1 Practice Exam 12

  1. Which of the following components of the AWS Global Infrastructure consists of one or more discrete data centers interconnected through low latency links?
    • A. Availability Zone
    • B. Edge location
    • C. Region
    • D. Private networking
    Answer Correct answer: A
  2. One benefit of On-Demand Amazon Elastic Compute Cloud (Amazon EC2) pricing is:
    • A. The ability to bid for a lower hourly cost.
    • B. Paying a daily rate regardless of time used.
    • C. Paying only for time used.
    • D. Pre-paying for instances and paying a lower hourly rate.
    Answer Correct answer: C
  3. What can assist in evaluating an application for migration to the cloud? (Select TWO)
    • A. AWS Trusted Advisor.
    • B. AWS Professional Services.
    • C. AWS Systems Manager.
    • D. AWS Partner Network (APN).
    • E. AWS Secrets Manager.
    Answer Correct answer: B, D
  4. A characteristic of edge locations is that they:
    • A. Host Amazon EC2 instances closer to users.
    • B. Help lower latency and improve performance for users.
    • C. Cache frequently changing data without reaching the origin server.
    • D. Refresh data changes daily.
    Answer Correct answer: B
  5. Which of the following are valid ways for a customer to interact with AWS services? (Select TWO)
    • A. Command line interface.
    • B. On-premises.
    • C. Software Development Kits.
    • D. Software-as-a-service.
    • E. Hybrid.
    Answer Correct answer: A, C
  6. What is a value proposition of the AWS Cloud?
    • A. AWS is responsible for security in the AWS Cloud.
    • B. No long-term contract is required.
    • C. Provision new servers in days.
    • D. AWS manages user applications in the AWS Cloud.
    Answer Correct answer: B
  7. A company is migrating an application that is running non-interruptible workloads for a three-year time frame. Which pricing construct would provide the MOST cost-effective solution?
    • A. Amazon EC2 Spot Instances.
    • B. Amazon EC2 Dedicated Instances.
    • C. Amazon EC2 On-Demand Instances.
    • D. Amazon EC2 Reserved Instances.
    Answer Correct answer: D
  8. Which AWS service is used to track record, and audit configuration changes made to AWS resources?
    • A. AWS Shield.
    • B. AWS Config.
    • C. AWS IAM.
    • D. Amazon Inspector.
    Answer Correct answer: B
  9. Which feature of the AWS Cloud will support an international company’s requirement for low latency to all of its customers?
    • A. Fault tolerance.
    • B. Global reach.
    • C. Pay-as-you-go pricing.
    • D. High availability.
    Answer Correct answer: B
  10. How can one AWS account use Reserved Instances from another AWS account?
    • A. By using Amazon EC2 Dedicated Instances.
    • B. By using AWS Organizations consolidated billing.
    • C. By using the AWS Cost Explorer tool.
    • D. By using AWS Budgets.
    Answer Correct answer: B
  11. What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Select TWO)
    • A. AWS automatically distributes the data globally for higher durability.
    • B. AWS will take care of operating the application.
    • C. AWS makes it easy to architect for high availability.
    • D. AWS can easily accommodate application demand changes.
    • E. AWS takes care of application security patching.
    Answer Correct answer: C, D
  12. Which of the following services falls under the responsibility of the customer to maintain operating system configuration, security patching, and networking?
    • A. Amazon RDS.
    • B. Amazon EC2.
    • C. Amazon ElastiCache.
    • D. AWS Fargate.
    Answer Correct answer: B
  13. AWS supports which of the following methods to add security to Identity and Access Management (IAM) users? (Select TWO)
    • A. Implementing Amazon Rekognition.
    • B. Using AWS Shield-protected resources.
    • C. Blocking access with Security Groups.
    • D. Using Multi-Factor Authentication (MFA).
    • E. Enforcing password strength and expiration.
    Answer Correct answer: D, E
  14. Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?
    • A. Amazon Glacier
    • B. AWS Snowball
    • C. AWS Storage Gateway
    • D. Amazon Elastic Block Storage (Amazon EBS)
    Answer Correct answer: C
  15. Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS?
    • A. AWS Marketplace.
