AWS Cloud Support Practice

How can you configure the same permissions for multiple IAM users? a. Have multiple users leverage the same IAM user to reduce maintenance b. Create an IAM group, assign permissions to the group, and add IAM users to the group c. Create an IAM role, assign permissions to the role d. Copy and paste the same policy JSON to a unique policy for each user

b. Create an IAM group, assign permissions to the group, and add IAM users to the group

What is the minimum AWS support plan that provides the complete set of AWS Trusted Advisor checks? a. Developer b. Business c. Enterprise d. Basic

b. Business

Which fully managed AWS service uses machine learning to both detect and protect your data that is stored in AWS? a. AWS CloudFormation b. AWS GuardDuty c. Network Access Control Lists (ACL's) d. Amazon Macie

d. Amazon Macie

What is the least costly support plan that provides 24/7 access to documentation, whitepapers, and support forums? a. Business b. Developer c. Basic d. Enterprise

c. Basic

Which statement is TRUE for the AWS global infrastructure? A Region consists of a single Availability Zone. An Availability Zone consists of two or more Regions. A Region consists of two or more Availability Zones. An Availability Zone consists of a single Region.

A Region consists of two or more Availability Zones.

Which statement best describes Amazon CloudFront? A service that enables you to run infrastructure in a hybrid cloud approach A serverless compute engine for containers A service that enables you to send and receive messages between software components through a queue A global content delivery service

A global content delivery service

Which statement best describes Amazon DynamoDB? A service that enables you to run relational databases in the AWS Cloud A serverless key-value database service A service that you can use to migrate relational databases, nonrelational databases, and other types of data stores An enterprise-class relational database

A serverless key-value database service

Which component can be used to establish a private dedicated connection between your company's data center and AWS? Private subnet AWS Direct Connect DNS Virtual private gateway

AWS Direct Connect

Which online tool provides guidance in following AWS best practices by providing personalized recommendations for your cloud workloads? a. AWS Trusted Advisor b. AWS Personal Health Dashboard c. AWS Well-Architected Framework d. Amazon CloudWatch

AWS Trusted Advisor

Which service is used to query and analyze data across a data warehouse? 1 point Amazon Redshift Amazon Neptune Amazon DocumentDB Amazon ElastiCache

Amazon Redshift

Which service is used to manage the DNS records for domain names? Amazon Virtual Private Cloud AWS Direct Connect Amazon CloudFront Amazon Route 53

Amazon Route 53

Which Amazon S3 storage classes are optimized for archival data? Select TWO. Amazon S3 Standard Amazon S3 Glacier Flexible Retrieval Amazon S3 Intelligent-Tiering Amazon S3 Standard-IA Amazon S3 Glacier Deep Archive

Amazon S3 Glacier Flexible Retrieval Amazon S3 Glacier Deep Archive

You want to store data that is infrequently accessed but must be immediately available when needed. Which Amazon S3 storage class should you use? Amazon S3 Intelligent-Tiering Amazon S3 Glacier Deep Archive Amazon S3 Standard-IA S3 Glacier Flexible Retrieval

Amazon S3 Standard - IA

You want to store data in an object storage service. Which AWS service is best for this type of storage? Amazon Managed Blockchain Amazon Elastic File System (Amazon EFS) Amazon Elastic Block Store (Amazon EBS) Amazon Simple Storage Service (Amazon S3)

Amazon Simple Storage Service (Amazon S3)

Which factors should be considered when selecting a Region? Select TWO. Compliance with data governance and legal requirements Access to the AWS Command Line Interface (AWS CLI) Proximity to your customers Ability to assign custom permissions to different users Access to 24/7 technical support

Compliance with data governance and legal requirements Proximity to your customers

Which statement or statements are TRUE about Amazon EBS volumes and Amazon EFS file systems? EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones. EBS volumes store data across multiple Availability Zones. Amazon EFS file systems store data within a single Availability Zone. EBS volumes and Amazon EFS file systems both store data within a single Availability Zone. EBS volumes and Amazon EFS file systems both store data across multiple Availability Zones.

EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones.

Which site does Amazon CloudFront use to cache copies of content for faster delivery to users at any location? Region Availability Zone Edge location Origin

Edge location

Which action can you perform with AWS Outposts? Automate actions for AWS services and applications through scripts. Access wizards and automated workflows to perform tasks in AWS services. Develop AWS applications in supported programming languages. Extend AWS infrastructure and services to your on-premises data center.

