Under the shared responsibility model, which of the following is the customer responsible for? Ensuring that disk drives are wiped after use. Ensuring that firmware is updated on hardware devices. Ensuring that data is encrypted at rest. Ensuring that network cables are category six or higher.
The use of what AWS feature or service allows companies to track and categorize spending on a detailed level? Cost allocation tags Consolidated billing AWS Budgets AWS Marketplace.
Which service stores objects, provides real-time access to those objects, and offers versioning and lifecycle capabilities? Amazon Glacier AWS Storage Gateway Amazon S3 Amazon EBS.
What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas? AWS Enterprise Support AWS Solutions Architects AWS Professional Services AWS Account Managers.
A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house.
Which of the following AWS programs can a customer take advantage of to achieve that outcome? AWS Partner Network Technology Partners AWS Marketplace AWS Partner Network Consulting Partners AWS Service Catalog.
Distributing workloads across multiple Availability Zones supports which cloud architecture design principle? Implement automation. Design for agility. Design for failure. Implement elasticity.
Which AWS services can host a Microsoft SQL Server database? (Choose two.) Amazon EC2 Amazon Relational Database Service (Amazon RDS) Amazon Aurora Amazon Redshift Amazon S3.
Which of the following inspects AWS environments to find opportunities that can save money for users and also improve system performance? AWS Cost Explorer AWS Trusted Advisor Consolidated billing Detailed billing.
Which of the following Amazon EC2 pricing models allow customers to use existing server-bound software licenses? Spot Instances Reserved Instances Dedicated Hosts On-Demand Instances.
Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Choose two.) High availability Shared security model Elasticity Pay-as-you-go pricing Reliability.
Which service enables risk auditing by continuously monitoring and logging account activity, including user actions in the AWS Management Console and AWS
SDKs? Amazon CloudWatch AWS CloudTrail AWS Config AWS Health.
Which of the following are characteristics of Amazon S3? (Choose two.) A global file system An object store A local file store A network file system A durable storage system.
Which services can be used across hybrid AWS Cloud architectures? (Choose two.) Amazon Route 53 Virtual Private Gateway Classic Load Balancer Auto Scaling Amazon CloudWatch default metrics.
What costs are included when comparing AWS Total Cost of Ownership (TCO) with on-premises TCO? Project management Antivirus software licensing Data center security Software development.
A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes.
Which service should the company use? Amazon Redshift Amazon DynamoDB Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store Amazon EC2 with Amazon Elastic Block Store (Amazon EBS).
Which of the following is a correct relationship between regions, Availability Zones, and edge locations? Data centers contain regions. Regions contain Availability Zones. Availability Zones contain edge locations. Edge locations contain regions.
Which AWS tools assist with estimating costs? (Choose three.) Detailed billing report Cost allocation tags AWS Simple Monthly Calculator AWS Total Cost of Ownership (TCO) Calculator Cost Estimator
.
Which of the following are advantages of AWS consolidated billing? (Choose two.) The ability to receive one bill for multiple accounts Service limits increasing by default in all accounts A fixed discount on the monthly bill Potential volume discounts, as usage in all accounts is combined The automatic extension of the master account's AWS support plan to all accounts.
Which of the following Reserved Instance (RI) pricing models provides the highest average savings compared to On-Demand pricing? One-year, No Upfront, Standard RI pricing One-year, All Upfront, Convertible RI pricing Three-year, All Upfront, Standard RI pricing Three-year, No Upfront, Convertible RI pricing.
Compared with costs in traditional and virtualized data centers, AWS has: greater variable costs and greater upfront costs. fixed usage costs and lower upfront costs. lower variable costs and greater upfront costs. lower variable costs and lower upfront costs.
A characteristic of edge locations is that they: host Amazon EC2 instances closer to users. help lower latency and improve performance for users. cache frequently changing data without reaching the origin server. refresh data changes daily.
Which of the following can limit Amazon Storage Service (Amazon S3) bucket access to specific users? A public and private key-pair Amazon Inspector AWS Identity and Access Management (IAM) policies Security Groups
.
Which of the following security-related actions are available at no cost? Calling AWS Support Contacting AWS Professional Services to request a workshop Accessing forums, blogs, and whitepapers Attending AWS classes at a local university.
Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value? Dedicated RIs Scheduled RIs Convertible RIs Standard RIs.
Which AWS feature will reduce the customer's total cost of ownership (TCO)? Shared responsibility security model Single tenancy Elastic computing Encryption.
Which of the following services will automatically scale with an expected increase in web traffic? AWS CodePipeline Elastic Load Balancing Amazon EBS AWS Direct Connect
.
Where are AWS compliance documents, such as an SOC 1 report, located? Amazon Inspector AWS CloudTrail AWS Artifact AWS Certificate Manager.
Under the AWS shared responsibility model, which of the following activities are the customer's responsibility? (Choose two.) Patching operating system components for Amazon Relational Database Server (Amazon RDS) Encrypting data on the client-side Training the data center staff Configuring Network Access Control Lists (ACL) Maintaining environmental controls within a data center.
Which is a recommended pattern for designing a highly available architecture on AWS? Ensure that components have low-latency network connectivity. Run enough Amazon EC2 instances to operate at peak load. Ensure that the application is designed to accommodate failure of any single component. Use a monolithic application that handles all operations.
According to best practices, how should an application be designed to run in the AWS Cloud? Use tighly coupled components. Use loosely coupled components. Use infrequently coupled components. Use frequently coupled components.
AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Choose two.) Implementing Amazon Rekognition Using AWS Shield-protected resources Blocking access with Security Groups Using Multi-Factor Authentication (MFA) Enforcing password strength and expiration
.
Which AWS services should be used for read/write of constantly changing data? (Choose two.) Amazon Glacier Amazon RDS AWS Snowball Amazon Redshift Amazon EFS.
What is one of the advantages of the Amazon Relational Database Service (Amazon RDS)? It simplifies relational database administration tasks. It provides 99.99999999999% reliability and durability. It automatically scales databases for loads. It enabled users to dynamically adjust CPU and RAM resources.
