AWS Cloud Practitioner Practice Exam Questions (2022)

Multiple Choice

What is the benefit of Elasticity?

• Minimize storage requirements by reducing logging and auditing activities

• Create systems that scale to the required capacity based on changes in demand

• Enable AWS to automatically select the most cost-effective services

• Accelerate the design process because recovery from failure is automated, reducing the need for testing

Answer:

​

Create systems that scale to the required capacity based on changes in demand​​

​

​

The concept of Elasticity is the means of an application having the ability to scale up and scale down based on demand. An example of such a service is the Autoscaling service.

Domain: Cloud Concepts

Learn more: https://aws.amazon.com/autoscaling/

Multiple Choice

Which tool can you use to forecast your AWS spending?

• AWS Organizations

• Amazon Dev Pay

• AWS Trusted Advisor

• AWS Cost Explorer

Answer:

​AWS Cost Explorer

​

Cost Explorer is a free tool that you can use to view your costs. You can view data up to the last 12 months. You can forecast how much you are likely to spend for the next 12 months and get recommendations for what Reserved Instances to purchase.

Domain: Billing & Pricing

Learn More: http://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/cost-explorer-what-is.html

Multiple Choice

Why is AWS more economical than traditional data centers for applications with varying compute workloads?

• Amazon EC2 costs are billed on a monthly basis.

• Users retain full administrative access to their Amazon EC2 instances.

• Amazon EC2 instances can be launched on demand when needed.

• Users can permanently run enough instances to handle peak workloads.

Answer

Amazon EC2 instances can be launched on demand when needed.​

​

The ability to launch instances on demand when needed allows users to launch and terminate instances in response to a varying workload. This is a more economical practice than purchasing enough on-premises servers to handle the peak load.

Domain: Technology

Learn More: https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html

Multiple Choice

Which AWS service would simplify the migration of a database to AWS?

• AWS Storage Gateway

• AWS Database Migration Service (AWS DMS)

• Amazon EC2

• Amazon AppStream 2.0

Answer

AWS Database Migration Service (AWS DMS)​

​

​​

AWS DMS helps users migrate databases to AWS quickly and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. AWS DMS can migrate data to and from most widely used commercial and open-source databases.

Domain: Technology

Learn More: https://aws.amazon.com/dms/

Multiple Choice

Which AWS offering enables users to find, buy, and immediately start using software solutions in their AWS environment?

• AWS Config

• AWS OpsWorks

• AWS SDK

• AWS Marketplace

Answer

AWS Marketplace

​

​

​

AWS Marketplace is a digital catalog with thousands of software listings from independent software vendors that makes it easy to find, test, buy, and deploy software that runs on AWS.

Domain: Cloud Concepts

Learn More: https://aws.amazon.com/marketplace/

Multiple Choice

Which AWS networking service enables a company to create a virtual network within AWS?

• AWS Config

• Amazon Route 53

• AWS Direct Connect

• Amazon Virtual Private Cloud (Amazon VPC)

Answer

Amazon VPC

​

​

​

Amazon VPC lets users provision a logically isolated section of the AWS Cloud where users can launch AWS resources in a virtual network that they define.

Domain: Technology

Learn More: https://aws.amazon.com/vpc/

Multiple Choice

Which of the following is an AWS responsibility under the AWS shared responsibility model?

• Configuring third-party applications

• Maintaining physical hardware

• Security application access and data

• Managing guest operating systems

Answer

AWS shared responsibility model

​

​

​

Maintaining physical hardware is an AWS responsibility under the AWS shared responsibility model.

Domain: Security & Compliance

Learn More: https://aws.amazon.com/compliance/shared-responsibility-model/

Multiple Choice

Which component of the AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery?

• AWS Regions

• Edge Locations

• Availability Zones

• Virtual Private Cloud (VPC)

Answer

Edge locations

​

​

​

To deliver content to users with lower latency, Amazon CloudFront uses a global network of points of presence (edge locations and regional edge caches) worldwide.

Domain: Technology

Learn More: https://aws.amazon.com/cloudfront/

Multiple Choice

How would a system administrator add an additional layer of login security to a user's AWS Management Console?