Extend AWS infrastructure and services to your on-premises data center.

Which component is used to connect a VPC to the internet? 1 point Public subnet Internet gateway Edge location Security group

Internet gateway

Which statement best describes an AWS account's default network access control list? It is stateless and denies all inbound and outbound traffic. It is stateful and allows all inbound and outbound traffic. It is stateless and allows all inbound and outbound traffic. It is stateful and denies all inbound and outbound traffic.

It is stateless and allows all inbound and outbound traffic.

Which AWS managed service provides the ability to setup and manage relational databases for the most common database engines? a. AWS Database Migration Tool b. Amazon Relational Database Service (RDS) c. Amazon SimpleDB d. Amazon DynamoDB

b. Amazon Relational Database Service (RDS)

Your company has an application that uses Amazon EC2 instances to run the customer-facing website and Amazon RDS database instances to store customers' personal information. How should the developer configure the VPC according to best practices? Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet. Place the Amazon EC2 instances and the Amazon RDS database instances in a public subnet. Place the Amazon EC2 instances in a private subnet and the Amazon RDS database instances in a public subnet. Place the Amazon EC2 instances and the Amazon RDS database instances in a private subnet.

Place the Amazon EC2 instances in a public subnet and the Amazon RDS database instances in a private subnet.

Which statement best describes security groups? They are stateful and deny all inbound traffic by default. They are stateful and allow all inbound traffic by default. They are stateless and deny all inbound traffic by default. They are stateless and allow all inbound traffic by default.

They are stateful and deny all inbound traffic by default.

What are the scenarios in which you should use Amazon Relational Database Service (Amazon RDS)? Select TWO. Running a serverless database Using SQL to organize data Storing data in a key-value database Scaling up to 10 trillion requests per day Storing data in an Amazon Aurora database

Using SQL to organize data Storing data in an Amazon Aurora database

Your organization frequently deploys a standard web application stack for new applications. What AWS service would enable them to define this common infrastructure in code and also detect any drift to the stack configuration of a deployed application? a. AWS CloudFormation b. AWS Resource Manager c. AWS CodeCommit d. AWS CodeDeploy

a. AWS CloudFormation

Which AWS service enables organizations to create a private link between their data center and an AWS region that doesn't travel over the public Internet? a. AWS Direct Connect b. AWS Site to Site Connect c. AWS Cloud VPN d. Amazon Direct Cloud

a. AWS Direct Connect

Which AWS service would enable you to share reserved instances across multiple accounts that your company manages? a. AWS Organizations b. Amazon CloudWatch c. AWS CloudFormation d. AWS Direct Connect

a. AWS Organizations

If you wanted to engage AWS resources for a paid engagement to assist in a cloud migration, which team would you leverage? a. AWS Professional Services b. AWS Marketplace c. AWS Service Gateway d. AWS Partner Network Consulting Partners

a. AWS Professional Services

Your organization is adopting a hybrid approach for storage and wants to leverage the cloud as a backup while having low latency access to data on its local network. Which AWS service could be leveraged for this? a. AWS Storage Gateway b. Amazon Elastic Block Store (EBS) c. Amazon S3 Glacier d. Amazon S3

a. AWS Storage Gateway

Which service provides an in-memory data store that supports both Redis and Memcached? a. Amazon Elasticache b. Amazon EFS c. Amazon RDS d. Amazon DynamoDB

a. Amazon Elasticache

Which AWS concept is the definition of the information required to launch an EC2 instance including the contents of the root volume, launch permissions, and block device mapping? a. Amazon Machine Image (AMI) b. Amazon Elastic Block Store (EBS) c. Amazon Elastic Filesystem (EFS) d. Amazon EC2 Instance Image (EII)

a. Amazon Machine Image (AMI)