.
A customer needs to run a MySQL database that easily scales.
Which AWS service should they use? Amazon Aurora Amazon Redshift Amazon DynamoDB Amazon ElastiCache.
Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links? Availability Zone Edge location Region Private networking
.
Which of the following is a shared control between the customer and AWS? Providing a key for Amazon S3 client-side encryption Configuration of an Amazon EC2 instance Environmental controls of physical AWS data centers Awareness and training.
How many Availability Zones should compute resources be provisioned across to achieve high availability? A minimum of one A minimum of two A minimum of three A minimum of four or more.
One of the advantages to moving infrastructure from an on-premises data center to the AWS Cloud is: it allows the business to eliminate IT bills. it allows the business to put a server in each customer's data center. it allows the business to focus on business activities. it allows the business to leave servers unpatched.
What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval? Amazon S3 Amazon Glacier Amazon EBS Amazon EC2 Instance Store.
Which AWS IAM feature allows developers to access AWS services through the AWS CLI? API keys Access keys User names/Passwords SSH keys.
Which of the following is a fast and reliable NoSQL database service? Amazon Redshift Amazon RDS Amazon DynamoDB Amazon S3.
What is an example of agility in the AWS Cloud? Access to multiple instance types Access to managed services Using Consolidated Billing to produce one bill Decreased acquisition time for new compute resources
.
Which service should a customer use to consolidate and centrally manage multiple AWS accounts? AWS IAM AWS Organizations AWS Schema Conversion Tool AWS Config.
What approach to transcoding a large number of individual video files adheres to AWS architecture principles? Using many instances in parallel Using a single large instance during off-peak hours Using dedicated hardware Using a large GPU instance type.
For which auditing process does AWS have sole responsibility? AWS IAM policies Physical security Amazon S3 bucket policies AWS CloudTrail Logs.
Which feature of the AWS Cloud will support an international company's requirement for low latency to all of its customers? Fault tolerance Global reach Pay-as-you-go pricing High availability.
Which of the following is the customer's responsibility under the AWS shared responsibility model? Patching underlying infrastructure Physical security Patching Amazon EC2 instances Patching network infrastructure.
A customer is using multiple AWS accounts with separate billing.
How can the customer take advantage of volume discounts with minimal impact to the AWS resources? Create one global AWS acount and move all AWS resources to tha account. Sign up for three years of Reserved Instance pricing up front. Use the consolidated billing feature from AWS Organizations. Sign up for the AWS Enterprise support plan to get volume discounts.
Which of the following are features of Amazon CloudWatch Logs? (Choose two.) Summaries by Amazon Simple Notification Service (Amazon SNS) Free Amazon Elasticsearch Service analytics Provided at no charge Real-time monitoring Adjustable retention.
Which of the following is an AWS managed Domain Name System (DNS) web service? Amazon Route 53
Amazon Neptune Amazon SageMaker Amazon Lightsail
.
A customer is deploying a new application and needs to choose an AWS Region.
Which of the following factors could influence the customer's decision? (Choose two.) Reduced latency to users The application's presentation in the local language Data sovereignty compliance Cooling costs in hotter climates Proximity to the customer's office for on-site visits.
Which storage service can be used as a low-cost option for hosting static websites? Amazon Glacier Amazon DynamoDB Amazon Elastic File System (Amazon EFS) Amazon Simple Storage Service (Amazon S3).
Which Amazon EC2 instance pricing model can provide discounts of up to 90%? Reserved Instances On-Demand Dedicated Hosts Spot Instances.
What is the AWS customer responsible for according to the AWS shared responsibility model? Physical access controls Data encryption Secure disposal of storage devices Environmental risk management.
Which of the following AWS Cloud services can be used to run a customer-managed relational database? Amazon EC2 Amazon Route 53 Amazon ElastiCache Amazon DynamoDB.
A company is looking for a scalable data warehouse solution.
Which of the following AWS solutions would meet the company's needs? Amazon Simple Storage Service (Amazon S3) Amazon DynamoDB Amazon Kinesis Amazon Redshift
.
Which statement best describes Elastic Load Balancing? It translates a domain name into an IP address using DNS. It distributes incoming application traffic across one or more Amazon EC2 instances. It collects metrics on connected Amazon EC2 instances. It automatically adjusts the number of Amazon EC2 instances to support incoming traffic.
Which of the following are valid ways for a customer to interact with AWS services? (Choose two.) Command line interface On-premises Software Development Kits Software-as-a-service Hybrid.
The AWS Cloud's multiple Regions are an example of: agility. global infrastructure. elasticity. pay-as-you-go pricing.
Which of the following AWS services can be used to serve large amounts of online video content with the lowest possible latency? (Choose two.) AWS Storage Gateway Amazon S3 Amazon Elastic File System (EFS) Amazon Glacier Amazon CloudFront.
Web servers running on Amazon EC2 access a legacy application running in a corporate data center.
What term would describe this model? Cloud-native Partner network Hybrid architecture Infrastructure as a service.
What is the benefit of using AWS managed services, such as Amazon ElastiCache and Amazon Relational Database Service (Amazon RDS)? They require the customer to monitor and replace failing instances. They have better performance than customer-managed services. They simplify patching and updating underlying OSs. They do not require the customer to optimize instance type or size selections.
Which service provides a virtually unlimited amount of online highly durable object storage? Amazon Redshift Amazon Elastic File System (Amazon EFS) Amazon Elastic Container Service (Amazon ECS) Amazon S3.
Which of the following Identity and Access Management (IAM) entities is associated with an access key ID and secret access key when using AWS Command
Line Interface (AWS CLI)? IAM group IAM user IAM user IAM policy.
Which of the following security-related services does AWS offer? (Choose two.) Multi-factor authentication physical tokens AWS Trusted Advisor security checks Data encryption Automated penetration testing Amazon S3 copyrighted content detection.
Which AWS managed service is used to host databases? AWS Batch AWS Artifact AWS Data Pipeline Amazon RDS.