    • B. Amazon Lumberyard.
    • C. AWS Artifact.
    • D. Amazon CloudSearch.
    Answer Correct answer: A
  16. Which of the following is a component of the AWS Global Infrastructure?
    • A. Amazon Alexa.
    • B. AWS Regions.
    • C. Amazon Lightsail.
    • D. AWS Organizations.
    Answer Correct answer: B
  17. Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?
    • A. On-Demand Instances.
    • B. Reserved Instances.
    • C. Spot Instances.
    • D. Convertible Reserved Instances.
    Answer Correct answer: C
  18. A company wants to migrate its applications to a VPC on AWS These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goals? (Select TWO)
    • A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated
    • B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC
    • C. Use Amazon Athena to query data from the on-premises database servers
    • D. Connect the company’s on-premises data center to AWS using AWS Direct Connect
    • E. Leverage Amazon CloudFront to restrict access to static web content provided through the company’s on-premises web servers
    Answer Correct answer: B, D
  19. A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?
    • A. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0.
    • B. Run AWS Trusted Advisor and review the findings.
    • C. Open the AWS IAM console and check the inbound rule filters for open access.
    • D. In AWS Config, create a custom rule that invokes an AWS Lambda function to review firewall rules for inbound access.
    Answer Correct answer: B
  20. Which of the following security-related services does AWS offer? (Select TWO)
    • A. Multi-factor authentication physical tokens.
    • B. AWS Trusted Advisor security checks.
    • C. Data encryption.
    • D. Automated penetration testing.
    • E. Amazon S3 copyrighted content detection.
    Answer Correct answer: B, C
  21. Which of the following services have Distributed Denial of Service (DDoS) mitigation features? (Select TWO)
    • A. AWS WAF.
    • B. Amazon DynamoDB.
    • C. Amazon EC2.
    • D. Amazon CloudFront.
    • E. Amazon Inspector.
    Answer Correct answer: A, D
  22. Which of the following AWS features enables a user to launch a pre-configured Amazon Elastic Compute Cloud (Amazon EC2) instance?
    • A. Amazon Elastic Block Store (Amazon EBS).
    • B. Amazon Machine Image.
    • C. Amazon EC2 Systems Manager.
    • D. Amazon AppStream 2.0.
    Answer Correct answer: B
  23. A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle?
    • A. Think parallel.
    • B. Implement elasticity.
    • C. Decouple your components.
    • D. Design for failure.
    Answer Correct answer: B
  24. Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage?
    • A. Easy and fast deployment of applications in multiple Regions around the world.
    • B. Security of the AWS Cloud.
    • C. Elasticity of the AWS Cloud.
    • D. Lower variable costs due to massive economies of scale.
    Answer Correct answer: C
  25. What can users access from AWS Artifact?
    • A. AWS security and compliance documents.
    • B. A download of configuration management details for all AWS resources.
    • C. Training materials for AWS services.
    • D. A security assessment of the applications deployed in the AWS Cloud.
    Answer Correct answer: A
  26. Compared with costs in traditional and virtualized data centers, AWS has:
    • A. Greater variable costs and greater upfront costs.
    • B. Fixed usage costs and lower upfront costs.
    • C. Lower variable costs and greater upfront costs.
    • D. Lower variable costs and lower upfront costs.
    Answer Correct answer: D
  27. Which AWS service would a customer use with a static website to achieve tower latency and high transfer speeds?
    • A. AWS Lambda.
    • B. Amazon DynamoDB Accelerator.
    • C. Amazon Route 53.
    • D. Amazon CloudFront.
    Answer Correct answer: D
  28. How do Amazon EC2 Auto Scaling groups help achieve high availability for a web application?
    • A. They automatically add more instances across multiple AWS Regions based on global demand of the application.
    • B. They automatically add or replace instances across multiple Availability Zones when the application needs it.
    • C. They enable the application’s stalk: content to reside closer to end users.
    • D. They are able to distribute incoming requests across a tier of web server instances.
    Answer Correct answer: B
  29. Which of the following can limit Amazon Simple Storage Service (Amazon S3) bucket access to specific users?
    • A. A public and private key-pair.
    • B. Amazon Inspector.
