Font size
S
M
L
XL
WorksheetsAWSAAA
Total questions: 145
Worksheet time: 1hrs 13mins
Name
Class
Date
1.
A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users. The company must ensure that all users can view these videos with low latency.Which AWS service should the company use to meet this requirement?
a)
A. AWS Auto Scaling
b)
B. Amazon Kinesis Video Streams
c)
C. Elastic Load Balancing
d)
D. Amazon CloudFront
2.
Which pillar of the AWS Well-Architected Framework refers to the ability of a system to recover from infrastructure or service disruptions and dynamically acquire computing resources to meet demand?
a)
A. Security
b)
B. Reliability
c)
C. Performance efficiency
d)
D. Cost optimization
3.
Which of the following are benefits of migrating to the AWS Cloud? (Choose two.)
a)
A. Operational resilience
b)
B. Discounts for products on Amazon.com
c)
C. Business agility
d)
D. Business excellence
4.
A company is planning to replace its physical on-premises compute servers with AWS serverless compute services. The company wants to be able to take advantage of advanced technologies quickly after the migration.Which pillar of the AWS Well-Architected Framework does this plan represent?
a)
A. Security
b)
B. Performance efficiency
c)
C. Operational excellence
d)
D. Reliability
5.
A large company has multiple departments. Each department has its own AWS account. Each department has purchased Amazon EC2 Reserved Instances.Some departments do not use all the Reserved Instances that they purchased, and other departments need more Reserved Instances than they purchased.The company needs to manage the AWS accounts for all the departments so that the departments can share the Reserved Instances.Which AWS service or tool should the company use to meet these requirements?
a)
A. AWS Systems Manager
b)
B. Cost Explorer
c)
C. AWS Trusted Advisor
d)
D. AWS Organizations
6.
Which component of the AWS global infrastructure is made up of one or more discrete data centers that have redundant power, networking, and connectivity?
a)
A. AWS Region
b)
B. Availability Zone
c)
C. Edge location
d)
D. AWS Outposts
7.
Which duties are the responsibility of a company that is using AWS Lambda? (Choose two.)
a)
A. Security inside of code
b)
B. Selection of CPU resources
c)
C. Patching of operating system
d)
D. Writing and updating of code
8.
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
a)
A. ׀•׀¡2 Reserved Instances
b)
B. EC2 Amazon Machine Images (AMIs)
c)
C. Amazon Elastic Block Store (Amazon EBS) snapshots
d)
D. AWS Shield
9.
A company is migrating to the AWS Cloud instead of running its infrastructure on premises.Which of the following are advantages of this migration? (Choose two.)
a)
A. Elimination of the need to perform security auditing
b)
B. Increased global reach and agility
c)
C. Ability to deploy globally in minutes
d)
D. Elimination of the cost of IT staff members
10.
A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.Which purchase option meets these requirements MOST cost-effectively?
a)
A. Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load.
b)
B. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances.
c)
C. Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate.
d)
D. Buy Reserved Instances to cover all potential usage that results from the seasonal usage.
11.
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year.Which AWS service or tool provides this information?
a)
A. AWS Trusted Advisor
b)
B. Cost Explorer
c)
C. Amazon Forecast
d)
D. Amazon CloudWatch
12.
A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application.Which AWS solution should the company use to meet these requirements?
a)
A. Amazon EC2 On-Demand Instances
b)
B. AWS Lambda
c)
C. Amazon EC2 Reserved Instances
d)
D. Amazon EC2 Spot Instances
13.
Which AWS service or feature allows users to connect with and deploy AWS services programmatically?
a)
A. AWS Management Console
b)
B. AWS Cloud9
c)
C. AWS CodePipeline
d)
D. AWS software development kits (SDKs)
14.
A company plans to create a data lake that uses Amazon S3.Which factor will have the MOST effect on cost?
a)
A. The selection of S3 storage tiers
b)
B. Charges to transfer existing data into Amazon S3
c)
C. The addition of S3 bucket policies
d)
D. S3 ingest fees for each request
15.
A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next12 months.What is the MOST cost-effective instance purchasing option that meets these requirements?
a)
A. Spot Instances
b)
B. Savings Plans
c)
C. Dedicated Hosts
d)
D. On-Demand Instances
16.
Which AWS service or feature can a company use to determine which business unit is using specific AWS resources?
a)
A. Cost allocation tags
b)
B. Key pairs
c)
C. Amazon Inspector
d)
D. AWS Trusted Advisor
17.
A company wants to migrate its workloads to AWS, but it lacks expertise in AWS Cloud computing.Which AWS service or feature will help the company with its migration?
a)
A. AWS Trusted Advisor
b)
B. AWS Consulting Partners
c)
C. AWS Artifacts
d)
D. AWS Managed Services
18.
Which AWS service or tool should a company use to centrally request and track service limit increases?
a)
A. AWS Config
b)
B. Service Quotas
c)
C. AWS Service Catalog
d)
D. AWS Budgets
19.
