AWS CCP 4 Flashcards

1
Q

Which open-source technology allows you to build and deploy distributed applications inside of software containers?

  1. Docker
  2. Jenkins
  3. Puppet
  4. Chef
A
  1. Docker
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Which of the advantages of cloud listed below is most closely addressed by the capabilities of AWS Auto Scaling?

  1. Benefit from massive economies of scale
  2. Stop guessing about capacity
  3. Stop spending money running and maintaining data centers
  4. Go global in minutes
A
  1. Stop guessing about capacity
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What does an organization need to do in Amazon IAM to enable user access to services being launched in new region?

  1. Update the user accounts to allow access from another region
  2. Create new user accounts in the new region
  3. Enable global mode in IAM to provision the required access
  4. Nothing, IAM is global
A
  1. Nothing, IAM is global
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What do Amazon S3 objects consist of? (choose 2)

  1. Key
  2. Userdata
  3. Value
  4. ARN
  5. AMI
A
  1. Key

3. Value

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Which type of EBS volume should you choose for an application that requires 12,000 IOPS from a single volume?

  1. General Purpose SSD
  2. Provisioned IOPS SSD
  3. Throughput Optimized HDD
  4. Cold HDD
A
  1. Provisioned IOPS SSD
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which type of Amazon Route 53 record set should be used to map a zone apex record to an Amazon Elastic Load Balancer?

  1. A
  2. AAAA
  3. CNAME
  4. Alias
A
  1. Alias
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is the most cost-effective Amazon S3 storage tier for data that is not often accessed but requires high durability?

  1. Amazon S3 Standard
  2. Amazon S3 Standard-IA
  3. Amazon S3 One Zone-IA
  4. Amazon Glacier
A
  1. Amazon S3 One Zone-IA
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

Which types of root storage devices are available for Amazon EC2 instances? (choose 2)

  1. EFS file system
  2. EBS volume
  3. S3 Bucket
  4. Instance Store
  5. RAM
A
  1. EBS volume

4. Instance Store

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

Which of the following are supported event sources for AWS Lambda? (choose 2)

  1. Amazon S3
  2. Amazon EC2
  3. Amazon DynamoDB
  4. Amazon RedShift
  5. AWS Direct Connect
A
  1. Amazon S3

3. Amazon DynamoDB

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Which Amazon EC2 pricing option provides significant discounts for fixed term contracts?

  1. Reserved Instances
  2. Dedicated Instances
  3. Dedicated Hosts
  4. Spot Instances
A
  1. Reserved Instances
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Which type of Amazon Route 53 routing policy allows you to specify a numerical value per IP address, totalling 100, that favors addresses with higher values?

  1. Latency based
  2. Failover
  3. Weighted
  4. Geo-location
A
  1. Weighted
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Which statement is correct in relation to the AWS Shared Responsibility Model?

  1. Customers are responsible for security of the cloud
  2. AWS are responsible for encrypting customer data
  3. Customers are responsible for patching storage systems
  4. AWS are responsible for the security of regions and availability zones
A
  1. AWS are responsible for the security of regions and availability zones
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which Amazon RDS deployment type is best used to enable fault tolerance in the event of the failure of an availability zone?

  1. Multiple Availability Zones
  2. Multiple Regions
  3. Read Replicas
  4. Write Replicas
A
  1. Multiple Availability Zones
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Which AWS service lets you add user sign up, sign-in and access control to web and mobile apps?

  1. AWS Directory Service
  2. AWS Cognito
  3. AWS Artifact
  4. AWS CloudHSM
A
  1. AWS Cognito
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Which of the options below are recommendations in the reliability pillar of the well-architected framework? (choose 2)

  1. Test recovery procedures
  2. Manually recover from failure
  3. Scale vertically using big systems
  4. Stop guessing about capacity
  5. Manage change in manual processes
A
  1. Test recovery procedures

4. Stop guessing about capacity

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Which AWS service is a Natural Language Processing (NLP) service that uses machine learning to find insights and relationships in text?

  1. Amazon Transcribe
  2. Amazon Comprehend
  3. Amazon Rekognition
  4. Amazon Sagemaker
A
  1. Amazon Comprehend
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

Which of the following can be assigned to an IAM user? (choose 2)

  1. An access key ID and secret access key
  2. A password for logging into Linux
  3. A password for access to the management console
  4. A key pair
  5. An SSL/TLS certificate
A
  1. An access key ID and secret access key

3. A password for access to the management console

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

Which Amazon namespace is used to uniquely identify AWS resources?

