Quiz
AWS Certified Cloud Practitioner
This quiz has a time limit, so it opens in the usual player.
Questions in this quiz (200)
1Which AWS services can be used to facilitate organizational change management, part of the Reliability pillar of AWS Well-Architected Framework? (Select three)
- AAmazon CloudWatch
- BAWS Trusted Advisor
- CAmazon Inspector
- DAWS CloudTrail
- EAWS Config
- FAmazon GuardDuty
2A Cloud Practitioner would like to get operational insights of its resources to quickly identify any issues that might impact applications using those resources. Which AWS service can help with this task?
- AAWS Systems Manager
- BAWS Trusted Advisor
- CAWS Personal Health Dashboard
- DAmazon Inspector
3Which of the following options is NOT a feature of Amazon Inspector?
- ATrack configuration changes
- BAutomate security assessments
- CAnalyze against unintended network accessibility
- DInspect running operating systems (OS) against known vulnerabilities
4Which of the following AWS services is delivered globally rather than regionally?
- AAmazon EFS
- BAmazon S3 buckets
- CAmazon WorkSpaces
- DAWS Snowmobile
5Bob and Susan each have an AWS account in AWS Organizations. Susan has five Reserved Instances (RIs) of the same type and Bob has none. During one particular hour, Susan uses three instances and Bob uses six for a total of nine instances on the organization's consolidated bill.
Which of the following statements are correct about consolidated billing in AWS Organizations? (Select two)- ABob receives the cost-benefit from Susan's Reserved Instances only if he launches his instances in the same Availability Zone where Susan purchased her Reserved Instances
- BAWS bills five instances as Reserved Instances, and the remaining four instances as regular instances
- CAWS bills three instances as Reserved Instances, and the remaining six instances as regular instances
- DBob does not receive any cost-benefit since he hasn't purchased any RIs. If his account has even one RI, then the cost-benefit from Susan's account is also added to his account
- EBob receives the cost-benefit from Susan's Reserved Instances only if he launches his instances in the same Region where Susan purchased her Reserved Instances
6Você trabalha numa agência de viagens online e precisa armazenar, analisar e correlacionar dados de logs de seus aplicativos para identificar e resolver gargalos de desempenho e problemas de disponibilidade para garantir uma experiência de reserva otimizada para os seus clientes. Qual serviço da AWS abaixo é o mais indicado?
- AAmazon CloudSearch
- BAmazon Athena
- CAmazon EMR
- DAmazon ElasticSearch
7Uma empresa tem um servidor de aplicações em execução em uma instância Amazon EC2. O servidor de aplicações precisa acessar o conteúdo em um bucket privado do Amazon S3.
Qual é a abordagem recomendada para atender a esse requisito?- ACrie uma IAM role com as permissões apropriadas. Associe a role à instância EC2.
- BConfigure uma conexão de peering de VPC para permitir a comunicação privada entre a instância EC2 e o bucket do S3.
- CCrie uma chave de acesso compartilhada. Configure a instância EC2 para usar a chave codificada.
- DConfigure a aplicação para ler uma chave de acesso de uma fonte segura.
8Which of the following statements are CORRECT regarding the AWS VPC service? (Select two)
- AA Security Group can have allow rules only
- BA NAT Gateway is managed by AWS
- CA Security Group can have both allow and deny rules
- DA NAT Instance is managed by AWS
- EA NACL can have allow rules only
9A company wants to improve the resiliency of its flagship application so it wants to move from the traditional SQL database to a managed AWS database service to support active-active configuration in both East and West AWS regions. The active-active configuration with cross-region support is the prime criteria for any database solution that the company considers.
Which AWS database service is the right fit for this requirement?- AAmazon DynamoDB with global tables
- BAmazon DynamoDB with DynamoDB Accelerator
- CAmazon Aurora with multi-master cluster
- DAmazon Relational Database Service (Amazon RDS) for MYSQL
10Which of the following entities applies patches to the underlying OS for AWS Aurora?
- AThe AWS Product Team automatically
- BThe AWS customer by using AWS Systems Manager
- CThe AWS Support after receiving a request from the customer
- DThe AWS customer by SSHing on the instances
11Which of the following AWS Support plans provides access to online training with self-paced labs?
- ABasic
- BEnterprise
- CBusiness
- DDeveloper
12An IT company wants to run a log backup process every Monday at 2 AM. The usual runtime of the process is 5 minutes. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case? (Select two)
- ASystem Manager
- BLambda
- CEC2 Instance
- DCloudWatch
- EStep Function
13Which AWS compute service provides the EASIEST way to access resizable compute capacity in the cloud with support for per-second billing and access to the underlying OS?
- ALightsail
- BECS
- CLambda
- DEC2
14Which AWS service can be used to store, manage, and deploy Docker container images?
- AEC2
- BECR
- CLambda
- DECS
15Which of the following statements are CORRECT regarding Security Groups and Network Access Control Lists (NACLs)? (Select two)
- AA Security Group is stateful, that is, it automatically allows the return traffic
- BA NACL contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic
- CA Security Group contains a numbered list of rules and evaluates these rules in the increasing order while deciding whether to allow the traffic
- DA NACL is stateful, that is, it automatically allows the return traffic
- EA Security Group is stateless, that is, the return traffic must be explicitly allowed
16A customer is running a comparative study of pricing models of Amazon EFS and Amazon EBS that are used with the Amazon EC2 instances that host the application. Which of the following statements are correct regarding this use-case? (Select two)
- AYou will pay a fee each time you read from or write data stored on the EFS - Infrequent Access storage class
- BAmazon EBS Snapshots are stored incrementally, which means you are billed only for the changed blocks stored
- CAmazon EC2 data transfer charges will apply for all EBS direct APIs for Snapshots
- DAmazon EBS Snapshot storage pricing is based on the amount of space your data consumes in EBS
- EWith AWS Backup, you pay only for the amount of EFS backup storage you use in a month, you need not pay for restoring this data
17What is the primary benefit of deploying an RDS database in a Read Replica configuration?
- ARead Replica improves database scalability
- BRead Replica enhances database availability
- CRead Replica protects the database from a regional failure
- DRead Replica reduces database usage costs
18Which AWS service can be used to automate code deployment to EC2 instances as well as on-premises instances?
- ACodepipeline
- BCodecommit
- CCodeDeploy
- DCloudFormation
19A company has a static website hosted on an S3 bucket in an AWS Region in Asia. Although most of its users are in Asia, now it wants to drive growth globally. How can it improve the global performance of its static website?
- AUse CloudFront to improve the performance of your website
- BUse CloudFormation to improve the performance of your website
- CUse WAF to improve the performance of your website
- DUse S3 Transfer Acceleration to improve the performance of your website
20An IT company is on a cost-optimization spree and wants to identify all EC2 instances that are under-utilized. Which AWS services can be used to address this use-case? (Select two)
- ATrusted Advisor
- BBudgets
- CCost and Usage Reports
- DCost Explorer
21Which of the following are correct statements regarding the AWS Shared Responsibility Model? (Select two)
- AAWS is responsible for Security "of" the Cloud
- BFor a service like Amazon EC2, that falls under Infrastructure as a Service, AWS is responsible for maintaining guest operating system
- CConfiguration Management is the responsibility of the customer
- DAWS is responsible for training AWS and customer employees on AWS products and services
- ESecurity and Compliance is a shared responsibility between AWS and the customer
22Which budget types can be created under AWS Budgets (Select three)?
