Font size
WorksheetsAWS Cloud Practitioner Q3
Total questions: 65
Worksheet time: 1hrs 5mins
#1 Which AWS service or feature can be used to restrict the individual API actions that users and roles in each member account can access?
Amazon Macie
AWS Organizations
AWS Shield
AWS IAM
#2 Which AWS service can be used to track the activity of users on AWS?
AWS CloudTrail
AWS Directory Service
Amazon Inspector
Amazon CloudWatch
#3 A company needs to optimize costs and resource usage through monitoring of operational health for all resources running on AWS. Which AWS service will meet these requirements?
AWS Control Tower
Amazon CloudWatch
AWS CloudTrail
AWS Config
#4 A user needs a quick way to determine if any Amazon EC2 instances have ports that allow unrestricted access. Which AWS service will support this requirement?
VPC Flow Logs
AWS Shield
AWS Trusted Advisor
AWS CloudWatch Logs
#5 A company has a website that delivers static content from an Amazon S3 bucket to users from around the world. Which AWS service will deliver the content with low latency?
AWS Lambda
Amazon CloudFront
AWS Elastic Beanstalk
AWS Global Accelerator
#6 Which AWS service or component allows inbound traffic from the internet to access a VPC
NAT Gateway
Internet gateway
VPC Route Table
Virtual Private Gateway
#7 A company plans to connect their on-premises data center to the AWS Cloud and requires consistent bandwidth and performance. Which AWS service should the company choose?
AWS VPN
Amazon Connect
AWS Direct Connect
Amazon CloudFront
A manager is planning to migrate applications to the AWS Cloud and needs to obtain AWS compliance reports. How can these reports be generated?
Download the reports from AWS Secrets Manager.
Contact the AWS Compliance team
Create a support ticket with AWS Support.
Download the reports from AWS Artifact.
A company has been using an AWS managed IAM policy for granting permissions to users but needs to add some permissions. How can this be achieved?
Create a rule in AWS WAF
Create a custom IAM policy
Edit the AWS managed policy
Create a Service Control Policy
Which AWS service or feature can be used to capture information about inbound and outbound IP traffic on network interfaces in a VPC?
Internet gateway
AWS CloudTrail
VPC Endpoint
VPC Flow Logs
#11 Which AWS services can be used as infrastructure automation tools? (Select TWO.)
AWS CloudFormation
Amazon CloudFront
AWS Batch
AWS OpsWorks
Amazon QuickSight
#12 What technology enables compute capacity to adjust as loads change?
Load balancing
Automatic failover
Round robin
Auto Scaling
#14 How can a company separate costs for storage, Amazon EC2, Amazon S3, and other AWS services by department?
Add department-specific tags to each resource
Create a separate VPC for each department
Create a separate AWS account for each department
Use AWS Organizations
#14 Which AWS Support plan provides access to architectural and operational reviews, as well as 24/7 access to Cloud Support Engineers through email, online chat, and phone ?
Basic
Business
Developer
Enterprise
#15 Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud?
Managing edge locations
Physical security
Firewall configuration
Global infrastructure
#16 Which AWS service provides on-demand downloads of AWS security and compliance reports
AWS Directory Service
AWS Artifact
AWS Trusted Advisor
. Amazon Inspector
#17 Which Amazon EC2 pricing model is the most cost-effective for an always-up, right-sized database server running a project that will last 1 year?
On-Demand Instances
Convertible Reserved Instances
Spot Instances
Standard Reserved Instances
#18 Which feature enables fast, easy, and secure transfers of files over long distances between a client and an Amazon S3 bucket?
S3 Static Websites
S3 Copy
Multipart Upload
S3 Transfer Acceleration
#19 Under the AWS shared responsibility model what is AWS responsible for? (Select TWO.)
Physical security of the data center
Replacement and disposal of disk drives
Configuration of security groups
Patch management of operating systems
Encryption of customer data
#20 Which AWS service is known as a “serverless” service and runs code as functions triggered by events?
Amazon ECS
AWS Lambda
Amazon CodeDeploy
Amazon Cognito
#21 Which statement best describes Amazon Route 53?
Amazon Route 53 is a service that enables routing within VPCs in an account
Amazon Route 53 is a highly available and scalable Domain Name System (DNS) service
Amazon Route 53 enables hybrid cloud models by extending an organization's on-premise networks into the AWS cloud
Amazon Route 53 is a service for distributing incoming connections between a fleet of registered EC2 instances
#22 Which service provides a way to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PCs?