  1. AMI
  2. API
  3. ARN
  4. ACL
A
  1. ARN
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which Amazon EC2 billing option allows gives you low cost, maximum flexibility, no upfront costs or commitment, and you only pay for what you use?

  1. Reserved Instances
  2. Spot Instances
  3. Dedicated Host
  4. On-Demand Instances
A
  1. On-Demand Instances
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

What is the difference between an EBS volume and an Instance store?

  1. EBS volumes are object storage devices whereas Instance store volume are block based
  2. Instance store volumes are ephemeral whereas EBS volumes are persistent storage
  3. Instance store volumes can be used with all EC2 instance types whereas EBS cannot
  4. EBS volumes are file-level storage devices whereas Instance store volumes are object-based
A
  1. Instance store volumes are ephemeral whereas EBS volumes are persistent storage
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Which of the below are valid use cases for using AWS services to implement real-time auditing? (choose 2)

  1. Use Amazon Inspector to monitor for compliance
  2. Use Amazon CloudWatch for monitoring API calls
  3. Use Amazon CloudTrail to monitor application performance 4. Use AWS IAM to store log files
  4. Use AWS Lambda to scan log files
A
  1. Use Amazon Inspector to monitor for compliance

5. Use AWS Lambda to scan log files

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which Compute service should be used for running a Linux operating system upon which you will install custom software?

  1. Amazon ECS
  2. Amazon EC2
  3. AWS Lambda
  4. Amazon EKS
A
  1. Amazon EC2
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What is the scope of an Amazon Virtual Private Cloud (VPC)?

  1. It spans multiple subnets
  2. It spans a single CIDR block
  3. It spans all Availability Zones in all regions
  4. It spans all Availability Zones within a region
A
  1. It spans all Availability Zones within a region
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Which of the below are valid options within the VPC Wizard? (choose 2)

  1. VPC with Two Public Subnets
  2. VPC with Private Subnets
  3. VPC with a Single Public Subnet
  4. VPC with Public and Private Subnets and Hardware VPN Access
  5. VPC with a Private Subnet Only and Software VPN Access
A
  1. VPC with a Single Public Subnet

4. VPC with Public and Private Subnets and Hardware VPN Access

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Which type of AWS Storage Gateway can be used to backup data with popular backup software?

  1. File Gateway
  2. Volume Gateway
  3. Gateway Virtual Tape Library
  4. Backup Gateway
A
  1. Gateway Virtual Tape Library
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

Which type of security control can be used to deny network access from a specific IP address?

  1. Security Group
  2. Network ACL
  3. AWS WAF
  4. AWS Shield
A
  1. Network ACL
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Where can resources be launched when configuring AWS Auto Scaling?

  1. Multiple AZs and multiple regions
  2. Multiple AZs within a region
  3. A single subnet
  4. Multiple VPCs
A
  1. Multiple AZs within a region
28
Q

Which of the following security related activities are AWS customers responsible for? (choose 2)

  1. Installing patches on network devices
  2. Implementing data center access controls
  3. Implementing IAM password policies
  4. Installing patches on Windows operating systems
  5. Secure disposal of faulty disk drives
A
  1. Implementing IAM password policies

4. Installing patches on Windows operating systems

29
Q

In addition to DNS services, what other services does Amazon Route 53 provide? (choose 2)

  1. DHCP
  2. Domain registration
  3. Routing
  4. Traffic flow
  5. Caching
A
  1. Domain registration

4. Traffic flow

30
Q

What pricing models are available for DynamoDB? (choose 2)

  1. On-demand capacity mode
  2. Spot capacity mode
  3. Provisioned capacity mode
  4. Dedicated capacity mode
  5. Reserved capacity mode
A
  1. On-demand capacity mode

3. Provisioned capacity mode

31
Q

Which storage type can be mounted using the NFS protocol to many EC2 instances simultaneously?

