AWS Cloud Practioner Flashcards
(125 cards)
1
Q
When storing sensitive company data in Amazon S3, which security best practices should customers follow?
A
Enable S3 server-side encryption on S3 bucket.
2
Q
What benefits does Amazon EC2 provide overusing non-cloud servers? (Select TWO.)
A
- Inexpensive
- Elastic web-scale computing
3
Q
Which tool enables you to visualize your usage patterns over time and to identify your underlying cost drivers?
A
- AWS Cost Explorer
4
Q
AWS Trusted Advisor provides real-time guidance on what characteristics of an AWS account? (Select TWO.)
A
- Security best practices
- Cost optimization
5
Q
Which of the following statements is correct in relation to consolidated billing? (Select TWO.) #2
A
- The paying account is independent and cannot access resources of other accounts.
- One bill is provided per AWS organization
6
Q
Which types of pricing policies does AWS offer? (Select TWO.)
A
- Save when you reserve
- Pay-as-you-go
7
Q
Which Amazon S3 storage classes should be used for storing data for long time periods when immediate access is not required at the LOWEST cost? (Select TWO.)
A
- Amazon S3 Glacier
- Amazon S3 Glacier Deep Archive
8
Q
What method can you use to take a backup of an Amazon EC2 instance using AWS tools?
A
- Take a snapshot to capture the point-in-time state of the instance
9
Q
Which benefit of the AWS Cloud eliminates the need for users to try estimating future infrastructure usage?
A
- Elasticity of the AWS Cloud
10
Q
Which service allows you to automatically expand and shrink your application in response to demand?
A
- Amazon EC2 Auto Scaling
11
Q
Which AWS service is primarily used for software version control?
A
- AWS CodeCommit
12
Q
What benefits are provided by Amazon CloudFront? (Select TWO.) #2
A
- Content is cached at Edge Locations for fast distribution to customers
- Built-in Distributed Denial of Service (DDoS) attack protection
13
Q
Which service can be used to help you to migrate databases to AWS quickly and securely?
A
- AWS Database Migration Service (DMS)
14
Q
A company recently took up an Enterprise-level AWS Support plan and has a question relating to their AWS account. Who is the primary point of contact they should direct the question to?
A
- AWS Concierge Support team
15
Q
Which AWS service can be used to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PC?
A
- Elastic Transcoder
16
Q
A company would like to maximize their potential volume and Reserved Instance discounts across multiple accounts and also apply service control policies on member accounts. Which service or tool can they use to gain these benefits?
A
- AWS Organizations
17
Q
Which feature of Amazon Rekognition can assist with saving time?
A
- Identification of objects in images and videos
18
Q
What is the most cost-effective support plan that should be selected to provide at most a 1-hour response time for a production system failure?
A
- Business
19
Q
Which benefits can an organization achieve by deploying AWS Global Accelerator? (Select TWO.)
A
- Improves the availability of applications on AWS
- Decreased latency to reach applications deployed on AWS
20
Q
What advantages do you get from using the AWS cloud? (Select TWO.) #2
A
- Stop guessing about capacity
- Trade capital expense for variable expense
21
Q
What can you use to quickly connect your office securely to your Amazon VPC?
A
- AWS managed VPN
22
Q
Which of the following is a principle of good AWS Cloud architecture design?
A
- Implement loose coupling
23
Q
Under the AWS shared responsibility model what is the customer responsible for? (Select TWO.)
A
- Configuration of security groups
- Encryption of customer data
24
Q
Which feature of AWS allows you to deploy a new application for which the requirements may change over time?
A
- Elasticity
25
A company plans to deploy a global commercial application on Amazon EC2 instances. The deployment solution should be designed with the highest redundancy and fault tolerance. Based on this situation, how should the EC2 instances be deployed?
- Across multiple Availability Zones in two AWS Regions
26
Which services can be used for asynchronous integration between application components? (Select TWO.)
- Amazon SQS
| - AWS Step Functions
27
Which services are involved in reducing application latency and increasing performance for end users? (Select TWO.)
- Amazon CloudFront
| - Amazon ElastiCache
28
Which AWS service is used to enable multi-factor authentication?
