AWS Cloud Practitioner
Question #33 What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)? A. It simplifies relational database administration tasks. B. It provides 99.99999999999% reliability and durability. C. It automatically scales databases for loads. D. It enabled users to dynamically adjust CPU and RAM resources.
Correct Answer: A
Question #39 What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval? A. Amazon S3 B. Amazon Glacier C. Amazon EBS D. Amazon EC2 Instance Store
Correct Answer: A
Question #55 Which of the following AWS Cloud services can be used to run a customer-managed relational database? A. Amazon EC2 B. Amazon Route 53 C. Amazon ElastiCache D. Amazon DynamoDB
Correct Answer: A
Question #95 Which AWS service would you use to obtain compliance reports and certicates? A. AWS Artifact B. AWS Lambda C. Amazon Inspector D. AWS Certicate Manager
Correct Answer: A AWS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS' security and compliance reports and select online agreements. Reports available in AWS Artifact include our Service Organization Control (SOC) reports, Payment Card Industry (PCI) reports, and certications from accreditation bodies across geographies and compliance verticals that validate the implementation and operating effectiveness of AWS security controls. Agreements available in AWS Artifact include the Business Associate Addendum (BAA) and the Nondisclosure Agreement (NDA). Reference: https://aws.amazon.com/artifact/
Question #80 If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use? A. AWS Config B. AWS Trusted Advisor C. Amazon CloudWatch D. Amazon Inspector
Correct Answer: A AWS Config is a service that enables you to assess, audit, and evaluate the configurations of your AWS resources. Cong continuously monitors and records your AWS resource configurations and allows you to automate the evaluation of recorded configurations against desired configurations. With Config, you can review changes in configurations and relationships between AWS resources, dive into detailed resource configuration histories, and determine your overall compliance against the configurations specified in your internal guidelines. This enables you to simplify compliance auditing, security analysis, change management, and operational troubleshooting. Reference: https://aws.amazon.com/cong/
Question #76 Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS? A. AWS Marketplace B. Amazon Lumberyard C. AWS Artifact D. Amazon CloudSearch
Correct Answer: A AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that make it easy to nd, test, buy, and deploy software that runs on AWS. Reference: https://aws.amazon.com
Question #73 Which AWS service provides alerts when an AWS event may impact a company's AWS resources? A. AWS Personal Health Dashboard B. AWS Service Health Dashboard C. AWS Trusted Advisor D. AWS Infrastructure Event Management
Correct Answer: A AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. While the Service Health Dashboard displays the general status of AWS services, Personal Health Dashboard gives you a personalized view of the performance and availability of the AWS services underlying your AWS resources. Reference: https://aws.amazon.com/premiumsupport/technology/personal-health-dashboard/
Question #89 Which of the following is an advantage of consolidated billing on AWS? A. Volume pricing qualification B. Shared access permissions C. Multiple bills per account D. Eliminates the need for tagging
Correct Answer: A If you have multiple standalone accounts, your charges might decrease if you add the accounts to an organization. AWS combines usage from all accounts in the organization to qualify you for volume pricing discounts. Reference: https://help.nops.io/consolidated-billing
Question #92 How would an AWS customer easily apply common access controls to a large set of users? A. Apply an IAM policy to an IAM group. B. Apply an IAM policy to an IAM role. C. Apply the same IAM policy to all IAM users with access to the same workload. D. Apply an IAM policy to an Amazon Cognito user pool.
Correct Answer: A Instead of defining permissions for individual IAM users, it's usually more convenient to create groups that relate to job functions (administrators, developers, accounting, etc.). Next, dene the relevant permissions for each group. Finally, assign IAM users to those groups. All the users in an IAM group inherit the permissions assigned to the group. That way, you can make changes for everyone in a group in just one place. As people move around in your company, you can simply change what IAM group their IAM user belongs to. Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html
Question #50 Which of the following is an AWS managed Domain Name System (DNS) web service? A. Amazon Route 53 B. Amazon Neptune C. Amazon SageMaker D. Amazon Lightsail
Correct Answer: A Reference: https://aws.amazon.com/getting-started/tutorials/get-a-domain/
Question #44 What approach to transcoding a large number of individual video files adheres to AWS architecture principles? A. Using many instances in parallel B. Using a single large instance during off-peak hours C. Using dedicated hardware D. Using a large GPU instance type
Correct Answer: A Reference: https://aws.amazon.com/solutions/case-studies/encoding/
Question #2 The use of what AWS feature or service allows companies to track and categorize spending on a detailed level? A. Cost allocation tags B. Consolidated billing C. AWS Budgets D. AWS Marketplace
Correct Answer: A Reference: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-alloc-tags.html
Question #35 Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links? A. Availability Zone B. Edge location C. Region D. Private networking
Correct Answer: A Reference: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html
Question #78 When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)? A. Dedicated Hosts B. Reserved Instances C. On-Demand Instances D. No Upfront Reserved Instances
Correct Answer: A Use Dedicated Hosts to launch Amazon EC2 instances on physical servers that are dedicated for your use. Dedicated Hosts give you additional visibility and control over how instances are placed on a physical server, and you can reliably use the same physical server over time. As a result, Dedicated Hosts enable you to use your existing server-bound software licenses like Windows Server and address corporate compliance and regulatory requirements.
