AWS Practice exam
Which of the following statements are CORRECT regarding the AWS VPC service? (Select two)
-A Security Group can have allow rules only -A NAT Gateway is managed by AWS
Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?
-AWS CloudHSM (hardware security module)
Which AWS services can be used to facilitate organizational change management, part of the Reliability pillar of AWS Well-Architected Framework? (Select three)
-AWS CloudTrail -Amazon CloudWatch -AWS Config
Which of the following AWS Support plans provide access to only core checks from the AWS Trusted Advisor Best Practice Checks? (Select two)
-AWS Developer Support -AWS Basic Support
AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two)
-AWS Global Accelerator -Amazon Route 53
Which of the following AWS services are always free to use (Select two)?
-AWS IAM -AWS Auto Scaling
An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)
-AWS Lambda -Amazon Eventbridge
Which of the following statements are true about AWS Lambda? (Select two)
-AWS Lambda lets you run code without provisioning or managing servers -You pay for the compute time you consume for AWS Lambda
An organization is planning to move its infrastructure from the on-premises datacenter to AWS Cloud. As a Cloud Practioner, which options would you recommend so that the organization can identify the right AWS services to build solutions on AWS Cloud (Select two)?
-AWS Partner Network (APN) -AWS Service Catalog
Which of the following AWS Support plans provide access to guidance, configuration, and troubleshooting of AWS interoperability with third-party software? (Select two)
-AWS business support -AWS Enterprise Support
AWS Compute Optimizer delivers recommendations for which of the following AWS resources? (Select two)
-Amazon Elastic Compute Cloud instances, Amazon EC2 Auto Scaling Groups -Amazon Elastic Block Store, AWS Lambda functions
Which of the following AWS services support reservations to optimize costs? (Select three)
-Amazon Relational Database Service (RDS) -Amazon Elastic Compute Cloud (EC2) -Amazon DynamoDB
Which AWS services can be used to decouple components of a microservices based application on AWS Cloud? (Select two)
-Amazon Simple Notification service (SNS) -Amazon Simple Queue Service (SQS)
Which of the following AWS services support VPC Endpoint Gateway for a private connection from a VPC? (Select two)
-Amazon Simple Storage Service (S3) -Amazon DynamoDB
Which AWS Support plan provides architectural guidance contextual to your specific use-cases?
AWS Business Support
A financial services company wants to ensure that its AWS account activity meets the governance, compliance and auditing norms. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
AWS CloudTrail
Which of the following AWS services has encryption enabled by default?
AWS CloudTrail Logs
A company wants to identify the optimal AWS resource configuration for its workloads so that the company can reduce costs and increase workload performance. Which of the following services can be used to meet this requirement?
AWS Compute Optimizer
An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?
AWS Config
Which of the following AWS services can be used to connect a company's on-premises environment to a VPC without using the public internet?
AWS Direct Connect
A developer has written a simple web application in PHP and he wants to just upload his code to AWS Cloud and have AWS handle the deployment automatically but still wants access to the underlying operating system for further enhancements. As a Cloud Practioner, which of the following AWS services would you recommend for this use-case?
AWS Elastic Beanstalk
The DevOps team at an e-commerce company is trying to debug performance issues for its serverless application built using a microservices architecture. As a Cloud Practitioner, which AWS service would you recommend addressing this use-case?
AWS X-Ray
An e-commerce company wants to store data from a recommendation engine in a database. As a Cloud Practioner, which AWS service would you recommend to provide this functionality with the LEAST operational overhead for any scale?
Amazon DynamoDB
Which of the following AWS services allows a database to have flexible schema and supports document data models?
Amazon DynamoDB
A company runs an application on a fleet of EC2 instances. The company wants to automate the traditional maintenance job of running timely assessments and checking for OS vulnerabilities. As a Cloud Practitioner, which service will you suggest for this use case?
Amazon Inspector
An e-commerce company wants to assess its applications deployed on Amazon Elastic Compute Cloud (Amazon EC2) instances for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?
Amazon Inspector
A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?
