WorksheetsAWS Cloud Practitioner Q2
Total questions: 66
Worksheet time: 1hrs 6mins
#1 According to the shared responsibility mode, which security and compliance task is AWS responsible for?
Granting permissions to users and services
Updating Amazon EC2 host firmware
Encrypting data at rest
Updating operating systems
#2 A Cloud Practitioner noticed that IP addresses that are owned by AWS are being used to attempt to flood ports on some of the company’s systems.
AWS Professional Services
AWS Partner Network (APN)
AWS Trust & Safety team
AWS Technical Account Manager (TAM)
#3 What can be used to allow an application running on an Amazon EC2 instance to securely store data in an Amazon S3 bucket without using long-term credentials?
AWS Systems Manager
Amazon Connect
AWS IAM role
AWS IAM access key
#4 Which AWS service does AWS Snowball Edge natively support?
AWS Server Migration Service (AWS SMS)
AWS Database Migration Service (AWS DMS)
AWS Trusted Advisor
Amazon EC2
#5 AWS are able to continue to reduce their pricing due to:
Pay-as-you go pricing
The AWS global infrastructure
Economies of scale
Reserved instance pricing
#6 According to the AWS shared responsibility model, which task is the customer's responsibility?
Maintaining the infrastructure needed to run Amazon DynamoDB.
Updating the operating system of AWS Lambda instances.
Maintaining Amazon API Gateway infrastructure.
Updating the guest operating system on Amazon EC2 instances.
#7 A Cloud Practitioner noticed that IP addresses that are owned by AWS are being used to attempt to flood ports on some of the company’s systems. To whom should the issue be reported?
AWS Professional Services
AWS Partner Network (APN)
AWS Trust & Safety team
AWS Technical Account Manager (TAM)
#8 Which on-premises costs must be included in a Total Cost of Ownership (TCO) calculation when comparing against the AWS Cloud? (Select TWO.)
Physical compute hardware
Operating system administration
Network infrastructure in the data center
Project management services
Database schema development
#9 Which of the following can be used to identify a specific user who terminated an Amazon RDS DB instance
AWS CloudTrail
Amazon Inspector
Amazon CloudWatch
AWS Trusted Advisor
#10 Which AWS service can be used to perform data extract, transform, and load (ETL) operations so you can prepare data for analytics?
Amazon QuickSight
AWS Glue
Amazon Athena
Amazon S3 Select
#11 Which of the following tasks can a user perform to optimize Amazon EC2 costs? (Select TWO.)
Implement Auto Scaling groups to add and remove instances based on demand.
Create a policy to restrict IAM users from accessing the Amazon EC2 console.
Set a budget to limit spending on Amazon EC2 instances using AWS Budgets.
Purchase Amazon EC2 Reserved Instances
Create users in a single Region to reduce the spread of EC2 instances globally.
# 12 According to the shared responsibility model, which security-related task is the responsibility of the customer?
Maintaining server-side encryption
Securing servers and racks at AWS data centers
Maintaining firewall configurations at a hardware level.
Maintaining physical networking configuration.
#13 A company plan to move the application development to AWS. Which benefits can they achieve when developing and running applications in the AWS Cloud compared to on-premises? (Select TWO.)
AWS automatically replicates all data globally
AWS will fully manage the entire application.
AWS makes it easy to implement high availability
AWS can accommodate large changes in application demand.
AWS takes care of application security patching.
#14 Which AWS services offer compute capabilities? (Select TWO.)
Amazon DynamoDB
Amazon ECS
Amazon EFS
Amazon CloudHSM
AWS Lambda
#15 A cloud practitioner needs to migrate a 70 TB of data from an on-premises data center into the AWS Cloud. The company has a slow and unreliable internet connection. Which AWS service can the cloud practitioner leverage to transfer the data?
Amazon S3 Glacier
AWS Snowball
AWS Storage Gateway
AWS DataSync
#16 Which AWS service is a fully-managed source control service that hosts secure Git-based repositories?
AWS CodeBuild
AWS CodeDeploy
AWS CodeCommit
AWS CodePipeline
#17 A Cloud Practitioner is re-architecting a monolithic application. Which design principles for cloud architecture do AWS recommend? (Select TWO.)
Implement manual scalability.
Implement loose coupling.
Use self-managed servers
Rely on individual components
Design for scalability.
#18 Which of the following a valid best practices for using the AWS Identity and Access Management (IAM) service? (Select TWO.)
Embed access keys in application code.
Create individual IAM users
Use inline policies instead of customer managed policies
Use groups to assign permissions to IAM users.
Grant maximum privileges to IAM users.
#19 Which benefit of AWS enables companies to replace upfront fixed expenses with variable expenses when using on-demand technology services?
Pay-as-you-go pricing
Economies of scale
Global reach
High availability
#20 A Service Control Policy (SCP) is used to manage the maximum available permissions and is associated with which of the following? Service control policies (SCPs) manage permissions for which of the following?
