AWS Practise Exam

A company is hosting a static website from a single Amazon S3 bucket. 

Which AWS service will achieve lower latency and high transfer speeds?

• AWS Elastic Beanstalk

• Amazon DynamoDN Accelerator (DAX)

• Amazon Route 53

• Amazon CloudFront

Answer explanation

Elastic Beanstalk is a service to deploy and scale web applications and services developed with common programming languages on automatically deployed infrastructure with capacity management, load balancing, auto scaling, and monitoring. Elastic Beanstalk makes it easier to provision and support an application. Elastic Beanstalk does not reduce website latency.

DAX is used to reduce response times from a DynamoDB table from single-digit milliseconds to microseconds. DynamoDB tables cannot host static websites.

Route 53 is a highly available and scalable DNS web service. The three main functions of Route 53 are registering domain names, routing internet traffic to the resources for your domain, and checking the health of those resources. Route 53 can direct traffic to S3 buckets. But because the question describes only one S3 bucket, Route 53 would have only one potential route and could not reduce latency.

CloudFront is a web service that speeds up the distribution of your static and dynamic web content, such as .html, .css, .js, and image files, to your users. Content is cached in edge locations. Content that is repeatedly accessed can be served from the edge locations instead of the source S3 bucket.

A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3.

Which AWS service can meet these requirements?

• Amazon Inspector

• Amazon Macie

• Amazon GuardDuty

• AWS Secrets Manager

Answer explanation

Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on Amazon EC2 instances. Amazon Inspector does not perform S3 data classification and automatic discovery.

Macie is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

GuardDuty is a threat detection service that continuously monitors for malicious activity and unauthorized behavior to protect your AWS accounts and workloads. GuardDuty does not perform S3 data classification.

Secrets Manager helps you protect secrets needed to access your applications, services, and IT resources. Secrets Manager does not perform S3 data classification and automatic discovery.

How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (Select TWO.)

• By the time it takes for the Lambda function to run

• By the number of versions of a specific Lambda function

• By the number of requests made for a given Lambda function

• By the programming language that is used for the Lambda function

• By the total number of Lambda functions in an AWS account

Answer explanation

Lambda charges are dependent on the amount of time it takes to run the code.

The number of versions of a specific Lambda function does not contribute to the cost. You are charged based on the number of requests for your Lambda functions and the duration of time it takes for your code to run.

Lambda charges are dependent on the number of requests for your Lambda functions.

The programming language that is used to create the Lambda function does not contribute to the cost. You are charged based on the number of requests for your Lambda functions and the duration of time it takes for your code to run.

What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Select TWO.)

• Preventing a single point of failure

• Reducing the operational costs of the application

• Allowing the application to serve Cross-Region users with low latency

• Increasing the availability of the application

• Increasing the load of the application

Answer explanation

The deployment of the EC2 instances in multiple Availability Zones prevents a single point of failure. Availability Zones are designed for physical redundancy and to provide resilience with uninterrupted performance.

Multiple Availability Zones prevent single points of failure. As a result, the overall availability of the application improves. Multiple Availability Zones will not reduce the operational costs of the application.

The best option to serve users with low latency across Regions is to launch another EC2 instance in the second Region that is closer to the user's location.

If you host all your instances in a single location that is affected by a failure, none of your instances would be available. Availability Zones are designed for physical redundancy and to provide resilience with uninterrupted performance.

Multiple Availability Zones will prevent single points of failure. As a result, the overall availability of the application will improve. However, two EC2 instances that run in the same Availability Zone or in different Availability Zones will not change the overall load of the application.

Which tasks are the customer's responsibility according to the AWS shared responsibility model? (Select TWO.)

• Patch the operating system that AWS Lambda functions use

• Install patches on Amazon RDS DB instances

• Control physical access to the data center that contains a customer's VPC

• Configure IAM users according to the principle of least privilege

• Configure an Amazon S3 bucket to allow public access

Answer explanation

AWS provides Lambda as a service. The customer does not have to patch the operating system.

AWS provides Amazon RDS as a service. AWS manages patches for the Amazon RDS engine. The customer can choose a time window to install patches.

AWS does not allow access to data centers. A customer can take a virtual tour of a data center to understand the security measures and controls. Customers cannot visit data centers in person.