Question #87 Where can AWS compliance and certification reports be downloaded? A. AWS Artifact B. AWS Concierge C. AWS Certicate Manager D. AWS Trusted Advisor
Correct Answer: A WS Artifact is your go-to, central resource for compliance-related information that matters to you. It provides on-demand access to AWS's security and compliance reports and select online agreements. The AWS SOC 2 report is particularly helpful for completing questionnaires because it provides a comprehensive description of the implementation and operating effectiveness of AWS security controls. Another useful document is the Executive Brieng within the AWS FedRAMP Partner Package. Reference: https://aws.amazon.com/compliance/faq/
Question #34 A customer needs to run a MySQL database that easily scales. Which AWS service should they use? A. Amazon Aurora B. Amazon Redshift C. Amazon DynamoDB D. Amazon ElastiCache
Correct Answer: A Reference: https://aws.amazon.com/rds/aurora/serverless/
Question #7 Which AWS services can host a Microsoft SQL Server database? (Choose two.) A. Amazon EC2 B. Amazon Relational Database Service (Amazon RDS) C. Amazon Aurora D. Amazon Redshift E. Amazon S3
Correct Answer: AB Reference: https://aws.amazon.com/sql/
Question #51 A customer is deploying a new application and needs to choose an AWS Region. Which of the following factors could inuence the customer's decision? (Choose two.) A. Reduced latency to users B. The application's presentation in the local language C. Data sovereignty compliance D. Cooling costs in hotter climates E. Proximity to the customer's oce for on-site visits
Correct Answer: AC
Question #58 Which of the following are valid ways for a customer to interact with AWS services? (Choose two.) A. Command line interface B. On-premises C. Software Development Kits D. Software-as-a-service E. Hybrid
Correct Answer: AC
Question #96 Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Choose two.) A. Ensuring that application data is encrypted at rest B. Ensuring that AWS NTP servers are set to the correct time C. Ensuring that users have received security training in the use of AWS services D. Ensuring that access to data centers is restricted E. Ensuring that hardware is disposed of properly
Correct Answer: AC
Question #99 The financial benefits of using AWS are: (Choose two.) A. reduced Total Cost of Ownership (TCO). B. increased capital expenditure (capex). C. reduced operational expenditure (opex). D. deferred payment plans for startups. E. business credit lines for startups.
Correct Answer: AC
Question #74 Which of the following are categories of AWS Trusted Advisor? (Choose two.) A. Fault Tolerance B. Instance Usage C. Infrastructure D. Performance E. Storage Capacity
Correct Answer: AD Like your customized cloud expert, AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations in ve categories: cost optimization, performance, security, fault tolerance and service limits. Reference: https://aws.amazon.com/premiumsupport/technology/trusted-advisor/
Question #94 Which AWS services are dened as global instead of regional? (Choose two.) A. Amazon Route 53 B. Amazon EC2 C. Amazon S3 D. Amazon CloudFront E. Amazon DynamoDB
Correct Answer: AD Reference: http://jayendrapatil.com/aws-global-vs-regional-vs-az-resources/
Question #18 Which of the following are advantages of AWS consolidated billing? (Choose two.) A. The ability to receive one bill for multiple accounts B. Service limits increasing by default in all accounts C. A fixed discount on the monthly bill D. Potential volume discounts, as usage in all accounts, is combined E. The automatic extension of the master account's AWS support plan to all accounts
Correct Answer: AD Reference: https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/consolidated-billing.html
Question #13 Which services can be used across hybrid AWS Cloud architectures? (Choose two.) A. Amazon Route 53 B. Virtual Private Gateway C. Classic Load Balancer D. Auto Scaling E. Amazon CloudWatch default metrics
Correct Answer: AE Reference: https://www.stratoscale.com/blog/cloud/building-hybrid-cloud-environment-using-amazon-cloud/
Question #37 How many Availability Zones should compute resources be provisioned across to achieve high availability? A. A minimum of one B. A minimum of two C. A minimum of three D. A minimum of four or more
Correct Answer: B
Question #40 Which AWS IAM feature allows developers to access AWS services through the AWS CLI? A. API keys B. Access keys C. User names/Passwords D. SSH keys
Correct Answer: B
Question #45 For which auditing process does AWS have sole responsibility? A. AWS IAM policies B. Physical security C. Amazon S3 bucket policies D. AWS CloudTrail Logs
Correct Answer: B
Question #46 Which feature of the AWS Cloud will support an international company's requirement for low latency to all of its customers? A. Fault tolerance B. Global reach C. Pay-as-you-go pricing D. High availability
Correct Answer: B
Question #54 What is the AWS customer responsible for according to the AWS shared responsibility model? A. Physical access controls B. Data encryption C. Secure disposal of storage devices D. Environmental risk management
Correct Answer: B
Question #59 The AWS Cloud's multiple Regions are an example of: A. agility. B. global infrastructure. C. elasticity. D. pay-as-you-go pricing.