• Use Amazon Cloud Directory

• Audit AWS Identify and Access Management (IAM) roles

• Enable multi-factor authentication

• Enable AWS CloudTrail

Answer

Enable multi-factor authentication

​​

Multi-factor authentication (MFA) is a simple best practice that adds an extra layer of protection on top of a username and password. With MFA enabled, when a user signs in to an AWS Management Console, they will be prompted for their username and password (the first factor—what they know), as well as for an authentication code from their MFA device (the second factor—what they have). Taken together, these multiple factors provide increased security for AWS account settings and resources.

Domain: Security & Compliance

Learn More: https://aws.amazon.com/iam/features/mfa/

Multiple Choice

Which service can identify the user that made the API call when an Amazon EC2 instance is terminated?

• AWS Trusted Advisor

• AWS CloudTrail

• AWS X-Ray

• AWS Identity and Access Management (AWS IAM)

Answer

AWS CloudTrail

​​

AWS CloudTrail helps users enable governance, compliance, and operational and risk auditing of their AWS accounts. Actions taken by a user, role, or an AWS service are recorded as events in CloudTrail. Events include actions taken in the AWS Management Console, AWS Command Line Interface (CLI), and AWS SDKs and APIs

Domain: Security & Compliance

Learn More: https://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html

Multiple Choice

Which service would be used to send alerts based on Amazon CloudWatch alarms?

• Amazon Simple Notification Service (Amazon SNS)

• AWS CloudTrail

• AWS Trusted Advisor

• Amazon Route 53

Answer

Amazon Simple Notification Service (Amazon SNS)

​​

​

Amazon SNS and Amazon CloudWatch are integrated so users can collect, view, and analyze metrics for every active SNS. Once users have configured CloudWatch for Amazon SNS, they can gain better insight into the performance of their Amazon SNS topics, push notifications, and SMS deliveries.

Domain: Security & Compliance

Learn More: https://docs.aws.amazon.com/sns/latest/dg/sns-monitoring-using-cloudwatch.html

Multiple Choice

Where can a user find information about prohibited actions on the AWS infrastructure?

• AWS Trusted Advisor

• AWS Identify and Access Management (AWS IAM)

• AWS Billing Console

• AWS Acceptable Use Policy

Answer

AWS Acceptable Use Policy

​​

​

The AWS Acceptable Use Policy provides information regarding prohibited actions on the AWS infrastructure.

Domain: Billing & Pricing

Learn More: https://aws.amazon.com/aup/

Multiple Choice

What best describes the “Principle of Least Privilege”?

• All users should have the same baseline permissions granted to them to use basic AWS services

• Users should be granted permission to access only resources they need to do their assigned job

• Users should submit all access requests in written form so that there is a paper trail of who needs access to different AWS resources

• Users should always have a little more permission than they need

Answer

Users should be granted permission to access only resources they need to do their assigned job​

​​

​

The principle means giving a user account only those privileges which are essential to perform its intended function. AWS helps you implement and enforce the principle of least privilege access with analytic tools that help identify unused permissions across all AWS accounts so that you can remove unnecessary access quickly and confidently.

Domain: Security & Compliance

Learn More: https://aws.amazon.com/identity/

Multiple Choice

Which of the following features of Amazon RDS allows for better availability of databases?

• VPC Peering

• Multi-AZ

• Read Replicas

• Data Encryption

Answer

Multi-AZ

​​

​

If you are looking to use replication to increase database availability while protecting your latest database updates against unplanned outages, consider running your DB instance as a Multi-AZ deployment.

Domain: Technology

Learn More:https://aws.amazon.com/rds/features/multi-az/

Multiple Choice

A company wants to utilize the lowest cost AWS storage option. The data to be stored is rarely retrieved therefore a data retrieval time of 13-14 hours is acceptable for them.

What is the best storage option to use?

• Amazon S3 Glacier

• Amazon S3 Glacier Deep Archive

• Amazon EBS volumes

• AWS CloudFront

Answer

Amazon S3 Glacier Deep Archive

​​

​

S3 Glacier Deep Archive delivers the lowest cost storage, up to 75% lower cost (than S3 Glacier), for long-lived archive data that is accessed less than once per year and is retrieved asynchronously. At just $0.00099 per GB-month (or $1 per TB-month), S3 Glacier Deep Archive offers the lowest cost storage in the cloud, at prices significantly lower than storing and maintaining data in on-premises tape or archiving data off-site.

Domain: Technology

Learn More: https://aws.amazon.com/s3/storage-classes/glacier/