Font size
WorksheetsAWS CP Exam 03
Total questions: 60
Worksheet time: 2hrs 30mins
Which AWS service provides a feature that can be used to proactively monitor and plan for the service quotas of AWS resources?
A. AWS CloudTrail
CloudWatch
B. AWS Personal Health Dashboard
C. AWS Trusted Advisor
D. Amazon
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
A. Elimination of expenses for running and maintaining data centers
B. Price discounts that are identical to discounts from hardware providers
C. Distribution of all operational controls to AWS
D. Elimination of operational expenses
Which design principle is included in the operational excellence pillar of the AWS Well-Architected Framework?
A. Create annotated documentation.
B. Anticipate failure.
C. Ensure performance efficiency.
D. Optimize costs.
Which AWS services offer gateway VPC endpoints that can be used to avoid sending traffic over the internet? (Choose two.)
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Queue Service (Amazon SQS)
C. AWS CodeBuild
D. Amazon S3
E. Amazon DynamoDB
Which of the following is the customer responsible for updating and patching, according to the AWS shared responsibility model?
A. Amazon FSx for Windows File Server
B. Amazon WorkSpaces virtual Windows desktop
C. AWS Directory Service for Microsoft Active Directory
D. Amazon RDS for Microsoft SQL Server
Who has the responsibility to patch the host operating system of an Amazon EC2 instance, according to the AWS shared responsibility model?
A. Both AWS and the customer
B. The customer only
C. The EC2 hardware manufacturer
D. AWS only
A company is using an Amazon RDS DB instance for an application that is deployed in the AWS Cloud. The company needs regular patching of the
operating system of the server where the DB instance runs.
What is the company's responsibility in this situation, according to the AWS shared responsibility model?
A. Open a support case to obtain administrative access to the server so that the company can patch the DB instance operating system.
B. Open a support case and request that AWS patch the DB instance operating system.
C. Use administrative access to the server, and apply the operating system patches during the regular maintenance window that is defined for
the DB instance.
D. Establish a regular maintenance window that tells AWS when to patch the DB instance operating system.
Why is an AWS Well-Architected review a critical part of the cloud design process?
A. A Well-Architected review is mandatory before a workload can run on AWS.
B. A Well-Architected review helps identify design gaps and helps evaluate design decisions and related documents.
C. A Well-Architected review is an audit mechanism that is a part of requirements for service level agreements.
D. A Well-Architected review eliminates the need for ongoing auditing and compliance tests.
A company implements an Amazon EC2 Auto Scaling policy along with an Application Load Balancer to automatically recover unhealthy
applications that run on
Amazon EC2 instances.
Which pillar of the AWS Well-Architected Framework does this action cover?
A. Security
B. Performance efficiency
C. Operational excellence
D. Reliability
Which AWS Cloud benefit is shown by an architecture's ability to withstand failures with minimal downtime?
A. Agility
B. Elasticity
C. Scalability
D. High availability.
Under the AWS shared responsibility model, which task is the customer's responsibility when managing AWS Lambda functions?
A. Creating versions of Lambda functions
B. Maintaining server and operating systems
C. Scaling Lambda resources according to demand
D. Updating the Lambda runtime environment.
What does the AWS Concierge Support team provide?
A. A technical expert dedicated to the user
B. A primary point of contact for AWS Billing and AWS Support
C. A partner to help provide scaling guidance for an event launch
D. A dedicated AWS staff member who reviews the user's application architecture.
A company needs to generate reports that can break down cloud costs by product, by company-defined tags, and by hour, day, and month.
Which AWS tool should the company use to meet these requirements?
A. Reserved Instance utilization and coverage reports
B. Savings Plans utilization reports
C. AWS Budgets reports
D. AWS Cost and Usage Reports
A company has a serverless application that includes an Amazon API Gateway API, an AWS Lambda function, and an Amazon DynamoDB
database.
Which AWS service can the company use to trace user requests as they move through the application's components?
A. AWS CloudTrail
B. Amazon CloudWatch
C. Amazon Inspector
D. AWS X-Ray
A company needs to set up a petabyte-scale data warehouse in the AWS Cloud.
Which AWS service will meet this requirement?
A. Amazon DynamoDB
B. Amazon RDS
C. Amazon Redshift
D. Amazon ElastiCache
Which AWS service is always provided at no charge?
A. Amazon S3
B. AWS Identity and Access Management (IAM)
C. Elastic Load Balancers
D. AWS WAF
A company needs to design an AWS disaster recovery plan to cover multiple geographic areas.
Which action will meet this requirement?
A. Configure multiple AWS accounts.
B. Configure the architecture across multiple Availability Zones in an AWS Region.
C. Configure the architecture across multiple AWS Regions.
D. Configure the architecture among many edge locations.
Which of the following is a benefit of moving from an on-premises data center to the AWS Cloud?
A. Compute instances can be launched and terminated as needed to optimize costs.
B. Compute costs can be viewed in the AWS Billing and Cost Management console.
C. Users retain full administrative access to their compute instances.
D. Users can optimize costs by permanently running enough instances at peak load.
In which ways does the AWS Cloud offer lower total cost of ownership (TCO) of computing resources than on-premises data centers? (Choose
two.)
A. AWS replaces upfront capital expenditures with pay-as-you-go costs.
B. AWS is designed for high availability, which eliminates user downtime.
C. AWS eliminates the need for on-premises IT staff.
D. AWS uses economies of scale to continually reduce prices.
E. AWS offers a single pricing model for Amazon EC2 instances.
Which AWS service monitors AWS accounts for security threats?
A. Amazon GuardDuty
B. AWS Secrets Manager
C. Amazon Cognito
D. AWS Certificate Manager (ACM)
Which benefit is included with an AWS Enterprise Support plan?