Correct Answer: B
Question #70 Under the shared responsibility model, which of the following is a shared control between a customer and AWS? A. Physical controls B. Patch management C. Zone security D. Data center auditing
Correct Answer: B
Question #8 Which of the following inspects AWS environments to find opportunities that can save money for users and also improve system performance? A. AWS Cost Explorer B. AWS Trusted Advisor C. Consolidated billing D. Detailed billing
Correct Answer: B
Question #75 Which task is AWS responsible for in the shared responsibility model for security and compliance? A. Granting access to individuals and services B. Encrypting data in transit C. Updating Amazon EC2 host firmware D. Updating operating systems
Correct Answer: B AWS Compliance enables customers to establish and operate in an AWS security control environment ? The shared responsibility model is part of AWS Compliance program ? The Security of the cloud is managed by Amazon AWS provider ? The Security in the cloud is responsibility of the customer ? The customer is responsible for their information and data, their secure transmission, integrity, and encryption ? Also, the customer is responsible for managing, support, patching and control of the guest operating system and AWS services provided like EC2 ? AWS customers retain control and ownership of their data ? The AWS network provides signicant protection against traditional network security issues and the customer can implement further protection Reference: https://www.whizlabs.com/blog/aws-security-shared-responsibility/
Question #72 A company wants to reduce the physical compute footprint that developers use to run code. Which service would meet that need by enabling serverless architectures? A. Amazon Elastic Compute Cloud (Amazon EC2) B. AWS Lambda C. Amazon DynamoDB D. AWS CodeCommit
Correct Answer: B AWS Lambda is an integral part of coding on AWS. It reduces physical compute footprint by utilizing aws cloud services to run code.
Question #81 What is Amazon CloudWatch? A. A code repository with customizable build and team commit features. B. A metrics repository with customizable notication thresholds and channels. C. A security conguration repository with threat analytics. D. A rule repository of a web application rewall with automated vulnerability prevention features.
Correct Answer: B Amazon CloudWatch is basically a metrics repository. An AWS service "" such as Amazon EC2 "" puts metrics into the repository, and you retrieve statistics based on those metrics. If you put your own custom metrics into the repository, you can retrieve statistics on these metrics as well. Reference: https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/cloudwatch_architecture.html
Question #77 Which of the following is a benefit of using the AWS Cloud? A. Permissive security removes the administrative burden. B. Ability to focus on revenue-generating activities. C. Control over cloud network hardware. D. Choice of specific cloud hardware vendors.
Correct Answer: B Developer and IT staff productivity accounted for nearly 30% of overall nancial benets. The remaining benets were driven by the exibility and agility of Amazon cloud infrastructure services, which make it easier to trial new business models, support revenue-generating applications, and provide more reliable services to end users. Reference: https://media.amazonwebservices.com/IDC_Business_Value_of_AWS_Accelerates_Over_time.pdf
Question #69 Which AWS service should be used for long-term, low-cost storage of data backups? A. Amazon RDS B. Amazon Glacier C. AWS Snowball D. AWS EBS
Correct Answer: B Explanation - Amazon S3 Glacier is a secure, durable, and low-cost storage class of S3 for data archiving and long-term backup. Customers can store large or small amounts of data for as little as $0.004 per gigabyte per month. The S3 Glacier storage class is ideal for archives where data is regularly retrieved and some of the data may be needed in minutes. Amazon RDS is a relational database service that hosts databases. It helps you create and manage databases. Amazon Snowball is a petabyte- scale data transfer service that provides cost ecient data transfer to AWS from tamper proof physical devices. Similarly, Elastic block storage offers persistent block storage volumes for EC2 instances. Reference: https://aws.amazon.com/backup-restore/services/
Question #16 Which of the following is a correct relationship between regions, Availability Zones, and edge locations? A. Data centers contain regions. B. Regions contain Availability Zones. C. Availability Zones contain edge locations. D. Edge locations contain regions.