Which AWS service provides a simple and scalable shared file storage solution for use with Linux-based AWS and on-premises servers? Amazon S3 Amazon Glacier Amazon EBS Amazon EFS.
When architecting cloud applications, which of the following are a key design principle? Use the largest instance possible Provision capacity for peak load Use the Scrum development process Implement elasticity.
Which AWS service should be used for long-term, low-cost storage of data backups? Amazon RDS Amazon Glacier AWS Snowball AWS EBS
.
Under the shared responsibility model, which of the following is a shared control between a customer and AWS?
A. Physical controls Physical controls Patch management Zone security Data center auditing.
Which AWS service allows companies to connect an Amazon VPC to an on-premises data center? AWS VPN Amazon Redshift API Gateway Amazon Direct Connect.
A company wants to reduce the physical compute footprint that developers use to run code.
Which service would meet that need by enabling serverless architectures? Amazon Elastic Compute Cloud (Amazon EC2) AWS Lambda Amazon DynamoDB AWS CodeCommit.
Which AWS service provides alerts when an AWS event may impact a company's AWS resources? AWS Personal Health Dashboard AWS Service Health Dashboard AWS Trusted Advisor AWS Infrastructure Event Management.
Which of the following are categories of AWS Trusted Advisor? (Choose two.) Fault Tolerance Instance Usage Infrastructure Performance Storage Capacity.
Which task is AWS responsible for in the shared responsibility model for security and compliance? Granting access to individuals and services Encrypting data in transit Updating Amazon EC2 host firmware Updating operating systems.
Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS? AWS Marketplace Amazon Lumberyard AWS Artifact Amazon CloudSearch.
Which of the following is a benefit of using the AWS Cloud? Permissive security removes the administrative burden. Ability to focus on revenue-generating activities. Control over cloud network hardware. Choice of specific cloud hardware vendors.
When performing a cost analysis that supports physical isolation of a customer workload, which compute hosting model should be accounted for in the Total Cost of Ownership (TCO)? Dedicated Hosts Reserved Instances On-Demand Instances No Upfront Reserved Instances.
Which AWS service provides the ability to manage infrastructure as code? AWS CodePipeline AWS CodeDeploy AWS Direct Connect AWS CloudFormation.
If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use? AWS Config AWS Trusted Advisor Amazon CloudWatch Amazon Inspector.
What is Amazon CloudWatch? A code repository with customizable build and team commit features. A metrics repository with customizable notification thresholds and channels. A security configuration repository with threat analytics. A rule repository of a web application firewall with automated vulnerability prevention features.
Which service allows a company with multiple AWS accounts to combine its usage to obtain volume discounts? AWS Server Migration Service AWS Organizations AWS Budgets AWS Trusted Advisor.
Which of the following services could be used to deploy an application to servers running on-premises? (Choose two.) AWS Elastic Beanstalk AWS OpsWorks AWS CodeDeploy AWS Batch AWS X-Ray.
Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances? On-Demand Instances Reserved Instances Spot Instances Convertible Reserved Instances.
Which design principles for cloud architecture are recommended when re-architecting a large monolithic application? (Choose two.) Use manual monitoring. Use fixed servers. Implement loose coupling. Rely on individual components. Design for scalability.
Which is the MINIMUM AWS Support plan that allows for one-hour target response time for support cases? Enterprise Business Developer Basic.
Where can AWS compliance and certification reports be downloaded? AWS Artifact AWS Concierge AWS Certificate Manager AWS Trusted Advisor.
Which AWS service provides a customized view of the health of specific AWS services that power a customer's workloads running on AWS? AWS Service Health Dashboard AWS X-Ray AWS Personal Health Dashboard Amazon CloudWatch.
Which of the following is an advantage of consolidated billing on AWS? Volume pricing qualification Shared access permissions Multiple bills per account Eliminates the need for tagging.
Which of the following steps should be taken by a customer when conducting penetration testing on AWS? Conduct penetration testing using Amazon Inspector, and then notify AWS support. Request and wait for approval from the customer's internal security team, and then conduct testing. Notify AWS support, and then conduct testing immediately. Request and wait for approval from AWS support, and then conduct testing.
Which of the following AWS features enables a user to launch a pre-configured Amazon Elastic Compute Cloud (Amazon EC2) instance? Amazon Elastic Block Store (Amazon EBS) Amazon Machine Image Amazon EC2 Systems Manager Amazon AppStream 2.0.
How would an AWS customer easily apply common access controls to a large set of users? Apply an IAM policy to an IAM group. Apply an IAM policy to an IAM role. Apply the same IAM policy to all IAM users with access to the same workload. Apply an IAM policy to an Amazon Cognito user pool.
What technology enables compute capacity to adjust as loads change? Load balancing Automatic failover Round robin Auto Scaling.
Which AWS services are defined as global instead of regional? (Choose two.) Amazon Route 53 Amazon EC2 Amazon S3 Amazon CloudFront Amazon DynamoDB.
Which AWS service would you use to obtain compliance reports and certificates? AWS Artifact AWS Lambda Amazon Inspector AWS Certificate Manager.
Under the shared responsibility model, which of the following tasks are the responsibility of the AWS customer? (Choose two.) Ensuring that application data is encrypted at rest Ensuring that AWS NTP servers are set to the correct time Ensuring that users have received security training in the use of AWS services Ensuring that access to data centers is restricted Ensuring that hardware is disposed of properly.
Which AWS service can be used to manually launch instances based on resource requirements? Amazon EBS Amazon S3 Amazon EC2 Amazon ECS.
A company is migrating an application that is running non-interruptible workloads for a three-year time frame.
Which pricing construct would provide the MOST cost-effective solution? Amazon EC2 Spot Instances Amazon EC2 Dedicated Instances Amazon EC2 On-Demand Instances Amazon EC2 Reserved Instances.
The financial benefits of using AWS are: (Choose two.) reduced Total Cost of Ownership (TCO). increased capital expenditure (capex). reduced operational expenditure (opex). deferred payment plans for startups. business credit lines for stratups.
