AWS-CCP-W3D2

AWS-CCP-W3D2

​February 22, 2022

Multiple Select

What should you do in order to keep the data on EBS volumes safe? (Choose TWO)

• Prevent any unauthorized access to AWS data centers

• Regularly update firmware on EBS devices

• Ensure that EBS data is encrypted at rest

• Create EBS snapshots

• Store a backup daily in an external drive

Explanation

Creating snapshots of EBS Volumes can help ensure that you have a backup of your EBS volumes just in case any issues arise.

​

Amazon EBS encryption offers a straight-forward encryption solution for your EBS resources that doesn't require you to build, maintain, and secure your own key management infrastructure. Encryption operations occur on the servers that host EC2 instances, ensuring the security of both data-at-rest and data-in-transit between an instance and its attached EBS storage.

Multiple Select

What does AWS Snowball provide? (Choose TWO)

• A catalog of third-party software solutions that customers need to build solutions and run their business

• Secure transfer of large amounts of data into and out of the AWS Cloud

• An exabyte-scale data transfer service that allows you to move extremely large amounts of data to AWS

• Built-in computing capabilities that allow customers to process data locally

• A hybrid cloud storage between on-premises environments and the AWS Cloud

Explanation

AWS Snowball is a petabyte-scale data transport solution that uses secure appliances to transfer large amounts of data into and out of the AWS cloud. Using Snowball addresses common challenges with large-scale data transfers, including high network costs, long transfer times, and security concerns. AWS Customers use Snowball to migrate analytics data, genomics data, video libraries, image repositories, and backups. Transferring data with Snowball is simple, fast, secure, and can cost as little as one-fifth the cost of using high-speed internet.

​

Additionally, With AWS Snowball, you can access the compute power of the AWS Cloud locally and cost-effectively in places where connecting to the internet might not be an option. AWS Snowball is a perfect choice if you need to run computing in rugged, austere, mobile, or disconnected (or intermittently connected) environments.

​

With AWS Snowball, you have the choice of two devices, Snowball Edge Compute Optimized with more computing capabilities, suited for higher performance workloads, or Snowball Edge Storage Optimized with more storage, which is suited for large-scale data migrations and capacity-oriented workloads.

​

Snowball Edge Storage Optimized is the optimal choice if you need to securely and quickly transfer dozens of terabytes to petabytes of data to AWS. It is also a good fit for running general purpose analysis such as IoT data aggregation and transformation.

​

Snowball Edge Compute Optimized is the optimal choice if you need powerful compute and high-speed storage for data processing. Examples include high-resolution video processing, advanced IoT data analytics, and real-time optimization of machine learning models.

​

Multiple Choice

A company has developed an eCommerce web application in AWS. What should they do to ensure that the application has the highest level of availability?

• Deploy the application across multiple VPC's and subnets

• Deploy the application across multiple Availability Zones and Edge Locations

• Deploy the application across multiple Availability Zones and subnets

• Deploy the application across multiple Regions and Availability Zones

Explanation

The AWS Global infrastructure is built around Regions and Availability Zones (AZs). Each AWS Region is a separate geographic area. Each AWS Region has multiple, isolated locations known as Availability Zones. Availability Zones in a region are connected with low latency, high throughput, and highly redundant networking. These Availability Zones offer AWS customers an easier and more effective way to design and operate applications and databases, making them more highly available, fault tolerant, and scalable than traditional single datacenter infrastructures or multi-datacenter infrastructures.

​

In addition to replicating applications and data across multiple data centers in the same Region using Availability Zones, you can also choose to increase redundancy and fault tolerance further by replicating data between geographic Regions (especially if you are serving customers from all over the world). You can do so using both private, high speed networking and public internet connections to provide an additional layer of business continuity, or to provide low latency access across the globe.

Multiple Choice

An organization has decided to purchase an Amazon EC2 Reserved Instance (RI) for three years in order to reduce costs. It is possible that the application workloads could change during the reservation period.

What is the EC2 Reserved Instance (RI) type that will allow the company to exchange the purchased reserved instance for another reserved instance with higher computing power if they need to?

• Standard RI

• Elastic RI

• Premium RI

• Convertible RI

Explanation

When your needs change, you can exchange your Convertible Reserved Instances and continue to benefit from the reservation's pricing discount. With Convertible RIs, you can exchange one or more Reserved Instances for another Reserved Instance with a different configuration, including instance family, operating system, and tenancy. There are no limits to how many times you perform an exchange, as long as the new Convertible Reserved Instance is of an equal or higher value than the original Convertible Reserved Instances that you are exchanging.

