Extra practice exam 2
Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement?
AWS CloudHSM
An organization has a complex IT architecture involving a lot of system dependencies and it wants to track the history of changes to each resource. Which AWS service will help the organization track the history of configuration changes for all the resources?
AWS Config
Which of the following solutions can you use to connect your on-premises network with AWS Cloud (Select two)?
AWS Direct Connect AWS Virtual Private Network (VPN
A developer has written a simple web application in PHP and he wants to just upload his code to AWS Cloud and have AWS handle the deployment automatically but still wants access to the underlying operating system for further enhancements. As a Cloud Practioner, which of the following AWS services would you recommend for this use-case?
AWS Elastic Beanstalk
Which of the following is correct about AWS Developer Support plan?
Allows one contact to open unlimited cases
A data analytics company stores its data on Amazon Simple Storage Service (Amazon S3) and wants to do SQL based analysis on this data with minimum effort. As a Cloud Practitioner, which of the following AWS services will you suggest for this use case?
Amazon Athena
An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case?
Amazon CloudWatch Lambda
The engineering team at an IT company wants to monitor the CPU utilization for its fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances and send an email to the administrator if the utilization exceeds 80%. As a Cloud Practitioner, which AWS services would you recommend to build this solution? (Select two)
Amazon CloudWatch SNS
Which of the following AWS services allows a database to have flexible schema and supports document data models?
Amazon DynamoDB
An e-commerce company wants to assess its applications deployed on Amazon Elastic Compute Cloud (Amazon EC2) instances for vulnerabilities and deviations from AWS best practices. Which AWS service can be used to facilitate this?
Amazon Inspector
A company is using a message broker service on its on-premises application and wants to move this messaging functionality to AWS Cloud. Which of the following AWS services is the right choice to move the existing functionality easily?
Amazon MQ
What is the primary benefit of deploying an Amazon RDS Multi-AZ database with one standby?
Amazon RDS Multi-AZ enhances database availability
Which of the following AWS services comes under the Software as a Service (SaaS) Cloud Computing Type?
Amazon Rekognition
Which of the following is the correct statement regarding the AWS Storage services?
Amazon Simple Storage Service (Amazon S3) is object based storage, Amazon Elastic Block Store (Amazon EBS) is block based storage and Amazon Elastic File System (Amazon EFS) is file based storage
Which of the following are examples of Horizontal Scalability (aka Elasticity)? (Select two)
Elastic Load Balancing (ELB) Read Replicas in Amazon Relational Database Service (Amazon RDS)
As per the AWS Shared Responsibility Model, which of the following is a responsibility of the customer from a security and compliance point of view?
Managing patches of the guest operating system on Amazon Elastic Compute Cloud (Amazon EC2)
A startup is looking for 24x7 phone based technical support for its AWS account. Which of the following is the MOST cost-effective AWS support plan for this use-case?
AWS Business Support
Which AWS service would you use to send alerts when the costs for your AWS account exceed your budgeted amount?
AWS Budgets
Which policy describes prohibited uses of the web services offered by Amazon Web Services?
AWS Acceptable Use Policy
Which AWS technology/service helps you to scale your resources to match supply with demand while still keeping your cloud solution cost-effective?
AWS Auto Scaling
Which AWS support plan provides access to a designated Technical Account Manager (TAM)?
AWS Enterprise Support
Which AWS service helps with global application availability and performance using the AWS global network?
AWS Global Accelerator
Which service gives a personalized view of the status of the AWS services that are part of your Cloud architecture so that you can quickly assess the impact on your business when AWS service(s) are experiencing issues?
AWS Health - Your Account Health Dashboard
Which AWS service publishes up-to-the-minute information on the general status and availability of all AWS services in all the Regions of AWS Cloud?
AWS Health Dashboard - service health
Which of the following AWS services are global in scope? (Select two)
AWS Identity and Access Management (AWS IAM) Amazon CloudFront
Which of the following AWS services are always free to use (Select two)?
AWS Identity and Access Management (AWS IAM)AWS Auto Scaling
Which of the following AWS services is essential for implementing security of resources in AWS Cloud?
AWS Identity and Access Management (IAM)
Which of the following statements are true about AWS Lambda? (Select two)
AWS Lambda lets you run code without provisioning or managing servers You pay for the compute time you consume for AWS Lambda
A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations. Which AWS technology/service will provide the necessary low-latency access to the end-users?
AWS Local Zones
Which of the following options can be used to access and manage all AWS services (Select three)?
AWS Management Console, AWS CLI, SDK
Which AWS service enables users to find, buy, and immediately start using software solutions in their AWS environment?
AWS Marketplace
A retail company has multiple AWS accounts for each of its departments. Which of the following AWS services can be used to set up consolidated billing and a single payment method for these AWS accounts?
AWS Organizations
An organization is planning to move its infrastructure from the on-premises datacenter to AWS Cloud. As a Cloud Practioner, which options would you recommend so that the organization can identify the right AWS services to build solutions on AWS Cloud (Select two)?