Amazon Elastic Transcoder
AWS Glue
Amazon Rekognition
Amazon Comprehend
#23 When using AWS Organizations with consolidated billing what are two valid best practices? (Select TWO.)`
Always enable multi-factor authentication (MFA) on the root account
Always use a straightforward password on the root account
The paying account should be used for billing purposes only
Use the paying account for deploying resources
Never exceed the limit of 20 linked accounts
#24 Which AWS support plan comes with a Technical Account Manager (TAM)?
Basic
Developer
Business
Enterprise
#25 Which service provides the ability to simply upload applications and have AWS handle the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring?
Amazon EC2
AWS Elastic Beanstalk
Amazon EC2 Auto Scaling
AWS OpsWorks
You are concerned that you may be getting close to some of the default service limits for several AWS services. What AWS tool © 2022 Digital Cloud Training 134 can be used to display current usage and limits?
AWS CloudWatch
AWS Personal Health Dashboard
AWS Trusted Advisor
AWS Systems Manager
#27 You need to run a production process that will use several EC2 instances and run constantly on an ongoing basis. The process cannot be interrupted or restarted without issue. What EC2 pricing model would be best for this workload?
Reserved instances
Spot instances
On-demand instances
Flexible instances
#28 Which AWS service does API Gateway integrate with to enable users from around the world to achieve the lowest possible latency for API requests and responses?
AWS Direct Connect
Amazon S3 Transfer Acceleration
Amazon CloudFront
AWS Lambda
#29 Which service can an organization use to track API activity within their account?
AWS CloudTrail
Amazon CloudWatch
AWS IAM
AWS CloudHSM
#30 What tool provides real time guidance to help you provision your resources following best practices in the areas of cost optimization, performance, security and fault tolerance?
AWS Inspector
AWS Trusted Advisor
AWS Personal Health Dashboard
AWS IAM
#31 What is the best way for an organization to transfer hundreds of terabytes of data from their on-premise data center into Amazon S3 with limited bandwidth available?
Use S3 Transfer Acceleration
Apply compression before uploading
Use AWS Snowball
Use Amazon CloudFront
#32 Which database allows you to scale at the push of a button without incurring any downtime?
Amazon RDS
Amazon EMR
Amazon DynamoDB
Amazon RedShift
#33 What are the charges for using Amazon Glacier? (Select TWO.)
Data transferred into Glacier
Retrieval requests
Data storage
Enhanced networking
Number of Availability Zones
#34 Which of the following statements are correct about the benefits of AWS Direct Connect? (Select TWO.)
Quick to implement
Increased reliability (predictable performance)
Lower cost than a VPN
Increased bandwidth (predictable bandwidth)
Uses redundant paths across the Internet
Which AWS service lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments?
AWS Elastic Beanstalk
AWS CloudFormation
AWS Systems Manager
AWS OpsWorks
#36 Which AWS database service provides a fully managed data warehouse that can be analyzed using SQL tools and business intelligence tools?
Amazon RDS
Amazon DynamoDB
Amazon RedShift
Amazon ElastiCache
#37 Which service can be used to create sophisticated, interactive graph applications?
Amazon RedShift
Amazon Neptune
AWS X-Ray
Amazon Athena
#38 When using Amazon IAM, what authentication methods are available to use? (Select TWO.)
Client certificates
Access keys
AWS KMS
AES 256
Server certificates
#39 How does the consolidated billing feature of AWS Organizations treat Reserved Instances that were purchased by another account in the organization?
All accounts in the organization are treated as one account so any account can receive the hourly cost benefit
Only the master account can benefit from the hourly cost benefit of the reserved instances
All accounts in the organization are treated as one account for volume discounts but not for reserved instances
AWS Organizations does not support any volume or reserved instance benefits across accounts, it is just a method of aggregating bills
#40 Which of the below AWS services supports automated backups as a default configuration?
Amazon S3
Amazon RDS
Amazon EC2
Amazon EBS
#41 What are the advantages of Availability Zones? (Select TWO.)
They allow regional disaster recovery
They provide fault isolation
They enable the caching of data for faster delivery to end users
They are connected by low-latency network connections
They enable you to connect your on-premises networks to AWS to form a hybrid cloud
#43 Which of the options below are recommendations in the cost optimization pillar of the well-architected framework? (Select TWO.)