- Areservation budget
- Bresource budget
- Csoftware budget
- Dcost budget
- Eusage budget
- Fhardware budget
23Which of the following AWS services are regional in scope? (Select two)
- ACloudFront
- BIAM
- CLambda
- DWAF
- ERecognition
24A multi-national organization has separate VPCs for each of its business units on the AWS Cloud. The organization also wants to connect its on-premises data center with all VPCs for better organization-wide collaboration. Which AWS services can be combined to build the MOST efficient solution for this use-case? (Select two)
- AStorage gateway
- BInternet gateway
- CVPC peering
- DTransit gateway
- EDirect connect
25Which of the following describes an Availability Zone in the AWS Cloud?
- AOne or more data centers in the same location
- BOne or more data centers in multiple locations
- COne or more server racks in the same location
- DOne or more server racks in multiple locations
26AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two)
- AS3
- BIAM
- CCloudFront
- DEC2
- EElastic Beanstalk
27As per the AWS Shared Responsibility Model, which of the following is a responsibility of AWS from a security and compliance point of view?
- APatching networking infrastructure
- BService and Communications Protection
- CIdentity and Access Management
- DPatching guest OS and applications
28Which AWS service will help you install application code automatically to an Amazon EC2 instance?
- AElastic Beanstalk
- BCloudFormation
- CCodeBuild
- DCodeDeploy
29Which of the following S3 storage classes do not charge any data retrieval fee? (Select two)
- AS3 Standard
- BS3 One Zone-IA
- CS3 Standard-IA
- DS3 Intelligent Tiering
- ES3 Glacier
30A company would like to move 50 petabytes (PBs) of data from its on-premises data centers to AWS in the MOST cost-effective way. As a Cloud Practitioner, which of the following solutions would you choose?
- ASqnoball
- BSnoball Edge
- CSnowmobile
- DStorage Gateway
31Which of the following statements is the MOST accurate when describing AWS Elastic Beanstalk?
- AIt is a Platform as a Service (PaaS) which allows you to deploy and scale web applications and services
- BIt is an Infrastructure as Code which allows you to model and provision resources needed for an application
- CIt is a Platform as a Service (PaaS) which allows you to model and provision resources needed for an application
- DIt is an Infrastructure as a Service (IaaS) which allows you to deploy and scale web applications and services
32An organization would like to copy data across different Availability Zones (AZs) using EBS snapshots. Where are EBS snapshots stored in the AWS Cloud?
- AEC2
- BRDS
- CEFS
- DS3
33A research lab needs to be notified in case of a configuration change for security and compliance reasons. Which AWS service can assist with this task?
- ATRusted Advisor
- BSecrets Manager
- CInspector
- DConfig
34A company using a hybrid cloud would like to store secondary backup copies of the on-premises data. Which S3 Storage Class would you use for a cost-optimal yet rapid access solution?
- AS3 Glacier
- BS3 Standard IA
- CS3 Standard - General Purposes
- DS3 One Zone - IA
35Which of the following services are provided by Amazon Route 53? (Select TWO)
- AIP routing
- Bload balancing
- Cdomain registration
- Dhealth checks and monitoring
- Etransfer acceleration
36A company would like to move its infrastructure to AWS Cloud. Which of the following should be included in the Total Cost of Ownership (TCO) estimate? (Select TWO)
- Apower/cooling
- Bapplication advertising
- Celectronic equipment at office
- Dnumber of end-users
- Eserver admnistration
37A team lead is reviewing the AWS services that can be used in the development workflow for his company. Which of the following statements are correct regarding the capabilities of these AWS services? (Select three)
- AEach CodeStar project includes development tools, including AWS CodePipeline, AWS CodeCommit, AWS CodeBuild, and AWS CodeDeploy, that can be used on their own and with existing AWS applications
- BCodePipeline uses Amazon CloudWatch Events to detect changes in CodeCommit repositories used as a source for a pipeline
- CYou can use AWS CodeStar and AWS Cloud9 to develop, build, and deploy a serverless web application
- DCodeBuild is integrated with CodePipeline, but not directly with CodeCommit
- ECodeCommit allows you to run builds and tests as part of your CodePipeline
- FAWS CodeStar is a cloud-based integrated development environment that lets you write, run, and debug your code with just a browser
38Which tool/service will help you to get a better idea of what your costs and usage may look like in the future?
- AAWS Marketplace
- BCost Explorer
- CSimple Monthly Calculator / PRincing Calculator
- DConsolidated Billing of AWS Organizations
39A company is looking at real-time processing of streaming big data for their ad-tech platform. Which of the following AWS services is the right choice for this requirement?
- ASQS
- BRedshift
- CKinesis daa stream
- DEMR
40A media company uses Amazon Simple Storage Service (Amazon S3) for storing all its data. Which storage class should it consider for cost-optimal storage of the data that has random access patterns?
- AAmazon S3 Intelligent-Tiering (S3 Intelligent-Tiering)
- BAmazon S3 Standard (S3 Standard)
- CAmazon S3 Standard-Infrequent Access (S3 Standard-IA)
- DAmazon S3 Random Access (S3 Random-Access)
41Which AWS service is used to store and commit code privately and also offer features for version control?
- ACodePipeline
- BCodeStar
- CCodeBuild
- DCodeCommit
42A financial consulting company is looking for automated reference deployments, that will speed up the process of deploying its financial solutions on AWS Cloud. The reference deployment should be able to deploy most of the well-known functions of financial services and leave space for customizations, if necessary.
Which AWS service will help achieve this requirement?- AQuick Starts
- BCloudFormation
- CQuicksight
- DElastic Beanstalk
43Você lidera um time de desenvolvimento pequeno e que não tem tempo de se envolver com muitas questões de infraestrutura AWS, porém você gostaria de fazer o uso de container porque acredita que esse modelo de arquitetura tem muitas vantagens. Qual serviço da Amazon permite que você crie e use container sem precisar se preocupar com questões de infraestrutura e que usa uma infraestrutura sem servidor (servless) ?
- AECR
- BEKS
- CFargate
- DECS
44Qual é o serviço que garante que você tem o correto número de instâncias EC2 disponíveis para lidar com a carga da sua aplicação?
- AELB
- BEC2 auto scaling
- CVPC
- DRoute 53
45Foi percebido que algumas aplicações críticas da sua empresa estão apresentando erros e a equipe de suporte está tendo bastante dificuldade na resolução dos problemas, pois não encontram as devidas logs. Qual serviço da AWS você recomendaria para monitorar o ambiente e coletar as logs?
- ACloudWatch
- BCloudTrail
- CAWS Log
- DAWS Monitor
46Qual é o serviço que inclui um relatório padrão que ajuda a ver os custos e o uso associados aos cinco Serviços da AWS que mais aumentam os custos, além de disponibilizar um detalhamento minucioso sobre todos os serviços utilizados?
- AAWS Cost Explorer
- BAWS Billing
- CAWS Pricing
- DAWS Budget
47Sua empresa deseja implementar governança nos serviços de TI que estejam aprovados para uso na AWS, para acompanhar o custo, desempenho, segurança e status operacional dos mesmos. Qual é o serviço que permite a criação de catálogos de serviços de TI para essa finalidade?
- AAWS Console Manager
- BAWS Catalog
- CAWS Service Catalog
- DAWS IT Service
48Qual é o serviço capaz de coletar e processar em tempo real, um grande volume de streams de dados oriundos de diversos dispositivos gerando novas informações para rápidas reações e direções?
