Cloud Practitioner Practice Exam 6

​Your company requires a response time of less than 15 minutes from support interactions about their business-critical systems that are hosted on AWS if those systems go down. Which AWS Support Plan should this company use?

AWS Enterprise support

Which AWS Service is used to manage the keys used to encrypt customer data?

AWS KMS

What are the advantages of using Auto Scaling Groups for EC2 instances?

Auto Scaling Groups scales EC2 instances in multiple Availability Zones to increase application availability and fault tolerance

Which features are included in the AWS Business Support Plan? (Choose TWO)

1. 24x7 access to customer service 2. Access to the Infrastructure Event Management (IEM) feature for additional fee

Which of the following can be used to enable the Virtual Multi-Factor Authentication? (Choose TWO)

1. AWS Identity and Access Management (IAM) 2. AWS CLI

​ Which of the following AWS offerings are serverless services? (Choose TWO)

1. AWS Lambda 2. Amazon DynamoDB

Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)? (Choose TWO)

1. AWS SDKs 2. AWS CLI

Which of the following are examples of AWS-managed databases? (Choose two)

1. Amazon DocumentDB 2. Amazon RDS for MySQL AWS-managed databases include: Amazon RDS ( Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, and SQL Server), Amazon DocumentDB, Amazon Redshift, and Amazon DynamoDB.

A customer is planning to migrate their Microsoft SQL Server databases to AWS. Which AWS Services can the customer use to run their Microsoft SQL Server database on AWS? (Choose TWO)

1. Amazon Elastic Compute Cloud 2. Amazon RDS

Which of the following are examples of the customer's responsibility to implement "security in the cloud"? (Choose TWO)

1. Building a schema for an application 2. ​ File system encryption

What should you do if you see resources, which you don't remember creating, in the AWS Management Console? (Choose TWO)

1. Change your AWS root account password and the passwords of any IAM users 2. Open an investigation and delete any potentially compromised IAM users

What does AWS offer to protect your data? (Choose TWO)

1. Data Encryption 2. Access Control

Which services does AWS offer for free? (Choose TWO)

1. Elastic Beanstalk 2. AWS IAM

Which of the following are advantages of using AWS as a cloud computing provider? (Choose two)

1. Eliminates the need to guess on infrastructure capacity needs 2. Enables customers to trade their capital expenses for operational expenses

What are the capabilities of AWS X-Ray? (Choose TWO)

1. Facilitates tracking of user requests to identify application issues 2. Helps improve application performance

​ Which of the following are types of AWS Identity and Access Management (IAM) identities? (Choose TWO)

1. IAM roles 2. IAM users

Which of the following should be taken into account when performing a TCO analysis regarding the costs of running an application on AWS VS on-premises? (Choose TWO)

1. Labor and IT costs 2. Cooling and power consumption

Which of the following are true regarding the languages that are supported on AWS Lambda? (Choose TWO)

1. Lambda can support any programming language using an API 2. Lambda natively supports a number of programming languages such as ​Node.js, Python, and Java

Which of the following factors should be considered when determining the region in which AWS Resources will be deployed? (Choose TWO)

1. data sovereignty 2. cost

Which of the following is NOT a factor when estimating the costs of Amazon EC2? (Choose TWO)

1. number of hosted zones 2. number of security groups

An AWS customer has used one Amazon Linux instance for 2 hours, 5 minutes and 9 seconds, and one Windows instance for 4 hours, 23 minutes and 7 seconds. How much time will the customer be billed for?

2 hours, 5 minutes and 9 seconds for the Linux instance and 5 hours for the Windows instance

Which AWS service enables you to quickly purchase and deploy SSL/TLS certificates?

AWS ACM AWS Certificate Manager (AWS ACM) is a service that lets you easily provision, manage, and deploy public and private Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificates for use with AWS services and your internal connected resources.

There is a requirement to grant a DevOps team full administrative access to all resources in an AWS account. Who can grant them these permissions?

AWS Account owner

Which AWS Service allows customers to download AWS SOC & PCI reports?

AWS Artifact

Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects?

AWS CloudFormation

An external auditor is requesting a log of all accesses to the AWS resources in the company's account. Which of the following services will provide the auditor with the requested information?

AWS CloudTrail

A company is seeking to deploy an existing .NET application onto AWS as quickly as possible. Which AWS Service should the customer use to achieve this goal?

AWS Elastic Beanstalk

​ Which AWS Service provides integration with Chef to automate the configuration of EC2 instances?

AWS OpsWorks

A global company with a large number of AWS accounts is seeking a way in which they can centrally manage billing and security policies across all accounts. Which AWS Service will assist them in meeting these goals?

AWS Organizations

Which AWS Group assists customers in achieving their desired business outcomes?

AWS Professional services The AWS Professional Services organization is a global team of experts that helps customers realize their desired business outcomes when using AWS.

A company is planning to use Amazon S3 and Amazon CloudFront to distribute its video courses globally. What tool can the company use to estimate the costs of these services?

AWS Simple Monthly calculator the AWS Simple Monthly Calculator helps you estimate your monthly AWS bill more efficiently. The calculator can be used to determine your best and worst case scenarios and identify areas of development to reduce your monthly costs. T

​Which AWS Service helps enterprises extend their on-premises storage to AWS in a cost-effective manner?

