resources.What expense can be reduced using the AWS Cloud? A. The cost of writing custom-built Java or Node .js code B. Penetration testing for security C. hardware required to support new applications D. Writing specific test cases for third-party applications.

C. hardware required to support new applications

One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is: A. it allows the business to eliminate IT bills. B. it allows the business to put a server in each customer's data center. C. it allows the business to focus on business activities. D. it allows the business to leave servers unpatched.

C. it allows the business to focus on business activities.

Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as: A. restricted access. B. as-needed access. C. least privilege access. D. token access.

C. least privilege access.

One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is: A. the ability to bid for a lower hourly cost. B. paying a daily rate regardless of time used. C. paying only for time used. D. pre-paying for instances and paying a lower hourly rate.

C. paying only for time used.

Which AWS services can host a Microsoft SQL Server database? (Choose two.) A. Amazon EC2 B. Amazon Relational Database Service (Amazon RDS) C. Amazon Aurora D. Amazon Redshift E. Amazon S3

Correct Answer: AB

Which service's PRIMARY purpose is software version control? A. Amazon CodeStar B. AWS Command Line Interface (AWS CLI) C. Amazon Cognito D. AWS CodeCommit

D. AWS CodeCommit

In which scenario should Amazon EC2 Spot Instances be used? A. A company wants to move its main website to AWS from an on-premises web server. B. A company has a number of application services whose Service Level Agreement (SLA) requires 99.999% uptime. C. A company's heavily used legacy database is currently running on-premises. D. A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances.

D. A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances.

A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack.Who should the user contact FIRST about this situation? A. AWS Premium Support B. AWS Technical Account Manager C. AWS Solutions Architect D. AWS Abuse team

D. AWS Abuse team

Which AWS service provides a self-service portal for on-demand access to AWS compliance reports? A. AWS Config B. AWS Certificate Manager C. Amazon Inspector D. AWS Artifact

D. AWS Artifact

Which AWS service provides the ability to manage infrastructure as code? A. AWS CodePipeline B. AWS CodeDeploy C. AWS Direct Connect D. AWS CloudFormation

D. AWS CloudFormation

An administrator needs to rapidly deploy a popular IT solution and start using it immediately.Where can the administrator find assistance? A. AWS Well-Architected Framework documentation B. Amazon CloudFront C. AWS CodeCommit D. AWS Quick Start reference deployments

D. AWS Quick Start reference deployments

Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations? A. Amazon Inspector B. AWS Web Application Firewall (AWS WAF) C. Elastic Load Balancing (ELB) D. AWS Shield

D. AWS Shield

Which AWS service provides a secure, fast, and cost-effective way to migrate or transport exabyte-scale datasets into AWS? A. AWS Batch B. AWS Snowball C. AWS Migration Hub D. AWS Snowmobile

D. AWS Snowmobile

Which tool can be used to compare the costs of running a web application in a traditional hosting environment to running it on AWS? A. AWS Cost Explorer B. AWS Budgets C. AWS Cost and Usage report D. AWS Total Cost of Ownership (TCO) Calculator

D. AWS Total Cost of Ownership (TCO) Calculator

A web application running on AWS has been spammed with malicious requests from a recurring set of IP addresses.Which AWS service can help secure the application and block the malicious traffic? A. AWS IAM B. Amazon GuardDuty C. Amazon Simple Notification Service (Amazon SNS) D. AWS WAF

D. AWS WAF

A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future.Which of the following is a characteristic of the AWS Cloud that would meet this specific need? A. Elasticity B. Reliability C. Performance D. Agility

D. Agility

After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount? A. No upfront payment B. Hourly on-demand payment C. Partial upfront payment D. All upfront payment

D. All upfront payment

Which AWS service can be used to query stored datasets directly from Amazon S3 using standard SQL? A. AWS Glue B. AWS Data Pipeline C. Amazon CloudSearch D. Amazon Athena

D. Amazon Athena

Which of the following services is a MySQL-compatible database that automatically grows storage as needed? A. Amazon Elastic Compute Cloud (Amazon EC2) B. Amazon Relational Database Service (Amazon RDS) for MySQL C. Amazon Lightsail D. Amazon Aurora

D. Amazon Aurora

Which AWS service would a customer use with a static website to achieve lower latency and high transfer speeds? A. AWS Lambda B. Amazon DynamoDB Accelerator C. Amazon Route 53 D. Amazon CloudFront

D. Amazon CloudFront

Which AWS service allows companies to connect an Amazon VPC to an on-premises data center? A. AWS VPN B. Amazon Redshift C. API Gateway D. Amazon Direct Connect