Which documentation does AWS Artifact provide?
a)
A. Amazon EC2 terms and conditions
b)
B. AWS ISO certifications
c)
C. A history of a company's AWS spending
d)
D. A list of previous-generation Amazon EC2 instance types
20.
Which task requires using AWS account root user credentials?
a)
A. Viewing billing information
b)
B. Changing the AWS Support plan
c)
C. Starting and stopping Amazon EC2 instances
d)
D. Opening an AWS Support case
21.
A company needs to simultaneously process hundreds of requests from different users.Which combination of AWS services should the company use to build an operationally efficient solution?
a)
A. Amazon Simple Queue Service (Amazon SQS) and AWS Lambda
b)
B. AWS Data Pipeline and Amazon EC2
c)
C. Amazon Kinesis and Amazon Athena
d)
D. AWS Amplify and AWS AppSync
22.
What is the scope of a VPC within the AWS network?
a)
A. A VPC can span all Availability Zones globally.
b)
B. A VPC must span at least two subnets in each AWS Region.
c)
C. A VPC must span at least two edge locations in each AWS Region.
d)
D. A VPC can span all Availability Zones within an AWS Region.
23.
Which of the following are components of an AWS Site-to-Site VPN connection? (Choose two.)
a)
A. AWS Storage Gateway
b)
B. Virtual private gateway
c)
C. NAT gateway
d)
D. Customer gateway
24.
A company needs to establish a connection between two VPCs. The VPCs are located in two different AWS Regions. The company wants to use the existing infrastructure of the VPCs for this connection.Which AWS service or feature can be used to establish this connection?
a)
A. AWS Client VPN
b)
B. VPC peering
c)
C. AWS Direct Connect
d)
D. VPC endpoints
25.
According to the AWS shared responsibility model, what responsibility does a customer have when using Amazon RDS to host a database?
a)
A. Manage connections to the database
b)
B. Install Microsoft SQL Server
c)
C. Design encryption-at-rest strategies
d)
D. Apply minor database patches
26.
What are some advantages of using Amazon EC2 instances to host applications in the AWS Cloud instead of on premises? (Choose two.)
a)
A. EC2 includes operating system patch management.
b)
B. EC2 integrates with Amazon VPC, AWS CloudTrail, and AWS Identity and Access Management (IAM).
c)
C. EC2 has a 100% service level agreement (SLA).
d)
D. EC2 has a flexible, pay-as-you-go pricing model.
e)
E. EC2 has automatic storage cost optimization.
27.
A user needs to determine whether an Amazon EC2 instance's security groups were modified in the last month.How can the user see if a change was made?
a)
A. Use Amazon EC2 to see if the security group was changed.
b)
B. Use AWS Identity and Access Management (IAM) to see which user or role changed the security group.
c)
C. Use AWS CloudTrail to see if the security group was changed.
d)
D. Use Amazon CloudWatch to see if the security group was changed.
28.
Which AWS service will help protect applications running on AWS from DDoS attacks?
a)
A. Amazon GuardDuty
b)
B. AWS WAF
c)
C. AWS Shield
d)
D. Amazon Inspector
29.
Which AWS service or feature acts as a firewall for Amazon EC2 instances?
a)
A. Network ACL
b)
B. Elastic network interface
c)
C. Amazon VPC
d)
D. Security group
30.
How does the AWS Cloud pricing model differ from the traditional on-premises storage pricing model?
a)
A. AWS resources do not incur costs
b)
B. There are no infrastructure operating costs
c)
C. There are no upfront cost commitments
d)
D. There are no software licensing costs
31.
A company has a single Amazon EC2 instance. The company wants to adopt a highly available architecture.What can the company do to meet this requirement?
a)
A. Scale vertically to a larger EC2 instance size.
b)
B. Scale horizontally across multiple Availability Zones.
c)
C. Purchase an EC2 Dedicated Instance.
d)
D. Change the EC2 instance family to a compute optimized instance.
32.
A company's on-premises application deployment cycle was 3-4 weeks. After migrating to the AWS Cloud, the company can deploy the application in 2-3 days.Which benefit has this company experienced by moving to the AWS Cloud?
a)
A. Elasticity
b)
B. Flexibility
c)
C. Agility
d)
D. Resilience
33.
Which of the following are included in AWS Enterprise Support? (Choose two.)
a)
A. AWS technical account manager (TAM)
b)
B. AWS partner-led support
c)
C. AWS Professional Services
d)
D. Support of third-party software integration to AWS
34.
A global media company uses AWS Organizations to manage multiple AWS accounts.Which AWS service or feature can the company use to limit the access to AWS services for member accounts?
a)
A. AWS Identity and Access Management (IAM)
b)
B. Service control policies (SCPs)
c)
C. Organizational units (OUs)
d)
D. Access control lists (ACLs)
35.
A company wants to limit its employees' AWS access to a portfolio of predefined AWS resources.Which AWS solution should the company use to meet this requirement?
a)
A. AWS Config
b)
B. AWS software development kits (SDKs)
c)
C. AWS Service Catalog
d)
D. AWS AppSync
36.