Multiple Choice

Which of the following services allows customers to manage their agreements with AWS?

• AWS Certificate Manager

• AWS Systems Manager

• AWS Artifact

• AWS Organizations

Explanation

AWS Artifact is a self-service audit artifact retrieval portal that provides customers with on-demand access to AWS’ compliance documentation and AWS agreements. You can use AWS Artifact Agreements to review, accept, and track the status of AWS agreements such as the Business Associate Addendum (BAA).

Additional information:

​

You can also use AWS Artifact Reports to download AWS security and compliance documents, such as AWS ISO certifications, Payment Card Industry (PCI), and System and Organization Control (SOC) reports.

Multiple Select

Which of the following aspects of security are managed by AWS? (Choose TWO)

• Access permissions

• VPC security

• Hardware patching

• Encryption of EBS volumes

• Securing global physical infrastructure

Explanation

AWS is continuously innovating the design and systems of its data centers to protect them from man-made and natural risks. For example, at the first layer of security, AWS provides a number of security features depending on the location, such as security guards, fencing, security feeds, intrusion detection technology, and other security measures.

​

According to the Shared Responsibility model, patching of the underlying hardware is the AWS’ responsibility. AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.

Multiple Choice

What is the AWS service that provides you the highest level of control over the underlying virtual infrastructure?

• Amazon EC2

• Amazon Redshift

• Amazon DynamoDB

• Amazon RDS

Explanation

Amazon EC2 provides you the highest level of control over your virtual instances, including root access and the ability to interact with them as you would any machine.

Multiple Choice

A company is developing a new application using a microservices framework. The new application is having performance and latency issues. Which AWS Service should be used to troubleshoot these issues?

• AWS X-Ray

• AWS CloudTrail

• Amazon Inspector

• AWS CodePipeline

Explanation

AWS X-Ray helps developers analyze and debug distributed applications in production or under development, such as those built using microservice architecture. With X-Ray, you can understand how your application and its underlying services are performing so you can identify and troubleshoot the root cause of performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components. You can use X-Ray to analyze both applications in development and in production, from simple three-tier applications to complex microservices applications consisting of thousands of services. 

Multiple Choice

What is the AWS serverless service that allows you to run your applications without any administrative burden?

• Amazon RDS instances

• AWS Lambda

• Amazon LightSail

• Amazon EC2 instances

Explanation

AWS Lambda is an AWS-managed compute service. It lets you run code without provisioning or managing servers. With Lambda, you can run code for virtually any type of application or backend service - all with zero administration. Just upload your code, and Lambda takes care of everything required to run and scale your code with high availability. You pay only for the compute time you consume - there is no charge when your code is not running.

Multiple Choice

What is the AWS tool that enables you to use scripts to manage all AWS services and resources?

• AWS OpsWorks

• AWS Console

• AWS Service Catalog

• AWS CLI

Explanation

The AWS Command Line Interface (CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts.

Multiple Select

Using Amazon RDS falls under the shared responsibility model. Which of the following are customer responsibilities? (Choose TWO)

• Installing the database software

• Patching the database software

• Building the relational database schema

• Managing the database settings

• Performing backups

Explanation

Amazon RDS manages the work involved in setting up a relational database, from provisioning the infrastructure capacity you request to installing the database software. Once your database is up and running, Amazon RDS automates common administrative tasks such as performing backups and patching the software that powers your database. With optional Multi-AZ deployments, Amazon RDS also manages synchronous data replication across Availability Zones with automatic failover. Since Amazon RDS provides native database access, you interact with the relational database software as you normally would. This means you're still responsible for managing the database settings that are specific to your application. You'll need to build the relational schema that best fits your use case and are responsible for any performance tuning to optimize your database for your application’s workflow.

Multiple Choice

Which AWS Service can be used to establish a dedicated, private network connection between AWS and your datacenter?

• AWS Snowball

• Amazon Route53

• Amazon CloudFront

• AWS Direct Connect

Explanation

AWS Direct Connect is used to establish a dedicated network connection from your premises to AWS. Using AWS Direct Connect, you can establish private connectivity between AWS and your data center, office, or co-location environment, which in many cases can reduce your network costs, increase bandwidth throughput, and provide a more consistent network experience than Internet-based connections.

Multiple Choice

Sarah has deployed an application in the Northern California (us-west-1) region. After examining the application’s traffic, she notices that about 30% of the traffic is coming from Asia. What can she do to reduce latency for the users in Asia?