Which AWS Cost Management tool allows you to view the most granular data about your AWS bill? AWS Cost Explorer AWS Budgets AWS Cost and Usage report AWS Billing dashboard.
Which of the following can an AWS customer use to launch a new Amazon Relational Database Service (Amazon RDS) cluster? (Choose two.) AWS Concierge AWS CloudFormation Amazon Simple Storage Service (Amazon S3) Amazon EC2 Auto Scaling AWS Management Console.
Which of the following is an AWS Cloud architecture design principle? Implement single points of failure. Implement loose coupling. Implement monolithic design. Implement vertical scaling.
Which of the following security measures protect access to an AWS account? (Choose two.)
Enable AWS CloudTrail. Grant least privilege access to IAM users. Create one IAM user and share with many developers and users. Enable Amazon CloudFront. Activate multi-factor authentication (MFA) for privileged users.
Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage? Amazon Glacier AWS Snowball AWS Storage Gateway Amazon Elastic Block Storage (Amazon EBS).
Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking? Amazon RDS Amazon EC2 Amazon ElastiCache AWS Fargate.
Which of the following is an important architectural design principle when designing cloud applications? Use multiple Availability Zones. Use tightly coupled components. Use open source software. Provision extra capacity.
Which AWS support plan includes a dedicated Technical Account Manager? Developer Enterprise Business Basic
.
Amazon Relational Database Service (Amazon RDS) offers which of the following benefits over traditional database management? AWS manages the data stored in Amazon RDS tables. AWS manages the maintenance of the operating system. AWS automatically scales up instance types on demand. AWS manages the database type.
Which service is best for storing common database query results, which helps to alleviate database access load? Amazon Machine Learning Amazon SQS Amazon ElastiCache Amazon EC2 Instance Store.
Which of the following is a component of the shared responsibility model managed entirely by AWS? Patching operating system software Encrypting data Enforcing multi-factor authentication Auditing physical data center assets.
Which options does AWS make available for customers who want to learn about security in the cloud in an instructor-led setting? (Choose two.) AWS Trusted Advisor AWS Online Tech Talks AWS Blog AWS Forums AWS Classroom Training.
Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard? (Choose two.) Amazon CloudFront distributions Amazon Route 53 Security Groups Subnets Elastic Load Balancing.
If each department within a company has its own AWS account, what is one way to enable consolidated billing? Use AWS Budgets on each account to pay only to budget. Contact AWS Support for a monthly bill. Create an AWS Organization from the payer account and invite the other accounts to join. Put all invoices into one Amazon Simple Storage Service (Amazon S3) bucket, load data into Amazon Redshift, and then run a billing report.
How do customers benefit from Amazon's massive economies of scale? Periodic price reductions as the result of Amazon's operational efficiencies New Amazon EC2 instance types providing the latest hardware The ability to scale up and down when needed Increased reliability in the underlying hardware of Amazon EC2 instances.
Which AWS services can be used to gather information about AWS account activity? (Choose two.) Amazon CloudFront AWS Cloud9 AWS CloudTrail AWS CloudHSM Amazon CloudWatch.
Which of the following common IT tasks can AWS cover to free up company IT resources? (Choose two.) Patching databases software Testing application releases Backing up databases Creating database schema Creating database schema.
In which scenario should Amazon EC2 Spot Instances be used? A company wants to move its main website to AWS from an on-premises web server. A company has a number of application services whose Service Level Agreement (SLA) requires 99.999% uptime. A company's heavily used legacy database is currently running on-premises. A company has a number of infrequent, interruptible jobs that are currently using On-Demand Instances.
Which AWS feature should a customer leverage to achieve high availability of an application? AWS Direct Connect Availability Zones Data centers Amazon Virtual Private Cloud (Amazon VPC).
Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs? Enterprise Business Developer Basic.
Which AWS service can serve a static website? Amazon S3 Amazon Route 53 Amazon QuickSight AWS X-Ray.
How does AWS shorten the time to provision IT resources? It supplies an online IT ticketing platform for resource requests. It supports automatic code validation services. It provides the ability to programmatically provision existing resources. It automates the resource request process from a company's IT vendor list.
What can AWS edge locations be used for? (Choose two.) Hosting applications Delivering content closer to users Running NoSQL database caching services Reducing traffic on the server by caching responses Sending notification messages to end users
.
Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users? A public and private key-pair Amazon Inspector AWS Identity and Access Management (IAM) policies Security Groups.
A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle? Think parallel Implement elasticity Decouple your components Design for failure.
A company will be moving from an on-premises data center to the AWS Cloud.
What would be one financial difference after the move? Moving from variable operational expense (opex) to upfront capital expense (capex). Moving from upfront capital expense (capex) to variable capital expense (capex). Moving from upfront capital expense (capex) to variable operational expense (opex). Elimination of upfront capital expense (capex) and elimination of variable operational expense (opex).
How should a customer forecast the future costs for running a new web application? Amazon Aurora Backtrack Amazon CloudWatch Billing Alarms AWS Simple Monthly Calculator AWS Cost and Usage report.
Which is the MINIMUM AWS Support plan that provides technical support through phone calls? Enterprise Business Developer Basic.
Which of the following tasks is the responsibility of AWS? Encrypting client-side data Configuring AWS Identity and Access Management (IAM) roles Securing the Amazon EC2 hypervisor Setting user password policies.
One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is: the ability to bid for a lower hourly cost. paying a daily rate regardless of time used. paying only for time used. pre-paying for instances and paying a lower hourly rate.
An administrator needs to rapidly deploy a popular IT solution and start using it immediately.
Where can the administrator find assistance? AWS Well-Architected Framework documentation Amazon CloudFront AWS CodeCommit AWS Quick Start reference deployments.
Which of the following services is in the category of AWS serverless platform? Amazon EMR Elastic Load Balancing AWS Lambda AWS Mobile Hub.
Which services are parts of the AWS serverless platform? Amazon EC2, Amazon S3, Amazon Athena Amazon Kinesis, Amazon SQS, Amazon EMR AWS Step Functions, Amazon DynamoDB, Amazon SNS Amazon Athena, Amazon Cognito, Amazon EC2.