An online company was running a workload on premises and was struggling to launch new products and features. After migrating the workload to AWS, the company can quickly launch products and features and can scale its infrastructure as required.Which AWS Cloud value proposition does this scenario describe?
a)
A. Business agility
b)
B. High availability
c)
C. Security
d)
D. Centralized auditing
37.
Which of the following are advantages of the AWS Cloud? (Choose two.)
a)
A. AWS management of user-owned infrastructure
b)
B. Ability to quickly change required capacity
c)
C. High economies of scale
d)
D. Increased deployment time to market
38.
AWS has the ability to achieve lower pay-as-you-go pricing by aggregating usage across hundreds of thousands of users.This describes which advantage of the AWS Cloud?
a)
A. Launch globally in minutes
b)
B. Increase speed and agility
c)
C. High economies of scale
d)
D. No guessing about compute capacity
39.
A company has a database server that is always running. The company hosts the server on Amazon EC2 instances. The instance sizes are suitable for the workload. The workload will run for 1 year.Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
a)
A. Standard Reserved Instances
b)
B. On-Demand Instances
c)
C. Spot Instances
d)
D. Convertible Reserved Instances
40.
A company is developing a mobile app that needs a high-performance NoSQL database.Which AWS services could the company use for this database? (Choose two.)
a)
A. Amazon Aurora
b)
B. Amazon RDS
c)
C. Amazon Redshift
d)
D. Amazon DocumentDB (with MongoDB compatibility)
e)
E.Amazon DynamoDB
41.
Which tasks are the responsibility of AWS, according to the AWS shared responsibility model? (Choose two.)
a)
A. Patch the Amazon EC2 guest operating system.
b)
B. Upgrade the firmware of the network infrastructure.
c)
C. Apply password rotation for IAM users.
d)
D. Maintain the physical security of edge locations.
42.
Which of the following are features of network ACLs as they are used in the AWS Cloud? (Choose two.)
a)
A. They are stateless.
b)
B. They are stateful.
c)
C. They evaluate all rules before allowing traffic.
d)
D. They process rules in order, starting with the lowest numbered rule, when deciding whether to allow traffic.
43.
A company has designed its AWS Cloud infrastructure to run its workloads effectively. The company also has protocols in place to continuously improve supporting processes.Which pillar of the AWS Well-Architected Framework does this scenario represent?
a)
A. Security
b)
B. Performance efficiency
c)
C. Cost optimization
d)
D. Operational excellence
44.
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
a)
A. Amazon Route 53
b)
B. Amazon Macie
c)
C. AWS Direct Connect
d)
D. AWS PrivateLink
45.
A company needs to graphically visualize AWS billing and usage over time. The company also needs information about its AWS monthly costs.Which AWS Billing and Cost Management tool provides this data in a graphical format?
a)
A. AWS Bills
b)
B. Cost Explorer
c)
C. AWS Cost and Usage Report
d)
D. AWS Budgets
46.
A company wants to run production workloads on AWS. The company needs concierge service, a designated AWS technical account manager (TAM), and technical support that is available 24 hours a day, 7 days a week.Which AWS Support plan will meet these requirements?
a)
A. AWS Basic Support
b)
B. AWS Enterprise Support
c)
C. AWS Business Support
d)
D. AWS Developer Support
47.
Which architecture design principle describes the need to isolate failures between dependent components in the AWS Cloud?
a)
A. Use a monolithic design.
b)
B. Design for automation.
c)
C. Design for single points of failure.
d)
D. Loosely couple components.
48.
Which AWS services are managed database services? (Choose two.)
a)
A. Amazon Elastic Block Store (Amazon EBS)
b)
B. Amazon S3
c)
C. Amazon RDS
d)
D. Amazon Elastic File System (Amazon EFS)
e)
E. Amazon DynamoDB
49.
A company is using the AWS Free Tier for several AWS services for an application.What will happen if the Free Tier usage period expires or if the application use exceeds the Free Tier usage limits?
a)
A. The company will be charged the standard pay-as-you-go service rates for the usage that exceeds the Free Tier usage.
b)
B. AWS Support will contact the company to set up standard service charges.
c)
C. The company will be charged for the services it consumed during the Free Tier period, plus additional charges for service consumption after the Free Tier period.
d)
D. The company's AWS account will be frozen and can be restarted after a payment plan is established.
50.
A company recently deployed an Amazon RDS instance in its VPC. The company needs to implement a stateful firewall to limit traffic to the private corporate network.Which AWS service or feature should the company use to limit network traffic directly to its RDS instance?
a)
A. Network ACLs
b)
B. Security groups
c)
C. AWS WAF
d)
D. Amazon GuardDuty
51.
Which AWS service uses machine learning to help discover, monitor, and protect sensitive data that is stored in Amazon S3 buckets?
a)
A. AWS Shield
b)
B. Amazon Macie
c)
C. AWS Network Firewall
d)
D. Amazon Cognito
52.