- ASNS
- BEventBridge
- CKinesis
- DSQS
49Você desenvolveu um sistema de workflow e gostaria que um e-mail fosse enviado para o solicitante apenas quando o processo fosse cancelado no meio do fluxo. A volumetria estimada é de 300 casos por mês. Qual sequência de serviços abaixo é a mais indicada para uma implementação de forma desacoplada, com a publicação de um evento, filtro de mensagens e envio do e-mail?
- ASNS SQS Lambda SES
- BLambda SQS SNS SES
- CSNS Lambda SES SQS
- DSQS SNS Lambda SES
50Um dos 12 fatores para aplicações web em cloud é manter o cache de sessões de estado do usuário em memória fora das instâncias EC2. Qual serviço abaixo é mais recomendado para essa finalidade?
- AAmazon ElasticCache for Redis
- BAmazon EBS
- CEventBridge
- DS3
51Você deseja disponibilizar sua aplicação no endereço www.simuladoudemy.com e hospedá-la em 4 instâncias EC2, em quatro zonas de disponibilidade de uma mesma região. Qual sequência de serviços abaixo pode ser utilizada para essa finalidade?
- AAPI Gateway e ELB
- BAPI Gateway e
AutoScaling - CRoute 53 e ELB
- DRpoute 53 e AutoScaling
52Qual é o serviço que tem uma relação preço-performance até 3x melhor do que outros data warehouses na nuvem, e onde a vantagem dessa relação preço-performance aumenta à medida que seu data warehouse cresce de gigabytes para hexabytes?
- AEMR
- BQuickSight
- CRDS
- DRedShift
53Com qual serviço da AWS você pode identificar e refinar facilmente suas políticas para permitir o acesso de usuários e aplicações apenas aos serviços que estão sendo usados te ajudando a adotar da melhor forma o princípio do menor privilégio?
- AIAM roles
- BAWS IAM
- CAWS Cognito
- DAWS MFA
54Você precisa migrar uma grande quantidade de dados do seu ambiente on-premise para armazenamento no S3 de forma automática e periódica, liberando a capacidade da sua infraestrutra particular. Qual serviço que pode ser utilizado pra essa finalidade?
- ADirectConnect
- BVPN
- CDMS
- DDataSync
55Qual tipo de tráfego de dados entre serviços da AWS não tem custos?
- Atráfego de entrada dentro da mesma regiao
- Btráfego de saída entre regiões de um mesmo continente
- Ctráfego de entrada em todas as regiões
- Dtráfego de saída em todas as regiões da AWS
56Which AWS Support plan provides architectural guidance contextual to your specific use-cases?
- ADeveloper
- Bbasic
- Centerprise
- Dbusiness
57AWS Shield Advanced provides expanded DDoS attack protection for web applications running on which of the following resources? (Select two)
- AAWS Global Accelerator
- BAWS Elastic Beanstalk
- CAmazon API Gateway
- DAmazon Route 53
- EAWS CloudFormation
58Which of the following AWS Support plans provides access to Infrastructure Event Management for an additional fee?
- Abasic
- Bbusiness
- Cdeveloper
- Denterprise
59Which AWS Route 53 routing policy would you use to route traffic to multiple resources and also choose how much traffic is routed to each resource?
- ALatency routing policy
- BFailover routing policy
- CSimple routing policy
- DWeighted routing policy
60A startup wants to set up its IT infrastructure on AWS Cloud. The CTO would like to get an estimate of the monthly AWS bill based on the AWS services that the startup wants to use. As a Cloud Practitioner, which AWS service would you suggest for this use-case?
- AAWS Simple Monthly Calculator
- BAWS Total Cost of Ownership (TCO) Calculator
- CAWS Cost Explorer
- DAWS Budgets
61A startup wants to provision an EC2 instance for the lowest possible cost for a long-term duration but needs to make sure that the instance would never be interrupted. As a Cloud Practitioner, which of the following options would you recommend?
- ASpot instance
- BDedicated host
- COn Demand instance
- DReserved instance
62Which AWS service will help you receive alerts when the reservation utilization falls below the defined threshold?
- ACloudTrail
- BBudgets
- CTrusted Advisor
- DSimple Monthly Calculator
63An e-commerce company has deployed an RDS database in a single Availability Zone. The engineering team wants to ensure that in case of an AZ outage, the database should continue working on the same endpoint without any manual administrative intervention. Which of the following solutions can address this use-case?
- AConfigure the database in RDS Multi-AZ deployment with automatic failover to the standby
- BDeploy the database via Elastic Beanstalk
- CConfigure the database in RDS read replica mode with automatic failover to the standby
- DProvision the database via CloudFormation
64Which of the following represents a serverless stack on AWS Cloud?
- AStep Function, DynamoDB, Lambda
- BStep Function, DynamoDB, EC2
- CEMR, DynamoDB, Lambda
- DEC2, DynamoDB, Lambda
65A company runs an application on a fleet of EC2 instances. The company wants to automate the traditional maintenance job of running timely assessments and checking for OS vulnerabilities. As a Cloud Practitioner, which service will you suggest for this use case?
- AMacie
- BInspector
- CShield
- DGuardDuty
66According to the AWS Shared Responsibility Model, which of the following are responsibilities of the customer for Amazon RDS?
- ADatabase encryption
- BManaging the underlying server hardware on which RDS runs
- CApplying patches to the RDS database
- DApplying patches to the underlying OS
67What is the primary benefit of deploying an RDS database in a Multi-AZ configuration?
- AMulti-AZ enhances database availability
- BMulti-AZ improves database performance for read-heavy workloads
- CMulti-AZ protects the database from a regional failure
- DMulti-AZ reduces database usage costs
68A multi-national company wants to migrate its IT infrastructure to AWS Cloud and is looking for a concierge support team as well as a response time of around an hour in case the systems go down. As a Cloud Practitioner, which of the following support plans would you recommend to the company?
- Adeveloper
- Bindividual
- Centerprise
- Dbusiness
69Which of the following AWS services are part of the AWS Foundation services for the Reliability pillar of the Well-Architected Framework in AWS Cloud? (Select two)
- ACloudWatch
- BCloudTrail
- CService Quotas
- DCloudFormation
- ETrusted Advisor
70Which of the following statement is correct for a Security Group and a Network Access Control List?
- ASecurity Group acts as a firewall at the instance level whereas Network Access Control List acts as a firewall at the subnet level
- BSecurity Group acts as a firewall at the subnet level whereas Network Access Control List acts as a firewall at the instance level
- CSecurity Group acts as a firewall at the VPC level whereas Network Access Control List acts as a firewall at the AZ level
- DSecurity Group acts as a firewall at the AZ level whereas Network Access Control List acts as a firewall at the VPC level
71Which of the following is correct about AWS "Developer" Support plan?
- AAllows one contact to open unlimited cases
- BAllows one contact to open a limited number of cases per month
- CAllows unlimited contacts to open unlimited cases
- DAllows unlimited contacts to open a limited number of cases per month
72A gaming company is looking at a technology/service that can deliver a consistent low-latency gameplay to ensure a great user experience for end-users in various locations.
