wayground logo

Free Printable Worksheets

Font size

S
M
L
XL
Worksheets

AWS Cloud Practitioner Q3

Total questions: 65

Worksheet time: 1hrs 5mins

Name
Class
Date
1.

#1 Which AWS service or feature can be used to restrict the individual API actions that users and roles in each member account can access?

a)

Amazon Macie

b)

AWS Organizations

c)

AWS Shield

d)

AWS IAM

2.

#2 Which AWS service can be used to track the activity of users on AWS?

a)

AWS CloudTrail

b)

AWS Directory Service

c)

Amazon Inspector

d)

Amazon CloudWatch

3.

#3 A company needs to optimize costs and resource usage through monitoring of operational health for all resources running on AWS. Which AWS service will meet these requirements?

a)

AWS Control Tower

b)

Amazon CloudWatch

c)

AWS CloudTrail

d)

AWS Config

4.

#4 A user needs a quick way to determine if any Amazon EC2 instances have ports that allow unrestricted access. Which AWS service will support this requirement?

a)

VPC Flow Logs

b)

AWS Shield

c)

AWS Trusted Advisor

d)

AWS CloudWatch Logs

5.

#5 A company has a website that delivers static content from an Amazon S3 bucket to users from around the world. Which AWS service will deliver the content with low latency?

a)

AWS Lambda

b)

Amazon CloudFront

c)

AWS Elastic Beanstalk

d)

AWS Global Accelerator

6.

#6 Which AWS service or component allows inbound traffic from the internet to access a VPC

a)

NAT Gateway

b)

Internet gateway

c)

VPC Route Table

d)

Virtual Private Gateway

7.

#7 A company plans to connect their on-premises data center to the AWS Cloud and requires consistent bandwidth and performance. Which AWS service should the company choose?

a)

AWS VPN

b)

Amazon Connect

c)

AWS Direct Connect

d)

Amazon CloudFront

8.

A manager is planning to migrate applications to the AWS Cloud and needs to obtain AWS compliance reports. How can these reports be generated?

a)

Download the reports from AWS Secrets Manager.

b)

Contact the AWS Compliance team

c)

Create a support ticket with AWS Support.

d)

Download the reports from AWS Artifact.

9.

A company has been using an AWS managed IAM policy for granting permissions to users but needs to add some permissions. How can this be achieved?

a)

Create a rule in AWS WAF

b)

Create a custom IAM policy

c)

Edit the AWS managed policy

d)

Create a Service Control Policy

10.

Which AWS service or feature can be used to capture information about inbound and outbound IP traffic on network interfaces in a VPC?

a)

Internet gateway

b)

AWS CloudTrail

c)

VPC Endpoint

d)

VPC Flow Logs

11.

#11 Which AWS services can be used as infrastructure automation tools? (Select TWO.)

a)

AWS CloudFormation

b)

Amazon CloudFront

c)

AWS Batch

d)

AWS OpsWorks

e)

Amazon QuickSight

12.

#12 What technology enables compute capacity to adjust as loads change?

a)

Load balancing

b)

Automatic failover

c)

Round robin

d)

Auto Scaling

13.

#14 How can a company separate costs for storage, Amazon EC2, Amazon S3, and other AWS services by department?

a)

Add department-specific tags to each resource

b)

Create a separate VPC for each department

c)

Create a separate AWS account for each department

d)

Use AWS Organizations

14.

#14 Which AWS Support plan provides access to architectural and operational reviews, as well as 24/7 access to Cloud Support Engineers through email, online chat, and phone ?

a)

Basic

b)

Business

c)

Developer

d)

Enterprise

15.

#15 Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud?

a)

Managing edge locations

b)

Physical security

c)

Firewall configuration

d)

Global infrastructure

16.

#16 Which AWS service provides on-demand downloads of AWS security and compliance reports

a)

AWS Directory Service

b)

AWS Artifact

c)

AWS Trusted Advisor

d)

. Amazon Inspector

17.

