Font size
WorksheetsCloud Practitioner C04
Total questions: 65
Worksheet time: 2hrs 10mins
Which of the following services would be appropriate for deploying an application to on-premises servers? (Select two.)
A. AWS Elastic Beanstalk
B. AWS OpsWorks
C. AWS CodeDeploy
D. AWS Batch
E. AWS X-Ray
Which Amazon Web Services (AWS) services are capable of hosting a Microsoft SQL Server database? (Select two.)
A. Amazon EC2
B. Amazon Relational Database Service (Amazon RDS)
C. Amazon Aurora
D. Amazon Redshift
E. Amazon S3
A director has been assigned the duty of conducting an investigation into hybrid cloud architecture. Currently, the firm connects to AWS through the public internet. Which service is responsible for enabling private hybrid connectivity?
A. Amazon Virtual Private Cloud (Amazon VPC) NAT Gateway
B. AWS Direct Connect
C. Amazon Simple Storage Service (Amazon S3) Transfer Acceleration
D. AWS Web Application Firewall (AWS WAF)
Which AWS service enables automated scaling up and down of an application without requiring capacity planning decisions?
A. Amazon AutoScaling
B. Amazon Redshift
C. AWS CloudTrail
D. AWS Lambda
Which way of transcoding a large number of individual video files complies to the principles of AWS architecture?
A. Using many instances in parallel
B. Using a single large instance during off-peak hours
C. Using dedicated hardware
D. Using a large GPU instance type
Which sorts of load balancers are supported by Elastic Load Balancing (ELB)? (Select two.)
A. Public load balancers with AWS Application Auto Scaling capabilities
B. F5 Big-IP and Citrix NetScaler load balancers
C. Classic Load Balancers
D. Cross-zone load balancers with public and private IPs
E. Application Load Balancers
Which Amazon Web Services offering allows customers to access securely to AWS resources through the public internet?
A. Amazon VPC peering
B. AWS Direct Connect
C. AWS VPN
D. Amazon Pinpoint
Which Amazon Web Services (AWS) service may be used to monitor resource changes and ensure compliance?
A. Amazon CloudWatch
B. AWS Config
C. AWS CloudTrail
D. AWS Trusted Advisor
Which Amazon Web Services (AWS) services use global edge locations? (Select two.)
A. AWS Fargate
B. Amazon CloudFront
C. AWS Global Accelerator
D. AWS Wavelength
E. Amazon VPC
Which of the following is an AWS Global Infrastructure component?
A. Amazon Alexa
B. AWS Regions
C. Amazon Lightsail
D. AWS Organizations
Which AWS service enables on-demand compliance report retrieval?
A. AWS Secrets Manager
B. AWS Artifact
C. AWS Security Hub
D. AWS Certificate Manager
A network engineer is tasked with the responsibility of establishing a dedicated 10 Gbps network connection between an on-premises system and AWS. Which Amazon Web Services (AWS) function or feature should the engineer utilize?
A. Amazon Route 53
B. AWS Direct Connect
C. AWS PrivateLink
D. AWS VPN
A business want to implement a new architecture using AWS services. The business must compare service charges on a variety of scales. Which AWS service, tool, or feature should the business utilize to accomplish this task?
A. AWS Compute Optimizer
B. AWS Pricing Calculator
C. AWS Trusted Advisor
D. Cost Explorer rightsizing recommendations
Which security-related tasks are the customer's responsibility in the AWS Cloud?
A. Securing infrastructure at data centers
B. Maintaining firewall configurations at a hardware level
C. Maintaining networking among hardware components
D. Maintaining server-side encryption
Which AWS service can assist a business in determining who removed an Amazon EC2 instance yesterday?
A. Amazon CloudWatch
B. AWS Trusted Advisor
C. AWS CloudTrail
D. Amazon Inspector
What protection does AWS Shield Standard offer?