According to the AWS shared responsibility model, what is the sole responsibility of AWS? Application security Edge location management Patch management Client-side data.
Which AWS IAM feature is used to associate a set of permissions with multiple users? Multi-factor authentication Groups Password policies Access keys.
Which of the following are benefits of the AWS Cloud? (Choose two.) Unlimited uptime Elasticity Agility Colocation Capital expenses
.
Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console? Amazon Connect AWS Directory Service Amazon Pinpoint Amazon Rekognition.
What are the multiple, isolated locations within an AWS Region that are connected by low-latency networks called? AWS Direct Connects Amazon VPCs Edge locations Availability Zones.
Which of the following benefits does the AWS Compliance program provide to AWS customers? (Choose two.) It verifies that hosted workloads are automatically compliant with the controls of supported compliance frameworks. AWS is responsible for the maintenance of common compliance framework documentation. It assures customers that AWS is maintaining physical security and data protection. It ensures the use of compliance frameworks that are being used by other cloud providers. It will adopt new compliance frameworks as they become relevant to customer workloads.
Which of the following services provides on-demand access to AWS compliance reports? AWS IAM AWS Artifact Amazon GuardDuty AWS KMS.
As part of the AWS shared responsibility model, which of the following operational controls do users fully inherit from AWS? Security management of data center Patch management Configuration management User and access management.
When comparing AWS Cloud with on-premises Total Cost of Ownership, which expenses must be considered? (Choose two.) Software development Project management Storage hardware Physical servers Antivirus software license.
Under the shared responsibility model, which of the following tasks are the responsibility of the customer? (Choose two.) Maintaining the underlying Amazon EC2 hardware. Managing the VPC network access control lists. Encrypting data in transit and at rest. Replacing failed hard disk drives. Deploying hardware in different Availability Zones.
Which scenarios represent the concept of elasticity on AWS? (Choose two.) Scaling the number of Amazon EC2 instances based on traffic. Resizing Amazon RDS instances as business needs change. Automatically directing traffic to less-utilized Amazon EC2 instances. Using AWS compliance documents to accelerate the compliance process. Having the ability to create and govern environments using code.
When is it beneficial for a company to use a Spot Instance? When there is flexibility in when an application needs to run. When there are mission-critical workloads. When dedicated capacity is needed. When an instance should not be stopped.
A company is considering moving its on-premises data center to AWS.
What factors should be included in doing a Total Cost of Ownership (TCO) analysis? (Choose two.) Amazon EC2 instance availability Power consumption of the data center Labor costs to replace old servers Application developer time Database engine capacity.
How does AWS charge for AWS Lambda? Users bid on the maximum price they are willing to pay per hour. Users choose a 1-, 3- or 5-year upfront payment term. Users pay for the required permanent storage on a file system or in a database. Users pay based on the number of requests and consumed compute resources.
What function do security groups serve related Amazon Elastic Compute Cloud (Amazon EC2) instance security? Act as a virtual firewall for the Amazon EC2 instance. Secure AWS user accounts with AWS identity and Access Management (IAM) policies. Provide DDoS protection with AWS Shield. Use Amazon CloudFront to protect the Amazon EC2 instance.
Which disaster recovery scenario offers the lowest probability of down time? Backup and restore Pilot light Warm standby Multi-site active-active.
What will help a company perform a cost benefit analysis of migrating to the AWS Cloud? Cost Explorer AWS Total Cost of Ownership (TCO) Calculator AWS Simple Monthly Calculator AWS Trusted Advisor.
Which of the following provides the ability to share the cost benefits of Reserved Instances across AWS accounts? AWS Cost Explorer between AWS accounts Linked accounts and consolidated billing Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instance Utilization Report Amazon EC2 Instance Usage Report between AWS accounts.
A company has multiple AWS accounts and wants to simplify and consolidate its billing process.
Which AWS service will achieve this? AWS Cost and Usage Reports AWS Organizations AWS Cost Explorer AWS Budgets.
A company is designing an application hosted in a single AWS Region serving end-users spread across the world. The company wants to provide the end-users low latency access to the application data.
Which of the following services will help fulfill this requirement? Amazon CloudFront AWS Direct Connect Amazon Route 53 global DNS Amazon Simple Storage Service (Amazon S3) transfer acceleration
.
Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses? On-premises Hybrid Cloud Platform as a service.
How is asset management on AWS easier than asset management in a physical data center? AWS provides a Configuration Management Database that users can maintain. AWS performs infrastructure discovery scans on the customer's behalf. Amazon EC2 automatically generates an asset report and places it in the customer's specified Amazon S3 bucket. Users can gather asset metadata reliably with a few API calls.
What feature of Amazon RDS helps to create globally redundant databases? Snapshots Automatic patching and updating Cross-Region read replicas Provisioned IOPS.
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as: restricted access. as-needed access. least privilege access. token access.
Which methods can be used to identify AWS costs by departments? (Choose two.) Enable multi-factor authentication for the AWS account root user. Create separate accounts for each department. Use Reserved Instances whenever possible. Use tags to associate each instance with a particular department. Pay bills using purchase orders.
Under the AWS shared responsibility model, customer responsibilities include which one of the following? Securing the hardware, software, facilities, and networks that run all products and services. Providing certificates, reports, and other documentation directly to AWS customers under NDA. Configuring the operating system, network, and firewall. Obtaining industry certifications and independent third-party attestations.
Which managed AWS service provides real-time guidance on AWS security best practices? AWS X-Ray AWS Trusted Advisor Amazon CloudWatch AWS Systems Manager
.
Which feature adds elasticity to Amazon EC2 instances to handle the changing demand for workloads? Resource groups Resource groups Application Load Balancer Amazon EC2 Auto Scaling.
Under the AWS shared responsibility model, customers are responsible for which aspects of security in the cloud? (Choose two.) Visualization management Hardware management Encryption management Facilities management Firewall management.
Which AWS hybrid storage service enables on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols? AWS Direct Connect AWS Direct Connect AWS Storage Gateway AWS Snowball Edge.