Which AWS technology/service will provide the necessary low-latency access to the end-users?- AWavelength
- BEdge Locations
- CLocal Zones
- DDirect Connect
73An online gaming company wants to block users from certain geographies from accessing its content. Which AWS services can be used to accomplish this task? (Select two)
- AAWS WAF
- BAWS Shield
- CAWS Protect
- DRoute 53
- ECloudWatch
74Which of the following AWS services specialize in data migration from on-premises to AWS Cloud? (Select two)
- ADirect connect
- BTransit gateway
- CDatabase Migration Service
- DSite-to-Site VPN
- ESnowball
75A multi-national company has its business-critical data stored on a fleet of Amazon EC2 instances, in various countries, configured in region-specific compliance rules. To demonstrate compliance, the company needs to submit historical configurations on a regular basis. Which AWS service is best suited for this requirement?
- AAWS Config
- BAmazon Macie
- CAWS CloudTrail
- DAmazon GuardDuty
76Which AWS Support plan provides general architectural guidance on how services can be used for various use-cases, workloads, or applications?
- AEnterprise
- BBasic
- CDeveloper
- DBusiness
77Which of the following use cases is best suited for Amazon Elastic File System (EFS) Standard–Infrequent Access (Standard–IA) storage class?
- AStoring files in an accessible location to satisfy audit requirements
- BStoring data in a single AWS Availability Zone
- CObject storage for workloads that need sub-second latency speeds for accessing the data
- DUse as boot volume for highly available Amazon EC2 instances
78A startup runs its proprietary application on docker containers. As a Cloud Practitioner, which AWS service would you recommend so that the startup can run containers and still have access to the underlying servers?
- AECS
- BECR
- CLambda
- DFargate
79Which of the following capabilities does Amazon Rekognition provide as a ready-to-use feature?
- AIdentify objects in a photo
- Bconvert images into greyscale
- Cresize images quickly
- Dhuman pose detection
80Which of the following AWS services offer block-level storage? (Select two)
- AECS
- BEFS
- CEBS
- DS3
- EInstance Store
81Which S3 storage class offers the lowest availability?
- AS3 standard
- BS3 Glacier
- CS3 One Zone-IA
- DS3 Intelligent-Tiering
82Which AWS services support High Availability by default? (Select two)
- AInstance Store
- BEFS
- CEBS
- DRedshift
- EDynamoDB
83A development team is looking out for a forum where the most frequent questions and requests from AWS customers are listed along with AWS provided solutions.
Which AWS forum/service is the optimal place to start when looking for troubleshooting an issue or checking for a solution?- AAWS Service Health Dashboard
- BAWS Marketplace
- CAWS Support Center
- DAWS Knowledge Center
84Which of the following is correct regarding the AWS RDS service?
- AYou can use Read Replicas for both improved read performance as well as Disaster Recovery
- BYou can use Read Replicas for improved read performance and Multi-AZ for Disaster Recovery
- CYou can use both Read Replicas and Multi-AZ for improved read performance
- DYou can use Read Replicas for Disaster Recovery and Multi-AZ for improved read performance
85An e-commerce company would like to receive alerts when the Reserved EC2 Instances utilization drops below a certain threshold. Which AWS service can be used to address this use-case?
- ASystem Manager
- BTrusted Advisor
- CCost Explorer
- DBudgets
86A media company uploads its media (audio and video) files to a centralized S3 bucket from geographically dispersed locations. Which of the following solutions can the company use to optimize transfer speeds?
- AAmazon CloudFront
- BAWS Direct Connect
- CS3 Transfer Acceleration
- DAWS Global Accelerator
87Which of the following AWS services can be used to forecast your AWS account usage and costs?
- ACost and Usage reports
- BSimple Monthly Calculator
- CBudgets
- DCost Explorer
88Which AWS service can inspect CloudFront distributions running on any HTTP web-server?
- AAWS GuardDuty
- BAWS ELB
- CAmazon Inspector
- DAWS WAF
89Which of the following AWS Support plans is the MOST cost-effective when getting enhanced technical support by Cloud Support Engineers?
- Aenterprise
- Bbasic
- Cbusiness
- Ddeveloper
90A company would like to separate cost for AWS services by the department for cost allocation. Which of the following is the simplest way to achieve this task?
- ACreate tags for each department
- BCreate different accounts for different departments
- CCreate one account for all departments and share this account
- DCreate different VPCs for different departments
91Which Amazon EC2 Auto Scaling feature can help with fault tolerance?
- AReplacing unhealthy EC2 instances
- BLower cost by adjusting the number of EC2 instances
- CDistributing load to EC2 instances
- DHaving the right amount of computing capacity
92A brand new startup would like to remove its need to manage the underlying infrastructure and focus on the deployment and management of its applications. Which type of Cloud Computing does this refer to?
- APaaS
- BSaaS
- CIaaS
- DOn premises
93Which types of monitoring can be provided by Amazon CloudWatch? (Select TWO)
- AAPI access
- BPerformance and availability of AWS services
- CApplication performance
- DAccount management
- EResource utilization
94A start-up would like to monitor its cost on the AWS Cloud and would like to choose an optimal Savings Plan. As a Cloud Practitioner, which AWS service would you use?
- ACost Explorer
- BPricing calculator
- CBudgets
- DCost and Usage Reports
95A company needs to use a secure online data transfer tool/service that can automate the ongoing transfers from on-premises systems into AWS while providing support for incremental data backups.
Which AWS tool/service is an optimal fit for this requirement?- ASnowcone
- BDatasync
- CSmowmobile
- DStorage Gateway
96Which AWS service can be used to view the most comprehensive billing details for the past month?
- ATotal cost of ownership
- BCost and usage reports
- CBudgets
- DCost Explorer
97AWS Support plans are designed to give the right mix of tools and access to expertise for successfully running a business using AWS.
Which support plan(s) offer the full set of checks for AWS Trusted Advisor best practices and also provide support for programmatic case management?- ABusiness and Enterprise support plans
- BOnly Enterprise support plans
- CDeveloper, Business and Enterprise support plans
- DBusiness support plans after paying an additional fee and Enterprise support plans
98Which of the following statements are correct regarding Amazon API Gateway? (Select two)
- AAPI Gateway can call an AWS Lambda function to create the front door of a serverless application
- BAPI Gateway can be configured to send data directly to Amazon Kinesis Data Stream
- CAPI Gateway creates RESTful APIs, Storage Gateway creates WebSocket APIs
- DAPI Gateway does not yet support API result caching
- EIf an API response is served by cached data, it is not considered an API call for billing purposes
99Which of the following statements are correct regarding the AWS Control Tower and Service Control Policies? (Select two)
- AControl Tower is an AWS native service providing a pre-defined set of blueprints and guardrails to help customers implement a landing zone for new AWS accounts
- BService control policies (SCPs) are a type of organization policy that you can use to manage permissions in your organization
- CAWS Control Tower helps you deploy a multi-account AWS environment and operate it with day-to-day reminders and recommendations
- DService Control Policies (SCPs) can help grant permissions to the accounts in your organization
- EService Control Policies (SCPs), by default, affect all the users in the AWS Organization. They have to be configured to affect only the member accounts if needed
100Which of the following AWS services can be used to continuously monitor both malicious activities as well as unauthorized behavior to protect your AWS accounts and workloads?
- AAmazon Detective
- BAWS Security Hub
- CAmazon GuardDuty
- DAmazon Inspector
101A supply chain company is looking for a database that provides a centrally verifiable history of all changes made to data residing in it. This functionality is critical for the product and needs to be available off-the-shelf without the need for any customizations.
Which of the following databases is the right choice for this use-case?- AQLDB
- BNeptune
- CManaged Blockchain
- DTimestream
102Which of the following services/tools offers a user-friendly graphical user interface to manage AWS Snowball devices without a need for command-line interface or REST APIs?