  1. Amazon EBS
  2. Amazon Instance Store
  3. Amazon S3
  4. Amazon EFS
A
  1. Amazon EFS
32
Q

What are the fundamental charges for an Amazon EC2 instance? (choose 2)

  1. Compute uptime
  2. Data storage
  3. Basic monitoring
  4. AMI
  5. Private IP address
A
  1. Compute uptime

2. Data storage

33
Q

What are the fundamental charges for Elastic Block Store (EBS) volumes? (choose 2)

  1. The amount of data storage consumed
  2. The amount of data storage provisioned
  3. Provisioned IOPS
  4. Inbound data transfer
  5. Number of snapshots
A
  1. The amount of data storage provisioned

3. Provisioned IOPS

34
Q

Which tool can be used to provide real time guidance on provisioning resources following AWS best practices?

  1. AWS Personal Health Dashboard
  2. AWS Simple Monthly Calculator
  3. AWS Trusted Advisor
  4. AWS Inspector
A
  1. AWS Trusted Advisor
35
Q

What types of monitoring can Amazon CloudWatch be used for? (choose 2)

  1. Application performance
  2. API access
  3. Operational health
  4. Infrastructure 5. Data center
A
  1. Application performance

3. Operational health

36
Q

When using an Elastic Load Balancer, which process checks for connections requests, using a configured protocol and port?

  1. Rule
  2. Listener
  3. Action
  4. Condition
A
  1. Listener
37
Q

Which two types of database engine can be used with Amazon ElastiCache? (choose 2)

  1. Memcached
  2. HANA
  3. Redis
  4. MongoDB
  5. MemSQL
A
  1. Memcached

3. Redis

38
Q

Which AWS service is a data warehouse that uses columnar data storage and is suited to analytic and reporting workloads against very large data sets?

  1. Amazon RDS
  2. Amazon RedShift
  3. Amazon DynamoDB
  4. Amazon Aurora
A
  1. Amazon RedShift
39
Q

What are two components of Amazon S3? (choose 2)

  1. Buckets
  2. Directories
  3. Objects
  4. File systems
  5. Block devices
A
  1. Buckets

3. Objects

40
Q

When using Amazon RDS databases, which items are you charged for? (choose 2)

  1. Inbound data transfer
  2. Multi AZ
  3. Backup up to the DB size
  4. Outbound data transfer
  5. Single AZ
A
  1. Multi AZ

4. Outbound data transfer

41
Q

You need to resolve a domain name to a target domain name for a record that is hosted externally to AWS. Which record type can you configure in Route 53?

  1. Alias
  2. NS
  3. CNAME
  4. SPF
A
  1. CNAME
42
Q

Which feature of AWS IAM enables you to identify unnecessary permissions that have been assigned to users?

  1. Role Advisor
  2. Access Advisor
  3. Permissions Advisor
  4. Group Advisor
A
  1. Access Advisor
43
Q

How can you enable access to AWS accounts using credentials from an on- premise corporate directory?

  1. SSO using Cognito
  2. Federation using IAM
  3. Replication using Simple AD
  4. AWS Organizations
A
  1. Federation using IAM
44
Q

What billing timeframes are available for Amazon EC2 on-demand instances? (choose 2)

  1. Per second
  2. Per minute
  3. Per hour
  4. Per day
  5. Per week
A
  1. Per second

3. Per hour

45
Q

Which service can be used to assign a policy to a group?

  1. AWS IAM
  2. Amazon Cognito
  3. Amazon STS
  4. AWS Shield
A
  1. AWS IAM
46
Q

Which AWS service uses a highly secure hardware storage device to store encryption keys?

  1. AWS WAF
  2. AWS IAM
  3. AWS CloudHSM
  4. Amazon Cloud Directory
A
  1. AWS CloudHSM
47
Q

Using Amazon S3 what method can be used to automatically copy objects from one region to another?

  1. Cross-region synchronization
  2. Cross-zone replication
  3. Cross-region replication
  4. Cross-account replication
A
  1. Cross-region replication
48
Q

An organization has multiple AWS accounts and uses a mixture of on- demand and reserved instances. One account has a considerable amount of unused reserved instances. How can the organization reduce their costs? (choose 2)

  1. Redeem their reserved instances
  2. Use Spot instances instead
  3. Create an AWS Organization configuration linking the accounts
  4. Switch to using placement groups
  5. Setup consolidated billing between the accounts
A
  1. Create an AWS Organization configuration linking the accounts
  2. Setup consolidated billing between the accounts
49
Q

Which type of connection should be used to connect an on-premises data center with the AWS cloud that is high speed, low latency and does not use the Internet?