AWS Global Infrastructure
AWS Regions
AWS Organizations
Availability Zones
#21 What should a Cloud Practitioner ensure when designing a highly available architecture on AWS?
Servers have low-latency and high throughput network connectivity.
The failure of a single component should not affect the application.
There are enough servers to run at peak load available at all times.
A single monolithic application component handles all operations.
#22 Which technology can automatically adjust compute capacity as demand for an application increases or decreases?
Load balancing
Auto Scaling
Fault tolerance
High availability
#23 Which of the following is an advantage for a company running workloads in the AWS Cloud vs on-premises? (Select TWO.)
Less staff time is required to launch new workloads.
Increased time to market for new application features
Higher acquisition costs to support elastic workloads.
Lower overall utilization of server and storage systems
Increased productivity for application development teams.
#24 Which cloud architecture design principle is supported by deploying workloads across multiple Availability Zones?
Automate infrastructure
Design for agility
Enable elasticity
Design for failure
#25 A company requires a dashboard for reporting when using a business intelligence solution. Which AWS service can a Cloud Practitioner use?
Amazon Redshift
Amazon Kinesis
Amazon Athena
Amazon QuickSight
#26 A Cloud Practitioner wants to configure the AWS CLI for programmatic access to AWS services. Which credential components are required? (Select TWO.)
An access key ID
A public key
A secret access key
An IAM Role
A private key
#27 Which service can a Cloud Practitioner use to configure custom cost and usage limits and enable alerts for when defined thresholds are exceeded?
Consolidated billing
AWS Trusted Advisor
Cost Explorer
AWS Budgets
#28 What is the function of Amazon EC2 Auto Scaling?
Scales the size of EC2 instances up or down automatically, based on demand
Automatically updates the EC2 pricing model, based on demand
Scales the number of EC2 instances in or out automatically, based on demand.
Automatically modifies the network throughput of EC2 instances, based on demand.
#29 Which AWS service should a Cloud Practitioner use to establish a secure network connection between an on-premises network and AWS
AWS Mobile Hub
AWS Web Application Firewall (WAF)
Amazon Virtual Private Cloud (VPC)
Virtual Private Network
#30 Which AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?
Amazon DynamoDB
Amazon Athena
Amazon EMR
Amazon Redshift
#31 Which Amazon EC2 pricing model should be avoided if a workload cannot accept interruption if capacity becomes temporarily unavailable?
Spot Instances
On-Demand Instances
Standard Reserved Instances
Convertible Reserved Instances
#32 A Cloud Practitioner requires a simple method to identify if unrestricted access to resources has been allowed by security groups. Which service can the Cloud Practitioner use?
AWS Trusted Advisor
Amazon CloudWatch
VPC Flow Logs
AWS CloudTrail
#33 An eCommerce company plans to use the AWS Cloud to quickly deliver new functionality in an iterative manner, minimizing the time to market. Which feature of the AWS Cloud provides this functionality?
Elasticity
Agility
Fault tolerance
Cost effectiveness
#34 What can a Cloud Practitioner do with the AWS Cost Management tools? (Select TWO.)
Visualize AWS costs by day, service, and linked AWS account
Terminate EC2 instances automatically if budget thresholds are exceeded.
Automatically modify EC2 instances to use Spot pricing to reduce costs
Create budgets and receive notifications if current or forecasted usage exceeds the budgets.
#35 Which AWS dashboard displays relevant and timely information to help users manage events in progress, and provides proactive notifications to help plan for scheduled activities?
AWS Service Health Dashboard
AWS Personal Health Dashboard
AWS Trusted Advisor dashboard
Amazon CloudWatch dashboard
#36 Which AWS service should a Cloud Practitioner use to automate configuration management using Puppet?
AWS Config
AWS OpsWorks
AWS CloudFormation
AWS Systems Manager
#37 Which AWS service is used to send both text and email messages from distributed applications?
Amazon Simple Notification Service (Amazon SNS)
Amazon Simple Email Service (Amazon SES)
Amazon Simple Workflow Service (Amazon SWF)
Amazon Simple Queue Service (Amazon SQS)
#38 Which AWS service or feature allows a company to receive a single monthly AWS bill when using multiple AWS accounts?
Consolidated billing
Amazon Cloud Directory
AWS Cost Explorer
AWS Cost and Usage report
#39 A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?
EC2 security groups
AWS Config
Amazon Macie
Amazon Inspector
Which of the following best describes an Availability Zone in the AWS Cloud?
One or more physical data centers
A completely isolated geographic location
One or more edge locations based around the world
A subnet for deploying resources into
#43 A company needs a consistent and dedicated connection between AWS resources and an on-premise system. Which AWS service can fulfil this requirement?
AWS Direct Connect
AWS Managed VPN
Amazon Connect
AWS DataSync
#42 Which AWS service helps customers meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
AWS Secrets Manager
AWS CloudHSM
AWS Key Management Service (AWS KMS)
AWS Directory Service
#43 What can a Cloud Practitioner use the AWS Total Cost of Ownership (TCO) Calculator for?