- AWS IAM
29
Which AWS service can an organization use to automate operational tasks on EC2 instances using existing Chef cookbooks?
- AWS OpsWorks
30
What are two ways that moving to an AWS cloud can benefit an organization? (Select TWO.)
- Stop guessing about capacity
| - Increase speed and agility
31
When a customer deploys a database on Amazon RDS, what is the customer responsible for?
- Controlling network access through security groups
32
Under the AWS shared responsibility model, what are the customer's responsibilities? (Select TWO.) #2
- Data integrity Authentication
| - Security of data in transit
33
Which service allows you to run code as functions without needing to provision or manage servers?
- AWS Lambda
34
Which of the following types of recommendation does AWS Trusted Advisor provide? (Select TWO.)
- Cost optimization
| - Performance
35
Which items can be configured from within the VPC management console? (Select TWO.)
- Subnets
| - Security Groups
36
What strategy can assist with allocating metadata to AWS resources for cost tracking and visibility?
- Tagging
37
Which service can be used to track the CPU usage of an EC2 instance?
- Amazon Cloudwatch
38
Which AWS services can be used to connect the AWS Cloud and on-premises resources? (Select TWO.)
- AWS Direct Connect
| - AWS Managed VPN
39
An AWS customer wishes to purchase unused Amazon EC2 capacity at a discounted rate. Which pricing plan should they choose?
- Spot Instances
40
Under the shared responsibility model, what are examples of shared controls? (Select TWO.)
- Configuration Management
| - Patch Management
41
Which service supports the resolution of public domain names to IP addresses or AWS resources?
- Amazon Route 53
42
Which AWS storage technology can be considered a “virtual hard disk in the cloud”?
- Amazon Elastic Block Storage (EBS) volume
43
Which service can be used for building and integrating loosely-coupled, distributed applications?
- Amazon SNS
44
Which service records API activity on your account and delivers log files to an Amazon S3 bucket?
- AWS CloudTrail
45
Which AWS service allows you to connect to storage from on-premise servers using standard file protocols?
- Amazon EFS
46
What advantages does deploying Amazon CloudFront provide? (Select TWO.)
- Reduced latency
| - Improved performance for end users
47
A company stores copies of backups on Amazon S3 and requires rapid access but low resiliency. Which storage class is optimized for these requirements?
- Amazon S3 One Zone-Infrequent Access
48
What is the scope of a VPC within a region?
- Spans all Availability Zones within the region
49
For which services does Amazon not charge customers? (Select TWO.)
theres two of these
- AWS CloudFormation
| - Amazon VPC
50
Which AWS service can be used to generate encryption keys that can be used to encrypt data? (Select TWO.)
- AWS CloudHSM
| - AWS Key Management Service (AWS KMS)
51
Which AWS service can you use to install a third-party database?
- Amazon EC2
52
Which feature can you use to grant read/write access to an Amazon S3 bucket?
- IAM Policy
53
Which service can you use to provision a preconfigured server with little to no AWS experience?
- Amazon LightSail
54
Which storage service allows you to connect multiple EC2 instances concurrently using file-level protocols?
- Amazon EFS
55
What considerations are there when choosing which region to use? (Select TWO.)
- Data Sovereignty
| - Latency
56
How does AWS assist organizations’ with their capacity requirements?
- You don’t need to guess capacity needs
57
Which pricing model should you use for EC2 instances that will be used in a lab environment for several hours on a weekend and must run uninterrupted?
- On-Demand
58
What is the most cost-effective EC2 pricing option to use for a non-critical overnight workload?
- Spot
59
The AWS global infrastructure is composed of? (Select TWO.)
- Regions
| - Availability Zones
60
A Cloud Practitioner needs to decide which Amazon S3 storage class to use for storing copies of backup data. The storage must provide rapid access when needed but resiliency can be low. Which storage class is most suitable?
- Amazon S3 One Zone-IA
61
Which AWS support plan should you use if you need a response time of < 15 minutes for a business-critical system failure?
- Enterprise
62
What architectural best practice aims to reduce the interdependencies between services?