AWS Storage Gateway AWS Storage Gateway is a hybrid storage service that enables on-premises applications to seamlessly use AWS cloud storage.

​ What is the AWS Support feature that allows customers to manage support cases programmatically?

AWS Support API The AWS Support API provides programmatic access to AWS Support Center features to create, manage, and close support cases, and operationally manage Trusted Advisor check requests and status. AWS provides access to AWS Support API for AWS Support customers who have a Business or Enterprise support plan.

Which of the following services can be used to monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront?

AWS WAF

The TCO gap between AWS infrastructure and traditional infrastructure has widened over the recent years. Which of the following could be the reason for that?

AWS continues to lower the cost of cloud computing for its customers

​ You decide to buy a reserved instance for a term of one year. Which option provides the largest total discount?

All upfront reservation The general rule is: "the more you spend upfront, the more discounts you get."

Which of the below options is true of Amazon Cloud Directory?

Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions Amazon Cloud Directory is a cloud-native, highly scalable, high-performance directory service that provides web-based directories to make it easy for you to organize and manage all your application resources such as users, groups, locations, devices, and policies, and the rich relationships between them.

A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS Service should the company use for this purpose?

Amazon Cognito

Which AWS Service offers a filesystem that can be mounted concurrently from multiple EC2 instances?

Amazon Elastic File System

A company is developing an application that will leverage facial recognition to automate photo tagging. Which AWS Service should the company use for facial recognition?

Amazon Rekognition

​ Which AWS Service can perform health checks on Amazon EC2 instances?

Amazon Route53

A customer is seeking to store objects in their AWS environment and to make those objects downloadable over the internet. Which AWS Service can be used to accomplish this?

Amazon S3

Which AWS Service offers volume discounts based on usage?

Amazon S3

A hospital needs to store medical records for a minimum period of 10 years. The records being stored will only need to be recalled if there is a legal or audit need, which is expected to be extremely infrequent. Which AWS Service offers the most cost-effective method for storing the records?

Amazon S3 Glacier

An organization has a legacy application designed using monolithic-based architecture. Which AWS Service can be used to decouple the components of the application?

Amazon SQS

A company is building an online cloud storage platform. They need a storage service that can scale capacity automatically, while minimizing cost. Which AWS storage service should the company use to meet these requirements?

Amazon Simple Storage Service (S3)

A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly?

Application Load Balancer (ALB)

Which of the below options is a best practice for making your application on AWS highly available?

Deploy the application to at least two Availability Zones

A company's AWS workflow requires that it periodically perform large-scale image and video processing jobs. The customer is seeking to minimize cost and has stated that the amount of time it takes to process these jobs is not critical, but that cost minimization is the most important factor in designing the solution. Which EC2 instance class is best suited for this processing?

EC2 Spot Instances

Which AWS Support Plan gives customers access to a "Well-Architected Review" for business critical workloads?

Enterprise Support

A company is using EC2 Instances to run their e-commerce site on the AWS platform. If the site becomes unavailable, the company will lose a significant amount of money for each minute the site is unavailable. Which design principle should the company use to minimize the risk of an outage?

Fault Tolerance

​ What is the name of the DynamoDB replication capability that provides fast read \ write performance for globally deployed applications?

Global Tables

Which IAM entity can best be used to grant temporary access to your AWS resources?

IAM Roles

​One of the major advantages of using AWS is cost savings. Which of the below options is an example of the cost savings offered by AWS?

Per second instance billing

A company is migrating a web application to AWS. The application's compute capacity is continually utilized throughout the year. Which of the below options offers the company the most cost-effective solution?

Reserved Instances

According to best practices, which of the below options is best suited for processing a large number of binary files?

Running EC2 instances in parallel

You have just hired a skilled sys-admin to join your team. As usual, you have created a new IAM user for him to interact with AWS services. On his first day, you ask him to create snapshots of all existing Amazon EBS volumes and save them in a new Amazon S3 bucket. However, the new member reports back that he is unable to create neither EBS snapshots nor S3 buckets. What might prevent him from doing this simple task?

There is a non-explicit deny to all new users

Which of the following is a type of MFA device that customers can use to protect their AWS resources?

U2F security key AWS supports several MFA device options including Virtual MFA devices, Universal 2nd Factor (U2F) security key, and Hardware MFA devices.

A key practice when designing solutions on AWS is to minimize dependencies between components so that the failure of a single component does not impact other components. What is this practice called?

loosely coupling

Which of the following Amazon RDS features facilitates offloading of database read activity?

read replicas

A company is seeking to better secure its AWS account from unauthorized access. Which of the below options can the customer use to achieve this goal?

require Multi-Factor authentication (MFA) for all IAM user access

Which of the following approaches will help you eliminate human error and automate the process of creating and updating your AWS environment?

use code to provision and operate your AWS Infrastructure

How does AWS notify customers about security and privacy events pertaining to AWS services?

using security bulletins

Which of the below options are use cases of the Amazon Route 53 service? (Choose TWO)

​1. DNS configuration and management 2. Domain Registration

Which of the following is true regarding the AWS availability zones and edge locations?

​An AWS Availability Zone is an isolated location within an AWS Region, however edge locations are located in multiple cities worldwide