What is a responsibility of AWS in the shared responsibility model? Updating the network ACLs to block traffic to vulnerable ports. Patching operating systems running on Amazon EC2 instances. Updating the firmware on the underlying EC2 hosts. Updating the security group rules to block traffic to the vulnerable ports.
Which architectural principle is used when deploying an Amazon Relational Database Service (Amazon RDS) instance in Multiple Availability Zone mode? Implement loose coupling. Design for failure. Automate everything that can be automated. Use services, not servers.
What does it mean to grant least privilege to AWS IAM users? It is granting permissions to a single user only. It is granting permissions using AWS IAM policies only. It is granting Administrator Access policy permissions to trustworthy users. It is granting only the permissions required to perform a given task.
What is a benefit of loose coupling as a principle of cloud architecture design? It facilitates low-latency request handling. It allows applications to have dependent workflows. It prevents cascading failures between different components. It allows companies to focus on their physical data center operations.
A director has been tasked with investigating hybrid cloud architecture. The company currently accesses AWS over the public internet.
Which service will facilitate private hybrid connectivity? Amazon Virtual Private Cloud (Amazon VPC) NAT Gateway AWS Direct Connect Amazon Simple Storage Service (Amazon S3) Transfer Acceleration AWS Web Application Firewall (AWS WAF).
A company's web application currently has tight dependencies on underlying components, so when one component fails the entire web application fails.
Applying which AWS Cloud design principle will address the current design issue? Implementing elasticity, enabling the application to scale up or scale down as demand changes. Enabling several EC2 instances to run in parallel to achieve better performance. Focusing on decoupling components by isolating them and ensuring individual components can function when other components fail. Doubling EC2 computing resources to increase system fault tolerance.
How can a customer increase security to AWS account logons? (Choose two.) Configure AWS Certificate Manager Enable Multi-Factor Authentication (MFA) Use Amazon Cognito to manage access Configure a strong password policy Enable AWS Organizations
.
What AWS service would be used to centrally manage AWS access across multiple accounts? AWS Service Catalog AWS Config AWS Trusted Advisor AWS Organizations.
Which AWS service can a customer use to set up an alert notification when the account is approaching a particular dollar amount? AWS Cost and Usage reports AWS Budgets AWS Cost Explorer AWS Trusted Advisor
.
What can users access from AWS Artifact? AWS security and compliance documents A download of configuration management details for all AWS resources Training materials for AWS services A security assessment of the applications deployed in the AWS Cloud.
Which is the MINIMUM AWS Support plan that provides designated Technical Account Managers? Enterprise Business Developer Basic.
Which of the following is an AWS Well-Architected Framework design principle related to reliability? Deployment to a single Availability Zone Ability to recover from failure Design for cost optimization Perform operations as code.
Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated? Amazon EBS Amazon EC2 instance store Amazon EFS Amazon S3.
What is an advantage of using the AWS Cloud over a traditional on-premises solution? Users do not have to guess about future capacity needs. Users can utilize existing hardware contracts for purchases. Users can fix costs no matter what their traffic is. Users can avoid audits by using reports from AWS.
Which of the following is an AWS-managed compute service? Amazon SWF Amazon EC2 AWS Lambda Amazon Aurora.
Which of the following is an important architectural principle when designing cloud applications? Store data and backups in the same region. Design tightly coupled system components. Avoid multi-threading. Design for failure.
Which mechanism allows developers to access AWS services from application code? AWS Software Development Kit AWS Management Console AWS CodePipeline AWS Config.
Which Amazon EC2 pricing model is the MOST cost efficient for an uninterruptible workload that runs once a year for 24 hours? On-Demand Instances Reserved Instances Spot Instances Dedicated Instances.
Which of the following services is a MySQL-compatible database that automatically grows storage as needed? Amazon Elastic Compute Cloud (Amazon EC2) Amazon Relational Database Service (Amazon RDS) for MySQL Amazon Lightsail Amazon Aurora.
Which Amazon Virtual Private Cloud (Amazon VPC) feature enables users to connect two VPCs together? Amazon VPC endpoints Amazon Elastic Compute Cloud (Amazon EC2) ClassicLink Amazon VPC peering AWS Direct Connect.
Which service's PRIMARY purpose is software version control? Amazon CodeStar AWS Command Line Interface (AWS CLI) Amazon Cognito AWS CodeCommit.
A company is considering migrating its applications to AWS. The company wants to compare the cost of running the workload on-premises to running the equivalent workload on the AWS platform.
Which tool can be used to perform this comparison? AWS Simple Monthly Calculator AWS Total Cost of Ownership (TCO) Calculator AWS Billing and Cost Management console Cost Explorer.
Which AWS service provides a secure, fast, and cost-effective way to migrate or transport exabyte-scale datasets into AWS? AWS Batch AWS Snowball AWS Migration Hub AWS Snowmobile.
Which of the following BEST describe the AWS pricing model? (Choose two.) Fixed-term Pay-as-you-go Colocation Planned Variable cost.
Which load balancer types are available with Elastic Load Balancing (ELB)? (Choose two.) Public load balancers with AWS Application Auto Scaling capabilities F5 Big-IP and Citrix NetScaler load balancers Classic Load Balancers Cross-zone load balancers with public and private IPs Application Load Balancers.
Why should a company choose AWS instead of a traditional data center? AWS provides users with full control over the underlying resources. AWS does not require long-term contracts and provides a pay-as-you-go model. AWS offers edge locations in every country, supporting global reach. AWS has no limits on the number of resources that can be created.
Which solution provides the FASTEST application response times to frequently accessed data to users in multiple AWS Regions? AWS CloudTrail across multiple Availability Zones Amazon CloudFront to edge locations AWS CloudFormation in multiple regions A virtual private gateway over AWS Direct Connect.
Which AWS service provides a self-service portal for on-demand access to AWS compliance reports? AWS Config AWS Certificate Manager Amazon Inspector AWS Artifact.