Correct Answer: B Reference: https://aws.amazon.com/about-aws/global-infrastructure/regions_az/#Region_Maps_and_Edge_Networks
Question #64 Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS Command Line Interface (AWS CLI)? A. IAM group B. IAM user C. IAM role D. IAM policy
Correct Answer: B Reference: https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_access-keys.html
Question #21 A characteristic of edge locations is that they: A. host Amazon EC2 instances closer to users. B. help lower latency and improve performance for users. C. cache frequently changing data without reaching the origin server. D. refresh data changes daily.
Correct Answer: B Reference: https://www.edureka.co/community/600/what-is-an-edge-location-in-aws
Question #26 Which of the following services will automatically scale with an expected increase in web traffic? A. AWS CodePipeline B. Elastic Load Balancing C. Amazon EBS D. AWS Direct Connect
Correct Answer: B Reference: https://aws.amazon.com/elasticloadbalancing/
Question #86 Which is the MINIMUM AWS Support plan that allows for one-hour target response time for support cases? A. Enterprise B. Business C. Developer D. Basic
Correct Answer: B Reference: https://aws.amazon.com/premiumsupport/plans/
Question #91 Which of the following AWS features enables a user to launch a pre-congured Amazon Elastic Compute Cloud (Amazon EC2) instance? A. Amazon Elastic Block Store (Amazon EBS) B. Amazon Machine Image C. Amazon EC2 Systems Manager D. Amazon AppStream 2.0
Correct Answer: B To use Amazon EC2, you simply: ? Select a pre-congured, templated Amazon Machine Image (AMI) to get up and running immediately. Or create an AMI containing your applications, libraries, data, and associated conguration settings. ? Congure security and network access on your Amazon EC2 instance. ? Choose which instance type(s) you want, then start, terminate, and monitor as many instances of your AMI as needed, using the web service APIs or the variety of management tools provided. ? Determine whether you want to run in multiple locations, utilize static IP endpoints, or attach persistent block storage to your instances. ? Pay only for the resources that you actually consume, like instance-hours or data transfer. Reference: https://aws.amazon.com/ec2/features/
Question #82 Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts? A. AWS Server Migration Service B. AWS Organizations C. AWS Budgets D. AWS Trusted Advisor
Correct Answer: B use the consolidated billing feature in AWS Organizations to consolidate billing and payment for multiple AWS accounts or multiple Amazon Internet Services Pvt. Ltd (AISPL) accounts. Every organization in AWS Organizations has a master account that pays the charges of all the member accounts. Consolidated billing has the following benets: ? One bill "" You get one bill for multiple accounts. ? Easy tracking "" You can track the charges across multiple accounts and download the combined cost and usage data. ? Combined usage "" You can combine the usage across all accounts in the organization to share the volume pricing discounts and Reserved Instance discounts. This can result in a lower charge for your project, department, or company than with individual standalone accounts. For more information, see Volume Discounts. ? No extra fee "" Consolidated billing is offered at no additional cost.
Question #11 Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWS SDKs? A. Amazon CloudWatch B. AWS CloudTrail C. AWS Cognito D. AWS Health
Correct Answer: B Reference: https://aws.amazon.com/cloudtrail/
Question #57 Which statement best describes Elastic Load Balancing? A. It translates a domain name into an IP address using DNS. B. It distributes incoming application trac across one or more Amazon EC2 instances. C. It collects metrics on connected Amazon EC2 instances. D. It automatically adjusts the number of Amazon EC2 instances to support incoming trac.
Correct Answer: B Reference: https://aws.amazon.com/elasticloadbalancing/
Question #43 Which service should a customer use to consolidate and centrally manage multiple AWS accounts? A. AWS IAM B. AWS Organizations C. AWS Schema Conversion Tool D. AWS Cognito
Correct Answer: B Reference: https://aws.amazon.com/organizations/
Question #30 According to best practices, how should an application be designed to run in the AWS Cloud? A. Use tightly coupled components. B. Use loosely coupled components. C. Use infrequently coupled components. D. Use frequently coupled components.