- Loose Coupling
63
What can you use to quickly connect your office securely to your Amazon VPC?
- AWS managed VPN
64
Which benefits can an organization achieve by deploying AWS Global Accelerator? (Select TWO.)
- Improves the availability of applications on AWS
| - Decreased latency to reach applications deployed on AWS
65
Which service supports the resolution of public domain names to IP addresses or AWS resources?
- Amazon Route 53
66
A new user is unable to access any AWS services, what is the most likely explanation?
- By default, new users are created without access to any AWS services
67
What features does Amazon RDS provide to deliver scalability, availability and durability? (Select TWO.)
- Read Replicas
| - Multi-AZ
68
Which of the following are AWS recommended best practices in relation to IAM? (Select TWO.)
- Create individual IAM users
| - Enable MFA for all users
69
Which AWS support plans provide support via email, chat and phone? (Select TWO.)
- Business
| - Enterprise
70
Which services are managed at a regional (rather than global) level? (Select TWO.)
- Amazon EC2
| - Amazon S3
71
Which AWS service should a Cloud Practitioner use to automate configuration management using Puppet?
- AWS OpsWorks
72
A manager needs to keep a check on his AWS spend. How can the manager setup alarms that notify him when his bill reaches a certain amount?
- Using Amazon CloudWatch
73
How can an organization assess application for vulnerabilities and deviations from best practice?
- Use AWS Inspector
74
Which service can a Cloud Practitioner use to configure custom cost and usage limits and enable alerts for when defined thresholds are exceeded?
- AWS Budgets
75
Which AWS service can be used to host a static website?
- Amazon S3
76
Which AWS service can be used to load data from Amazon S3, transform it, and move it to another destination?
- AWS Glue
77
What are two ways of connecting to an Amazon VPC from an on-premise data center? (Select TWO.)
- AWS VPN CloudHub
78
Which AWS services can be utilized at no cost? (Select TWO.)
- Identity and Access Management
| - AmazonVPC
79
Which of the following security operations tasks must be performed by AWS customers? (Select TWO.)
- Installing security updates on EC2 instances
| - Enabling MFA for privileged users
80
Which AWS dashboard displays relevant and timely information to help users manage events in progress, and provides proactive notifications to help plan for scheduled activities?
- AWS Personal Health Dashboard
81
Which of the following compliance programs allows the AWS environment to process, maintain, and store protected health information?
- HIPPA
82
Which AWS service protects against common exploits that could compromise application availability, compromise security or consume excessive resources?
- AWS WAF
83
Which AWS service provides elastic web-scale cloud computing allowing you to deploy operating system instances?
- Amazon EC2
84
Which Amazon EC2 pricing model should be avoided if a workload cannot accept interruption if capacity becomes temporarily unavailable?
- Spot Instances
85
Which of the following are valid types of Reserved Instance? (Select TWO.)
- Convertible RI
| - Scheduled RI
86
Which AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?
- Amazon EMR
87
How should an organization deploy an application running on multiple EC2 instances to ensure that a power failure does not cause an application outage?
- Launch the EC2 instances into different Availability Zones
88
A Cloud Practitioner wants to configure the AWS CLI for programmatic access to AWS services. Which credential components are required? (Select TWO.)
- An access key ID
| - A secret access key
89
What can a Cloud Practitioner do with the AWS Cost Management tools? (Select TWO.)
- Visualize AWS cost by day, service and linked AWS account
| - Create budgets and receive notification if current of forecasted
90
An application stores images which will be retrieved infrequently, but must be available for retrieval immediately. Which is the most cost-effective storage option that meets these requirements?
- Amazon S3 Standard-Infrequent Access
91
Which of the statements below is correct in relation to Consolidated Billing? (Select TWO.)
- receive a single bill for multiple accounts
| - combine usage and share volume pricing discounts
92
What are the names of two types of AWS Storage Gateway? (Select TWO.)
- File Gateway
| - Gateway Virtual Tape Library
93
Amazon S3 is typically used for which of the following use cases? (Select TWO.)
- Host a static website
| - Media hosting
94
What type of database is fully managed and can be scaled without incurring downtime?