- AOpswork
- BAppStream 2.0
- COpsHub
- DAWS Transfer Family
103AWS Support offers four support plans for its customers. Identify the features that are covered as part of the AWS Basic Support Plan? (Select two)
- AOne-on-one responses to account and billing questions
- BService health checks
- CBest practice guidance
- DUse-case guidance – What AWS products, features, and services to use to best support your specific needs
- EInfrastructure event management
104A manufacturing company is looking at a service that can offer AWS infrastructure, AWS services, APIs, and tools to its on-premises data center for running low latency applications.
Which of the following service/tool is the best fit for the given requirement?- ASnow Family
- BWavelength
- COutposts
- DLocal Zones
105By default, which of the following events are logged by AWS CloudTrail?
- Adata events
- Bmanagement events
- Cdata events and insights events
- Dinsights events
106uestion 39: Incorrect
As part of a flexible pricing model, AWS offers two types of Savings Plans. Which of the following are the Savings Plans from AWS?- ACompute Savings Plans, EC2 Instance Savings Plans
- BCompute Savings Plans, Storage Savings Plans
- CReserved Instances Savings Plans, EC2 Instance Savings Plans
- DInstance Savings Plans, Storage Savings Plans
107Which free tool helps to review the state of your workloads and compares them to the latest AWS architectural best practices after you have answered a series of questions about your workload?
- AWell Architected tool
- BTrusted Advisor
- CWell Architected Framework
- DTechinical Account Manager (TAM)
108Which of the following data sources are used by Amazon Detective to analyze events and identify potential security issues?
- AAWS CloudTrail logs, Amazon VPC Flow Logs and Amazon GuardDuty findings
- BAmazon CloudWatch Logs, Amazon VPC Flow Logs and Amazon GuardDuty findings
- CAmazon CloudWatch Logs, AWS CloudTrail logs and S3 Access Logs
- DAmazon CloudWatch Logs, AWS CloudTrail logs and Amazon Inspector logs
109A healthcare company wants to implement a continuous replication based disaster recovery mechanism and provide fast, reliable recovery of physical, virtual, and cloud-based servers into AWS Cloud. Which of the following represents the best-fit solution for this use case?
- ACloudEndure Disaster Recovery
- BAWS Snowball Edge
- CAWS Storage Gateway
- DCloudCover Disaster Recovery
110Which AWS service allows you to connect any number of IoT devices to the cloud without requiring you to provision or manage servers?
- AAmazon Connect
- BAWS Iot Gateway
- CAWS Iot Core
- DAWS Control Tower
111Which pillar of AWS Well-Architected Framework focuses on using IT and computing resources efficiently, while considering the right resource types and sizes based on workload requirements?
- AOperational Excellence Pillar
- BPerformance Efficiency Pillar
- CReliability Pillar
- DCost Optimization Pillar
112An e-commerce company has its on-premises data storage on an NFS file system that is accessed in parallel by multiple applications. The company is looking at moving the applications and data stores to AWS Cloud.
Which storage service should the company use to move their files to AWS Cloud seamlessly if the application is hosted on Amazon EC2 instances?- AEFS
- BS3
- CStorage Gateway
- DEBS
113Sua empresa deseja padronizar e versionar as configurações para a criação de todos os bancos de dados, além disso deseja que esses serviços sejam implementados e atualizados em toda a infraestrutura de servidores de forma automatizada fazendo o uso de pipelines de CI/CD. Qual é o serviço recomendado para esse requisito?
- AIAC
- BCodePipeline
- CCloudFormation
- DRDS
114You have set up consolidated billing for several AWS accounts. One of the accounts has purchased a number of reserved instances for 3 years. Which of the following is true regarding this scenario?
- AThe Reserved Instance discounts can only be shared with the master account
- BThere are no cost benefits from using consolidated billing; It is for informational purposes only
- CThe purchased instances will have better performance than On-demand instances
- DAll accounts can receive the hourly cost benefit of the Reserved Instances
115Which of the following must an IAM user provide to interact with AWS services using the AWS Command Line Interface (AWS CLI)?
- AAccess key
- BSecret token
- CUser ID
- DUser name and password
116Which of the following are examples of AWS-Managed Services, where AWS is responsible for the operational and maintenance burdens of running the service? (Choose TWO)
- AAWS IAM
- BAmazon EC2
- CAmazon DynamoDB
- DAmazon VPC
- EAmazon Elastic MapReduce
117One of the most important AWS best-practices to follow is the cloud architecture principle of elasticity. How does this principle improve your architecture’s design?
- ABy reducing interdependencies between application components wherever possible
- BBy automatically provisioning the required AWS resources based on changes in demand
- CBy automatically scaling your AWS resources using an Elastic Load Balancer
- DBy automatically scaling your on-premises resources based on changes in demand
118hich S3 storage class is best for data with unpredictable access patterns?
- AS3 Standard
- BS3 Glacier
- CS3 Standard-Infrequent Access
- DS3 Intelligent-Tiering
119The principle “design for failure and nothing will fail” is very important when designing your AWS Cloud architecture. Which of the following would help adhere to this principle? (Choose TWO)
- AMFA
- BELB
- CPenetration testing
- DAZ
- EVertical scaling
120What does the "Principle of Least Privilege" refer to?
- AAll IAM users should have at least the necessary permissions to access the core
- BYou should grant your users only the permissions they need when they need them and nothing more
- C• IAM users should not be granted any permissions; to keep your account safe
- DAll trusted IAM users should have access to any AWS service in the respective AWS account
121n order to implement best practices when dealing with a “Single Point of Failure,” you should attempt to build as much automation as possible in both detecting and reacting to failure. Which of the following AWS services would help? (Choose TWO)
- AAuto scaling
- BEC2
- CELB
- DAthena
- EECR
122 A company is introducing a new product to their customers, and is expecting a surge in traffic to their web application. As part of their Enterprise Support plan, which of the following provides the company with architectural and scaling guidance?
- AAWS Knowledge Center
- BInfrastructure event management
- CAWS Personal Health Dashboard
- DAWS Support Concierge Service
123Which of the following services allows customers to manage their agreements with AWS?
- AOrganizations
- BArtifact
- CSystems Manager
- DCertificate Manager
124What does AWS provide to deploy popular technologies - such as IBM MQ - on AWS with the least amount of effort and time?
- AAurora
- BAWS Quick Start reference deployments
- CCloudWatch
- DOpsWorks
125Which statement is true regarding the AWS Shared Responsibility Model?
- ASecurity of the managed services is the responsibility of the customer
- BResponsibilities vary depending on the services used
- CPatching the guest OS is always the responsibility of AWS
- DSecurity of the IaaS services is the responsibility of AWS
126A company is concerned that they are spending money on underutilized compute resources in AWS. Which AWS feature will help ensure that their applications are automatically adding/removing EC2 compute capacity to closely match the required demand?
- AAuto Scaling
- BBudgets
- CCost Explorer
- DELB
127According to the AWS Shared responsibility model, which of the following are the responsibility of the customer? (Choose TWO)
- AControlling physical access to AWS Regions
- BEnsuring that the underlying EC2 host is configured properly
- CProtecting the confidentiality of data in transit in Amazon S3
- DManaging environmental events of AWS data centers
- EPatching applications installed on Amazon EC2
128Which of the following AWS security features is associated with an EC2 instance and functions to filter incoming traffic requests?