Adopt a consumption model
Adopt a capital expenditure model
Start spending money on data center operations
Analyze and attribute expenditure
Manage your services independently
#43 What are Edge locations used for?
They are used for terminating VPN connections
They are used by CloudFront for caching content
They are the public-facing APIs for Amazon S3
They are used by regions for inter-region connectivity
#44 To ensure the security of your AWS account, what are two AWS best practices for managing access keys? (Select TWO.)
Don’t create any access keys, use IAM roles instead
Don’t generate an access key for the root account user
Where possible, use IAM roles with temporary security credentials
Rotate access keys daily
Use MFA for access keys
#45 An Amazon EC2 instance running the Amazon Linux 2 AMI is billed in what increment?
Per second
Per hour
Per CPU
Per GB
#46 To gain greater discounts, which services can be reserved? (Select TWO.)
Amazon RedShift
Amazon S3
AWS Lambda
Amazon DynamoDB
Amazon CloudWatch
#47 Which service allows an organization to view operational data from multiple AWS services through a unified user interface and automate operational tasks?
AWS Config
AWS OpsWorks
AWS Systems Manager
Amazon CloudWatch
#48 How can an organization track resource inventory and configuration history for the purpose of security and regulatory compliance
Configure AWS Config with the resource types
Create an Amazon CloudTrail trail
Implement Amazon GuardDuty
Run a report with AWS Artifact
#49 A security operations engineer needs to implement threat detection and monitoring for malicious or unauthorized behavior. Which service should be used?
AWS Shield
AWS KMS
AWS CloudHSM
AWS GuardDuty
#50 Which authentication method is used to authenticate programmatic calls to AWS services?
Console password
Key pair
Access keys
Server certificate
#51 What is a benefit of moving an on-premises database to Amazon Relational Database Service (RDS)?
There is no need to manage operating systems
You can scale vertically without downtime
There is no database administration required
You can run any database engine
#52 What are the benefits of using Amazon Rekognition with image files?
Can be used to resize images
Can be used to identify objects in an image
Can be used to transcode audio
Can help with image compression
#53 Which IAM entity is associated with an access key ID and secret access key?
IAM Group
IAM Role
IAM Policy
IAM User
#54 Which IAM entity can be used for assigning permissions to multiple users?
IAM User
IAM Group
IAM Role
IAM password policy
#55 Which service can be used to cost-effectively move exabytes of data into AWS?
AWS Snowmobile
AWS Snowball
S3 Transfer Acceleration
S3 Cross-Region Replication (CRR)
#56 Which AWS services are associated with Edge Locations? (Select TWO.)
Amazon CloudFront
AWS Direct Connect
AWS Shield
Amazon EBS
AWS Config
#57 Which service can be used to easily create multiple accounts?
AWS IAM
AWS CloudFormation
AWS Organizations
Amazon Connect
#58 What is a specific benefit of an Enterprise Support plan?
Included Technical Support Manager
Included AWS Solutions Architect
Included Cloud Support Associate
Included Technical Account Manager
#59 You have been running an on-demand Amazon EC2 instance running Linux for 4hrs, 5 minutes and 6 seconds. How much time will you be billed for?
5hrs
4hrs, 6mins
4hrs, 5mins, and 6 seconds
4hrs
#60 Which of the below is an example of an architectural benefit of moving to the cloud?
Elasticity
Monolithic services
Proprietary hardware
Vertical scalability
#61 What are the benefits of using reserved instances?
Reduced cost
More flexibility
Reserve capacity
Uses dedicated hardware
High availability
#62 Which AWS tools can be used for automation? (Select TWO.)
AWS Elastic Beanstalk
Elastic Load Balancing
AWS CloudFormation
Amazon Elastic File System (EFS)
AWS Lambda
#63 Which IAM entity can be used for assigning permissions to AWS services?
IAM Access Key ID and Secret Access Key
IAM Policy
IAM Role
Security Token Service (STS)
#64 How does Amazon EC2 Auto Scaling help with resiliency?
By distributing connections to EC2 instances
By launching and terminating instances as needed
By changing instance types to increase capacity
By automating the failover of applications
#65 Your CTO wants to move to cloud. What cost advantages are there to moving to cloud?
You provision only what you need and adjust to peak load
You can reduce your marketing costs
You don’t need to pay for application licensing
You get free data transfer into and out of the cloud