A company wants to improve the overall availability and performance of its applications that are hosted on AWS.Which AWS service should the company use?
a)
A. Amazon Connect
b)
B. Amazon Lightsail
c)
C. AWS Global Accelerator
d)
D. AWS Storage Gateway
53.
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
a)
A. AWS Service Catalog
b)
B. AWS Systems Manager
c)
C. AWS IAM Access Analyzer
d)
D. AWS Organizations
54.
A company does not want to rely on elaborate forecasting to determine its usage of compute resources. Instead, the company wants to pay only for the resources that it uses. The company also needs the ability to increase or decrease its resource usage to meet business requirements.Which pillar of the AWS Well-Architected Framework aligns with these requirements?
a)
A. Operational excellence
b)
B. Security
c)
C. Reliability
d)
D. Cost optimization
55.
A company wants to launch its workload on AWS and requires the system to automatically recover from failure.Which pillar of the AWS Well-Architected Framework includes this requirement?
a)
A. Cost optimization
b)
B. Operational excellence
c)
C. Performance efficiency
d)
D. Reliability
56.
A large enterprise with multiple VPCs in several AWS Regions around the world needs to connect and centrally manage network connectivity between its VPCs.Which AWS service or feature meets these requirements?
a)
A. AWS Direct Connect
b)
B. AWS Transit Gateway
c)
C. AWS Site-to-Site VPN
d)
D. VPC endpoints
57.
Which AWS service supports the creation of visual reports from AWS Cost and Usage Report data?
a)
A. Amazon Athena
b)
B. Amazon QuickSight
c)
C. Amazon CloudWatch
d)
D. AWS Organizations
58.
Which AWS service should be used to monitor Amazon EC2 instances for CPU and network utilization?
a)
A. Amazon Inspector
b)
B. AWS CloudTrail
c)
C. Amazon CloudWatch
d)
D. AWS Config
59.
A company is preparing to launch a new web store that is expected to receive high traffic for an upcoming event. The web store runs only on AWS, and the company has an AWS Enterprise Support plan.Which AWS resource will provide guidance about how the company should scale its architecture and operational support during the event?
a)
A. AWS Abuse team
b)
B. The designated AWS technical account manager (TAM)
c)
C. AWS infrastructure event management
d)
D. AWS Professional Services
60.
A user wants to deploy a service to the AWS Cloud by using infrastructure-as-code (IaC) principles.Which AWS service can be used to meet this requirement?
a)
A. AWS Systems Manager
b)
B. AWS CloudFormation
c)
C. AWS CodeCommit
d)
D. AWS Config
61.
A company that has multiple business units wants to centrally manage and govern its AWS Cloud environments. The company wants to automate the creation ofAWS accounts, apply service control policies (SCPs), and simplify billing processes.Which AWS service or tool should the company use to meet these requirements?
a)
A. AWS Organizations
b)
B. Cost Explorer
c)
C. AWS Budgets
d)
D. AWS Trusted Advisor
62.
Which IT controls do AWS and the customer share, according to the AWS shared responsibility model? (Choose two.)
a)
A. Physical and environmental controls
b)
B. Patch management
c)
C. Cloud awareness and training
d)
D. Zone security
63.
A company is launching an application in the AWS Cloud. The application will use Amazon S3 storage. A large team of researchers will have shared access to the data. The company must be able to recover data that is accidentally overwritten or deleted.Which S3 feature should the company turn on to meet this requirement?
a)
A. Server access logging
b)
B. S3 Versioning
c)
C. S3 Lifecycle rules
d)
D. Encryption in transit and at rest
64.
A manufacturing company has a critical application that runs at a remote site that has a slow internet connection. The company wants to migrate the workload toAWS. The application is sensitive to latency and interruptions in connectivity. The company wants a solution that can host this application with minimum latency.Which AWS service or feature should the company use to meet these requirements?
a)
A. Availability Zones
b)
B. AWS Local Zones
c)
C. AWS Wavelength
d)
D. AWS Outposts
65.
A company wants to migrate its applications from its on-premises data center to a VPC in the AWS Cloud. These applications will need to access on-premises resources.Which actions will meet these requirements? (Choose two.)
a)
A. Use AWS Service Catalog to identify a list of on-premises resources that can be migrated.
b)
B. Create a VPN connection between an on-premises device and a virtual private gateway in the VPC.
c)
C. Use an Amazon CloudFront distribution and configure it to accelerate content delivery close to the on-premises resources.
d)
D. Set up an AWS Direct Connect connection between the on-premises data center and AWS.
66.
A company wants to use the AWS Cloud to provide secure access to desktop applications that are running in a fully managed environment.Which AWS service should the company use to meet this requirement?
a)
A. Amazon S3
b)
B. Amazon AppStream 2.0
c)
C. AWS AppSync
d)
D. AWS Outposts
67.
A company wants to implement threat detection on its AWS infrastructure. However, the company does not want to deploy additional software.Which AWS service should the company use to meet these requirements?
a)
A. Amazon VPC
b)
B. Amazon EC2
c)
C. Amazon GuardDuty
d)
D. AWS Direct Connect
68.