• Recreate the website content

• Replicate the current resources across multiple Availability Zones within the same region

• Create a CDN using CloudFront, so that content is cached at Edge Locations close to and in Asia

• Migrate the application to a hosting provider in Asia

Explanation

CloudFront is AWS's content delivery network (CDN) service. Amazon CloudFront employs a global network of edge locations and regional edge caches that cache copies of your content close to your end-users. Amazon CloudFront ensures that end-user requests are served by the closest edge location. As a result, end-user requests travel a short distance, reducing latency and improving the overall performance.

Multiple Choice

What is the AWS service\feature that takes advantage of Amazon CloudFront’s globally distributed edge locations to transfer files to S3 with higher upload speeds?

• AWS Snowball

• AWS WAF

• S3 Transfer Acceleration

• AWS Snowmobile

Explanation

Amazon S3 Transfer Acceleration enables fast, easy, and secure transfers of files over long distances between your client and an S3 bucket. Transfer Acceleration takes advantage of Amazon CloudFront’s globally distributed edge locations. As the data arrives at an edge location, data is routed to Amazon S3 over an optimized network path.

Multiple Choice

AWS has created a large number of Edge Locations as part of its Global Infrastructure. Which of the following is NOT a benefit of using Edge Locations?

• Edge locations are used by CloudFront to distribute content to global users with low latency

• Edge locations are used by CloudFront to improve your end users' experience when uploading files

• Edge locations are used by CloudFront to distribute traffic across multiple instances to reduce latency

• Edge locations are used by CloudFront to cache the most recent responses

Explanation

AWS Edge Locations are not used to distribute traffic. Edge Locations are used in conjunction with the CloudFront service to cache common responses and deliver content to end-users with low latency.

​

With Amazon CloudFront, your users can also benefit from accelerated content uploads. As the data arrives at an edge location, data is routed to AWS storage services over an optimized network path.

​

The AWS service that is used to distribute load is the AWS Elastic Load Balancing (ELB) service.

Multiple Choice

Which of the following is one of the benefits of moving infrastructure from an on-premises data center to AWS?

• AWS hold responsibility for managing customer applications

• Reduced Capital Expenditure (CapEx)

• Automatic data protection

• Free support for all enterprise customers

Explanation

Capital expenditures (CapEx) are a company's major, long-term expenses, while operating expenses (OpEx) are a company's day-to-day expenses. Examples of CapEx include physical assets such as buildings, equipment, and machinery. Examples of OpEx include employee salaries, rent, utilities, and property taxes.

​

AWS enables businesses to leverage high-end technologies and infrastructure needs with low CapEx and low OpEx. The AWS pay-as-you-go model reduces investments in large capital expenditures. In addition, you can reduce the operating expense (OpEx) costs involved with the management and maintenance of data. This frees up budget, allowing you to quickly act on innovative initiatives that can’t be easily pursued when managing physical data centers.

Multiple Choice

A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company?

• APN Technology Partners

• APN Consulting Partners

• AWS Professional Services

• AWS TAM

Explanation

APN Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. Consulting Partners include System Integrators, Strategic Consultancies, Agencies, Managed Service Providers, and Value-Added Resellers. AWS supports the APN Consulting Partners by providing a wide range of resources and training to support their customers.

Multiple Select

Savings Plans are available for which of the following AWS compute services? (Choose TWO)

• Amazon Lightsail

• AWS Outposts

• AWS Batch

• Amazon EC2

• AWS Lambda

Explanation

Savings Plans are a flexible pricing model that offers low prices on EC2, Lambda, and Fargate usage, in exchange for a commitment to a consistent amount of usage (measured in $/hour) for a 1 or 3 year term. When you sign up for Savings Plans, you will be charged the discounted Savings Plans price for your usage up to your commitment. For example, if you commit to $10 of compute usage an hour, you will get the Savings Plans prices on that usage up to $10 and any usage beyond the commitment will be charged On Demand rates.

Multiple Choice

Which of the following procedures will help reduce your Amazon S3 costs?

• Use the right combination of storage classes based on different use cases

• Pick the right Availability Zone for your S3 bucket

• Use the import/export feature to move old files automatically to Amazon Glacier

• Move all the data stored in S3 standard to EBS

Explanation

Amazon S3 offers a range of storage classes designed for different use cases. These include S3 Standard for general-purpose storage of frequently accessed data; S3 Intelligent-Tiering for data with unknown or changing access patterns; S3 Standard-Infrequent Access (S3 Standard-IA) and S3 One Zone-Infrequent Access (S3 One Zone-IA) for long-lived, but less frequently accessed data; and Amazon S3 Glacier (S3 Glacier) and Amazon S3 Glacier Deep Archive (S3 Glacier Deep Archive) for long-term archive and digital preservation.