A. WAF rules
B. DDoS protection
C. Identity and Access Management (IAM) permissions and access to resources
D. Data encryption
By treating infrastructure in the AWS Cloud as code, customers can:
A. automate migration of on-premises hardware to AWS data centers.
B. let a third party automate an audit of the AWS infrastructure.
C. turn over application code to AWS so it can run on the AWS infrastructure.
D. automate the infrastructure provisioning process.
Which of the following is not a component of Amazon Virtual Private Cloud? (Select two.)
A. Objects
B. Subnets
C. Buckets
D. Internet gateways
E. Access key
Which of the following allows you to share the cost savings associated with Reserved Instances across several AWS accounts?
A. AWS Cost Explorer between AWS accounts
B. Linked accounts and consolidated billing
C. Amazon Elastic Compute Cloud (Amazon EC2) Reserved Instance Utilization Report
D. Amazon EC2 Instance Usage Report between AWS accounts
Which AWS billing support resource is accessible to all levels of assistance?
A. AWS Support concierge
B. AWS Customer Service
C. AWS technical account manager
D. AWS Business Support
Which of the following are customer obligations in the AWS Cloud? (Select two.)
A. Security in the cloud
B. Configuration of AWS infrastructure devices
C. Configuration of security groups on Amazon EC2 instances
D. Security of the cloud
E. Patches for the operating system of Amazon DynamoDB
How can an AWS customer with an AWS Basic Support package get AWS technical support?
A. AWS Senior Support Engineers
B. AWS Technical Account Managers
C. AWS Trusted Advisor
D. AWS Discussion Forums
A Cloud Practitioner is asked how to estimate the cost of deploying a new application on Amazon Web Services (AWS). Which reaction is the MOST APPROPRIATE?
A. Inform the user that AWS pricing allows for on-demand pricing.
B. Direct the user to the AWS Simple Monthly Calculator for an estimate.
C. Use Amazon QuickSight to analyze current spending on-premises.
D. Use Amazon AppStream 2.0 for real-time pricing analytics.
What is one of the Amazon Relational Database Service's (Amazon RDS) advantages?
A. It simplifies relational database administration tasks.
B. It provides 99.99999999999% reliability and durability.
C. It automatically scales databases for loads.
D. It enables users to dynamically adjust CPU and RAM resources.
A Cloud Practitioner is putting up a disaster recovery strategy and aims to replicate data across different geographic locations. Which of the following satisfies these criteria?
A. AWS Accounts
B. AWS Regions
C. Availability Zones
D. Edge locations
Question #624Topic 1
Which of the following is a critical architectural concept for cloud application design?
A. Store data and backups in the same region.
B. Design tightly coupled system components.
C. Avoid multi-threading.
D. Design for failure.
Recently, an online retailer implemented a production web application. The system administrator is responsible for preventing typical attack vectors such as SQL injection and cross-site scripting. Which Amazon Web Services (AWS) service should the administrator utilize to resolve these issues?
A. AWS WAF
B. Amazon VPC
C. Amazon GuardDuty
D. Amazon CloudWatch
A distinguishing feature of edge locations is that they:
A. host Amazon EC2 instances closer to users.
B. help lower latency and improve performance for users.
C. cache frequently changing data without reaching the origin server.
D. refresh data changes daily.
Which Amazon Web Services (AWS) offering provides a highly available, scalable DNS web service?
A. Amazon VPC
B. Amazon CloudFront
C. Amazon Route 53
D. Amazon Connect
On AWS, a business must plan, schedule, and execute hundreds of thousands of computing tasks. Which AWS service might be used to fulfill this requirement?
A. AWS Step Functions
B. AWS Service Catalog
C. Amazon Simple Queue Service (Amazon SQS)
D. AWS Batch
Which AWS service is capable of encrypting data in transit?
A. Amazon
GuardDuty
B. AWS Shield
C. AWS Security Hub
D. AWS Key Management Service (AWS KMS)
Which of the following are AWS shared responsibility model customer responsibilities? (Select two.)
A. Physical security of AWS facilities
B. Configuration of security groups
C. Encryption of customer data on AWS
D. Management of AWS Lambda infrastructure
E. Management of network throughput of each AWS Region
A business is in the market for a scalable data warehouse solution. Which of the following AWS options would be most appropriate for your business?
