Practice exam 2 Flashcards

1
Q

A global company with a large number of AWS accounts is seeking a way in which they can centrally manage billing and security policies across all accounts. Which AWS Service will assist them in meeting these goals?

A. AWS Organizations.
B. AWS Trusted Advisor.
C. IAM User Groups.
D. AWS Config.

A

A. AWS Organizations.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which service provides object-level storage in AWS?

A. Amazon EBS.
B. Amazon Instance Store.
C. Amazon EFS.
D. Amazon S3.

A

D. Amazon S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

A company is concerned that they are spending money on underutilized compute resources in AWS. Which AWS feature will help ensure that their applications are automatically adding/removing EC2 compute capacity to closely match the required demand?

A. AWS Elastic Load Balancer.
B. AWS Budgets.
C. AWS Auto Scaling.
D. AWS Cost Explorer

A

C. AWS Auto Scaling.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Which S3 storage class is best for data with unpredictable access patterns?

A. Amazon S3 Intelligent-Tiering.
B. Amazon S3 Glacier Flexible Retrieval.
C. Amazon S3 Standard.
D. Amazon S3 Standard-Infrequent Access.

A

A. Amazon S3 Intelligent-Tiering.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is the AWS database service that allows you to upload data structured in key-value format?

A. Amazon DynamoDB.
B. Amazon Aurora.
C. Amazon Redshift.
D. Amazon RDS.

A

A. Amazon DynamoDB.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which of the following is NOT correct regarding Amazon EC2 On-demand instances?

A. You have to pay a start-up fee when launching a new instance for the first time.
B. The on-demand instances follow the AWS pay-as-you-go pricing model.
C. With on-demand instances, no longer-term commitments or upfront payments are needed.
D. When using on-demand Linux instances, you are charged per second based on an hourly rate.

A

A. You have to pay a start-up fee when launching a new instance for the first time.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

A company has moved to AWS recently. Which of the following AWS Services will help ensure that they have the proper security settings? (Choose TWO)

A. AWS Trusted Advisor.
B. Amazon Inspector.
C. Amazon SNS.
D. Amazon CloudWatch.
E. Concierge Support Team.

A

A. AWS Trusted Advisor.
B. Amazon Inspector.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the AWS feature that provides an additional level of security above the default authentication mechanism of usernames and passwords?

A. Encrypted keys.
B. Email verification.
C. AWS KMS.
D. AWS MFA.

A

D. AWS MFA.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

A company is introducing a new product to their customers, and is expecting a surge in traffic to their web application. As part of their Enterprise Support plan, which of the following provides the company with architectural and scaling guidance?

A. AWS Knowledge Center.
B. AWS Health Dashboard.
C. Infrastructure Event Management.
D. AWS Support Concierge Service.

A

C. Infrastructure Event Management.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

You work as an on-premises MySQL DBA. The work of database configuration, backups, patching, and DR can be time-consuming and repetitive. Your company has decided to migrate to the AWS Cloud. Which of the following can help save time on database maintenance so you can focus on data architecture and performance?

A. Amazon RDS.
B. Amazon Redshift.
C. Amazon DynamoDB.
D. Amazon CloudWatch.

A

A. Amazon RDS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which of the below is a best-practice when designing solutions on AWS?

A. Invest heavily in architecting your environment, as it is not easy to change your design later.
B. Use AWS reservations to reduce costs when testing your production environment.
C. Automate wherever possible to make architectural (© ) experimentation easier.
D. Provision a large compute capacity to handle any spikes in load

A

C. Automate wherever possible to make architectural (© ) experimentation easier.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

According to the AWS Acceptable Use Policy, which of the following statements is true regarding penetration testing of EC2 instances?

A. Penetration testing is not allowed in AWS.
B. Penetration testing is performed automatically by AWS to determine vulnerabilities in your AWS infrastructure.
C. Penetration testing can be performed by the customer on their own instances without prior authorization from AWS.
D. The AWS customers are only allowed to perform penetration testing on services managed by AWS.

A

C. Penetration testing can be performed by the customer on their own instances without prior authorization from AWS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which service is used to ensure that messages between software components are not lost if one or more components fail?

A. Amazon SQS.
B. Amazon SES.
C. AWS Direct Connect.
D. Amazon Connect.

A

A. Amazon SQS.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

The principle “design for failure and nothing will fail” is very important when designing your AWS Cloud architecture. Which of the following would help adhere to this principle? (Choose TWO)

A. Multi-factor authentication.
B. Availability Zones.
C. Elastic Load Balancing.
D. Penetration testing.
E. Vertical Scaling.

A

B. Availability Zones.
C. Elastic Load Balancing.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What is the AWS service that provides a virtual network dedicated to your AWS account?

A. AWS VPN.
B. AWS Subnets.
C. AWS Dedicated Hosts.
D. Amazon VPC.

A

D. Amazon VPC.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

According to the AWS Shared responsibility model, which of the following are the responsibility of the customer? (Choose TWO)

A. Managing environmental events of AWS data centers.
B. Protecting the confidentiality of data in transit in Amazon S3.
C. Controlling physical access to AWS Regions.
D. Ensuring that the underlying EC2 host is configured properly.
E. Patching applications installed on Amazon EC2.