    • C. AWS Identity and Access Management (IAM) policies.
    • D. Security Groups.
    Answer Correct answer: C
  30. How should a customer forecast the future costs for running a new web application?
    • A. Amazon Aurora Backtrack.
    • B. Amazon CloudWatch Billing Alarms.
    • C. AWS Simple Monthly Calculator.
    • D. AWS Cost and Usage report.
    Answer Correct answer: C
  31. Where are AWS compliance documents, such as an SOC 1 report, located?
    • A. Amazon Inspector.
    • B. AWS CloudTrail.
    • C. AWS Artifact.
    • D. AWS Certificate Manager.
    Answer Correct answer: C
  32. Which of the following tasks is the responsibility of AWS?
    • A. Encrypting client-side data.
    • B. Configuring AWS Identity and Access Management (IAM) roles.
    • C. Securing the Amazon EC2 hypervisor.
    • D. Setting user password policies.
    Answer Correct answer: C
  33. Under the shared responsibility model which of the following areas are the customer’s responsibility? (Select TWO)
    • A. Firmware upgrades of network infrastructure.
    • B. Patching of operating systems.
    • C. Patching of the underlying hypervisor.
    • D. Physical security of data centers.
    • E. Configuration of the security group.
    Answer Correct answer: B, E
  34. A company is looking for a scalable data warehouse solution. Which of the following AWS solutions would meet the company’s needs?
    • A. Amazon Simple Storage Service (Amazon S3).
    • B. Amazon DynamoDB.
    • C. Amazon Kinesis.
    • D. Amazon Redshift.
    Answer Correct answer: D
  35. Much AWS services provide a way to extend an on-premises architecture to the AWS Cloud? (Select TWO)
    • A. Amazon EBS.
    • B. AWS Direct Connect.
    • C. Amazon CloudFront.
    • D. AWS Storage Gateway.
    • E. Amazon Connect.
    Answer Correct answer: B, D
  36. What are the advantages of the AWS Cloud (Select TWO)
    • A. Fixed rate monthly cost.
    • B. No need to guess capacity requirements.
    • C. Increased speed to market.
    • D. Increased upfront capital expenditure.
    • E. Physical access to cloud data centers.
    Answer Correct answer: B, C
  37. How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center?
    • A. Users do not have to wait for infrastructure provisioning.
    • B. The AWS Cloud infrastructure is much faster than an on-premises data center infrastructure.
    • C. AWS takes over application configuration management on behalf of users.
    • D. Users do not need to address security and compliance issues.
    Answer Correct answer: A
  38. Which of the following services could be used to deploy an application to servers running on-premises? (Select TWO)
    • A. AWS Elastic Beanstalk.
    • B. AWS OpsWorks.
    • C. AWS CodeDeploy.
    • D. AWS Batch.
    • E. AWS X-Ray.
    Answer Correct answer: B, C
  39. What is an example of agility in the AWS Cloud?
    • A. Access to multiple instance types.
    • B. Access to managed services.
    • C. Using Consolidated Billing to produce one bill.
    • D. Decreased acquisition time for new compute resources.
    Answer Correct answer: D
  40. Which AWS security service protects applications from distributed denial of service attacks with always-on detection and automatic inline mitigations?
    • A. Amazon Inspector.
    • B. AWS Web Application Firewall (AWS WAF).
    • C. Elastic Load Balancing (ELB).
    • D. AWS Shield.
    Answer Correct answer: D
  41. Which of the following are advantages of AWS consolidated billing? (Choose two)
    • A. The ability to receive one bill for multiple accounts.
    • B. Service limits increasing by default in all accounts.
    • C. A fixed discount on the monthly bill.
    • D. Potential volume discounts, as usage in all accounts is combined.
    • E. The automatic extension of the master account’s AWS support plan to all accounts.
    Answer Correct answer: A, D
  42. A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes. Which service should the company use?
    • A. Amazon Redshift.
    • B. Amazon DynamoDB.
    • C. Amazon Elastic Compute Cloud (Amazon EC2) with Amazon EC2 instance store.
    • D. Amazon EC2 with Amazon Elastic Block Store (Amazon EBS).
    Answer Correct answer: D