A. Amazon Simple Storage Service (Amazon S3)
B. Amazon DynamoDB
C. Amazon Kinesis
D. Amazon Redshift
Which of the following are AWS Global Accelerator's benefits? (Select two.)
A. Reduced cost to run services on AWS
B. Improved availability of applications deployed on AWS
C. Higher durability of data stored on AWS
D. Decreased latency to reach applications deployed on AWS
E. Higher security of data stored on AWS
Which of the following is an Amazon CloudWatch Logs feature? (Select two.)
A. Summaries by Amazon Simple Notification Service (Amazon SNS)
B. Free Amazon Elasticsearch Service analytics
C. Provided at no charge
D. Real-time monitoring
E. Adjustable retention
A user requires rapid deployment of a non-relational database on AWS. The user is not interested in administering the underlying hardware or database software. Which AWS service is appropriate for this?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift
Where can I obtain AWS compliance and certification reports?
A. AWS Artifact
B. AWS Concierge
C. AWS Certificate Manager
D. AWS Trusted Advisor
A company is transferring its development and test environments to AWS to increase agility and cost savings. Given that these are not production workloads and the servers are not fully used, some downtime is to be anticipated. Which Amazon EC2 price plan is the MOST cost-effective in order to achieve these requirements?
A. Reserved Instances
B. On-Demand Instances
C. Spot Instances
D. Dedicated Instances
Which AWS service enables the safe, rapid, and economical migration or transit of exabyte-scale datasets into AWS?
A. AWS Batch
B. AWS Snowball
C. AWS Migration Hub
D. AWS Snowmobile
A firm is developing a business intelligence system and wants to include dashboards into the reporting process. Which Amazon Web Services (AWS) service may be used?
A. Amazon Redshift
B. Amazon Elasticsearch Service (Amazon ES)
C. Amazon QuickSight
D. Amazon Athena
Utilizing Amazon Elastic Container Service (Amazon ECS) to deconstruct a monolithic design into microservices demonstrates the following:
A. a loosely coupled architecture.
B. a tightly coupled architecture.
C. a stateless architecture.
D. a stateful architecture.
A user requires an automated security assessment report that identifies unauthorized network access to Amazon EC2 instances and their associated issues. Which AWS service will be responsible for generating this evaluation report?
A. EC2 security groups
B. AWS Config
C. Amazon Macie
D. Amazon Inspector
How can a business separate the expenses of production and non-production workloads on Amazon Web Services (AWS)?
A. Create Identity and Access Management (IAM) roles for production and non-production workloads.
B. Use different accounts for production and non-production expenses.
C. Use Amazon EC2 for non-production workloads and other services for production workloads.
D. Use Amazon CloudWatch to monitor the use of services.
Who is responsible for patching the Amazon RDS guest operating system?
A. The AWS Product team
B. The customer Database Administrator
C. Managed partners
D. AWS Support
Which Amazon Web Services (AWS) offering allows customers to deploy infrastructure as code by automating the provisioning process?
A. Amazon GameLift
B. AWS CloudFormation
C. AWS Data Pipeline
D. AWS Glue
Which Amazon VPC feature allows users to monitor IP traffic to and from Amazon EC2 instances?
A. Security groups
B. Elastic network interfaces
C. Network ACLs
D. VPC Flow Logs
Which AWS services or features contribute to the reduction of network latency for a geographically scattered user base? (Select two.)
A. Amazon VPC
B. Elastic Load Balancer
C. Amazon CloudFront
D. AWS Direct Connect
E. AWS Global Accelerator
A business want to evaluate a third-party ecommerce solution before committing to its long-term usage. Which AWS service or tool will serve as the foundation for this effort?
A. AWS Marketplace
B. AWS Partner Network (APN)
C. AWS Managed Services
D. AWS Service Catalog
Which AWS services can be used to collect information about the activities of an AWS account? (Select two.)