Which AWS service uses edge locations?
a)
A. Amazon Aurora
b)
B. AWS Global Accelerator
c)
C. Amazon Connect
d)
D. AWS Outposts
69.
A company needs to install an application in a Docker container.Which AWS service eliminates the need to provision and manage the container hosts?
a)
A. AWS Fargate
b)
B. Amazon FSx for Windows File Server
c)
C. Amazon Elastic Container Service (Amazon ECS)
d)
D. Amazon EC2
70.
Which AWS service or feature checks access policies and offers actionable recommendations to help users set secure and functional policies?
a)
A. AWS Systems Manager
b)
B. AWS IAM Access Analyzer
c)
C. AWS Trusted Advisor
d)
D. Amazon GuardDuty
71.
A company has a fleet of cargo ships. The cargo ships have sensors that collect data at sea, where there is intermittent or no internet connectivity. The company needs to collect, format, and process the data at sea and move the data to AWS later.Which AWS service should the company use to meet these requirements?
a)
A. AWS IoT Core
b)
B. Amazon Lightsail
c)
C. AWS Storage Gateway
d)
D. AWS Snowball Edge
72.
A retail company needs to build a highly available architecture for a new ecommerce platform. The company is using only AWS services that replicate data across multiple Availability Zones.Which AWS services should the company use to meet this requirement? (Choose two.)
a)
A. Amazon EC2
b)
B. Amazon Elastic Block Store (Amazon EBS)
c)
C. Amazon Aurora
d)
D. Amazon DynamoDB
73.
Which characteristic of the AWS Cloud helps users eliminate underutilized CPU capacity?
a)
A. Agility
b)
B. Elasticity
c)
C. Reliability
d)
D. Durability
74.
Service control policies (SCPs) manage permissions for which of the following?
a)
A. Availability Zones
b)
B. AWS Regions
c)
C. AWS Organizations
d)
D. Edge locations
75.
Which AWS service can be used to encrypt data at rest?
a)
A. Amazon GuardDuty
b)
B. AWS Shield
c)
C. AWS Security Hub
d)
D. AWS Key Management Service (AWS KMS)
76.
Which characteristics are advantages of using the AWS Cloud? (Choose two.)
a)
A. A 100% service level agreement (SLA) for all AWS services
b)
B. Compute capacity that is adjusted on demand
c)
C. Availability of AWS Support for code development
d)
D. Enhanced security
77.
A user is storing objects in Amazon S3. The user needs to restrict access to the objects to meet compliance obligations.What should the user do to meet this requirement?
a)
A. Use AWS Secrets Manager.
b)
B. Tag the objects in the S3 bucket.
c)
C. Use security groups.
d)
D. Use network ACLs.
78.
A company wants to convert video files and audio files from their source format into a format that will play on smartphones, tablets, and web browsers.Which AWS service will meet these requirements?
a)
A. Amazon Elastic Transcoder
b)
B. Amazon Comprehend
c)
C. AWS Glue
d)
D. Amazon Rekognition
79.
Which of the following are benefits of Amazon EC2 Auto Scaling? (Choose two.)
a)
A. Improved health and availability of applications
b)
B. Reduced network latency
c)
C. Optimized performance and costs
d)
D. Automated snapshots of data
80.
A company has several departments. Each department has its own AWS accounts for its applications. The company wants all AWS costs on a single invoice to simplify payment, but the company wants to know the costs that each department is incurring.Which AWS tool or feature will provide this functionality?
a)
A. AWS Cost and Usage Reports
b)
B. Consolidated billing
c)
C. Savings Plans
d)
D. AWS Budgets
81.
A company runs its workloads on premises. The company wants to forecast the cost of running a large application on AWS.Which AWS service or tool can the company use to obtain this information?
a)
A. AWS Pricing Calculator
b)
B. AWS Budgets
c)
C. AWS Trusted Advisor
d)
D. Cost Explorer
82.
A company wants to eliminate the need to guess infrastructure capacity before deployments. The company also wants to spend its budget on cloud resources only as the company uses the resources.Which advantage of the AWS Cloud matches the company's requirements?
a)
A. Reliability
b)
B. Global reach
c)
C. Economies of scale
d)
D. Pay-as-you-go pricing
83.
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co- location environments, or on-premises facilities?
a)
A. AWS Snowmobile
b)
B. AWS Local Zones
c)
C. AWS Outposts
d)
D. AWS Fargate
84.
A company has a physical tape library to store data backups. The tape library is running out of space. The company needs to extend the tape library's capacity to the AWS Cloud.Which AWS service should the company use to meet this requirement?
a)
A. Amazon Elastic Block Store (Amazon EBS)
b)
B. Amazon S3
c)
C. Amazon Elastic File System (Amazon EFS)
d)
D. AWS Storage Gateway
85.