Correct Answer: B Reference: https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf
Question #83 Which of the following services could be used to deploy an application to servers running on-premises? (Choose two.) A. AWS Elastic Beanstalk B. AWS OpsWorks C. AWS CodeDeploy D. AWS Batch E. AWS X-Ray
Correct Answer: BC Reference: https://docs.aws.amazon.com/codedeploy/latest/userguide/instances-on-premises.html https://aws.amazon.com/blogs/aws/opsworks-on- Qpureesmti-oannd#-8e4xisting-instances/
Question #65 Which of the following security-related services does AWS offer? (Choose two.) A. Multi-factor authentication physical tokens B. AWS Trusted Advisor security checks C. Data encryption D. Automated penetration testing E. Amazon S3 copyrighted content detection
Correct Answer: BC Reference: https://aws.amazon.com/security/
Question #17 Which AWS tools assist with estimating costs? (Choose three.) A. Detailed billing report B. Cost allocation tags C. AWS Simple Monthly Calculator D. AWS Total Cost of Ownership (TCO) Calculator E. Cost Estimator
Correct Answer: BCD
Question #28 Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Choose two.) A. Patching operating system components for Amazon Relational Database Server (Amazon RDS) B. Encrypting data on the client-side C. Training the data center staff D. Conguring Network Access Control Lists (ACL) E. Maintaining environmental controls within a data center
Correct Answer: BD Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
Question #101 Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster? (Choose two.) A. AWS Concierge B. AWS CloudFormation C. Amazon Simple Storage Service (Amazon S3) D. Amazon EC2 Auto Scaling E. AWS Management Console
Correct Answer: BE
Question #12 Which of the following are characteristics of Amazon S3? (Choose two.) A. A global system B. An object store C. A local store D. A network system E. A durable storage system
Correct Answer: BE
Question #32 Which AWS services should be used for read/write of constantly changing data? (Choose two.) A. Amazon Glacier B. Amazon RDS C. AWS Snowball D. Amazon Redshift E. Amazon EFS
Correct Answer: BE
Question #60 Which of the following AWS services can be used to serve large amounts of online video content with the lowest possible latency? (Choose two.) A. AWS Storage Gateway B. Amazon S3 C. Amazon Elastic File System (EFS) D. Amazon Glacier E. Amazom CloudFront
Correct Answer: BE Reference: https://aws.amazon.com/getting-started/tutorials/deliver-content-faster/ https://aws.amazon.com/cloudfront/
Question #14 What costs are included when comparing AWS Total Cost of Ownership (TCO) with on-premises TCO? A. Project management B. Antivirus software licensing C. Data center security D. Software development
Correct Answer: C
Question #23 Which of the following security-related actions are available at no cost? A. Calling AWS Support B. Contacting AWS Professional Services to request a workshop C. Accessing forums, blogs, and whitepapers D. Attending AWS classes at a local university
Correct Answer: C
Question #25 Which AWS feature will reduce the customer's total cost of ownership (TCO)? A. Shared responsibility security model B. Single tenancy C. Elastic computing D. Encryption
Correct Answer: C
Question #29 Which is a recommended pattern for designing a highly available architecture on AWS? A. Ensure that components have low-latency network connectivity. B. Run enough Amazon EC2 instances to operate at peak load. C. Ensure that the application is designed to accommodate failure of any single component. D. Use a monolithic application that handles all operations.
Correct Answer: C
Question #38 One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is: A. it allows the business to eliminate IT bills. B. it allows the business to put a server in each customer's data center. C. it allows the business to focus on business activities. D. it allows the business to leave servers unpatched.
Correct Answer: C
Question #5 A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in- house. Which of the following AWS programs can a customer take advantage of to achieve that outcome? A. AWS Partner Network Technology Partners B. AWS Marketplace C. AWS Partner Network Consulting Partners D. AWS Service Catalog
Correct Answer: C
Question #6 Distributing workloads across multiple Availability Zones supports which cloud architecture design principle? A. Implement automation. B. Design for agility. C. Design for failure. D. Implement elasticity.
Correct Answer: C
Question #62 What is the benefit of using AWS managed services, such as Amazon ElastiCache and Amazon Relational Database Service (Amazon RDS)? A. They require the customer to monitor and replace failing instances. B. They have better performance than customer-managed services. C. They simplify patching and updating underlying OSs. D. They do not require the customer to optimize instance type or size selections.