Which service provides nearly limitless object storage with multiple storage classes covering use cases from frequent access to archive storage? a. Amazon S3 b. AWS CloudStorage c. Amazon EFS d. Amazon EBS

a. Amazon S3

Which disaster recovery approach would result in the lowest cost? a. Backup and Restore b. Warm Standby c. Multi-site d. Pilot Light

a. Backup and Restore

Which pricing factors are considered when using AWS Lambda? (choose two) a. Duration (based on the memory allocated) b. Number of instances c. Maximum concurrent instances d. Number of requests e. Instance size

a. Duration (based on the memory allocated) d. Number of requests

Your organization has decided to adopt "infrastructure as code" with AWS CloudFormation for new infrastructure launched into your AWS accounts. Which pillar of the Well-Architected Framework is this recommendation included in? a. Operational Excellence b. Security c. Fault Tolerance d. Cost Optimization

a. Operational Excellence

Your company is looking to perform batch data analysis using an EC2 instance. There is a flexible start and stop time for this workload, and it can stop and restart as needed. What would be the most cost effective EC2 pricing model given these requirements? a. Spot Instance b. On-Demand Instance c. Dedicated Host d. Reserved Instance

a. Spot Instance

What tool would you leverage to make a case within your organization for moving to the cloud from a traditional data center? a. TCO Calculator b. Cost and Usage Reports (CUR) c. AWS Pricing Calculator or Simple Monthly Calculator d. AWS Cost Explorer

a. TCO Calculator

Which of the following services is a highly-available managed domain name system (DNS) service? a. Amazon Domain Name Service b. Amazon Route 53 c. AWS Elastic Beanstalk d. AWS Elastic Routing

b. Amazon Route 53

Which AWS service enables you to use your own keys to encrypt data on AWS using a hardware security module (HSM)? a. AWS Key Management Service (KMS) b. AWS CloudHSM c. AWS Identity and Access Management (IAM) d. Amazon Macie

b. AWS CloudHSM

What AWS service can be leveraged in the deployment of your custom software to Amazon EC2 and AWS Fargate? a. AWS CodeCommit b. AWS CodeDeploy c. AWS CodeGuru d. AWS CodeArtifact

b. AWS CodeDeploy

Which AWS service provides the ability to assess and audit configuration of the AWS resources you have deployed in your account? a. Amazon CloudWatch b. AWS Config c. AWS Identity and Access Management (IAM) d. AWS GuardDuty

b. AWS Config

What will IAM users use to authenticate themselves when using the AWS CLI? a. Group credentials b. Access keys per IAM user c. Username and password d. Access keys for the root user

b. Access keys per IAM user

Your organization has decided to experiment with Machine Learning for a specific business problem. Later the same day, the team has a Machine Learning environment up and running in AWS to begin experimentation. Which cloud benefit is illustrated in this scenario? a. Loose coupling b. Agility c. Design for failure d. Elasticity

b. Agility

You want to launch multiple EC2 instances that all have the same operating system customizations. What would you need to create so that each of these instances included those customizations? a. Amazon S3 Bucket b. Custom Amazon Machine Image (AMI) c. Amazon Virtual Private Cloud (VPC) d. Amazon Elastic File System (EFS)

b. Custom Amazon Machine Image (AMI)

Which of the following would not be factored into a TCO comparison analysis of switching to the cloud from a traditional data center? a. Cost of purchasing data storage hardware b. Custom software development c. Utility costs for data center d. Cost of purchasing servers

b. Custom software development

Your company is migrating to the cloud. You have multiple licenses for server software that is licensed per server. Which EC2 pricing model should you choose for the instances when you launch them in AWS? a. Consolidated Instance b. Dedicated Host c. Spot Instance d. Reserved Instance

b. Dedicated Host

Within the Shared Responsibility Model, which areas would be the responsibility of the customer? (choose three) a. Management of Edge Locations b. Encryption of data in transit c. User access management d. Data center network connectivity e. Encryption of data at rest

b. Encryption of data in transit c. User access management e. Encryption of data at rest