AWS Service Catalog AWS Partner Network (APN)
Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select three)
AWS Shield AWS Web Application Firewall (AWS WAF) Amazon CloudFront with Amazon Route 53
A company's flagship application runs on a fleet of Amazon Elastic Compute Cloud (Amazon EC2) instances. As per the new policies, the system administrators are looking for the best way to provide secure shell access to Amazon Elastic Compute Cloud (Amazon EC2) instances without opening new ports or using public IP addresses. Which tool/service will help you achieve this requirement?
AWS Systems Manager Session Manager
Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two)
AWS Trusted Advisor Service Quotas
A social media company wants to protect its web application from common web exploits such as SQL injection and cross-site scripting. Which of the following AWS services can be used to address this use-case?
AWS Web Application Firewall (AWS WAF)
An online gaming company wants to block users from certain geographies from accessing its content. Which AWS service can be used to accomplish this task?
AWS Web Application Firewall (AWS WAF)
Which AWS service can be used to provision resources to run big data workloads on Hadoop clusters?
Amazon EMR
Which AWS compute service provides the EASIEST way to access resizable compute capacity in the cloud with support for per-second billing and access to the underlying OS?
Amazon Elastic Compute Cloud (Amazon EC2)
AWS Compute Optimizer delivers recommendations for which of the following AWS resources? (Select two)
Amazon Elastic Compute Cloud (Amazon EC2) instances, Amazon EC2 Auto Scaling groups Amazon Elastic Block Store (Amazon EBS), AWS Lambda functions
Which AWS service can be used to store, manage, and deploy Docker container images?
Amazon Elastic Container Registry (Amazon ECR)
Which AWS service should be used when you want to run container applications, but want to avoid the operational overhead of scaling, patching, securing, and managing servers?
Amazon Elastic Container Service (Amazon ECS) - Fargate launch type
A fleet of Amazon EC2 instances spread across different Availability Zones (AZ) needs to access, edit and share file-based data stored centrally on a system. As a Cloud Practitioner, which AWS service would you recommend for this use-case?
Amazon Elastic File System (Amazon EFS)
A company wants a fully managed, flexible, and scalable file storage system, with low latency access, for its Windows-based applications. Which AWS service is the right choice for the company?
Amazon FSx for Windows File Server
A customer has created a VPC and a subnet within AWS Cloud. Which of the following statements is correct?
An Amazon Virtual Private Cloud (Amazon VPC) spans all of the Availability Zones (AZ) in the Region whereas a subnet spans only one Availability Zone (AZ) in the Region
What are the fundamental drivers of cost with AWS Cloud?
Compute, Storage and Outbound Data Transfer
According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?
Database encryption
As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?
Edge Location Management
Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them?
Elasticity
Multi-AZ deployment is an example of which of the following?
High Availability
An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model?
Hybrid deployment
Access Key ID and Secret Access Key are tied to which of the following AWS Identity and Access Management (AWS IAM) entities?
IAM User
Which Amazon Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience?
Latency-based routing
Which Amazon Elastic Compute Cloud (Amazon EC2) pricing model is the most cost-effective and flexible with no requirement for a long term resource commitment or upfront payment but still guarantees that instance would not be interrupted?
On-Demand Instance
Which of the following statement is correct regarding the AWS pricing policy for data transfer charges into or out of an AWS Region?
Only outbound data transfer is charged
What foundational capability under the operations perspective is part of the AWS Cloud Adoption Framework (AWS CAF)?
Performance and capacity management
Which of the following use-cases is NOT supported by Amazon Rekognition?
Quickly resize photos to create thumbnails
The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two)
Reliability Cost Optimization
Which of the following statements are correct about the AWS root user account? (Select two)
Root user access credentials are the email address and password used to create the AWS account It is highly recommended to enable Multi Factor Authentication (MFA) for root user account
Which of the following statement is correct for a Security Group and a Network Access Control List (Network ACL)?
Security Group acts as a firewall at the instance level whereas Network Access Control List (Network ACL) acts as a firewall at the subnet level
What are the different gateway types supported by AWS Storage Gateway service?
Tape Gateway, File Gateway and Volume Gateway
A photo sharing web application wants to store thumbnails of user-uploaded images on Amazon Simple Storage Service (Amazon S3). The thumbnails are rarely used but need to be immediately accessible from the web application. The thumbnails can be regenerated easily if they are lost. Which is the most cost-effective way to store these thumbnails on Amazon Simple Storage Service (Amazon S3)?
Use Amazon S3 One Zone-Infrequent Access (S3 One Zone-IA) to store the thumbnails
Which of the following statements is INCORRECT about AWS Auto Scaling?
You can automatically deploy AWS Shield when a DDoS attack is detected
Which tool will help you review your workloads against current AWS best practices for cost optimization, security, and performance improvement and then obtain advice to architect them better?
trusted advisor