#17 Which Amazon EC2 pricing model is the most cost-effective for an always-up, right-sized database server running a project that will last 1 year?

a)

On-Demand Instances

b)

Convertible Reserved Instances

c)

Spot Instances

d)

Standard Reserved Instances

18.

#18 Which feature enables fast, easy, and secure transfers of files over long distances between a client and an Amazon S3 bucket?

a)

S3 Static Websites

b)

S3 Copy

c)

Multipart Upload

d)

S3 Transfer Acceleration

19.

#19 Under the AWS shared responsibility model what is AWS responsible for? (Select TWO.)

a)

Physical security of the data center

b)

Replacement and disposal of disk drives

c)

Configuration of security groups

d)

Patch management of operating systems

e)

Encryption of customer data

20.

#20 Which AWS service is known as a “serverless” service and runs code as functions triggered by events?

a)

Amazon ECS

b)

AWS Lambda

c)

Amazon CodeDeploy

d)

Amazon Cognito

21.

#21 Which statement best describes Amazon Route 53?

a)

Amazon Route 53 is a service that enables routing within VPCs in an account

b)

Amazon Route 53 is a highly available and scalable Domain Name System (DNS) service

c)

Amazon Route 53 enables hybrid cloud models by extending an organization's on-premise networks into the AWS cloud

d)

Amazon Route 53 is a service for distributing incoming connections between a fleet of registered EC2 instances

22.

#22 Which service provides a way to convert video and audio files from their source format into versions that will playback on devices like smartphones, tablets and PCs?

a)

Amazon Elastic Transcoder

b)

AWS Glue

c)

Amazon Rekognition

d)

Amazon Comprehend

23.

#23 When using AWS Organizations with consolidated billing what are two valid best practices? (Select TWO.)`

a)

Always enable multi-factor authentication (MFA) on the root account

b)

Always use a straightforward password on the root account

c)

The paying account should be used for billing purposes only

d)

Use the paying account for deploying resources

e)

Never exceed the limit of 20 linked accounts

24.

#24 Which AWS support plan comes with a Technical Account Manager (TAM)?

a)

Basic

b)

Developer

c)

Business

d)

Enterprise

25.

#25 Which service provides the ability to simply upload applications and have AWS handle the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring?

a)

Amazon EC2

b)

AWS Elastic Beanstalk

c)

Amazon EC2 Auto Scaling

d)

AWS OpsWorks

26.

You are concerned that you may be getting close to some of the default service limits for several AWS services. What AWS tool © 2022 Digital Cloud Training 134 can be used to display current usage and limits?

a)

AWS CloudWatch

b)

AWS Personal Health Dashboard

c)

AWS Trusted Advisor

d)

AWS Systems Manager

27.

#27 You need to run a production process that will use several EC2 instances and run constantly on an ongoing basis. The process cannot be interrupted or restarted without issue. What EC2 pricing model would be best for this workload?

a)

Reserved instances

b)

Spot instances

c)

On-demand instances

d)

Flexible instances

28.

#28 Which AWS service does API Gateway integrate with to enable users from around the world to achieve the lowest possible latency for API requests and responses?

a)

AWS Direct Connect

b)

Amazon S3 Transfer Acceleration

c)

Amazon CloudFront

d)

AWS Lambda

29.

#29 Which service can an organization use to track API activity within their account?

a)

AWS CloudTrail

b)

Amazon CloudWatch

c)

AWS IAM

d)

AWS CloudHSM

30.

#30 What tool provides real time guidance to help you provision your resources following best practices in the areas of cost optimization, performance, security and fault tolerance?

a)

AWS Inspector

b)

AWS Trusted Advisor

c)

AWS Personal Health Dashboard

d)

AWS IAM

31.

#31 What is the best way for an organization to transfer hundreds of terabytes of data from their on-premise data center into Amazon S3 with limited bandwidth available?

a)

Use S3 Transfer Acceleration

b)

Apply compression before uploading

c)

Use AWS Snowball

d)

Use Amazon CloudFront

32.

