Font size
WorksheetsAWS Certified Cloud Practitioner - Quiz
Total questions: 15
Worksheet time: 30mins
Why is AWS more economical than traditional data centers for applications with varying compute workloads?
Amazon EC2 costs are billed on a monthly basis.
Users retain full administrative access to their Amazon EC2 instances.
Amazon EC2 instances can be launched on demand when needed.
Users can permanently run enough instances to handle peak workloads.
Which AWS service would simplify the migration of a database to AWS?
AWS Storage Gateway
AWS Database Migration Service (AWS DMS)
Amazon EC2
Amazon AppStream 2.0
Which AWS offering enables users to find, buy, and immediately start using software solutions in their
AWS environment?
AWS Config
AWS OpsWorks
AWS SDK
AWS Marketplace
Which AWS networking service enables a company to create a virtual network within AWS?
AWS Config
Amazon Route 53
AWS Direct Connect
Amazon Virtual Private Cloud (Amazon VPC)
Which of the following is an AWS responsibility under the AWS shared responsibility model?
Configuring third-party applications
Maintaining physical hardware
Securing application access and data
Managing guest operating systems
Which component of the AWS global infrastructure does Amazon CloudFront use to ensure low-latency
delivery
AWS Regions
Edge locations
Availability Zones
Virtual Private Cloud (VPC)
How would a system administrator add an additional layer of login security to a user's AWS
Management Console?
Use Amazon Cloud Directory
Audit AWS Identity and Access Management (IAM) roles
Enable multi-factor authentication
Enable AWS CloudTrail
Which service can identify the user that made the API call when an Amazon EC2 instance is
terminated?
AWS Trusted Advisor
AWS CloudTrail
AWS X-Ray
AWS Identity and Access Management (AWS IAM)
Which service would be used to send alerts based on Amazon CloudWatch alarms?
Amazon Simple Notification Service (Amazon SNS)
AWS CloudTrail
AWS Trusted Advisor
Amazon Route 53
Where can a user find information about prohibited actions on the AWS infrastructure?
AWS Trusted Advisor
AWS Identity and Access Management (IAM)
AWS Billing Console
AWS Acceptable Use Policy
Which of the following is true of a new security group?
It contains an inbound rule denying access from public IP addresses.
It contains an inbound rule denying access from any IP address.
It contains an outbound rule allowing access to any IP address.
It contains an inbound rule allowing access from any IP address.
It contains an outbound rule denying access to public IP addresses.
What’s the difference between a security group and a network access control list (NACL)? (Select TWO.)
A security group operates at the instance level
A network access control list operates at the subnet level.
A network access control list operates at the instance level.
A security group operates at the subnet level.
Which of the following features of S3 improve the security of data you store in an S3 bucket? (Select TWO.)
By default, S3 removes ACLs that allow public read access to objects.
All objects are readable by all AWS users by default.
Objects in S3 are not public by default
S3 removes public objects by default.
What’s the most cost-effective way to view and search only the last 60 days of management API events on your AWS account?
Use CloudWatch Events.
Use CloudTrail event history.
Stream CloudTrail logs to CloudWatch.
Create a trail.
Which of the following describes an EC2 dedicated instance?
An EC2 instance optimized for a particular compute role
An EC2 instance running on a physical host reserved for the exclusive use of a single AWS account
An EC2 instance running on a physical host reserved for and controlled by a single AWS account
An EC2 AMI that can be launched only on an instance within a single AWS account