An online retail company has seasonal sales spikes several times a year, primarily around holidays. Demand is lower at other times. The company finds it difficult to predict the increasing infrastructure demand for each season.Which advantages of moving to the AWS Cloud would MOST benefit the company? (Choose two.)
a)
A. Global footprint
b)
B. Elasticity
c)
C. AWS service quotas
d)
D. AWS shared responsibility model
e)
E. Pay-as-you-go pricing
86.
Which AWS service can be used to turn text into lifelike speech?
a)
A. Amazon Polly
b)
B. Amazon Kendra
c)
C. Amazon Rekognition
d)
D. Amazon Connect
87.
Which AWS service or tool can be used to capture information about inbound and outbound traffic in an Amazon VPC?
a)
A. VPC Flow Logs
b)
B. Amazon Inspector
c)
C. VPC endpoint services
d)
D. NAT gateway
88.
A company wants to ensure that two Amazon EC2 instances are in separate data centers with minimal communication latency between the data centers.How can the company meet this requirement?
a)
A. Place the EC2 instances in two separate AWS Regions connected with a VPC peering connection.
b)
B. Place the EC2 instances in two separate Availability Zones within the same AWS Region.
c)
C. Place one EC2 instance on premises and the other in an AWS Region. Then connect them by using an AWS VPN connection.
d)
D. Place both EC2 instances in a placement group for dedicated bandwidth.
89.
In which situations should a company create an IAM user instead of an IAM role? (Choose two.)
a)
A. When an application that runs on Amazon EC2 instances requires access to other AWS services
b)
B. When the company creates AWS access credentials for individuals
c)
C. When the company creates an application that runs on a mobile phone that makes requests to AWS
d)
D. When the company needs to add users to IAM groups
90.
Which AWS services should a company use to read and write data that changes frequently? (Choose two.)
a)
A. Amazon S3 Glacier
b)
B. Amazon RDS
c)
C. AWS Snowball
d)
D. Amazon Redshift
e)
E. Amazon EFS
91.
Which AWS service is used to provide encryption for Amazon EBS?
a)
A. AWS Certificate Manager
b)
B. AWS Systems Manager
c)
C. AWS KMS
d)
D. AWS Config
92.
Which AWS services make use of global edge locations? (Choose two.)
a)
A. AWS Fargate
b)
B. Amazon CloudFront
c)
C. AWS Global Accelerator
d)
D. AWS Wavelength
93.
A company is operating several factories where it builds products. The company needs the ability to process data, store data, and run applications with local system interdependencies that require low latency.Which AWS service should the company use to meet these requirements?
a)
A. AWS IoT Greengrass
b)
B. AWS Lambda
c)
C. AWS Outposts
d)
D. AWS Snowball Edge
94.
Which of the following is a recommended design principle for AWS Cloud architecture?
a)
A. Design tightly coupled components.
b)
B. Build a single application component that can handle all the application functionality.
c)
C. Make large changes on fewer iterations to reduce chances of failure.
d)
D. Avoid monolithic architecture by segmenting workloads.
95.
A company is designing its AWS workloads so that components can be updated regularly and so that changes can be made in small, reversible increments.Which pillar of the AWS Well-Architected Framework does this design support?
a)
A. Security
b)
B. Performance efficiency
c)
C. Operational excellence
d)
D. Reliability
96.
Which of the following acts as an instance-level firewall to control inbound and outbound access?
a)
A. Network access control list
b)
B. Security groups
c)
C. AWS Trusted Advisor
d)
D. Virtual private gateways
97.
A company has a workload that will run continuously for 1 year. The workload cannot tolerate service interruptions.Which Amazon EC2 purchasing option will be MOST cost-effective?
a)
A. All Upfront Reserved Instances
b)
B. Partial Upfront Reserved Instances
c)
C. Dedicated Instances
d)
D. On-Demand Instances
98.
Which AWS service helps protect against DDoS attacks?
a)
A. AWS Shield
b)
B. Amazon Inspector
c)
C. Amazon GuardDuty
d)
D. Amazon Detective
99.
Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?
a)
A. Security
b)
B. Operational excellence
c)
C. Performance efficiency
d)
D. Cost optimization
100.
Which AWS tool or feature acts as a VPC firewall at the subnet level?
a)
A. Security group
b)
B. Network ACL
c)
C. Traffic Mirroring
d)
D. Internet gateway
101.
Which AWS service can be used to decouple applications?
a)
A. AWS Config
b)
B. Amazon Simple Queue Service (Amazon SQS)
c)
C. AWS Batch
d)
D. Amazon Simple Email Service (Amazon SES)
102.
Which disaster recovery option is the LEAST expensive?
a)
A. Warm standby
b)
B. Multisite
c)
C. Backup and restore
d)
D. Pilot light
103.
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated?
a)
A. Amazon Elastic Block Store (Amazon EBS)
b)
B. Amazon EC2 instance store
c)
C. Amazon Elastic File System (Amazon EFS)
d)
D. Amazon S3
104.
Which of the following is a characteristic of the AWS account root user?
a)
A. The root user is the only user that can be configured with multi-factor authentication (MFA).
b)
B. The root user is the only user that can access the AWS Management Console.
c)
C. The root user is the first sign-in identity that is available when an AWS account is created.
d)
D. The root user has a password that cannot be changed.
105.