Multiple Select

Which of the following are important design principles you should adopt when designing systems on AWS? (Choose TWO)

• Always use Global Services in your architecture rather than Regional Services

• Always choose to pay as you go

• Treat servers as fixed resources

• Remove single points of failure

• Automate whatever possible

Explanation

A single point of failure (SPOF) is a part of a system that, if it fails, will stop the entire system from working. You can remove single points of failure by assuming everything will fail and designing your architecture to automatically detect and react to failures. For example, configuring and deploying an auto-scaling group of EC2 instances will ensure that if one or more of the instances crashes, Auto-scaling will automatically replace them with new instances. You should also introduce redundancy to remove single points of failure, by deploying your application across multiple Availability Zones. If one Availability Zone goes down for any reason, the other Availability Zones can serve requests.

​

AWS helps you use automation so you can build faster and more efficiently. Using AWS services, you can automate manual tasks or processes such as deployments, development & test workflows, container management, and configuration management.

Multiple Choice

Which of the following AWS security features is associated with an EC2 instance and functions to filter incoming traffic requests?

• VPC Flow logs

• AWS Systems Manager Session Manager

• Network ACL

• Security Groups

Explanation

Security Groups act as a firewall for associated Amazon EC2 instances, controlling both inbound and outbound traffic at the instance level.

​

Multiple Choice

Which statement best describes the operational excellence pillar of the AWS Well-Architected Framework?

• The ability of a system to recover gracefully from failure

• The ability to manage data center operations more efficiently

• The ability to monitor systems and improve supporting processes and procedures

• The efficient use of computing resources to meet requirements

Explanation

The 5 Pillars of the AWS Well-Architected Framework:

1- Operational Excellence: The operational excellence pillar includes the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures.

2- Security: The security pillar includes the ability to protect information, systems, and assets while delivering business value through risk assessments and mitigation strategies.

3- Reliability: The reliability pillar includes the ability of a system to recover from infrastructure or service disruptions, dynamically acquire computing resources to meet demand, and mitigate disruptions such as  misconfigurations or transient network issues.

4- Performance Efficiency: The performance efficiency pillar includes the ability to use computing resources efficiently to meet system requirements. Key topics include selecting the right resource types and sizes based on workload requirements, monitoring performance, and making informed decisions to maintain efficiency as business needs evolve.

5- Cost Optimization: The cost optimization pillar includes the ability to avoid or eliminate unneeded cost or sub-optimal resources.

Multiple Choice

Your application has recently experienced significant global growth, and international users are complaining of high latency. What is the AWS characteristic that can help improve your international users’ experience?

• Global reach

• Data durability

• High availability

• Elasticity

Explanation

With AWS, you can deploy your application in multiple regions around the world. The user will be redirected to the Region that provides the lowest possible latency and the highest performance. You can also use the CloudFront service that uses edge locations (which are located in most of the major cities across the world) to deliver content with low latency and high performance to your global users.

Multiple Choice

Jessica is managing an e-commerce web application in AWS. The application is hosted on six EC2 instances. One day, three of the instances crashed; but none of her customers were affected. What has Jessica done correctly in this scenario?

• She has properly built an encrypted system

• She has properly built a scalable system

• She has properly built a elastic system

• She has properly built a fault tolerant system

Explanation

Fault tolerance is the property that enables a system to continue operating properly in the event of the failure of some (one or more faults within) of its components. Visitors to a website expect the website to be available irrespective of when they visit. For example, when someone wants to visit Jessica’s website to purchase a product, whether it is at 9:00 AM on a Monday or 3:00 PM on holiday, he\she expects that the website will be available and ready to accept his\her purchase. Failing to meet these expectations can cause loss of business and contribute to the development of a negative reputation for the website owner, resulting in lost revenue.

Multiple Choice

Which of the following describes the payment model that AWS makes available for customers that can commit to using Amazon EC2 over a one or 3-year term to reduce their total computing costs?

• Pay less by using more

• Pay less as AWS grows

• Pay as you go

• Save when you reserve

Explanation

For Customers that can commit to using EC2 over a 1 or 3-year term, it is better to use Amazon EC2 Reserved Instances. Reserved Instances provide a significant discount (up to 75%) compared to On-Demand instance pricing.

Multiple Select

What are two advantages of using Cloud Computing over using traditional data centers? (Choose TWO)

• Eliminating Single Points of Failure (SPOFs)

• Reserved Compute capacity

• Dedicated hosting

• Distributed infrastructure

• Virtualized compute resources

Explanation

These are things that traditional web hosting cannot provide:

**High-availability (eliminating single points of failure): A system is highly available when it can withstand the failure of an individual component or multiple components, such as hard disks, servers, and network links. The best way to understand and avoid the single point of failure is to begin by making a list of all major points of your architecture. You need to break the points down and understand them further. Then, review each of these points and think what would happen if any of these failed. AWS gives you the opportunity to automate recovery and reduce disruption at every layer of your architecture.