Correct Answer: C
Question #97 Which AWS service can be used to manually launch instances based on resource requirements? A. Amazon EBS B. Amazon S3 C. Amazon EC2 D. Amazon ECS
Correct Answer: C
Question #88 Which AWS service provides a customized view of the health of specific AWS services that power a customer's workloads running on AWS? A. AWS Service Health Dashboard B. AWS X-Ray C. AWS Personal Health Dashboard D. Amazon CloudWatch
Correct Answer: C Personal Health Dashboard gives you a personalized view of the status of the AWS services that power your applications, enabling you to quickly see when AWS is experiencing issues that may impact you. For example, in the event of a lost EBS volume associated with one of your EC2 instances, you would gain quick visibility into the status of the specic service you are using, helping save precious time troubleshooting to determine root cause. Reference: https://aws.amazon.com/premiumsupport/technology/personal-health-dashboard/
Question #48 A customer is using multiple AWS accounts with separate billing. How can the customer take advantage of volume discounts with minimal impact to the AWS resources? A. Create one global AWS acount and move all AWS resources to tha account. B. Sign up for three years of Reserved Instance pricing up front. C. Use the consolidated billing feature from AWS Organizations. D. Sign up for the AWS Enterprise support plan to get volume discounts.
Correct Answer: C Reference: https://aws.amazon.com/answers/account-management/aws-multi-account-billing-strategy/
Question #22 Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users? A. A public and private key-pair B. Amazon Inspector C. AWS Identity and Access Management (IAM) policies D. Security Groups
Correct Answer: C Reference: https://aws.amazon.com/blogs/security/how-to-restrict-amazon-s3-bucket-access-to-a-specic-iam-role/
Question #47 Which of the following is the customer's responsibility under the AWS shared responsibility model? A. Patching underlying infrastructure B. Physical security C. Patching Amazon EC2 instances D. Patching network infrastructure
Correct Answer: C Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
Question #24 Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value? A. Dedicated RIs B. Scheduled RIs C. Convertible RIs D. Standard RIs
Correct Answer: C Reference: https://aws.amazon.com/ec2/pricing/reserved-instances/
Question #19 Which of the following Reserved Instance (RI) pricing models provides the highest average savings compared to On-Demand pricing? A. One-year, No Upfront, Standard RI pricing B. One-year, All Upfront, Convertible RI pricing C. Three-year, All Upfront, Standard RI pricing D. Three-year, No Upfront, Convertible RI pricing
Correct Answer: C Reference: https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/
Question #100 Which AWS Cost Management tool allows you to view the most granular data about your AWS bill? A. AWS Cost Explorer B. AWS Budgets C. AWS Cost and Usage report D. AWS Billing dashboard
Correct Answer: C The Cost & Usage Report is your one-stop-shop for accessing the most granular data about your AWS costs and usage. You can also load your cost and usage information into Amazon Athena, Amazon Redshift, AWS QuickSight, or a tool of your choice. Reference: https://aws.amazon.com/aws-cost-management/
Question #1 Under the shared responsibility model, which of the following is the customer responsible for? A. Ensuring that disk drives are wiped after use. B. Ensuring that firmware is updated on hardware devices. C. Ensuring that data is encrypted at rest. D. Ensuring that network cables are category six or higher.
Correct Answer: C https://aws.amazon.com/compliance/shared-responsibility-model/
Question #27 Where are AWS compliance documents, such as an SOC 1 report, located? A. Amazon Inspector B. AWS CloudTrail C. AWS Artifact D. AWS Certicate Manager
Correct Answer: C Reference: https://aws.amazon.com/compliance/soc-faqs/
Question #41 Which of the following is a fast and reliable NoSQL database service? A. Amazon Redshift B. Amazon RDS C. Amazon DynamoDB D. Amazon S3
Correct Answer: C Reference: https://aws.amazon.com/dynamodb/
Question #9 Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses? A. Spot Instances B. Reserved Instances C. Dedicated Hosts D. On-Demand Instances
Correct Answer: C Reference: https://aws.amazon.com/ec2/pricing/
Question #61 Web servers running on Amazon EC2 access a legacy application running in a corporate data center. What term would describe this model? A. Cloud-native B. Partner network C. Hybrid architecture D. Infrastructure as a service
Correct Answer: C Reference: https://aws.amazon.com/enterprise/hybrid/
Question #4 What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas? A. AWS Enterprise Support B. AWS Solutions Architects C. AWS Professional Services D. AWS Account Managers
Correct Answer: C Reference: https://aws.amazon.com/professional-services/
Question #3 Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities? A. Amazon Glacier B. AWS Storage Gateway C. Amazon S3 D. Amazon EBS
Correct Answer: C Reference: https://aws.amazon.com/s3/faqs/
Question #10 Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Choose two.) A. High availability B. Shared security model C. Elasticity D. Pay-as-you-go pricing E. Reliability
Correct Answer: CD
Question #85 Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Choose two.) A. Use manual monitoring. B. Use fixed servers. C. Implement loose coupling. D. Rely on individual components. E. Design for scalability.