  1. AWS Managed VPN
  2. VPC Endpoints
  3. Direct Connect
  4. IPSec VPN
A
  1. Direct Connect
50
Q

What are two examples of the advantages of cloud computing? (choose 2)

  1. Trade operating costs for capital costs
  2. Benefit from massive economies of scale
  3. Increase speed and agility
  4. Trade variable expense for capital expense
  5. Secure data centers
A
  1. Benefit from massive economies of scale

3. Increase speed and agility

51
Q

Which AWS service provides a single location to track the progress of application migrations across multiple AWS and partner solutions?

  1. AWS Database Migration Service
  2. AWS Server Migration Service
  3. AWS Migration Hub
  4. AWS Batch
A
  1. AWS Migration Hub
52
Q

Which Amazon EC2 feature provides a static IPv4 public IP address that does not change when the instance is rebooted?

  1. Elastic IP
  2. Dynamic IP
  3. Elastic Network
  4. Static IP
A
  1. Elastic IP
53
Q

Which security service only requires a rule to be created in one direction as it automatically allows return traffic?

  1. VPC Router
  2. Network ACL
  3. Security Group
  4. AWS Shield
A
  1. Security Group
54
Q

Which AWS service allows you to automate the evaluation of recorded configurations against desired configuration?

  1. AWS OpsWorks
  2. AWS Service Catalog
  3. AWS CloudFormation
  4. AWS Config
A
  1. AWS Config
55
Q

Your organization is looking to expand into the cloud for their web presence and development and test environments. Production systems will remain on-premises. What cloud computing model will best suit the organization?

  1. Private
  2. Public
  3. Hybrid
  4. PaaS
A
  1. Hybrid
56
Q

You would like to collect custom metrics from a production application every 1 minute. What type of monitoring should you use?

  1. CloudWatch with detailed monitoring
  2. CloudWatch with basic monitoring
  3. CloudTrail with detailed monitoring
  4. CloudTrail with basic monitoring
A
  1. CloudWatch with detailed monitoring
57
Q

To reduce the price of your Amazon EC2 instances, which term lengths are available for reserved instances?

  1. 1 year
  2. 2 years
  3. 3 years
  4. 4 years
  5. 5 years
A
  1. 1 year

3. 3 years

58
Q

Which of the following is an advantage of cloud computing compared to deploying your own infrastructure on-premise?

  1. Flexibility to choose your own hardware
  2. Ability to choose bespoke infrastructure configurations
  3. Paying only for what you use
  4. Spend using a CAPEX model
A
  1. Paying only for what you use
59
Q

Which team is available to support AWS customers on an Enterprise support plan?

  1. AWS Technical Account Manager
  2. AWS Concierge
  3. AWS Billing and Accounts
  4. AWS Technical Support
A
  1. AWS Concierge
60
Q

What is required to decrypt the Administrator password of a newly launched Amazon EC2 Windows instance?

  1. Key pair
  2. Access key and secret ID
  3. KMS key
  4. IAM role
A
  1. Key pair
61
Q

Which AWS service can be used for testing and interacting with apps for Android, iOS and web apps?

  1. AWS AppSync
  2. AWS Device Farm
  3. AWS Config
  4. AWS CodeDeploy
A
  1. AWS Device Farm
62
Q

How are AWS Lambda functions triggered?

  1. Events
  2. Schedules
  3. Metrics
  4. Counters
A
  1. Events
63
Q

Which of the below are good use cases for a specific Amazon EC2 pricing model? (choose 2)

  1. Spot for consistent load over a long term
  2. On-demand for ad-hoc requirements that cannot be interrupted
  3. Reserved instances for steady state predictable usage
  4. On-demand for regulatory requirements that do not allow multi- tenant virtualization
  5. Reserved instances for applications with flexible start and end times
A
  1. On-demand for ad-hoc requirements that cannot be interrupted
  2. Reserved instances for steady state predictable usage
64
Q

What type of Amazon CloudFront distribution support streaming media files using Adobe Flash Media?

  1. Web distribution
  2. Static website
  3. RTMP distribution
  4. S3 buckets
A
  1. RTMP distribution
65
Q

Which of the below are components that can be configured in the VPC section of the AWS management console? (choose 2)

  1. Subnet
  2. EBS volumes
  3. Elastic Load Balancer
  4. Endpoints
  5. DNS records
A
  1. Subnet

4. Endpoints