​

Additionally, AWS provides fully managed services that enable customers to offload the administrative burdens of operating and scaling the infrastructure to AWS so that they don’t have to worry about high availability or Single Point of Failures. For example, AWS Lambda and DynamoDB are serverless services; there are no servers to provision, patch, or manage and no software to install, maintain, or operate. Availability and fault tolerance are built-in, eliminating the need to architect your applications for these capabilities.

​

**Distributed infrastructure: The AWS Cloud operates in over 75 Availability Zones within over 20 geographic Regions around the world, with announced plans for more Availability Zones and Regions, allowing you to reduce latency to users from all around the world.

​

**On-demand infrastructure for scaling applications or tasks: AWS allows you to provision the required resources for your application in minutes and also allows you to stop them when you don’t need them.

​

**Cost savings: You don't have to run your own data center for internal or private servers, so your IT department doesn't have to make bulk purchases of servers which may never get used, or may be inadequate. The “pay as you go” model from AWS allows you to pay only for what you use and the ability to scale down to avoid over-spending. With AWS you don't have to pay an entire IT department to maintain that hardware -- you don't even have to pay an accountant to figure out how much hardware you can afford or how much you need to purchase.

Multiple Select

What are the change management tools that helps AWS customers audit and monitor all resource changes in their AWS environment? (Choose TWO)

• AWS Transit Gateway

• AWS CloudTrail

• AWS X-Ray

• Amazon Comprehend

• AWS Config

Explanation

Change management is defined as “the Process responsible for controlling the Lifecycle of all Changes. The primary objective of Change Management is to enable beneficial changes to be made, with minimum disruption to IT Services.

​

Despite all of the investments in software and hardware, an erroneous configuration or misstep in a process can frequently undo these efforts and lead to failure.

​

AWS Config and AWS CloudTrail are change management tools that help AWS customers audit and monitor all resource and configuration changes in their AWS environment

​

Customers can use AWS Config to answer “What did my AWS resource look like?” at a point in time. Customers can use AWS CloudTrail to answer “Who made an API call to modify this resource?” For example, a customer can use the AWS Management Console for AWS Config to detect that the security group “Production-DB” was incorrectly configured in the past. Using the integrated AWS CloudTrail information, they can pinpoint which user misconfigured the “Production-DB” security group. In brief, AWS Config provides information about the changes made to a resource, and AWS CloudTrail provides information about who made those changes. These capabilities enable customers to discover any misconfigurations, fix them, and protect their workloads from failures.

Multiple Select

According to the AWS Shared responsibility model, which of the following are the responsibility of the customer? (Choose TWO)

• Protecting the confidentiality of data in transit in Amazon S3

• Patching applications installed on Amazon EC2

• Managing environmental events of AWS data centers

• Controlling physical acces to AWS Regions

• Ensuring that the underlying EC2 host is configured properly

Explanation

Data protection refers to protecting data while in-transit (as it travels to and from Amazon S3) and at rest (while it is stored on disks in AWS data centers). The AWS customer is responsible for protecting their data either at rest or in transit for all services (including S3).

​

Patch management is a shared control between AWS and the customer. AWS is responsible for patching the underlying hosts, updating the firmware, and fixing flaws within the infrastructure, but customers are responsible for patching their guest operating system and applications.

Multiple Select

Based on the AWS Shared Responsibility Model, which of the following are the sole responsibility of AWS? (Choose TWO)

• Configuring Access Control Lists (ACLs)

• Creating hypervisors

• Hardware maintenance

• Installing software on EC2 instances

• Monitoring network performance

Explanation

AWS is responsible for items such as the physical security of its data centers, creating hypervisors, replacement of old disk drives, and patch management of the infrastructure.

 

The customers are responsible for items such as building application schema, analyzing network performance, configuring security groups and network ACLs and encrypting their data.

Multiple Choice

What is the AWS service that enables you to manage all of your AWS accounts from a single master account?

• AWS WAF

• AWS Organizations

• Amazon Config

• AWS Trusted Advisor

Explanation

AWS Organizations is an account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage.

​

AWS Organizations enables the following capabilities:

1- Automate AWS account creation and management

2- Consolidate billing across multiple AWS accounts

3- Govern access to AWS services, resources, and regions

4- Centrally manage access policies across multiple AWS accounts

5- Configure AWS services across multiple accounts