D. Amazon Direct Connect

Which feature adds elasticity to Amazon EC2 instances to handle the changing demand for workloads? A. Resource groups B. Lifecycle policies C. Application Load Balancer D. Amazon EC2 Auto Scaling

D. Amazon EC2 Auto Scaling

A company is migrating an application that is running non-interruptible workloads for a three-year time frame.Which pricing construct would provide the MOST cost-effective solution? A. Amazon EC2 Spot Instances B. Amazon EC2 Dedicated Instances C. Amazon EC2 On-Demand Instances D. Amazon EC2 Reserved Instances

D. Amazon EC2 Reserved Instances

A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes.Which service should the company use? A. Amazon Redshift B. Amazon DynamoDB C. Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store D. Amazon EC2 with Amazon Elastic Block Store (Amazon EBS)

D. Amazon EC2 with Amazon Elastic Block Store (Amazon EBS)

Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers? A. Amazon S3 B. Amazon Glacier C. Amazon EBS D. Amazon EFS

D. Amazon EFS

Which of the following AWS services can be used to run a self-managed database? A. Amazon Route 53 B. AWS X-Ray C. AWS Snowmobile D. Amazon Elastic Compute Cloud (Amazon EC2)

D. Amazon Elastic Compute Cloud (Amazon EC2)

A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances.Which AWS service will provide this assessment report? A. EC2 security groups B. AWS Config C. Amazon Macie D. Amazon Inspector

D. Amazon Inspector

Which AWS managed service is used to host databases? A. AWS Batch B. AWS Artifact C. AWS Data Pipeline D. Amazon RDS

D. Amazon RDS

A company is looking for a scalable data warehouse solution.Which of the following AWS solutions would meet the company's needs? A. Amazon Simple Storage Service (Amazon S3) B. Amazon DynamoDB C. Amazon Kinesis D. Amazon Redshift

D. Amazon Redshift

A. Amazon Redshift B. Amazon Elastic File System (Amazon EFS) C. Amazon Elastic Container Service (Amazon ECS) D. Amazon S3

D. Amazon S3

A Cloud Practitioner needs to store data for 7 years to meet regulatory requirements.Which AWS service will meet this requirement at the LOWEST cost? A. Amazon S3 B. AWS Snowball C. Amazon Redshift D. Amazon S3 Glacier

D. Amazon S3 Glacier

Which storage service can be used as a low-cost option for hosting static websites? A. Amazon Glacier B. Amazon DynamoDB C. Amazon Elastic File System (Amazon EFS) D. Amazon Simple Storage Service (Amazon S3)

D. Amazon Simple Storage Service (Amazon S3)

Which of the following is a component of the shared responsibility model managed entirely by AWS? A. Patching operating system software B. Encrypting data C. Enforcing multi-factor authentication D. Auditing physical data center assets

D. Auditing physical data center assets

What technology enables compute capacity to adjust as loads change? A. Load balancing B. Automatic failover C. Round robin D. Auto Scaling

D. Auto Scaling

What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called? A. AWS Direct Connects B. Amazon VPCs C. Edge locations D. Availability Zones

D. Availability Zones

Which of the following is a shared control between the customer and AWS? A. Providing a key for Amazon S3 client-side encryption B. Configuration of an Amazon EC2 instance C. Environmental controls of physical AWS data centers D. Awareness and training

D. Awareness and training

What is an example of agility in the AWS Cloud? A. Access to multiple instance types B. Access to managed services C. Using Consolidated Billing to produce one bill D. Decreased acquisition time for new compute resources

D. Decreased acquisition time for new compute resources

Which of the following is an important architectural principle when designing cloud applications? A. Store data and backups in the same region. B. Design tightly coupled system components. C. Avoid multi-threading. D. Design for failure

D. Design for failure

Which cloud design principle aligns with AWS Cloud best practices? A. Create fixed dependencies among application components B. Aggregate services on a single instance C. Deploy applications in a single Availability Zone D. Distribute the compute load across multiple resources

D. Distribute the compute load across multiple resources

Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model? A. Ensuring network connectivity from AWS to the internet B. Patching and fixing flaws within the AWS Cloud infrastructure C. Ensuring the physical security of cloud data centers D. Ensuring Amazon EBS volumes are backed up

D. Ensuring Amazon EBS volumes are backed up

Which AWS Support plan provides a full set of AWS Trusted Advisor checks? A. Business and Developer Support B. Business and Basic Support C. Enterprise and Developer Support D. Enterprise and Business Support

D. Enterprise and Business Support

Which disaster recovery scenario offers the lowest probability of down time? A. Backup and restore B. Pilot light C. Warm standby D. Multi-site active-active

D. Multi-site active-active

When architecting cloud applications, which of the following are a key design principle? A. Use the largest instance possible B. Provision capacity for peak load C. Use the Scrum development process D. Implement elasticity

D. Implement elasticity

What is the purpose of AWS Storage Gateway? A. It ensures on-premises data storage is 99.999999999% durable. B. It transports petabytes of data to and from AWS. C. It connects to multiple Amazon EC2 instances. D. It connects on-premises data storage to the AWS Cloud.