A

B. Protecting the confidentiality of data in transit in Amazon S3.
E. Patching applications installed on Amazon EC2.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which of the following AWS services can be used as a compute resource? (Choose TWO)

A. Amazon VPC.
B. Amazon CloudWatch.
C. Amazon S3.
D. Amazon EC2.
E. AWS Lambda.

A

D. Amazon EC2.
E. AWS Lambda.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Your company is designing a new application that will store and retrieve photos and videos. Which of the following services should you recommend as the underlying storage mechanism?

A. Amazon EBS.
B. Amazon SQS.
C. Amazon S3.
D. Amazon Instance store.

A

C. Amazon S3.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which of the following is equivalent to a user name and password and is used to authenticate your programmatic access to AWS services and APIs?

A. Instance Password.
B. Key pairs.
C. Access Keys.
D. MFA.

A

C. Access Keys.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What does Amazon ElastiCache provide?

A. In-memory caching for read-heavy applications.
B. An Ehcache compatible in-memory data store.
C. An online software store that allows Customers to launch pre-configured software with just few clicks.
D. A domain name system in the cloud.

A

A. In-memory caching for read-heavy applications.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the AWS service that enables you to manage all of your AWS accounts from a single master account?

A. AWS WAF.
B. AWS Trusted Advisor.
C. AWS Organizations.
D. Amazon Config.

A

C. AWS Organizations.

22
Q

Which of the following EC2 instance purchasing options supports the Bring Your Own License (BYOL) model for almost every BYOL scenario?

A. Dedicated Instances.
B. Dedicated Hosts.
C. On-demand Instances.
D. Reserved Instances.

A

B. Dedicated Hosts.

23
Q

Which of the following is one of the benefits of moving infrastructure from an on-premises data center to AWS?

A. Free support for all enterprise customers.
B. Automatic data protection.
C. Reduced Capital Expenditure (CapEx).
D. AWS holds responsibility for managing customer applications.

A

C. Reduced Capital Expenditure (CapEx).

24
Q

Which of the following are important design principles you should adopt when designing systems on AWS? (Choose TWO)

A. Always use Global Services in your architecture rather than Regional Services.
B. Always choose to pay as you go.
C. Treat servers as fixed resources.
D. Automate wherever possible.
E. Remove single points of failure.

A

D. Automate wherever possible.
E. Remove single points of failure.

25
Q

Which AWS Service can be used to establish a dedicated, private network connection between AWS and your datacenter?

A. AWS Direct Connect.
B. Amazon CloudFront.
C. AWS Snowball.
D. Amazon Route 53.

A

A. AWS Direct Connect.

26
Q

You are working on two projects that require completely different network configurations. Which AWS service or feature will allow you to isolate resources and network configurations?

A. Internet gateways.
B. Virtual Private Cloud.
C. Security Groups.
D. Amazon CloudFront.

A

B. Virtual Private Cloud.

27
Q

Which of the following services can help protect your web applications from SQL injection and other vulnerabilities in your application code?

A. Amazon Cognito.
B. AWS IAM.
C. Amazon Aurora.
D. AWS WAF.

A

D. AWS WAF.

28
Q

An organization needs to analyze and process a large number of data sets. Which AWS service should they use?

A. Amazon EMR.
B. Amazon MQ.
C. Amazon SNS.
D. Amazon SQS.

A

A. Amazon EMR.

29
Q

Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose TWO)

A. Monitoring network performance.
B. Installing software on EC2 instances.
C. Creating hypervisors.
D. Configuring Access Control Lists (ACLs).
E. Hardware maintenance.

A

C. Creating hypervisors.
E. Hardware maintenance.

30
Q

What is the AWS service that provides you the highest level of control over the underlying virtual infrastructure?

A. Amazon Redshift.
B. Amazon DynamoDB.
C. Amazon EC2.
D. Amazon RDS.

A

C. Amazon EC2.

31
Q

What are the default security credentials that are required to access the AWS management console for an IAM user account?

A. MFA.
B. Security tokens.
C. A user name and password.
D. Access keys.

A

C. A user name and password.

32
Q

In your on-premises environment, you can create as many virtual servers as you need from a single template. What can you use to perform the same in AWS?

A. IAM.
B. An internet gateway.
C. EBS Snapshot.
D. AMI.

A

D. AMI.

33
Q

What are two advantages of using Cloud Computing over using traditional data centers? (Choose TWO)

A. Reserved Compute capacity.
B. Eliminating Single Points of Failure (SPOFs).
C. Distributed infrastructure.
D. Virtualized compute resources.
E. Dedicated hosting.

A

C. Distributed infrastructure.
D. Virtualized compute resources.

34
Q

Which of the following aspects of security are managed by AWS? (Choose TWO)

A. Encryption of EBS volumes.
B. VPC security.
C. Access permissions.
D. Hardware patching.
E. Securing global physical infrastructure.