Amazon MQ
A silicon valley based healthcare startup stores anonymized patient health data on Amazon S3. The CTO further wants to ensure that any sensitive data on S3 is discovered and identified to prevent any sensitive data leaks. As a Cloud Practitioner, which AWS service would you recommend addressing this use-case?
Amazon Macie
Which of the following is an AWS database service?
Amazon Redshift
Which of the following Amazon S3 storage classes takes the most time to retrieve data (also known as first byte latency)?
Amazon S3 Glacier Deep Archive
A company needs a storage solution for a project wherein the data is accessed less frequently but needs rapid access when required. Which S3 storage class is the MOST cost-effective for the given use-case?
Amazon S3 Standard-Infrequent Access (S3 Standard-IA)
Which of the following is the correct statement regarding the AWS Storage services?
Amazon S3 is object based, Amazon EBS is block based and Amazon EFS is file based storage
AWS Web Application Firewall (WAF) offers protection from common web exploits at which layer?
Layer 7
Which AWS service will help you receive alerts when the reservation utilization falls below the defined threshold?
AWS Budgets
A Project Manager, working on AWS for the first time, is confused about how credits are used in AWS. There are two credits available in the manager's account. Credit one is for $100, expires July 2022, and can be used for either Amazon S3 or Amazon EC2. Credit two is for $50, expires December 2022, and can be used only for Amazon EC2. The manager's AWS account has incurred two charges: $1000 for Amazon EC2 and $500 for Amazon S3. What will be the outcome on the overall bill once the credits are used? (Select two)
-Credit one is applied to the EC2 charge which leaves you with a $900 EC2 charge and a $500 S3 charge -The, credit two is applied to the remaining $900 EC2 charge
An IT company is planning to migrate from an on-premises environment to AWS Cloud. Which of the following expense areas would result in cost savings when the company moves to AWS Cloud? (Select two)
-Data center physical security expenditure -Data center hardware infrastructure expenditure
Which of the following are correct statements regarding the AWS Global Infrastructure? (Select two)
-Each AZ consists of one or more discrete data centers -Each AWS Region consists of a minimum of three AZs
What are the advantages that AWS Cloud offers over a traditional on-premises IT infrastructure? (Select two)
-Eliminate guessing on your infrastructure capacity needs -Trade capital expense for variable expense
Which option is a common stakeholder role for the AWS Cloud Adoption Framework (AWS CAF) platform perspective? (Select two)
-Engineer -Chief Technology Officer (CTO)
Which of the following are the advantages of cloud computing? (Select three)
-Go global in minutes and deploy applications in multiple regions around the world with just a few clicks -Trade capital expense for variable expense -Benefit from massive economies of scale
A startup wants to migrate its data and applications from the on-premises data center to AWS Cloud. Which of the following options can be used by the startup to help with this migration? (Select two)
-Leverage AWS Professional Services to accelerate the infrastructure migration -Utilize AWS Partner Network (APN) to build a custom solution for this infrastructure migration
According to the AWS Cloud Adoption Framework (AWS CAF), what are two tasks that a company should perform when planning to migrate to the AWS Cloud and aiming to become more responsive to customer inquiries and feedback as part of their organizational transformation? (Select two)
-Leverage agile methods to rapidly iterate and evolve -Organize your teams around products and value streams
According to the AWS Shared Responsibility Model, which of the following are responsibilities of AWS? (Select two)
-Maintaining Amazon S3 data in different availability zones to keep it durable -Replacing faulty hardware of Amazon EC2 instances
Which of the following are examples of Horizontal Scalability (aka Elasticity)? (Select two)
-Read Replicas in Amazon RDS -Elastic Load Balancing
Which of the following statements are correct about the AWS root user account? (Select two)
-Root user access credentials are the email address and password used to create the AWS account -It is highly recommended to enable MFA for root user account.
The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)
-reliability -cost optimization
An intern at an IT company provisioned a Linux based On-demand EC2 instance with per-second billing but terminated it within 30 seconds as he wanted to provision another instance type. What is the duration for which the instance would be charged?
60 seconds -there is a 1 minute minimum charge
Compared to the on-demand instance prices, what is the highest possible discount offered for spot instances?