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and AmazonDynamoDB.What is the MOST operationally efficient solution to delegate permissions?
a)
A. Create an IAM role with the required permissions. Attach the role to the EC2 instance.
b)
B. Create an IAM user and use its access key and secret access key in the application.
c)
C. Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance
d)
D. Create an IAM role with the required permissions. Attach the role to the administrative IAM user.
106.
Which of the following is a component of the AWS Global Infrastructure?
a)
A. Amazon Alexa
b)
B. AWS Regions
c)
C. Amazon Lightsail
d)
D. AWS Organizations
107.
What is the purpose of having an internet gateway within a VPC?
a)
A. To create a VPN connection to the VPC
b)
B. To allow communication between the VPC and the internet
c)
C. To impose bandwidth constraints on internet traffic
d)
D. To load balance traffic from the internet across Amazon EC2 instances
108.
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?
a)
A. Amazon GuardDuty
b)
B. AWS Security Hub
c)
C. AWS Artifact
d)
D. AWS Shield
109.
A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts that it wants to interconnect.Which AWS service or feature should the company use to help simplify management and reduce operational costs?
a)
A. VPC endpoint
b)
B. AWS Direct Connect
c)
C. AWS Transit Gateway
d)
D. VPC peering
110.
A company is planning an infrastructure deployment to the AWS Cloud. Before the deployment, the company wants a cost estimate for running the infrastructure.Which AWS service or feature can provide this information?
a)
A. Cost Explorer
b)
B. AWS Trusted Advisor
c)
C. AWS Cost and Usage Report
d)
D. AWS Pricing Calculator
111.
Which AWS service of tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?
a)
A. AWS Identity and Access Management (IAM)
b)
B. AWS Organizations
c)
C. Cost Explorer
d)
D. AWS Budgets
112.
Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources?
a)
A. Objects; access control lists (ACLs)
b)
B. Subnets; internet gateways
c)
C. Access policies; buckets
d)
D. Groups; roles
113.
A company needs to identify the last time that a specific user accessed the AWS Management Console.Which AWS service will provide this information?
a)
A. Amazon Cognito
b)
B. AWS CloudTrail
c)
C. Amazon Inspector
d)
D. Amazon GuardDuty
114.
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI).Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)
a)
A. Use Amazon EC2 Instance Connect.
b)
B. Use a Remote Desktop Protocol (RDP) connection.
c)
C. Use AWS Batch
d)
D. Use AWS Systems Manager Session Manager.
115.
A company wants to perform sentiment analysis on customer service email messages that it receives. The company wants to identify whether the customer service engagement was positive or negative.Which AWS service should the company use to perform this analysis?
a)
A. Amazon Textract
b)
B. Amazon Translate
c)
C. Amazon Comprehend
d)
D. Amazon Rekognition
116.
What is the total amount of storage offered by Amazon S3?
a)
A. 100MB
b)
B. 5 GB
c)
C. 5 TB
d)
D. Unlimited
117.
A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days.Which AWS service should the company use to accomplish this migration?
a)
A. Amazon S3 Glacier
b)
B. AWS Database Migration Service (AWS DMS)
c)
C. AWS Snowball
d)
D. AWS Direct Connect
118.
What type of database is Amazon DynamoDB?
a)
A. In-memory
b)
B. Relational
c)
C. Key-value
d)
D. Graph
119.
A large organization has a single AWS account.What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.)
a)
A. It allows for administrative isolation between different workloads.
b)
B. Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.
c)
C. Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.
d)
D. Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.
120.
A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses anApplication Load Balancer to distribute traffic to multiple Amazon EC2 instances.Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?
a)
A. Security groups
b)
B. AWS WAF
c)
C. Network ACLs
d)
D. AWS Shield
121.
Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?
a)
A. AWS CloudTrail
b)
B. AWS Personal Health Dashboard
c)
C. AWS Trusted Advisor
d)
D. Amazon CloudWatch
122.
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
a)
A. Elimination of expenses for running and maintaining data centers
b)
B. Price discounts that are identical to discounts from hardware providers
c)
C. Distribution of all operational controls to AWS
d)
D. Elimination of operational expenses
123.
Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?
a)
A. Create annotated documentation.
b)
B. Anticipate failure.
c)
C. Ensure performance efficiency.
d)
D. Optimize costs.
124.
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)
a)
A. Amazon Simple Notification Service (Amazon SNS)
b)
B. Amazon Simple Queue Service (Amazon SQS)
c)
C. AWS CodeBuild
d)
D. Amazon S3
e)
E. Amazon DynamoDB
125.
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
a)
A. Amazon FSx for Windows File Server
b)
B. Amazon WorkSpaces virtual Windows desktop
c)
C. AWS Directory Service for Microsoft Active Directory
d)
D. Amazon RDS for Microsoft SQL Server
126.
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?
a)
A. Both AWS and the customer
b)
B. The customer only
c)
C. The EC2 hardware manufacturer
d)
D. AWS only
127.