Which of the following AWS services can be used to run a self-managed database? Amazon Route 53 AWS X-Ray AWS Snowmobile Amazon Elastic Compute Cloud (Amazon EC2).
What exclusive benefit is provided to users with Enterprise Support? Access to a Technical Project Manager Access to a Technical Account Manager Access to a Cloud Support Engineer Access to a Solutions Architect.
How can a user protect against AWS service disruptions if a natural disaster affects an entire geographic area? Deploy applications across multiple Availability Zones within an AWS Region. Use a hybrid cloud computing deployment model within the geographic area. Deploy applications across multiple AWS Regions. Store application artifacts using AWS Artifact and replicate them across multiple AWS Regions.
How does AWS MOST effectively reduce computing costs for a growing start-up company? It provides on-demand resources for peak usage. It automates the provisioning of individual developer environments. It automates customer relationship management. It implements a fixed monthly computing budget.
A startup is working on a new application that needs to go to market quickly. The application requirements may need to be adjusted in the near future.
Which of the following is a characteristic of the AWS Cloud that would meet this specific need? Elasticity Reliability Performance Agility.
Which AWS Support plan provides a full set of AWS Trusted Advisor checks? Business and Developer Support Business and Basic Support Enterprise and Developer Support Enterprise and Business Support.
Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Choose two.) AWS WAF Amazon DynamoDB Amazon EC2 Amazon CloudFront Amazon Inspector.
When building a cloud Total Cost of Ownership (TCO) model, which cost elements should be considered for workloads running on AWS? (Choose three.) Compute costs Facilities costs Storage costs Data transfer costs Network infrastructure costs Hardware lifecycle costs.
What time-savings advantage is offered with the use of Amazon Rekognition? Amazon Rekognition provides automatic watermarking of images. Amazon Rekognition provides automatic detection of objects appearing in pictures. Amazon Rekognition provides the ability to resize millions of images automatically. Amazon Rekognition uses Amazon Mechanical Turk to allow humans to bid on object detection jobs.
When comparing AWS with on-premises Total Cost of Ownership (TCO), what costs are included? Data center security Business analysis Project management Operating system administration.
According to the AWS shared responsibility model, what is AWS responsible for? Configuring Amazon VPC Managing application code Maintaining application traffic Managing the network infrastructure.
Which service should be used to estimate the costs of running a new project on AWS? AWS TCO Calculator AWS Simple Monthly Calculator AWS Cost Explorer API AWS Budgets.
Which AWS tool will identify security groups that grant unrestricted Internet access to a limited list of ports? AWS Organizations AWS Trusted Advisor AWS Usage Report Amazon EC2 dashboard.
Which AWS service can be used to generate alerts based on an estimated monthly bill? AWS Config Amazon CloudWatch AWS X-Ray AWS CloudTrail.
Which Amazon EC2 pricing model offers the MOST significant discount when compared to On-Demand Instances? Partial Upfront Reserved Instances for a 1-year term All Upfront Reserved Instances for a 1-year term All Upfront Reserved Instances for a 3-year term No Upfront Reserved Instances for a 3-year term.
Which of the following is the responsibility of AWS? Setting up AWS Identity and Access Management (IAM) users and groups Physically destroying storage media at end of life Patching guest operating systems Configuring security settings on Amazon EC2 instances.
Which of the following is an advantage of using AWS? AWS audits user data. Data is automatically secure. There is no guessing on capacity needs. AWS manages compliance needs.
Which AWS service would a customer use with a static website to achieve lower latency and high transfer speeds? AWS Lambda Amazon DynamoDB Accelerator Amazon Route 53 Amazon CloudFront.
Which services manage and automate application deployments on AWS? (Choose two.) AWS Elastic Beanstalk AWS CodeCommit AWS Data Pipeline AWS CloudFormation AWS Config.
A user wants guidance on possible savings when migrating from on-premises to AWS.
Which tool is suitable for this scenario? AWS Budgets Cost Explorer AWS Total Cost of Ownership (TCO) Calculator AWS Well-Architected Tool.
Which principles are used to architect applications for reliability on the AWS Cloud? (Choose two.) Design for automated failure recovery Use multiple Availability Zones Manage changes via documented processes Test for moderate demand to ensure reliability Backup recovery to an on-premises environment.
What tasks should a customer perform when that customer suspects an AWS account has been compromised? (Choose two.) Rotate passwords and access keys. Remove MFA tokens. Move resources to a different AWS Region. Delete AWS CloudTrail Resources. Contact AWS Support.
What is an example of high availability in the AWS Cloud? Consulting AWS technical support at any time day or night Ensuring an application remains accessible, even if a resource fails Making any AWS service available for use by paying on demand Deploying in any part of the world using AWS Regions.
Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations? Amazon Inspector AWS Web Application Firewall (AWS WAF) Elastic Load Balancing (ELB) AWS Shield.
A company wants to monitor the CPU usage of its Amazon EC2 resources.
Which AWS service should the company use? AWS CloudTrail Amazon CloudWatch AWS Cost and Usage report Amazon Simple Notification Service (Amazon SNS).
What is an AWS Identity and Access Management (IAM) role? A user associated with an AWS resource A group associated with an AWS resource An entity that defines a set of permissions for use with an AWS resource An authentication credential associated with a multi-factor authentication (MFA) token.
What are the advantages of Reserved Instances? (Choose two.) They provide a discount over on-demand pricing. They provide access to additional instance types. They provide additional networking capability. Customers can upgrade instances as new types become available. Customers can reserve capacity in an Availability Zone.
How do Amazon EC2 Auto Scaling groups help achieve high availability for a web application? They automatically add more instances across multiple AWS Regions based on global demand of the application. They automatically add or replace instances across multiple Availability Zones when the application needs it. They enable the application's static content to reside closer to end users. They are able to distribute incoming requests across a tier of web server instances.
How can one AWS account use Reserved Instances from another AWS account? By using Amazon EC2 Dedicated Instances By using AWS Organizations consolidated billing By using the AWS Cost Explorer tool By using AWS Budgets.