#32 Which database allows you to scale at the push of a button without incurring any downtime?

a)

Amazon RDS

b)

Amazon EMR

c)

Amazon DynamoDB

d)

Amazon RedShift

33.

#33 What are the charges for using Amazon Glacier? (Select TWO.)

a)

Data transferred into Glacier

b)

Retrieval requests

c)

Data storage

d)

Enhanced networking

e)

Number of Availability Zones

34.

#34 Which of the following statements are correct about the benefits of AWS Direct Connect? (Select TWO.)

a)

Quick to implement

b)

Increased reliability (predictable performance)

c)

Lower cost than a VPN

d)

Increased bandwidth (predictable bandwidth)

e)

Uses redundant paths across the Internet

35.

Which AWS service lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments?

a)

AWS Elastic Beanstalk

b)

AWS CloudFormation

c)

AWS Systems Manager

d)

AWS OpsWorks

36.

#36 Which AWS database service provides a fully managed data warehouse that can be analyzed using SQL tools and business intelligence tools?

a)

Amazon RDS

b)

Amazon DynamoDB

c)

Amazon RedShift

d)

Amazon ElastiCache

37.

#37 Which service can be used to create sophisticated, interactive graph applications?

a)

Amazon RedShift

b)

Amazon Neptune

c)

AWS X-Ray

d)

Amazon Athena

38.

#38 When using Amazon IAM, what authentication methods are available to use? (Select TWO.)

a)

Client certificates

b)

Access keys

c)

AWS KMS

d)

AES 256

e)

Server certificates

39.

#39 How does the consolidated billing feature of AWS Organizations treat Reserved Instances that were purchased by another account in the organization?

a)

All accounts in the organization are treated as one account so any account can receive the hourly cost benefit

b)

Only the master account can benefit from the hourly cost benefit of the reserved instances

c)

All accounts in the organization are treated as one account for volume discounts but not for reserved instances

d)

AWS Organizations does not support any volume or reserved instance benefits across accounts, it is just a method of aggregating bills

40.

#40 Which of the below AWS services supports automated backups as a default configuration?

a)

Amazon S3

b)

Amazon RDS

c)

Amazon EC2

d)

Amazon EBS

41.

#41 What are the advantages of Availability Zones? (Select TWO.)

a)

They allow regional disaster recovery

b)

They provide fault isolation

c)

They enable the caching of data for faster delivery to end users

d)

They are connected by low-latency network connections

e)

They enable you to connect your on-premises networks to AWS to form a hybrid cloud

42.

#43 Which of the options below are recommendations in the cost optimization pillar of the well-architected framework? (Select TWO.)

a)

Adopt a consumption model

b)

Adopt a capital expenditure model

c)

Start spending money on data center operations

d)

Analyze and attribute expenditure

e)

Manage your services independently

43.

#43 What are Edge locations used for?

a)

They are used for terminating VPN connections

b)

They are used by CloudFront for caching content

c)

They are the public-facing APIs for Amazon S3

d)

They are used by regions for inter-region connectivity

44.

#44 To ensure the security of your AWS account, what are two AWS best practices for managing access keys? (Select TWO.)

a)

Don’t create any access keys, use IAM roles instead

b)

Don’t generate an access key for the root account user

c)

Where possible, use IAM roles with temporary security credentials

d)

Rotate access keys daily

e)

Use MFA for access keys

45.

#45 An Amazon EC2 instance running the Amazon Linux 2 AMI is billed in what increment?

a)

Per second

b)

Per hour

c)

Per CPU

d)

Per GB

46.

#46 To gain greater discounts, which services can be reserved? (Select TWO.)

a)

Amazon RedShift

b)

Amazon S3

c)

AWS Lambda

d)

Amazon DynamoDB

e)

Amazon CloudWatch

47.

#47 Which service allows an organization to view operational data from multiple AWS services through a unified user interface and automate operational tasks?

a)

AWS Config

b)

AWS OpsWorks

c)

AWS Systems Manager

d)

Amazon CloudWatch

48.