Your US-based team wants to expand an internal application to your office in Singapore. They are able to take the application and spin up a version in the ap-southeast-1 region. Which benefit of cloud computing is best illustrated with this scenario? a. Stop guessing capacity b. Go global in minutes c. Stop spending money running and maintaining data centers d. Trade capital expense for variable expense

b. Go global in minutes

Which of the following are pillars of the AWS Well-Architected Framework? (select three) a. Fault Tolerance b. Operational Excellence c. Security d. Cost Optimization e. High Availability

b. Operational Excellence c. Security d. Cost Optimization

Which element of AWS Global infrastructure consists of multiple Availability Zones? a. Edge Location b. Region c. Point of Presence d. Data Center

b. Region

Your company is moving a self-managed database over to AWS, and it will be running on EC2 for at least 3 years. They want to avoid any large expenses up-front but want to reduce the monthly cost as much as possible. What EC2 pricing model should you recommend? a. Dedicated Host b. Reserved - 3 year - No Upfront c. On-Demand Instance d. Reserved - 3 year - Partial Upfront

b. Reserved - 3 year - No Upfront

Your organization is working on an incident management and investigation policy now that they have moved a pilot application onto the cloud with AWS. Which pillar of the AWS Well-Architected Framework recommends the creation of this policy? a. Performance Efficiency b. Security c. Reliability d. Cost Optimization

b. Security

Which service provides a highly-available and elastic NFS file system for both cloud-based and on-premise servers? a. Amazon S3 Glacier b. Amazon S3 c. Amazon Elastic File System (EFS) d. Amazon Elastic Block Store (EBS)

c. Amazon Elastic File System (EFS)

You are looking to move a new web application into the cloud. Your organization has asked for a cost estimate on this application. What tool could you use to estimate costs for this new cloud workload? a. AWS Cost Explorer b. AWS Trusted Advisor c. AWS Pricing Calculator or Simple Monthly Calculator d. Cost and Usage Reports (CUR)

c. AWS Pricing Calculator or Simple Monthly Calculator

Which of the following services could assist in migrating your data from your on-premise data center into AWS? a. AWS CloudFormation b. Amazon CloudWatch c. AWS Snowball d. AWS Cloud Migrate

c. AWS Snowball

Which service can give you a secure and encrypted connection to a Virtual Private Cloud (VPC) on AWS over the public Internet? a. AWS Direct Connect b. AWS GuardDuty c. AWS Virtual Private Network (VPN) d. AWS Key Management Service

c. AWS Virtual Private Network (VPN)

Which AWS service enables you to protect your web application by using a rule-based system to detect traffic and actions that should be blocked? a. Amazon CloudWatch b. Amazon Macie c. AWS Web Application Firewall (WAF) d. AWS GuardDuty

c. AWS Web Application Firewall (WAF)

Your organization is looking to review best practices for AWS prior to implementing their first cloud application. What resource would best meet this need? a. AWS Trusted Advisor b. AWS CloudFormation c. AWS Well-Architected Framework d. AWS Marketplace

c. AWS Well-Architected Framework

Which service provides a NoSQL cloud database with single-digit millisecond latency that operates as a key-value and document store? a. Amazon SimpleDB b. Amazon Aurora c. Amazon DynamoDB d. Amazon EBS

c. Amazon DynamoDB

Within the Shared Responsibility Model, what responsibility is shared by both the customer and AWS? a. Customer Data b. Data Center Physical Security c. Configuration Management d. Edge Location Management

c. Configuration Management

When deploying an application across multiple availability zones, which design concept are you implementing? a. Elasticity b. Agility c. Design for failure d. Cost Optimization

c. Design for failure

Which managed service could provide distribution of incoming traffic across multiple Amazon EC2 instances? a. Amazon Elasticsearch b. AWS Elastic Beanstalk c. Elastic Load Balancing d. AWS Auto Scaling

c. Elastic Load Balancing

How can you improve the security of your IAM user account? a. Setup Amazon Shield for your account b. Implement AWS VPN when using the AWS Console c. Enable multi-factor authentication d. Setup Amazon Macie for your account

c. Enable multi-factor authentication

According to the concept of least privilege access, what should you setup when adding permissions for an IAM user? a. Grant a user admin permissions on a separate AWS account that is a part of your AWS Organization b. Grant the user permissions to access all services in the environment c. Grant the user has permissions for only the items needed by that user to perform a task d. Grant the user permissions for what they will need along with commonly used services to avoid repeated modification to policies

c. Grant the user has permissions for only the items needed by that user to perform a task