90
A multi-national corporation wants to get expert professional advice on migrating to AWS and managing their applications on AWS Cloud. Which of the following entities would you recommend for this engagement?
APN Consulting Partner
A medical research startup wants to understand the compliance of AWS services concerning HIPAA guidelines. Which AWS service can be used to review the HIPAA compliance and governance-related documents on AWS?
AWS Artifact
Which AWS technology/service helps you to scale your resources to match supply with demand while still keeping your cloud solution cost-effective?
AWS Auto Scaling
Which of the following AWS services should be used to automatically distribute incoming traffic across multiple targets?
AWS Elastic Load Balancing (ELB)
Which AWS support plan provides access to a designated Technical Account Manager (TAM)?
AWS Enterprise Support
Which of the following is a serverless AWS service?
AWS Lambda
Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?
AWS Marketplace
A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?
AWS Organizations
A startup wants to set up its IT infrastructure on AWS Cloud. The CTO would like to get an estimate of the monthly AWS bill based on the AWS services that the startup wants to use. As a Cloud Practitioner, which AWS service would you suggest for this use-case?
AWS Pricing Calculator
Which AWS Service can be used to mitigate a Distributed Denial of Service (DDoS) attack?
AWS Shield
Which security service of AWS is enabled for all AWS customers, by default, at no additional cost?
AWS Shield Standard
Which tool/service will help you access AWS services using programming language-specific APIs?
AWS Software Developer Kit (SDK)
A company's flagship application runs on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to Amazon Elastic Compute Cloud (Amazon EC2) instances without opening new ports or using public IP addresses. Which tool/service will help you achieve this requirement?
AWS Systems Manager Session Manager
Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?
AWS Trusted Advisor
An online gaming company wants to block users from certain geographies from accessing its content. Which AWS service can be used to accomplish this task?
AWS Web Application Firewall
A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?
AWS Web Application Firewall (AWS WAF)
A company wants to improve the resiliency of its flagship application so it wants to move from its traditional database system to a managed AWS NoSQL database service to support active-active configuration in both the East and West US AWS regions. The active-active configuration with cross-region support is the prime criteria for any database solution that the company considers. Which AWS database service is the right fit for this requirement?
Amazon DynamoDB with global tables
Which AWS service can be used to store, manage, and deploy Docker container images?
Amazon Elastic Container Registry (ECR)
A data analytics company is running a proprietary batch analytics application on AWS and wants to use a storage service which would be accessed by hundreds of EC2 instances simultaneously to append data to existing files. As a Cloud Practitioner, which AWS service would you suggest for this use-case?
Amazon Elastic File System (EFS)
A fleet of Amazon EC2 instances spread across different Availability Zones (AZ) needs to access, edit and share file-based data stored centrally on a system. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
Amazon Elastic File System (EFS)
Which of the following are the storage services offered by the AWS Cloud? (Select two)
Amazon Simple Storage Service (S3) Amazon Elastic File System (EFS)
A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?
An Amazon Virtual Private Cloud (Amazon VPC) in the Region whereas a subnet spans only one Availability Zone (AZ) in the Region
Under the AWS Shared Responsibility Model, which of the following is a shared responsibility of both AWS and the customer?
Configuration Management
An e-commerce company has deployed an RDS database in a single Availability Zone (AZ). The engineering team wants to ensure that in case of an AZ outage, the database should continue working on the same endpoint without any manual administrative intervention. Which of the following solutions can address this use-case?
Configure the database in RDS Multi-AZ deployment with automatic failover to the standby
A cyber forensics team has detected that AWS owned IP-addresses are being used to carry out malicious attacks. As this constitutes prohibited use of AWS services, which of the following is the correct solution to address this issue?
Contact AWS Abuse Team
Which of the following statements are CORRECT regarding the Availability Zone (AZ) specific characteristics of Amazon Elastic Block Store (EBS) and Amazon Elastic File System (Amazon EFS) storage types?
EBS volume can be attached to a single instance in the same AZ whereas EFS file systems can be mounted on instances across multiple AZs
A startup wants to provision an EC2 instance for the lowest possible cost for a long-term duration but needs to make sure that the instance would never be interrupted. As a Cloud Practitioner, which of the following options would you recommend?