#48 How can an organization track resource inventory and configuration history for the purpose of security and regulatory compliance

a)

Configure AWS Config with the resource types

b)

Create an Amazon CloudTrail trail

c)

Implement Amazon GuardDuty

d)

Run a report with AWS Artifact

49.

#49 A security operations engineer needs to implement threat detection and monitoring for malicious or unauthorized behavior. Which service should be used?

a)

AWS Shield

b)

AWS KMS

c)

AWS CloudHSM

d)

AWS GuardDuty

50.

#50 Which authentication method is used to authenticate programmatic calls to AWS services?

a)

Console password

b)

Key pair

c)

Access keys

d)

Server certificate

51.

#51 What is a benefit of moving an on-premises database to Amazon Relational Database Service (RDS)?

a)

There is no need to manage operating systems

b)

You can scale vertically without downtime

c)

There is no database administration required

d)

You can run any database engine

52.

#52 What are the benefits of using Amazon Rekognition with image files?

a)

Can be used to resize images

b)

Can be used to identify objects in an image

c)

Can be used to transcode audio

d)

Can help with image compression

53.

#53 Which IAM entity is associated with an access key ID and secret access key?

a)

IAM Group

b)

IAM Role

c)

IAM Policy

d)

IAM User

54.

#54 Which IAM entity can be used for assigning permissions to multiple users?

a)

IAM User

b)

IAM Group

c)

IAM Role

d)

IAM password policy

55.

#55 Which service can be used to cost-effectively move exabytes of data into AWS?

a)

AWS Snowmobile

b)

AWS Snowball

c)

S3 Transfer Acceleration

d)

S3 Cross-Region Replication (CRR)

56.

#56 Which AWS services are associated with Edge Locations? (Select TWO.)

a)

Amazon CloudFront

b)

AWS Direct Connect

c)

AWS Shield

d)

Amazon EBS

e)

AWS Config

57.

#57 Which service can be used to easily create multiple accounts?

a)

AWS IAM

b)

AWS CloudFormation

c)

AWS Organizations

d)

Amazon Connect

58.

#58 What is a specific benefit of an Enterprise Support plan?

a)

Included Technical Support Manager

b)

Included AWS Solutions Architect

c)

Included Cloud Support Associate

d)

Included Technical Account Manager

59.

#59 You have been running an on-demand Amazon EC2 instance running Linux for 4hrs, 5 minutes and 6 seconds. How much time will you be billed for?

a)

5hrs

b)

4hrs, 6mins

c)

4hrs, 5mins, and 6 seconds

d)

4hrs

60.

#60 Which of the below is an example of an architectural benefit of moving to the cloud?

a)

Elasticity

b)

Monolithic services

c)

Proprietary hardware

d)

Vertical scalability

61.

#61 What are the benefits of using reserved instances?

a)

Reduced cost

b)

More flexibility

c)

Reserve capacity

d)

Uses dedicated hardware

e)

High availability

62.

#62 Which AWS tools can be used for automation? (Select TWO.)

a)

AWS Elastic Beanstalk

b)

Elastic Load Balancing

c)

AWS CloudFormation

d)

Amazon Elastic File System (EFS)

e)

AWS Lambda

63.

#63 Which IAM entity can be used for assigning permissions to AWS services?

a)

IAM Access Key ID and Secret Access Key

b)

IAM Policy

c)

IAM Role

d)

Security Token Service (STS)

64.

#64 How does Amazon EC2 Auto Scaling help with resiliency?

a)

By distributing connections to EC2 instances

b)

By launching and terminating instances as needed

c)

By changing instance types to increase capacity

d)

By automating the failover of applications

65.

#65 Your CTO wants to move to cloud. What cost advantages are there to moving to cloud?

a)

You provision only what you need and adjust to peak load

b)

You can reduce your marketing costs

c)

You don’t need to pay for application licensing

d)

You get free data transfer into and out of the cloud