AWS Cloud Practitioner Exam #2

Which AWS service helps users to collect, process, and analyze real-time streaming data from sources including operating logs, financial transactions, and social media feeds?

• Amazon Kinesis
• AWS Direct Connect
• Amazon Redshift
• Amazon Athena

Answer explanation

Kinesis gives you the ability to collect, process, and analyze real-time streaming data. Kinesis provides timely insights so that you can react quickly to new information. Kinesis can ingest real-time data from video, audio, application logs, and website clickstreams. Additionally, Kinesis can ingest IoT telemetry data for machine learning, analytics, and other applications. Kinesis gives you the ability to process and analyze data when the data arrives. Then, you can respond instantly. You do not have to wait until all your data is collected before you can process the data

A company is running a production workload on AWS. Which AWS Support plan will provide the company with technical support within 15 minutes of a user opening a case concerning a critical service interruption?

• Basic support
• Developer Support
• Business support
• Enterprise Support

Answer explanation

Basic Support offers access to 24x7 access to customer service, documentation, whitepapers, and support forums. The fastest support available for the developer plan is System Impaired, which is less than 12-hour support. The fastest support available for the business plan is Production System Down, which is less than 1-hour support.

A company is developing a new application that will be hosted in the AWS Cloud. The company needs to make changes to the application and the AWS resources that it uses. What is a characteristic of the AWS Cloud that would meet this requirement?

• Elasticity
• Reliability
• Performance
• Agility

Answer explanation

Agility is the ability to deploy resources, such as computing, storage, or databases, in a matter of minutes

Which AWS service or feature can prevent SQL injection attacks?

• Security Groups
• Network ACLs
• AWS WAF
• IAM Policies

Answer explanation

AWS WAF gives you control over how traffic reaches your applications. AWS WAF gives you the ability to create security rules that control network traffic and block common attack patterns. You can create an AWS WAF rule that filters traffic that has possibly malicious SQL code. This rule would prevent SQL injection attacks.

How can a company isolate the costs of production and non-production workloads on AWS?

• Create AWS IAM roles for production and non-production workloads
• Use different accounts for produciton and non-poroduction expenses
• Use Amazon EC2 for non-production workloads and other services for production workloads
• Use Amazon CloudWatch to monitor the use of services

Answer explanation

You can separate the production and non-production workloads on AWS by creating multiple accounts to provide the highest level of resource and billing isolation. AWS Organizations includes account management and consolidated billing capabilities that enable you to better meet the budgetary, security, and compliance needs of your business

Which AWS service or feature can be used to block traffic to a specific port on Amazon EC2 instances?

• Network ACL
• AWS Direct Connect
• Amazon Route 53
• Amazon VPC peering connections

Answer explanation

A network ACL acts as a virtual firewall for your EC2 instances within a subnet to control incoming and outgoing traffic. The inbound rules control the incoming traffic to your instances. The outbound rules control the outgoing traffic from your instances.

Which AWS service or feature will automatically scale with an expected increase in web traffic?

• AWS CodePipeline
• Elastic Load Balancing
• Amazon Elastic Block Store
• AWS DIrect COnnect

Answer explanation

ELB automatically distributes incoming application traffic across multiple targets. The targets can include Amazon EC2 instances, containers, IP addresses, AWS Lambda functions, and virtual appliances. ELB is a fully managed service. Therefore, you can focus on the delivery of applications, instead of the installation of fleets of load balancers. ELBs automatically add or remove capacity based on the usage of the underlying application servers.

A company wants to use Amazon EC2 to deploy a global commercial application. The deployment solution should be built with the highest redundancy and fault tolerance. How should the EC2 instances be deployed?

• In a single Availability Zone in one AWS Region
• With multiple elastic network interfaces belonging to different subnets
• Across multiple Availability Zones in one AWS Region
• Across multiple Availability Zones in two AWS Regions

Answer explanation

Regions are composed of multiple Availability Zones that are designed to be independent of each other. Each Availability Zone is separated by a meaningful physical distance from other zones to avoid correlated failure scenarios due to environmental hazards like fires, floods, and tornadoes. A multi-region approach is common for disaster recovery strategies to meet recovery objectives.

Which controls or features are shared controls according to the AWS shared responsibility model? (Select TWO.)

• Physical security controls
• Environmental controls
• Patch management
• Zone Security
• Configuration Management

Answer explanation

Patch management is a shared control. AWS will patch and fix flaws within the infrastructure. Customers must patch guest operating systems and applications. Configuration management is a shared control. AWS maintains the configuration of AWS infrastructure devices. Customers configure guest operating systems, databases, and applications.

Which AWS Cloud benefit gives users the ability to provision only the resources required and to instantly scale up or down as demand changes?

• High availability
• Cost savings
• security
• elasticity

Answer explanation

Elasticity gives users the ability to provision only the resources required and to instantly scale resources up or down as demand changes. Elasticity is a benefit of the AWS Cloud.