- AAWS System Manager Session Manager
- BVPC Flow logs
- CNACL
- DSecurity Groups
129Your company is designing a new application that will store and retrieve photos and videos. Which of the following services should you recommend as the underlying storage mechanism?
- AAmazon SQS
- BAmazon EBS
- CAmazon Instance Store
- DAmazon S3
130A company is migrating its on-premises database to Amazon RDS. What should the company do to ensure Amazon RDS costs are kept to a minimum?
- ARight size before and after migration
- BUse Multi Region Active Passive architeture
- CCombine On demand capacity reservations with saving plans
- DUsim a Multi Region Active Acitve architeture
131Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose TWO)
- ACreating hypervisors
- BHardware maintenance
- CConfiguring Access Control Lists (ACLs)
- DINstalling software on EC@ instances
- EMonitoring network performance
132A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company?
- AAWS Professional Services
- BAPN Technology Partners
- CAWS TAM
- DAPN Consulting Partners
133Under the Shared Responsibility Model, which of the following controls do customers fully inherit from AWS? (Choose TWO)
- AEnvironmental controls
- BDatabase controls
- CPatch management controls
- DAwareness & Training
- EPhysical controls
134Which of the following AWS offerings is a MySQL-compatible relational database service that can scale capacity automatically based on demand?
- ANeptune
- BRDS for SQL Server
- CAurora
- DRDS for PostgreSQL
135Which statement is correct with regards to AWS service limits? (Choose TWO)
- AThere are no service limits on AWS
- BYou can use the AWS Trusted Advisor to monitor your service limits
- CEach IAM user has the same service limits
- DThe Amazon Simple Email Service is responsible for sending email notifications when usage approaches a service limit
- EYou can contact AWS support to increase the service limits
136Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities? (Choose TWO)
- APerforming backups
- BBuiding the relacional database schema
- CManaging the database settings
- Dpatching the database software
- Einstalling the database software
137Your application has recently experienced significant global growth, and international users are complaining of high latency. What is the AWS characteristic that can help improve your international users’ experience?
- Adata durability
- Bglobal reach
- Celasticity
- Dhigh availability
138Which of the following AWS services is designed with native Multi-AZ fault tolerance in mind? (Choose TWO)
- AEBS
- BS3
- CRedshift
- DSnowball
- EDynamoDB
139Savings Plans are available for which of the following AWS compute services? (Choose TWO)
- AAWS Batch
- BLambda
- CEC2
- DLightsail
- EOutposts
140Which of the following will impact the price paid for an EC2 instance? (Choose TWO)
- Anumber of buckets
- Bthe AZ where the instace is provisioned
- Cload balancing
- Dinstance type
- Enumber of private IPs
141What are two advantages of using Cloud Computing over using traditional data centers? (Choose TWO)
- Areserved compute capacity
- Beliminating SPOFs
- Cvirtualized compute resources
- Ddistributes infrastructure
- Ededicated hosting
142Which statement best describes the operational excellence pillar of the AWS Well-Architected Framework?
- AThe ability to monitor systems and improve supporting processes and procedures
- Bthe ability to manage datacenter operations more efficiently
- CThe efficient use of computing resources to meet requirements
- DThe ability of a system to recover gracefully from failure
143AWS has created a large number of Edge Locations as part of its Global Infrastructure. Which of the following is NOT a benefit of using Edge Locations?
- AEdge locations are used by CloudFront to improve your end users’ experience when uploading files
- BEdge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency
- CEdge locations are used by CloudFront to distribute content to global users with low latency
- DEdge locations are used by CloudFront to cache the most recent responses
144What is the connectivity option that uses Internet Protocol Security (IPSec) to establish encrypted connectivity between an on-premises network and the AWS Cloud?
- AAWS IQ
- BInternet Gateway
- CAWS Direct Connect
- DAWS Site-to-site VPN
145AWS recommends some practices to help organizations avoid unexpected charges on their bill. Which of the following is NOT one of these practices?
- AReleasing unused Elastic IPs after terminating an EC2 instance
- BDeleting unused AutoScaling launch configuration
- CDeleting unused EBS volumes after terminating an EC2 instance
- DDeleting unused Elastic Load Balancers
146TYMO Cloud Corp is looking forward to migrating their entire on-premises data center to AWS. What tool can they use to build a Business Case for moving to the AWS Cloud?
- AAWS Migration Evaluator
- BAWS Snowball Migration Service
- CAWS Migration Hub
- DAWS DMS
147What does AWS Service Catalog provide?
- AIt simplifies organizing and governing commonly deployed IT services
- BIt allows developers to deploy infrastructure on AWS using familiar programming languages
- CIt enables customers to quickly find descriptions and use cases for AWS services
- DIt enables customers to explore the different catalogs of AWS services
148What are the benefits of using DynamoDB? (Choose TWO)
- AAutomatically scales to meet required throughput capacity
- BProvides resizable instances to match the current demand
- CSupports the most popular NoSQL database engines such as CouchDB and MongoDB
- DSupports both relational and non-relational data models
149Which of the following statements describes the AWS Cloud’s agility?
- AAWS provides customizable hardware at the lowest possible cost
- BAWS allows you to pay upfront to reduce costs
- CAWS allows you to host your applications in multiple regions around the world
- DAWS allows you to provision resources in minutes
150A company is planning to migrate an application from Amazon EC2 to AWS Lambda to use a serverless architecture. Which of the following will be the responsibility of AWS after migration? (Choose TWO)
- Aaccess control
- Boperating system maintenance
- Cdata management
- Dcapacity management
- Eapplication management
151Which of the following are use cases for Amazon S3? (Choose TWO)
- ACost-effective database and log storage
- BA media store for the CloudFront service
- CProcessing data streams at any scale
- DHosting static websites
- EHosting websites that require sustained high CPU utilization
152What are the benefits of using an AWS-managed service? (Choose TWO)
- AProvides complete control over the virtual infrastructure
- BEliminates the need to encrypt data
- CAllows developers to control all patching related activities
- DAllows customers to deliver new solutions faster
153What are the benefits of implementing a tagging strategy for AWS resources? (Choose TWO)
- AQuickly identify software solutions on AWS
- BTrack API calls in your AWS account
- CTrack AWS spending across multiple resources
- DQuickly identify resources that belong to a specific project
- EQuickly identify deleted resources and their metadata
154Which of the following AWS services scale automatically without your intervention? (Choose TWO)
- AAmazon EC2
- BAmazon EMR
- CAWS Lambda
- DAmazon EBS
- EAmazon S3
155A developer needs to set up an SSL security certificate for a client's eCommerce website in order to use the HTTPS protocol. Which of the following AWS services can be used to deploy the required SSL server certificates? (Choose TWO)
- AAmazon Route 53
- BAWS ACM
- CAWS IAM
- DAWS Directory Service
- EAWS Data Pipeline
156What are the benefits of using the Amazon Relational Database Service? (Choose TWO)
- AComplete control over the underlying host
- BResizable compute capacity
- CLower administrative burden
- DScales automatically to larger or smaller instance types
- ESupports the document and key-value data structure
157Which of the below are responsibilities of the customer when using Amazon EC2? (Choose TWO)
- AProtecting sensitive data
- BInstalling and configuring third-party software
- CMaintaining consistent hardware components
- DSetup and operation of managed databases
- EPatching of the underlying infrastructure
158App development companies move their business to AWS to reduce time-to-market and improve customer satisfaction, what are the AWS automation tools that help them deploy their applications faster? (Choose TWO)
- ACloudFormation
- BMIgration Hub
- CIAM
- DElastic Beanstalk
- EMacie
159Which of the following activities supports the Operational Excellence pillar of the AWS Well-Architected Framework?