EC2 Reserved Instance (RI)
As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?
Edge Location Management
Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them?
Elasticity
A web application stores all of its data on Amazon S3 buckets. A client has mandated that data be encrypted before sending it to Amazon S3. Which of the following is the right technique for encrypting data as needed by the customer?
Enable client-side encryption using AWS encryption SDK
Which of the following is an INCORRECT statement about Scaling, a design principle of Reliability pillar of the AWS Well-Architected Framework?
Fault tolerance is achieved by a scale up operation
Multi-AZ deployment is an example of which of the following?
High Availability
Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management (AWS IAM) entities?
IAM User
Which type of cloud computing does Amazon Elastic Compute Cloud (EC2) represent? Network as a Service (NaaS) Software as a Service (SaaS) Infrastructure as a Service (IaaS) (Correct) Platform as a Service (PaaS)
IaaS
A research group wants to use EC2 instances to run a scientific computation application that has a fault tolerant architecture. The application needs high-performance hardware disks that provide fast I/O performance. As a Cloud Practitioner, which of the following storage options would you recommend as the MOST cost-effective solution?
Instance Store
Which Amazon Elastic Compute Cloud (Amazon EC2) pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?
On-Demand Instance
Which of the following is the MOST cost-effective option to purchase an EC2 Reserved Instance (RI)?
Partial upfront payment option with standard 3-years term
A multi-national company has just moved its infrastructure from its on-premises data center to AWS Cloud. As part of the shared responsibility model, AWS is responsible for which of the following?
Physical and Environmental controls
Which of the following statement is correct for a Security Group and a Network Access Control List (Network ACL)?
Security Group acts as a firewall at the instance level. Network ACL acts as a firewall at the subnet level
What are the different gateway types supported by AWS Storage Gateway service?
Tape Gateway, File Gateway, and volume Gateway
Which of the following entities applies patches to the underlying OS for Amazon Aurora?
The AWS Product Team automatically
Which of the following is CORRECT regarding removing an AWS account from AWS Organizations?
The AWS account must be able to operate as a standalone account. Only then can it be removed from AWS organizations
The DevOps team at an IT company is moving 500 GB of data from an EC2 instance to an S3 bucket in the same region. Which of the following scenario captures the correct charges for this data transfer?
The company would not be charged for the data transfer
Which of the following is a benefit of using AWS managed services such as Amazon Relational Database Service (Amazon RDS)?
The performance of AWS managed Amazon Relational database Service (Amazon RDS) instance is better than a customer-managed database instance
A company uses reserved EC2 instances across multiple units with each unit having its own AWS account. However, some of the units under-utilize their reserved instances while other units need more reserved instances. As a Cloud Practitioner, which of the following would you recommend as the most cost-optimal solution?
Use AWS Organizations to manage AWS accounts of all units and the share the reserved EC2 instances amongst all units
Which of the following is a recommended way to provide programmatic access to AWS resources?
Use Access Key ID and Secret Access Key to access AWS resources programmatically
A unicorn startup is building an analytics application with support for a speech-based interface. The application will accept speech-based input from users and then convey results via speech. As a Cloud Practitioner, which solution would you recommend for the given use-case?
Use Amazon Transcribe to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech
Which AWS Route 53 routing policy would you use to route traffic to multiple resources and also choose how much traffic is routed to each resource?
Weighted routing
Which of the following statements is INCORRECT about AWS Auto Scaling?
You can automatically deploy AWS Shield when a DDoS attack is detected
A company wants to move to AWS cloud and release new features with quick iterations by utilizing relevant AWS services whenever required. Which of the following characteristics of AWS Cloud does it want to leverage?
agility "Agility" refers to the ability to rapidly develop, test and launch software applications that drive business growth
A company wants to have control over creating and using its own keys for encryption on AWS services. Which of the following can be used for this use-case?
customer managed key (CMK)
A big data analytics company is moving its IT infrastructure from an on-premises data center to AWS Cloud. The company has some server-bound software licenses that it wants to use on AWS. As a Cloud Practitioner, which of the following EC2 instance types would you recommend to the company?
dedicated Host