- Amazon Dynamo DB
95
Which configuration changes are associated with scaling horizontally? (Select TWO.)
- Adding additional hard drives to a storage array
| - Adding additional EC2 instances through Auto Scaling
96
Which AWS service gives you centralized control over the encryption keys used to protect your data?
- AWS KMS (Key Management Service)
97
A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?
- Amazon Inspector
98
How can a security compliance officer retrieve AWS compliance documentation such as a SOC 2 report?
- Using AWS Artifact
99
Which AWS service helps customers meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
- AWS CloudHSM
100
Which services are involved with security? (Select TWO.)
- AWS Cloud HSM
| - AWS KMS
101
Which tool can be used to create and manage a selection of AWS services that are approved for use on AWS?
- AWS Service Catalog
102
Which benefits can a company immediately realize using the AWS Cloud? (Select TWO.)
- Capital expenses are replaced with variable expenses
| - Increased agility
103
A company needs a consistent and dedicated connection between AWS resources and an on-premise system. Which AWS service can fulfil this requirement?
- AWS Direct Connect
104
A Cloud Practitioner wants to build an application stack that will be highly elastic. What AWS services can be used that don’t require you to make any capacity decisions upfront? (Select TWO.)
- Amazon S3
| - AWS Lamda
105
A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in an Amazon VPC. Which service should be used to deploy the application?
- AWS Elastic Beanstalk
106
What can a Cloud Practitioner use the AWS Total Cost of Ownership (TCO) Calculator for?
- Estimate savings when comparing the AWS Cloud to an on-premises environment
107
A company is planning to migrate some resources into the cloud. What factors need to be considered when determining the cost of the AWS Cloud? (Select TWO.)
- The number of servers migrated into EC2
| - The amount of egress data per month
108
Which AWS service is used to send both text and email messages from distributed applications?
- Amazon Simple Notification Service (Amazon SNS)
109
Which AWS service should a Cloud Practitioner use to establish a secure network connection between an on-premises network and AWS?
- Virtual Private Network
110
You need to ensure you have the right amount of compute available to service demand. Which AWS service can automatically scale the number of EC2 instances for your application?
- Amazon EC2 Auto Scaling
111
Which AWS service provides preconfigured virtual private servers (instances) that include everything required to deploy an application or create a database?
- Amazon Lightsail
112
What are two ways an AWS customer can reduce their monthly spend? (Select TWO.)
- Reserve capacity where suitable
| - Turn off resources that are not being used
113
Which AWS service or feature allows a company to receive a single monthly AWS bill when using multiple AWS accounts?
- Consolidated billing
114
A Cloud Practitioner requires a simple method to identify if unrestricted access to resources has been allowed by security groups. Which service can the Cloud Practitioner use?
- AWS Trusted Advisor
115
What are the benefits of using the AWS Managed Services? (Select TWO.)
- Baseline integration with ITSM tools
| - Alignment with ITIL processes
116
Which AWS construct provides you with your own dedicated virtual network in the cloud?
- AmazonVPC
117
You need to implement a hosted queue for storing messages in transit between application servers. Which service should you use?
- Amazon SQS
118
Which items should be included in a TCO analysis comparing on-premise to AWS Cloud? (Select TWO.)
- Compute hardware
| - Data center security
119
Which AWS service can be used to run Docker containers?
- Amazon ECS
120
What is a Resource Group?
- A collection of resources that share one or more tags
121
Which AWS hybrid storage service enables a user’s on-premises applications to seamlessly use AWS Cloud storage?
- AWS Storage Gateway
122
An application has highly dynamic usage patterns. Which characteristics of the AWS Cloud make it cost-effective for this type of workload? (Select TWO.)
- Pay-as-you-go pricing
| - Elasticity
123
An eCommerce company plans to use the AWS Cloud to quickly deliver new functionality in an iterative manner, minimizing the time to market. Which feature of the AWS Cloud provides this functionality?
- Agility
124
Which service provides visibility into user activity by recording actions taken on your account?
- Amazon CloudTrail
125
Which of the following services does Amazon Route 53 provide? (Select TWO.)
- Domain registration
| - Domain Name Service (DNS)