Correct Answer: CE Rearchitecting applications involves sweeping change where an old monolithic application is completely revamped according to modern microservices architecture. Using individual components to re-architect a big application is one part of the process. The most important part is to design the application for scalability because the level of investment for a monolithic application can only be justified when resilience and scalability is needed. Reference: https://www.architech.ca/re-architect-applications/
Question #15 A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes. Which service should the company use? A. Amazon Redshift B. Amazon DynamoDB C. Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store D. Amazon EC2 with Amazon Elastic Block Store (Amazon EBS)
Correct Answer: D
Question #98 A company is migrating an application that is running non-interruptible workloads for a three-year time frame. Which pricing construct would provide the MOST cost-effective solution? A. Amazon EC2 Spot Instances B. Amazon EC2 Dedicated Instances C. Amazon EC2 On-Demand Instances D. Amazon EC2 Reserved Instances
Correct Answer: D
Question #93 What technology enables compute capacity to adjust as loads change? A. Load balancing B. Automatic failover C. Round robin D. Auto Scaling
Correct Answer: D AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. Using AWS Auto Scaling, it's easy to setup application scaling for multiple resources across multiple services in minutes. The service provides a simple, powerful user interface that lets you build scaling plans for resources including Amazon EC2 instances and Spot Fleets, Amazon ECS tasks, Amazon DynamoDB tables and indexes, and Amazon Aurora Replicas. AWS Auto Scaling makes scaling simple with recommendations that allow you to optimize performance, costs, or balance between them. If you're already using Amazon EC2 Auto Scaling to dynamically scale your Amazon EC2 instances, you can now combine it with AWS Auto Scaling to scale additional resources for other AWS services. With AWS Auto Scaling, your applications always have the right resources at the right time. Reference: https://aws.amazon.com/autoscaling/
Question #79 Which AWS service provides the ability to manage infrastructure as code? A. AWS CodePipeline B. AWS CodeDeploy C. AWS Direct Connect D. AWS CloudFormation
Correct Answer: D AWS CloudFormation provides a common language for you to describe and provision all the infrastructure resources in your cloud environment. CloudFormation allows you to use a simple text le to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. This le serves as the single source of truth for your cloud environment. Reference: https://aws.amazon.com/cloudformation/
Question #71 Which AWS service allows companies to connect an Amazon VPC to an on-premises data center? A. AWS VPN B. Amazon Redshift C. API Gateway D. Amazon Direct Connect
Correct Answer: D AWS Direct Connect enables you to securely connect your AWS environment to your on-premises data center or oce location over a standard 1 gigabit or 10 gigabit Ethernet ber-optic connection. AWS Direct Connect offers dedicated high speed, low latency connection, which bypasses internet service providers in your network path. An AWS Direct Connect location provides access to Amazon Web Services in the region it is associated with, as well as access to other US regions. AWS Direct Connect allows you to logically partition the ber-optic connections into multiple logical connections called Virtual Local Area Networks (VLAN). You can take advantage of these logical connections to improve security, differentiate trac, and achieve compliance requirements. Reference: https://aws.amazon.com/getting-started/projects/connect-data-center-to-aws/
Question #90 Which of the following steps should be taken by a customer when conducting penetration testing on AWS? A. Conduct penetration testing using Amazon Inspector, and then notify AWS support. B. Request and wait for approval from the customer's internal security team, and then conduct testing. C. Notify AWS support, and then conduct testing immediately. D. Request and wait for approval from AWS support, and then conduct testing.