D. It connects on-premises data storage to the AWS Cloud.

What does it mean to grant least privilege to AWS IAM users? A. It is granting permissions to a single user only. B. It is granting permissions using AWS IAM policies only. C. It is granting AdministratorAccess policy permissions to trustworthy users. D. It is granting only the permissions required to perform a given task.

D. It is granting only the permissions required to perform a given task.

What is a user responsible for when running an application in the AWS Cloud? A. Managing physical hardware B. Updating the underlying hypervisor C. Providing a list of users approved for data center access D. Managing application software updates

D. Managing application software updates

According to the AWS shared responsibility model, what is AWS responsible for? A. Configuring Amazon VPC B. Managing application code C. Maintaining application traffic D. Managing the network infrastructure

D. Managing the network infrastructure

Which of the following are features of Amazon CloudWatch Logs? (Select TWO.) A. Summaries by Amazon Simple Notification Service (Amazon SNS) B. Free Amazon Elasticsearch Service analytics C. Provided at no charge D. Real-time monitoring E. Adjustable retention

D. Real-time monitoring E. Adjustable retention

Which AWS IAM feature allows developers to access AWS services through the AWS CLI? A. API keys B. Access keys C. User names/Passwords D. SSH keys

D. SSH keys

What does it mean if a user deploys a hybrid cloud architecture on AWS? A. All resources run using on-premises infrastructure. B. Some resources run on-premises and some run in a colocation center. C. All resources run in the AWS Cloud. D. Some resources run on-premises and some run in the AWS Cloud.

D. Some resources run on-premises and some run in the AWS Cloud.

Which Amazon EC2 instance pricing model can provide discounts of up to 90%? A. Reserved Instances B. On-Demand C. Dedicated Hosts D. Spot Instances

D. Spot Instances

As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS? A. Security management of data center B. Patch management C. Configuration management D. User and access management

D. User and access management

How does AWS charge for AWS Lambda? A. Users bid on the maximum price they are willing to pay per hour. B. Users choose a 1-, 3- or 5-year upfront payment term. C. Users pay for the required permanent storage on a file system or in a database. D. Users pay based on the number of requests and consumed compute resources

D. Users pay based on the number of requests and consumed compute resources

AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.) A. Implementing Amazon Rekognition B. Using AWS Shield-protected resources C. Blocking access with Security Groups D. Using Multi-Factor Authentication (MFA) E. Enforcing password strength and expiration

D. Using Multi-Factor Authentication (MFA) E. Enforcing password strength and expiration

AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Select TWO.) A. Implementing Amazon Rekognition B. Using AWS Shield-protected resources C. Blocking access with Security Groups D. Using Multi-Factor Authentication (MFA) E. Enforcing password strength and expiration

D. Using Multi-Factor Authentication (MFA) E. Enforcing password strength and expiration

What helps a company provide a lower latency experience to its users globally? A. Using an AWS Region that is central to all users B. Using a second Availability Zone in the AWS Region that is using used C. Enabling caching in the AWS Region that is being used D. Using edge locations to put content closer to all users

D. Using edge locations to put content closer to all users

Which Amazon VPC feature enables users to capture information about the IP traffic that reaches Amazon EC2 instances? A. Security groups B. Elastic network interfaces C. Network ACLs D. VPC Flow Logs

D. VPC Flow Logs

Treating infrastructure as code in the AWS Cloud allows users to: A. automate migration of on-premises hardware to AWS data centers. B. let a third party automate an audit of the AWS infrastructure. C. turn over application code to AWS so it can run on the AWS infrastructure. D. automate the infrastructure provisioning process

D. automate the infrastructure provisioning process.

Compared with costs in traditional and virtualized data centers, AWS has: A. greater variable costs and greater upfront costs. B. fixed usage costs and lower upfront costs. C. lower variable costs and greater upfront costs. D. lower variable costs and lower upfront costs.

D. lower variable costs and lower upfront costs.