Your organization is looking to test a new web application concept. The team setup an AWS account and infrastructure within a day on which they will build a prototype for this application. Which cloud computing benefit does this illustrate? a. Go global in minutes b. Stop guessing capacity c. Increase speed and agility d. Hybrid cloud

c. Increase speed and agility

How will implementing elasticity in your cloud application reduce your TCO over implementing it in your traditional data center? a. Increasing compute capability b. Increasing unused capacity c. Reducing unused capacity d. Increasing speed of data transfer

c. Reducing unused capacity

Your company has deployed a new web application across multiple availability zones for high availability. What pillar of the Well-Architected Framework recommends this approach? a. Operational Excellence b. Fault Tolerance c. Reliability d. Cost Optimizations

c. Reliability

What feature of a Virtual Private Cloud (VPC) works like a virtual firewall for the network? a. Subnets b. Virtual Private Gateways c. Security Groups d. Internet Gateways

c. Security Groups

Your company needs to launch a MySQL database in the cloud for a web application. They will need to have access to the underlying operating system to install OS-level optimizations. What solution would meet these requirements? a. Utilize DynamoDB b. Utilize Amazon Aurora on Amazon RDS c. Utilize MySQL on Amazon EC2 d. Utilize Amazon SimpleDB

c. Utilize MySQL on Amazon EC2

What AWS service enables auditing of your AWS account by logging actions taken on your AWS resources? a. AWS CloudHSM b. AWS CloudFormation c. AWS GuardDuty d. AWS CloudTrail

d. AWS CloudTrail

Which tool can be used to automate the creation and management of multiple account AWS environments? a. AWS Cost Explorer b. Identity and Access Management c. AWS Directory Service d. AWS Control Tower

d. AWS Control Tower

Which tool enables you to visualize current AWS costs and predict future costs based on current usage? a. AWS Pricing Calculator b. AWS Trusted Advisor c. Cost and Usage Reports (CUR) d. AWS Cost Explorer

d. AWS Cost Explorer

Which AWS service allows you to manage multiple AWS accounts, simplify billing for all accounts, and apply policies for governance of those accounts? a. AWS Directory Service b. AWS Accounts c. AWS CloudFormation d. AWS Organizations

d. AWS Organizations

Your company is moving their data storage from their data center into the cloud. They are evaluating different approaches for data warehousing. What AWS service provides a managed data warehousing solution that supports columnar storage up to a petabyte scale? a. AWS Database Migration Service b. Amazon DynamoDB c. Amazon SimpleDB d. Amazon Redshift

d. Amazon Redshift

You are looking to launch a static website with minimal configuration. Which of the following AWS services provides this feature? a. Amazon CloudWatch b. Amazon Redshift c. AWS CodeDeploy d. Amazon S3

d. Amazon S3

Which element of the AWS Global Infrastructure is made up of one or more data centers connected by a low latency network with redundant power, networking, and connectivity within an AWS Region? a. Edge Location b. Regional Edge Cache c. Point of Presence d. Availability Zone

d. Availability Zone

You want to have email support within business hours from AWS for an application you are building. What is the minimum support plan that provides this? a. Basic b. Enterprise c. Business d. Developer

d. Developer

When you deploy your application across multiple AWS availability zones, which architectural principle are you implementing? a. Loose coupling b. Cross-region reliability c. Tight coupling d. High availability

d. High availability

Your organization is looking to leverage both their traditional data center and the public cloud. What type of cloud architecture does this describe? a. Isolated cloud b. Private cloud c. Public cloud d. Hybrid cloud

d. Hybrid cloud

Which architectural principle is illustrated in the following statement: "Isolate the behavior of a component from other components that depend on it, increasing resiliency and agility." a. Least privilege access b. High availability c. Tight coupling d. Loose coupling

d. Loose coupling

Within the Shared Responsibility Model, what area would be the responsibility of the customer? a. Patching data center network routers b. Patching the OS for RDS instances c. Data center security d. Patching the OS on EC2 instances

d. Patching the OS on EC2 instances

Which of the following is an economic benefit of migrating to the cloud? a. Eliminating Operational Expenditures (opex) b. Increased Capitalized Expenditures (capex) c. Increased Operational Expenditures (opex) d. Reduced Total Cost of Ownership (TCO)

d. Reduced Total Cost of Ownership (TCO)

When your team moved an application into the cloud, they implemented elasticity so that the application could scale to meet the current user demand. Which cloud computing benefit is best illustrated with this scenario? a. Stop spending money running and maintaining data centers b. Go global in minutes c. Trade capital expense for variable expense d. Stop guessing capacity

d. Stop guessing capacity