Generate reports that break down AWS Cloud compute costs by duration, resource, or tags
Estimate savings when comparing the AWS Cloud to an on-premises environment
Estimate a monthly bill for the AWS Cloud resources that will be used
Enable billing alerts to monitor actual AWS costs compared to estimated costs
#44 Which of the following should be used to improve the security of access to the AWS Management Console? (Select TWO.)
AWS Secrets Manager
AWS Certificate Manager
AWS Multi-Factor Authentication (AWS MFA)
Security group rules
Strong password policies
#45 An application has highly dynamic usage patterns. Which characteristics of the AWS Cloud make it cost-effective for this type of workload? (Select TWO.)
High availability
Strict security
Elasticity
Pay-as-you-go pricing
Reliability
#46 Which benefits can a company immediately realize using the AWS Cloud? (Select TWO.)
Variable expenses are replaced with capital expenses
Capital expenses are replaced with variable expenses
User control of physical infrastructure
Increased agility
No responsibility for security
#47 Which AWS hybrid storage service enables a user’s on-premises applications to seamlessly use AWS Cloud storage?
AWS Backup
Amazon Connect
AWS Direct Connect
AWS Storage Gateway
#48 A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in an Amazon VPC. Which service should be used to deploy the application?
AWS CloudFormation
AWS Elastic Beanstalk
Amazon EC2
Amazon LightSail
#49 How can a security compliance officer retrieve AWS compliance documentation such as a SOC 2 report?
Using AWS Artifact
Using AWS Trusted Advisor
Using AWS Inspector
Using the AWS Personal Health Dashboard
#50 Which AWS service can be used to run Docker containers?
AWS Lambda
Amazon ECR
Amazon ECS
Amazon AMI
#51 What are the benefits of using the AWS Managed Services? (Select TWO.)
Alignment with ITIL processes
Managed applications so you can focus on infrastructure
Baseline integration with ITSM tools
Designed for small businesses
Support for all AWS services
#52 Which services are involved with security? (Select TWO.)
AWS CloudHSM
AWS DMS
AWS KMS
AWS SMS
Amazon ELB
#53 What are the names of two types of AWS Storage Gateway? (Select TWO.)
S3 Gateway
File Gateway
Block Gateway
Tape Gateway
Cached Gateway
#54 An application stores images which will be retrieved infrequently, but must be available for retrieval immediately. Which is the most cost-effective storage option that meets these requirements?
Amazon Glacier with expedited retrievals
Amazon S3 Standard-Infrequent Access
Amazon EFS
Amazon S3 Standard
#55 Which AWS support plans provide support via email, chat and phone? (Select TWO.)
Basic
Developer
Business
Enterprise
Global
Which AWS service can be used to host a static website?
Amazon S3
Amazon EBS
AWS CloudFormation
Amazon EFS
#57 Which of the following are AWS recommended best practices in relation to IAM? (Select TWO.)
Assign permissions to users
Create individual IAM users
Embed access keys in application code
Enable MFA for all users
Grant greatest privilege
#58 Which of the following security operations tasks must be performed by AWS customers? (Select TWO.)
Collecting syslog messages from physical firewalls
Issuing data center access keycards
Installing security updates on EC2 instances
Enabling multi-factor authentication (MFA) for privileged users
Installing security updates for server firmware
#59 How can an organization assess applications for vulnerabilities and deviations from best practice?
Use AWS Artifact
Use AWS Inspector
Use AWS Shield
Use AWS WAF
#60 Which AWS service protects against common exploits that could compromise application availability, compromise security or consume excessive resources?
AWS WAF
AWS Shield
Security Group
Network ACL
#61 A new user is unable to access any AWS services, what is the most likely explanation?
The user needs to login with a key pair
The services are currently unavailable
By default new users are created without access to any AWS services
The default limit for user logons has been reached
#62 Which of the following compliance programs allows the AWS environment to process, maintain, and store protected health information?
ISO 27001
PCI DSS
HIPAA
SOC 1
#63 Which AWS service can be used to load data from Amazon S3, transform it, and move it to another destination?
Amazon RedShift
Amazon EMR
Amazon Kinesis
AWS Glue
#64 How should an organization deploy an application running on multiple EC2 instances to ensure that a power failure does not cause an application outage?
Launch the EC2 instances in separate regions
Launch the EC2 instances into different VPCs
Launch the EC2 instances into different Availability Zones
Launch the EC2 instances into Edge Locations
Which of the statements below is correct in relation to Consolidated Billing? (Select TWO.)
You receive one bill per AWS account
You receive a single bill for multiple accounts
You pay a fee per linked account
You can combine usage and share volume pricing discounts
You are charged a fee per user
#66 Amazon S3 is typically used for which of the following use cases? (Select TWO.)
Host a static website
Install an operating system
Media hosting
In-memory data cache
Message queue