A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the operating system of the server where the DB instance runs.What is the company's responsibility in this situation, according to the AWS shared responsibility model?
a)
A. Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system.
b)
B. Open a support case and request that AWS patch the DB instance operating system.
c)
C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for the DB instance.
d)
D. Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.
128.
Why is an AWS Well-Architected review a critical part of the cloud design process?
a)
A. A Well-Architected review is mandatory before a workload can run on AWS.
b)
B. A Well-Architected review helps identify design gaps and helps evaluate design decisions and related documents.
c)
C. A Well-Architected review is an audit mechanism that is a part of requirements for service level agreements.
d)
D. A Well-Architected review eliminates the need for ongoing auditing and compliance tests.
129.
A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy applications that run onAmazon EC2 instances.Which pillar of the AWS Well-Architected Framework does this action cover?
a)
A. Security
b)
B. Performance efficiency
c)
C. Operational excellence
d)
D. Reliability
130.
Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?
a)
A. Agility
b)
B. Elasticity
c)
C. Scalability
d)
D. High availability
131.
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?
a)
A. Creating versions of Lambda functions
b)
B. Maintaining server and operating systems
c)
C. Scaling Lambda resources according to demand
d)
D. Updating the Lambda runtime environment
132.
What does the AWS Concierge Support team provide?
a)
A. A technical expert dedicated to the user
b)
B. A primary point of contact for AWS Billing and AWS Support
c)
C. A partner to help provide scaling guidance for an event launch
d)
D. A dedicated AWS staff member who reviews the user's application architecture
133.
A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month.Which AWS tool should the company use to meet these requirements?
a)
A. Reserved Instance utilization and coverage reports
b)
B. Savings Plans utilization reports
c)
C. AWS Budgets reports
d)
D. AWS Cost and Usage Reports
134.
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB database.Which AWS service can the company use to trace user requests as they move through the application's components?
a)
A. AWS CloudTrail
b)
B. Amazon CloudWatch
c)
C. Amazon Inspector
d)
D. AWS X-Ray
135.
A company needs to set up a petabyte-scale data warehouse in the AWS Cloud.Which AWS service will meet this requirement?
a)
A. Amazon DynamoDB
b)
B. Amazon RDS
c)
C. Amazon Redshift
d)
D. Amazon ElastiCache
136.
Which AWS service is always provided at no charge?
a)
A. Amazon S3
b)
B. AWS Identity and Access Management (IAM)
c)
C. Elastic Load Balancers
d)
D. AWS WAF
137.
A company needs to design an AWS disaster recovery plan to cover multiple geographic areas.Which action will meet this requirement?
a)
A. Configure multiple AWS accounts.
b)
B. Configure the architecture across multiple Availability Zones in an AWS Region.
c)
C. Configure the architecture across multiple AWS Regions.
d)
D. Configure the architecture among many edge locations.
138.
Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud?
a)
A. Compute instances can be launched and terminated as needed to optimize costs.
b)
B. Compute costs can be viewed in the AWS Billing and Cost Management console.
c)
C. Users retain full administrative access to their compute instances.
d)
D. Users can optimize costs by permanently running enough instances at peak load.
139.
In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose two.)
a)
A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
b)
B. AWS is designed for high availability, which eliminates user downtime.
c)
C. AWS eliminates the need for on-premises IT staff.
d)
D. AWS uses economies of scale to continually reduce prices.
140.
Which AWS service monitors AWS accounts for security threats?
a)
A. Amazon GuardDuty
b)
B. AWS Secrets Manager
c)
C. Amazon Cognito
d)
D. AWS Certificate Manager (ACM)
141.
Which benefit is included with an AWS Enterprise Support plan?
a)
A. AWS Partner Network (APN) support at no cost.
b)
B. Designated support from an AWS technical account manager (TAM)
c)
C. On-site support from AWS engineers
d)
D. AWS managed compliance as code with AWS Config
142.
Which task does AWS perform automatically?
a)
A. Encrypt data that is stored in Amazon DynamoDB.
b)
B. Patch Amazon EC2 instances.
c)
C. Encrypt user network traffic.
d)
D. Create TLS certificates for users' websites.
143.
Which AWS service or tool can a company use to visualize, understand, and manage AWS spending and usage over time?
a)
A. AWS Trusted Advisor
b)
B. Amazon CloudWatch
c)
C. Cost Explorer
d)
D. AWS Budgets
144.
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on premises. There must be low latency between AWS and the company resources.Which AWS service or feature can be used to meet these requirements?
a)
A. AWS Local Zones
b)
B. Availability Zones
c)
C. AWS Outposts
d)
D. AWS Wavelength Zones
145.
A company requires an isolated environment within AWS for security purposes.Which action can be taken to accomplish this?
a)
A. Create a separate Availability Zone to host the resources.
b)
B. Create a separate VPC to host the resources.
c)
C. Create a placement group to host the resources.
d)
D. Create an AWS Direct Connect connection between the company and AWS.
Reset