A. Amazon CloudFront
B. AWS Cloud9
C. AWS CloudTrail
D. AWS CloudHSM
E. Amazon CloudWatch
A web developer with minimal experience of AWS networking technologies such as Amazon Virtual Private Cloud, Elastic Load Balancing, and Auto Scaling want to host a highly available web application. Which AWS service would manage the deployment automatically and alleviate the developer's complexity?
A. AWS CodeDeploy
B. AWS Resource Access Manager
C. AWS Elastic Beanstalk
D. AWS CloudFormation
A corporation has numerous AWS accounts inside AWS Organizations and want to limit the advantage of Amazon EC2 Reserved Instances to a single account. Which course of action should be followed?
A. Purchase the Reserved Instances from master payer account and turn off Reserved Instance sharing.
B. Enable billing alerts in the AWS Billing and Cost Management console.
C. Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level.
D. Enable Reserved Instance sharing in the AWS Billing and Cost Management console.
Among the benefits of migrating infrastructure from an on-premises data center to the AWS Cloud include the following:
A. it allows the business to eliminate IT bills.
B. it allows the business to put a server in each customerג€™s data center.
C. it allows the business to focus on business activities.
D. it allows the business to leave servers unpatched.
Which AWS service simplifies the process of creating and managing AWS users and groups, as well as providing them with free secure access to AWS resources?
A. AWS Direct Connect
B. Amazon Connect
C. AWS Identity and Access Management (IAM)
D. AWS Firewall Manager
What is a job in Amazon Web Services' Identity and Access Management (IAM) system?
A. A user associated with an AWS resource
B. A group associated with an AWS resource
C. An entity that defines a set of permissions for use with an AWS resource
D. An authentication credential associated with a multi-factor authentication (MFA) token
For one month, a business is testing a new customer-facing application on Amazon Elastic Compute Cloud (Amazon EC2). Which pricing strategy is most appropriate?
A. Reserved Instances
B. Spot Instances
C. On-Demand Instances
D. Dedicated Hosts
Which of the following is a shared control mechanism between the client and Amazon Web Services?
A. Providing a key for Amazon S3 client-side encryption
B. Configuration of an Amazon EC2 instance
C. Environmental controls of physical AWS data centers
D. Awareness and training
Which of the following may be used to restrict access to an Amazon Storage Service (Amazon S3) bucket to specified users?
A. A public and private key-pair
B. Amazon Inspector
C. AWS Identity and Access Management (IAM) policies
D. Security Groups
A business that operates on the AWS Cloud must generate distinct invoices for each environment, such as development, testing, and production. How is this accomplished?
A. Use multiple AWS accounts
B. Use resource tagging
C. Use multiple VPCs
D. Use Cost Explorer
Utilizing AWS Identity and Access Management (IAM) to restrict access to just the resources necessary to complete a job is referred to as:
A. restricted access.
B. as-needed access.
C. least privilege access.
D. token access.
Why is it advantageous to utilize Elastic Load Balancers in conjunction with applications?
A. They allow for the conversion from Application Load Balancers to Classic Load Balancers.
B. They are capable of handling constant changes in network traffic patterns.
C. They automatically adjust capacity.
D. They are provided at no charge to users.
Which free AWS service or tool assists in identifying underused Amazon EC2 instances and idle Amazon RDS DB instances?
A. Cost Explorer
B. AWS Budgets
C. AWS Organizations
D. AWS Trusted Advisor
Which of the following describes Amazon S3? (Select two.)
A. A global file system
B. An object store
C. A local file store
D. A network file system
E. A durable storage system
Which Amazon Web Services (AWS) service should I use to generate a billing alarm?
A. AWS Trusted Advisor
B. AWS CloudTrail
C. Amazon CloudWatch
D. Amazon QuickSight
Which AWS services have automatic data backups by default?
A. Amazon S3
B. Amazon Aurora
C. Amazon ElastiCache for Memcached
D. Amazon Elastic File System (Amazon EFS)
Which AWS service will be responsible for tracking user activities on AWS?
A. Amazon GuardDuty
B. AWS Trusted Advisor
C. AWS CloudTrail
D. Amazon CloudWatch