- AUsing AWS Trusted Advisor to find underutilized resources
- BUsing AWS CloudTrail to record user activities
- CUsing AWS CloudFormation to manage infrastructure as code
- DDeploying an application in multiple Availability Zones
160Which of the following are factors in determining the appropriate database technology to use for a specific workload? (Choose TWO)
- AAZs
- Bthe nature of the queries
- Cthe number of reads and writes per second
- Ddata sovereighty
- Esoftware bugs
161Which of the following allows you to create new RDS instances? (Choose TWO)
- ADMS
- BCloudFormation
- CCodeDeploy
- DQuick Starts
- EAWS Management Console
162 What are AWS shared controls?
- AControls that apply to both the infrastructure layer and customer layers
- BControls that the customer and AWS collaborate together upon to secure the infrastructure
- CControls that a customer inherits from AWS
- DControls that are solely the responsibility of the customer based on the application they are deploying within AWS services
163Which of the following can be used to protect data at rest on Amazon S3? (Choose TWO)
- Aconversion
- Bpermissions
- Cdeduplication
- Ddecryption
- Eversioning
164 A company needs to track resource changes using the API call history. Which AWS service can help the company achieve this goal?
- AAWS Config
- BCloudTrail
- CCloudFormation
- DCloudWatch
165Which statement is true regarding AWS pricing? (Choose TWO)
- AYou only pay for the individual services that you need with no long-term contracts
- BThere are no reservations on AWS, you only pay for what you use
- CFor some services, you have to pay a startup fee in order to get the service running
- DWith the AWS pay-as-you-go pricing model, you do not have to pay any upfront fee
- E• You have no responsibility for third-party software license costs
166What is the Amazon ElastiCache service used for? (Choose TWO)
- AProvide an in-memory data storage service
- BProvide a Chef-compatible cache to speed up application response
- CDistribute requests to multiple instances
- DStream desktop applications from the cloud to user devices
- EImprove web application performance
167What does the AWS "Business" support plan provide? (Choose TWO)
- ALess than 15 minutes response-time support if your business critical system goes down
- BAWS Support API
- CProactive Technical Account Management
- DAccess to the full set of Trusted Advisor checks
- EConsultative review and guidance based on your applications
168What is the benefit of Amazon EBS volumes being automatically replicated within the same availability zone?
- Aaccessibility
- Btraceability
- Cdurability
- Delasticity
169How can you increase your application’s fault-tolerance while it is being hosted in AWS?
- ADeploy the underlying application resources across multiple subnets
- BHost your application on one powerful EC2 instance type instead of multiple smaller instances
- CDeploy your application across multiple EC2 instances
- DDeploy your application across multiple Availability Zones
170The elasticity of the AWS Cloud enables customers to save costs when compared to traditional hosting providers. What can AWS customers do to benefit from the elasticity of the AWS Cloud? (Choose TWO)
- AUse Amazon EC2 Auto Scaling
- BUse Serverless Computing whenever possible
- CDeploy your resources in another region
- DDeploy your resources across multiple Availability Zones
- EUse Elastic Load Balancing
171Which feature enables users to sign into their AWS accounts with their existing corporate credentials?
- Afederaton
- Baccess keys
- CWAF rules
- DIAM permissions
- EExplanation
With Federation, you can use single sign-on (SSO) to access your AWS accounts using credentials from your corporate directory. Federation uses open standards, such as Security Assertion Markup Language 2.0 (SAML), to exchange identity and security information between an identity provider (IdP) and an application.
AWS offers multiple options for federating your identities in AWS:
1- AWS Identity and Access Management (IAM): You can use AWS Identity and Access Management (IAM) to enable users to sign in to their AWS accounts with their existing corporate credentials.
2- AWS Directory Service: AWS Directory Service for Microsoft Active Directory, also known as AWS Microsoft AD, uses secure Windows trusts to enable users to sign in to the AWS Management Console, AWS Command Line Interface (CLI), and Windows applications running on AWS using their existing corporate Microsoft Active Directory credentials.
3- AWS Single-Sign-On (AWS SSO) Service: You can use the AWS SSO service to federate your identities into your AWS environment.
The other options are incorrect:
"WAF rules" is incorrect. AWS WAF is a web application firewall that helps protect web applications from attacks by allowing you to configure rules that block malicious traffic.
You use WAF rules in a web ACL to block web requests based on criteria like the following:
- Scripts that are likely to be malicious. Attackers embed scripts that can exploit vulnerabilities in web applications. This is known as cross-site scripting (XSS).
- Malicious requests from a set of IP addresses or address ranges.
- SQL code that is likely to be malicious. Attackers try to extract data from your database by embedding malicious SQL code in a web request. This is known as SQL injection.
"IAM Permissions" is incorrect. IAM Permissions let you specify the desired access to AWS resources. Permissions are granted to IAM entities (users, groups, and roles) and by default these entities start with no permissions. In other words, IAM entities can do nothing in AWS until you grant them your desired permissions.
"Access keys" is incorrect. Access keys are long-term credentials for an AWS IAM user or the AWS account root user. Access keys are not used for signing in to your account. You can use access keys to sign programmatic requests to the AWS CLI or AWS API (directly or using the AWS SDK).
References:
https://aws.amazon.com/identity/federation/
172What are the benefits of the AWS Organizations service? (Choose TWO)
- AConsolidate billing across multiple AWS accounts
- BHelp organizations design and maintain an accelerated path to successful cloud adoption
- CControl access to AWS services
- DHelp organizations achieve their desired business outcomes with AWS
- EManage your organization’s payment methods
173What is the main benefit of attaching security groups to an Amazon RDS instance?
- AManages user access and encryption keys
- BDistributes incoming traffic across multiple targets
- CDeploys SSL/TLS certificates for use with your database instance
- DControls what IP address ranges can connect to your database instance
174A financial services company decides to migrate one of its applications to AWS. The application deals with sensitive data, such as credit card information, and must run on a PCI-compliant environment. Which of the following is the company’s responsibility when building a PCI-compliant environment in AWS? (Choose TWO)
- ARestrict any access to cardholder data and create a policy that addresses information security for all personnel
- BStart the migration process immediately as all AWS services are PCI compliant
- CEnsure that all PCI DSS physical security requirements are met
- DConfigure the underlying infrastructure of AWS services to meet all PCI DSS requirements
- EEnsure that AWS services are configured properly to meet all PCI DSS standards
175What are the benefits of the AWS Marketplace service? (Choose TWO)
- AProvides software solutions that run on AWS or any other Cloud vendor
- BProtects customers by performing periodic security checks on listed products
- CProvides cheaper options for purchasing Amazon EC2 on-demand instances
- DPer-second billing
- EProvides flexible pricing options that suit most customer needs
176What are the main differences between an IAM user and an IAM role in AWS? (Choose TWO)
- AAn IAM user has temporary credentials associated with it, however a role has permanent credentials associated with it
- BIAM users are more cost effective than IAM roles
- CAn IAM user is uniquely associated with only one person, however a role is intended to be assumable by anyone who needs it
- DA role is uniquely associated with only one person, however an IAM user is intended to be assumable by anyone who needs it
- EAn IAM user has permanent credentials associated with it, however a role has temporary credentials associated with it
177What are some of the benefits of using On-Demand EC2 instances? (Choose TWO)
- AYou can increase or decrease your compute capacity depending on the demands of your application
- BThey remove the need to buy “safety net” capacity to handle periodic traffic spikes
- CThey are cheaper than all other EC2 options
- DThey only require 1-2 days for setup and configuration
- EThey provide free capacity when testing your new applications
178A company is migrating production workloads to AWS, and they are concerned about cost management across different departments. Which option should the company implement to categorize and track AWS spending?