A

D. Hardware patching.
E. Securing global physical infrastructure.

35
Q

Which statement best describes the operational excellence pillar of the AWS Well-Architected Framework?

A. The ability of a system to recover gracefully from failure.
B. The efficient use of computing resources to meet requirements.
C. The ability to monitor systems and improve supporting processes and procedures.
D. The ability to manage datacenter operations more efficiently.

A

C. The ability to monitor systems and improve supporting processes and procedures.

36
Q

AWS has created a large number of Edge Locations as part of its Global Infrastructure. Which of the following is NOT a benefit of using Edge Locations?

A. Edge locations are used by CloudFront to cache the most recent responses.
B. Edge locations are used by CloudFront to improve your end users’ experience when uploading files.
C. Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency.
D. Edge locations are used by CloudFront to distribute content to global users with low latency.

A

C. Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency.

37
Q

What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment? (Choose TWO)

A. AWS CloudTrail.
B. Amazon Comprehend.
C. AWS Transit Gateway.
D. AWS X-Ray.
E. AWS Config.

A

A. AWS CloudTrail.
E. AWS Config.

38
Q

Which of the following services allows you to run containerized applications on a cluster of EC2 instances?

A. Amazon ECS.
B. AWS Data Pipeline.
C. AWS Cloud9.
D. AWS Personal Health Dashboard.

A

A. Amazon ECS.

39
Q

Which of the following services will help businesses ensure compliance in AWS?

A. CloudFront.
B. CloudEndure Migration.
C. CloudWatch.
D. CloudTrail.

A

D. CloudTrail.

40
Q

Which of the following procedures will help reduce your Amazon S3 costs?

A. Use the Import/Export feature to move old files automatically to Amazon Glacier.
B. Use the right combination of storage classes based on different use cases.
C. Pick the right Availability Zone for your S3 bucket.
D. Move all the data stored in S3 standard to EBS.

A

B. Use the right combination of storage classes based on different use cases.

41
Q

What are the AWS services/features that can help you maintain a highly available and fault-tolerant architecture in AWS? (Choose TWO)

A. AWS Direct Connect.
B. Amazon EC2 Auto Scaling.
C. Elastic Load Balancer.
D. CloudFormation.
E. Network ACLs.

A

B. Amazon EC2 Auto Scaling.
C. Elastic Load Balancer.

42
Q

Which of the following activities may help reduce your AWS monthly costs?

A. Enabling Amazon EC2 Auto Scaling for all of your workloads.
B. Using the AWS Network Load Balancer (NLB) to load balance the incoming HTTP requests.
C. Removing all of your Cost Allocation Tags.
D. Deploying your AWS resources across multiple Availability Zones.

A

A. Enabling Amazon EC2 Auto Scaling for all of your workloads.

43
Q

What is the AWS service/feature that takes advantage of Amazon CloudFront’s globally distributed edge locations to transfer files to S3 with higher upload speeds?

A. S3 Transfer Acceleration.
B. AWS WAF.
C. AWS Snowmobile.
D. AWS Snowball.

A

A. S3 Transfer Acceleration.

44
Q

Which of the following AWS security features is associated with an EC2 instance and functions to filter incoming traffic requests?

A. AWS X-Ray.
B. Network ACL.
C. Security Groups.
D. VPC Flow logs.

A

C. Security Groups.

45
Q

Which AWS services can be used to improve the performance of a global application and reduce latency for its users? (Choose TWO)

A. AWS KMS.
B. AWS Global accelerator.
C. AWS Direct Connect.
D. AWS Glue.
E. Amazon CloudFront.

A

B. AWS Global accelerator.
E. Amazon CloudFront.

46
Q

Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities? (Choose TWO)

A. Building the relational database schema.
B. Performing backups.
C. Managing the database settings.
D. Patching the database software.
E. Installing the database software.

A

A. Building the relational database schema.
C. Managing the database settings.

47
Q

A company has a large amount of structured data stored in their on-premises data center. They are planning to migrate all the data to AWS, what is the most appropriate AWS database option?

A. Amazon DynamoDB.
B. Amazon SNS.
C. Amazon RDS.
D. Amazon ElastiCache.

A

C. Amazon RDS

48
Q

A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company?

A. APN Consulting Partners.
B. AWS TAM.
C. APN Technology Partners.
D. AWS Professional Services.

A

A. APN Consulting Partners.

49
Q

What is the AWS serverless service that allows you to run your applications without any administrative burden?

A. Amazon LightSail.
B. AWS Lambda.
C. Amazon RDS instances.
D. Amazon EC2 instances.

A

B. AWS Lambda.

50
Q

Jessica is managing an e-commerce web application in AWS. The application is hosted on six EC2 instances. One day, three of the instances crashed; but none of her customers were affected. What has Jessica done correctly in this scenario?

A. She has properly built an elastic system.
B. She has properly built a fault tolerant system.
C. She has properly built an encrypted system.
D. She has properly built a scalable system.

A

B. She has properly built a fault tolerant system.