Correct Answer: D AWS customers are welcome to carry out security assessments or penetration tests against their AWS infrastructure without prior approval for 8 services. Reference: https://aws.amazon.com/security/penetration-testing/
Question #67 Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers? A. Amazon S3 B. Amazon Glacier C. Amazon EBS D. Amazon EFS
Correct Answer: D Amazon Elastic File System (Amazon EFS) provides a simple, scalable, fully managed elastic NFS le system for use with AWS Cloud services and on-premises resources. It is built to scale on demand to petabytes without disrupting applications, growing and shrinking automatically as you add and remove les, eliminating the need to provision and manage capacity to accommodate growth. Amazon EFS is designed to provide the throughput, IOPS, and low latency needed for Linux workloads. Throughput and IOPS scale as a le system grows and can burst to higher throughput levels for short periods of time to support the unpredictable performance needs of le workloads. For the most demanding workloads, Amazon EFS can support performance over 10 GB/sec and up to 500,000 IOPS.
Question #68 When architecting cloud applications, which of the following are a key design principle? A. Use the largest instance possible B. Provision capacity for peak load C. Use the Scrum development process D. Implement elasticity
Correct Answer: D Cloud services main proposition is to provide elasticity through horizontal scaling. It's already there. As for using largest instance possible, it is not a design principle that helps cloud applications in anyway. Scrum development process is not related to architecting. Therefore, a key principle is to provision your application for on-demand capacity. Peak loads is something that cloud applications experience everyday. Peak load management should be a necessary part of cloud application design principle. Reference: https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf
Question #66 Which AWS managed service is used to host databases? A. AWS Batch B. AWS Artifact C. AWS Data Pipeline D. Amazon RDS
Correct Answer: D Explanation - Amazon Relational Database Service (Amazon RDS) makes it easy to set up, operate, and scale a relational database in the cloud. It provides cost-ecient and resizable capacity while automating time-consuming administration tasks such as hardware provisioning, database setup, patching and backups. It frees you to focus on your applications so you can give them the fast performance, high availability, security and compatibility they need. Reference: https://aws.amazon.com/rds/?c=db&sec=srv
Question #42 What is an example of agility in the AWS Cloud? A. Access to multiple instance types B. Access to managed services C. Using Consolidated Billing to produce one bill D. Decreased acquisition time for new compute resources
Correct Answer: D Reference: https://aws.amazon.com/blogs/enterprise-strategy/risk-is-lack-of-agility/
Question #36 Which of the following is a shared control between the customer and AWS? A. Providing a key for Amazon S3 client-side encryption B. Conguration of an Amazon EC2 instance C. Environmental controls of physical AWS data centers D. Awareness and training
Correct Answer: D Reference: https://aws.amazon.com/compliance/shared-responsibility-model/
Question #52 Which storage service can be used as a low-cost option for hosting static websites? A. Amazon Glacier B. Amazon DynamoDB C. Amazon Elastic File System (Amazon EFS) D. Amazon Simple Storage Service (Amazon S3)
Correct Answer: D Reference: https://aws.amazon.com/getting-started/projects/host-static-website/
Question #63 Which service provides a virtually unlimited amount of online highly durable object storage? A. Amazon Redshift B. Amazon Elastic File System (Amazon EFS) C. Amazon Elastic Container Service (Amazon ECS) D. Amazon S3
Correct Answer: D Reference: https://aws.amazon.com/what-is-cloud-object-storage/
Question #20 Compared with costs in traditional and virtualized data centers, AWS has: A. greater variable costs and greater upfront costs. B. fixed usage costs and lower upfront costs. C. lower variable costs and greater upfront costs. D. lower variable costs and lower upfront costs.
Correct Answer: D Reference: https://d1.awsstatic.com/whitepapers/introduction-to-aws-cloud-economics-nal.pdf (10)
Question #53 Which Amazon EC2 instance pricing model can provide discounts of up to 90%? A. Reserved Instances B. On-Demand C. Dedicated Hosts D. Spot Instances
Correct Answer: D Reference: https://aws.amazon.com/ec2/spot/
Question #56 A company is looking for a scalable data warehouse solution. Which of the following AWS solutions would meet the company's needs? A. Amazon Simple Storage Service (Amazon S3) B. Amazon DynamoDB C. Amazon Kinesis D. Amazon Redshift
Correct Answer: D Reference: https://aws.amazon.com/redshift/
Question #31 AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.) A. Implementing Amazon Rekognition B. Using AWS Shield-protected resources C. Blocking access with Security Groups D. Using Multi-Factor Authentication (MFA) E. Enforcing password strength and expiration
Correct Answer: DE
Question #49 Which of the following are features of Amazon CloudWatch Logs? (Choose two.) A. Summaries by Amazon Simple Notication Service (Amazon SNS) B. Free Amazon Elasticsearch Service analytics C. Provided at no charge D. Real-time monitoring E. Adjustable retention
Correct Answer: DE