A customer runs an On-Demand Amazon Linux EC2 instance for 3 hours, 5 minutes, and 6 seconds.
For how much time will the customer be billed? 3 hours, 5 minutes 3 hours, 5 minutes, and 6 seconds 3 hours, 6 minutes 4 hours.
Which of the following AWS services provide compute resources? (Choose two.) AWS Lambda Amazon Elastic Container Service (Amazon ECS) AWS CodeDeploy Amazon Glacier AWS Organizations.
Which AWS service enables users to deploy infrastructure as code by automating the process of provisioning resources? Amazon GameLift AWS CloudFormation AWS Data Pipeline AWS Glue.
Which AWS services provide a way to extend an on-premises architecture to the AWS Cloud? (Choose two.) Amazon EBS AWS Direct Connect Amazon CloudFront AWS Storage Gateway Amazon Connect.
Which of the following allows users to provision a dedicated network connection from their internal network to AWS? AWS CloudHSM AWS Direct Connect
AWS VPN Amazon Connect.
Which services use AWS edge locations? (Choose two.) Amazon CloudFront AWS Shield Amazon EC2 Amazon RDS Amazon ElastiCache.
Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud? Amazon VPC AWS Direct Connect AWS Directory Service Amazon API Gateway.
Which tool can be used to compare the costs of running a web application in a traditional hosting environment to running it on AWS? AWS Cost Explorer AWS Budgets AWS Cost and Usage report AWS Total Cost of Ownership (TCO) Calculator
.
What is the value of using third-party software from AWS Marketplace instead of installing third-party software on Amazon EC2? (Choose two.) Users pay for software by the hour or month depending on licensing. AWS Marketplace enables the user to launch applications with 1-Click. AWS Marketplace data encryption is managed by a third-party vendor. AWS Marketplace eliminates the need to upgrade to newer software versions. Users can deploy third-party software without testing.
Which of the following is a cloud architectural design principle? Scale up, not out. Loosely couple components. Build monolithic systems. Use commercial database software.
Under the shared responsibility model; which of the following areas are the customer's responsibility? (Choose two.) Firmware upgrades of network infrastructure Patching of operating systems Patching of the underlying hypervisor Physical security of data centers Configuration of the security group.
Which service enables customers to audit and monitor changes in AWS resources? AWS Trusted Advisor Amazon GuardDuty Amazon Inspector AWS Config
.
Which AWS service identifies security groups that allow unrestricted access to a user's AWS resources? AWS CloudTrail AWS Trusted Advisor Amazon CloudWatch Amazon Inspector.
According to the AWS shared responsibility model, who is responsible for configuration management? It is solely the responsibility of the customer. It is solely the responsibility of AWS. It is shared between AWS and the customer. It is not part of the AWS shared responsibility model.
.
Which AWS service is a content delivery network that securely delivers data, video, and applications to users globally with low latency and high speeds? AWS CloudFormation AWS Direct Connect Amazon CloudFront Amazon Pinpoint.
Which benefit of the AWS Cloud supports matching the supply of resources with changing workload demands? Security Reliability Elasticity High availability.
A user is running an application on AWS and notices that one or more AWS-owned IP addresses is involved in a distributed denial-of-service (DDoS) attack.
Who should the user contact FIRST about this situation? AWS Premium Support AWS Technical Account Manager AWS Solutions Architect AWS Abuse team.
What AWS service would be used to centrally manage AWS access policies across multiple accounts? AWS Service Catalog AWS Config AWS Trusted Advisor AWS Organizations.
What is AWS Trusted Advisor? It is an AWS staff member who provides recommendations and best practices on how to use AWS. It is a network of AWS partners who provide recommendations and best practices on how to use AWS. It is an online tool with a set of automated checks that provides recommendations on cost optimization, performance, and security. It is another name for AWS Technical Account Managers who provide recommendations on cost optimization, performance, and security.
Which AWS service or feature allows a company to visualize, understand, and manage AWS costs and usage over time? AWS Budgets AWS Cost Explorer AWS Organizations Consolidated billing.
Which of the following are benefits of hosting infrastructure in the AWS Cloud? (Choose two.) There are no upfront commitments. AWS manages all security in the cloud. Users have the ability to provision resources on demand. Users have access to free and unlimited storage. Users have control over the physical infrastructure.
Which AWS service offers on-demand access to AWS security and compliance reports? AWS CloudTrail AWS Artifact AWS Health Amazon CloudWatch.
Which AWS services can host a Microsoft SQL Server database? (Select TWO.) Amazon EC2 Amazon Relational Database Service (Amazon RDS) Amazon Aurora Amazon Redshift Amazon Redshift.
Which AWS characteristics make AWS cost effective for a workload with dynamic user demand? (Select TWO.) High availability Shared security model Elasticity Pay-as-you-go pricing Reliability.
Which of the following are characteristics of Amazon S3? (Select TWO.) A global file system An object store A local file store A network file system A durable storage system.
Which services can be used across hybrid AWS Cloud architectures? (Select TWO.) Amazon Route 53 Virtual Private Gateway Classic Load Balancer Auto Scaling Amazon CloudWatch default metrics.
Which AWS tools assist with estimating costs? (Select three.) Detailed billing report Cost allocation tags AWS Simple Monthly Calculator AWS Total Cost of Ownership (TCO) Calculator Cost Estimator.
AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Select TWO.) Implementing Amazon Rekognition Using AWS Shield-protected resources Blocking access with Security Groups Using Multi-Factor Authentication (MFA) Enforcing password strength and expiration.
Which AWS services should be used for read/write of constantly changing data? (Select TWO.) Amazon Glacier Amazon RDS AWS Snowball Amazon Redshift Amazon EFS.
Which of the following are features of Amazon CloudWatch Logs? (Select TWO.) Summaries by Amazon Simple Notification Service (Amazon SNS) Free Amazon Elasticsearch Service analytics Provided at no charge Real-time monitoring Adjustable retention.
Which of the following are valid ways for a customer to interact with AWS services? (Select TWO.) Command line interface On-premises Software Development Kits Software-as-a-service Hybrid.
|