- AUse Amazon Aurora to forecast AWS spending based on usage
- BUse the AWS Pricing Calculator service to monitor the costs incurred by each department
- CApply cost allocation tags to segment AWS costs by different projects and departments
- DConfigure AWS Price List API to receive billing updates for each department automatically
179Which of the following are part of the seven design principles for security in the cloud? (Choose TWO)
- AUse IAM roles to grant temporary access instead of long-term credentials
- BScale horizontally to protect from failures
- CUse manual monitoring techniques to protect your AWS resources
- DEnable real-time traceability
- ENever store sensitive data in the cloud
180Which of the following requires an access key ID and a secret access key to get long-lived programmatic access to AWS resources? (Choose TWO)
- AIAM Group
- BIAM Role
- CAWS account root user
- DTAM
- EIAM user
181A company wants to use Amazon Elastic Container Service (Amazon ECS) to run its containerized applications. For compliance reasons, the company wants to retain complete visibility and control over the underlying server cluster. Which Amazon ECS launch type will satisfy these requirements?
- ALightsail launch type
- BLambda type
- CFargate launch type
- DEC2 launch type
182According to the AWS shared responsibility model, what are the controls that customers fully inherit from AWS? (Choose TWO)
- AResource Configuration Management
- BEnvironmental controls
- CAwareness and training
- DData center security controls
- ECommunications controls
183For some services, AWS automatically replicates data across multiple Availability Zones to provide fault tolerance in the event of a server failure or Availability Zone outage. Select TWO services that automatically replicate data across Availability Zones.
- AInstance store
- BS3
- CRoute 53
- DRDS for Oracle
- EAurora
184Each AWS Region is composed of multiple Availability Zones. Which of the following best describes what an Availability Zone is?
- AIt is a distinct location within a region that is insulated from failures in other Availability Zones
- BIt is a collection of Local Zones designed to be completely isolated from each other
- CIt is a logically isolated network of the AWS Cloud
- DIt is a collection of data centers distributed in multiple countries
185Which AWS services allow users to run SQL queries against data stored in Amazon S3? (Choose TWO)
- AAmazon Redshift Spectrum
- BAWS Shield
- CAmazon RDS
- DAmazon Comprehend
- EAmazon Athena
186Which of the following is NOT a benefit of using AWS Lambda?
- Aprovides resizable compute capacity in the cloud
- Bruns code without provisioning or managing servers
- Ccan be called directly from anu mobile app
- DThere is no charge when your AWS Lambda code is not running
187Which of the following makes it easier for you to categorize, manage and filter your resources?
- AAWS Directory Service
- BAWS Service Catalog
- CAmazon CloudWatch
- DAWS Tagging
188The AWS account administrator of your company has been fired. With the permissions granted to him as an administrator, he was able to create multiple IAM user accounts and access keys. Additionally, you are not sure whether he has access to the AWS root account or not. What should you do immediately to protect your AWS infrastructure? (Choose TWO)
- ADownload all the attached policies in a safe place
- BDelete all IAM accounts and recreate them
- CChange the email address and password of the root user account and enable MFA
- DUse the CloudWatch service to check all API calls that have been made in your account since the administrator was fired
- ERotate all access keys
189You are using several on-demand EC2 Instances to run your development environment. What is the best way to reduce your charges when these instances are not in use?
- Aterminating the instances
- Bdeleting all EBS volumes attached to the instances
- Cstopping the instances
- Dyou cannot minimize charges for on demande instances
190Which of the following are use cases for Amazon EMR? (Choose TWO)
- AEnables you to easily run and manage Docker containers
- BEnables you to move Exabyte-scale data from on-premises datacenters into AWS
- CEnables you to easily run and scale Apache Spark, Hadoop,and other Big Data frameworks
- DEnables you to analyze and process extremely large amounts of data in a timely manner
- EEnables you to backup extremely large amounts of data at very low costs
191Which of the below options is true of Amazon VPC?
- AAWS is responsible for all the management and configuration details of Amazon VPC
- BAmazon VPC helps customers to review their AWS architecture and adopt best practices
- CAWS Customers have complete control over their Amazon VPC virtual networking environment
- DAmazon VPC allows customers to control user interactions with all other AWS resources
192Which of the following strategies helps protect your AWS root account?
- AOnly share your AWS account password or access keys with trusted persons
- BDelete root user access keys if you do not need them
- CAccess the root account only from your personal Mobile Phone
- DApply MFA for the root account and use it for all of your work
193Which of the following are valid Amazon EC2 Reserved Instance types? (Choose TWO)
- Aexpedited
- Bstandard
- Cbulk
- Dconvertible
- Espot
194A company has infrastructure hosted in an on-premises data center. They currently have an operations team that takes care of identity management. If they decide to migrate to the AWS cloud, which of the following services would help them perform the same role in AWS?
- AAWS Outposts
- BAWS Federation
- CAWS IAM
- DAmazon Redshift
195A developer wants to quickly deploy and manage his application in the AWS Cloud, but he doesn’t have any experience with cloud computing. Which of the following AWS services would help the developer achieve his goal?
- AAWS Amplify
- BAWS Elastic Beanstalk
- CAWS Fargate
- DAmazon Personalize
196What are some key benefits of using AWS CloudFormation? (Choose TWO)
- AIt automates the provisioning and updating of your infrastructure in a safe and controlled manner
- BIt applies advanced IAM security features automatically
- CIt allows you to model your entire infrastructure in just a text file
- DIt helps AWS customers deploy their applications without worrying about the underlying infrastructure
- EIt compiles and builds application code in a timely manner
197Why are Serverless Architectures more economical than Server-based Architectures?
- AWhen you reserve serverless capacity, you will get large discounts compared to server reservation
- BServerless Architectures use new powerful computing devices
- CWith Serverless Architectures you have the ability to scale automatically up or down as demand changes
- DWith the Server-based Architectures, compute resources continue to run all the time but with serverless architecture, compute resources are only used when code is being executed
198Your CTO has asked you to contact AWS support using the chat feature to ask for guidance related to EBS. However, when you open the AWS support center you can't see a way to contact support via Chat. What should you do?
- AThere is no chat feature in AWS support
- BThe chat feature is available for all plans for an additional fee, but you have to request it first
- CUpgrade from the Basic Support plan to Developer Support
- DAt a minimum, upgrade to Business support plan
199Who from the following will get the largest discount?
- AA user who chooses to buy Reserved, Standard, No upfront instances
- BA user who chooses to buy On-demand, Convertible, Partial upfront instances
- CA user who chooses to buy Reserved, Standard, All upfront instances
- DA user who chooses to buy Reserved, Convertible, All upfront instances
200An organization needs to build a financial application that requires support for ACID transactions. Which AWS database service is most appropriate in this case?
- ARedshift
- BDMS
- CCloudHSM
- DRDS
Information
- Description
- Certified Cloud Practitioner CLF-C01 exam
- Author
- agnaldo almeida
- Language
- Português
- Views
- 39
- Tags
- Rating
- No ratings yet Rate this quiz