AWS provides AWS Identity and Access Management (IAM) as a service. The customer defines IAM users and the access policies that apply to those users.

The customer determines access permissions to S3 buckets that the customer owns.

A company needs to monitor and receive alerts about AWS Management Console sign-in events that involve the AWS account root user.

Which AWS service can the company use to meet these requirements?

• Amazon CloudWatch

• Amazon Config

• AWS Trusted Advisor

• AWS Identity and Access Management (IAM)

Answer explanation

CloudWatch monitors your AWS resources and the applications that you run on AWS in real time. You can use CloudWatch with AWS CloudTrail to monitor and receive alerts about console sign-in events that involve the AWS account root user.

You can use AWS Config to assess, audit, and evaluate the configurations of your AWS resources. AWS Config cannot alert you about console sign-in events that involve the AWS account root user.

You can use Trusted Advisor for real-time guidance to help you provision your resources according to AWS best practices. Trusted Advisor cannot alert you about console sign-in events that involve the AWS account root user.

With IAM, you can manage access to AWS services and resources securely. IAM cannot alert you about console sign-in events that involve the AWS account root user.

A company wants to create a learning application for students. The learning application must give students the option to choose a button to have the text read out loud to them.

Which AWS machine learning service will meet this requirement?

• Amazon Transcribe

• Amazon Polly

• Amazon Translate

• Amazon Textract

Answer explanation

Amazon Transcribe is a service that uses machine learning to convert audio data to text. Amazon Transcribe is not a text-to-speech conversion service.

What are benefits of using the AWS Cloud for companies with customers in many countries around the world? (Select TWO.)

• Companies can deploy applications in multiple AWS Regions to reduce latency

• Amazon Translate automatically translates third-party website interfaces into multiple languages

• Amazon CloudFront has multiple edge locations around the world

• Amazon Comprehend allows users to build applications that can respond to user requests in many languages

• Elastic Load Balancing can distribute application web traffic to multiple AWS Regions around the world, which reduces latency

Answer explanation

The use of Regions around the world will improve an application's global performance and reduce latency for users.

Amazon Translate does not provide automatic translation of third-party website interfaces.

CloudFront is a content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to global customers with low latency and high transfer speeds.

Amazon Comprehend is a natural language processing (NLP) service that uses machine learning to find insights and relationships in text. Amazon Comprehend does not translate text.

A load balancer accepts incoming traffic from clients and routes requests to its registered targets (such as EC2 instances) in one or more Availability Zones. However, a load balancer does not accept targets across Regions.

Which credential components are required to gain programmatic access to an AWS account? (Select TWO.)

• An access ID

• A primary key

• A secret access key

• A user ID

• A secondary key

Answer explanation

Programmatic access requires an access key ID and a secret access key that can be assigned to an AWS user.

A primary key is a feature used in database management. It does not grant AWS account access.

Programmatic access requires an access key ID and a secret access key that can be assigned to an AWS user.

A user ID is used for IAM security credentials, but not for programmatic access.

A secondary key is a feature used in database management. It does not grant AWS account access.

A company wants to establish a consistent and private connection from the company's on-premises data center to the AWS Cloud.

Which AWS service will meet these requirements?

• AWS Client VPN

• Amazon Connect

• AWS Direct Connect

• AWS Site-toSite VPN

Answer explanation

Client VPN is a managed client-based VPN service that gives you the ability to securely access your AWS resources and the resources in your on-premises network. With Client VPN, you can access your resources from any location through an OpenVPN-based VPN client. You would use Client VPN to connect individual laptops to AWS, not an entire data center.

Amazon Connect is an omnichannel cloud contact center that helps you provide superior customer service at a lower cost. Amazon Connect provides a seamless experience across voice and chat for your customers and agents. Amazon Connect is not a service that connects an on-premises network to AWS.

Direct Connect links your internal network to a Direct Connect location through a standard Ethernet fiber-optic cable. One end of the cable connects to your router. The other end of the cable connects to a Direct Connect router. AWS Direct Connect is consistent and private because your company is the only user of the cable.

Site-to-Site VPN creates an encrypted network path between your on-premises network and your AWS Cloud network. This connection uses the internet, so you cannot expect consistency. Even though the traffic is encrypted, the connection is not private because the internet is a shared resource.