A. AWS Partner Network (APN) support at no cost.
B. Designated support from an AWS technical account manager (TAM)
C. On-site support from AWS engineers
D. AWS managed compliance as code with AWS Config
Which task does AWS perform automatically?
A. Encrypt data that is stored in Amazon DynamoDB.
B. Patch Amazon EC2 instances.
C. Encrypt user network traffic.
D. Create TLS certificates for users' websites.
Which AWS service or tool can a company use to visualize, understand, and manage AWS spending and usage over time?
A. AWS Trusted Advisor
B. Amazon CloudWatch
C. Cost Explorer
D. AWS Budgets.
A company wants to deploy some of its resources in the AWS Cloud. To meet regulatory requirements, the data must remain local and on
premises. There must be low latency between AWS and the company resources.
Which AWS service or feature can be used to meet these requirements?
A. AWS Local Zones
B. Availability Zones
C. AWS Outposts
D. AWS Wavelength Zones.
A company requires an isolated environment within AWS for security purposes.
Which action can be taken to accomplish this?
A. Create a separate Availability Zone to host the resources.
B. Create a separate VPC to host the resources.
C. Create a placement group to host the resources.
D. Create an AWS Direct Connect connection between the company and AWS.
Which AWS service is a highly available and scalable DNS web service?
A. Amazon VPC
B. Amazon CloudFront
C. Amazon Route 53
D. Amazon Connect
Which of the following is an AWS best practice for managing an AWS account root user?
A. Keep the root user password with the security team.
B. Enable multi-factor authentication (MFA) for the root user.
C. Create an access key for the root user.
D. Keep the root user password consistent for compliance purposes.
A company wants to improve its security and audit posture by limiting Amazon EC2 inbound access.
What should the company use to access instances remotely instead of opening inbound SSH ports and managing SSH keys?
A. EC2 key pairs
B. AWS Systems Manager Session Manager
C. AWS Identity and Access Management (IAM)
D. Network ACLs
After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?
A. No upfront payment
B. Hourly on-demand payment
C. Partial upfront payment
D. All upfront payment
A company has refined its workload to use specific AWS services to improve efficiency and reduce cost.
Which best practice for cost governance does this example show?
A. Resource controls
B. Cost allocation
C. Architecture optimization
D. Tagging enforcement
A company would like to host its MySQL databases on AWS and maintain full control over the operating system, database installation, and
configuration.
Which AWS service should the company use to host the databases?
A. Amazon RDS
B. Amazon EC2
C. Amazon DynamoDB
D. Amazon Aurora
How does the AWS global infrastructure offer high availability and fault tolerance to its users?
A. The AWS infrastructure is made up of multiple AWS Regions within various Availability Zones located in areas that have low flood risk, and
are interconnected with low-latency networks and redundant power supplies.
B. The AWS infrastructure consists of subnets containing various Availability Zones with multiple data centers located in the same geographic
location.
C. AWS allows users to choose AWS Regions and data centers so that users can select the closest data centers in different Regions.
D. The AWS infrastructure consists of isolated AWS Regions with independent Availability Zones that are connected with low-latency
networking and redundant power supplies
A company is using Amazon EC2 Auto Scaling to scale its Amazon EC2 instances.
Which benefit of the AWS Cloud does this example illustrate?
A. High availability
B. Elasticity
C. Reliability
D. Global reach.
Which AWS service or feature is used to send both text and email messages from distributed applications?
A. Amazon Simple Notification Service (Amazon SNS)
B. Amazon Simple Email Service (Amazon SES)
C. Amazon CloudWatch alerts
D. Amazon Simple Queue Service (Amazon SQS)
A user is able to set up a master payer account to view consolidated billing reports through:
A. AWS Budgets.
B. Amazon Macie.
C. Amazon QuickSight.
D. AWS Organizations.
According to the AWS shared responsibility model, which task is the customer's responsibility?
A. Maintaining the infrastructure needed to run AWS Lambda
B. Updating the operating system of Amazon DynamoDB instances
C. Maintaining Amazon S3 infrastructure
D. Updating the guest operating system on Amazon EC2 instances
A company wants to migrate a small website and database quickly from on-premises infrastructure to the AWS Cloud. The company has limited
operational knowledge to perform the migration.
Which AWS service supports this use case?
A. Amazon EC2
B. Amazon Lightsail
C. Amazon S3
D. AWS Lambda
A company is moving multiple applications to a single AWS account. The company wants to monitor the AWS Cloud costs incurred by each
application.
What can the company do to meet this requirement?
A. Set up invoiced billing.
B. Use AWS Artifact.
C. Set budgets in Cost Explorer.
D. Create cost allocation tags.
Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?
A. Vertical scaling
B. Manual failure recovery
C. Testing recovery procedures
D. Changing infrastructure manually
A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database
software.
Which AWS service can be used to accomplish this?
A. Amazon RDS
B. Amazon DynamoDB
C. Amazon Aurora
D. Amazon Redshift
Which task is an AWS responsibility when a workload is running in Amazon RDS?
A. Creating the database table
B. Updating the database schema
C. Installing the database engine
D. Dropping the database records
A development team wants to publish and manage web services that provide REST APIs.
Which AWS service will meet this requirement?
A. AWS App Mesh
B. Amazon API Gateway
C. Amazon CloudFront
D. AWS Cloud Map
A company has a social media platform in which users upload and share photos with other users. The company wants to identify and remove
inappropriate photos. The company has no machine learning (ML) scientists and must build this detection capability with no ML expertise.
Which AWS service should the company use to build this capability?
A. Amazon SageMaker
B. Amazon Textract
C. Amazon Rekognition
D. Amazon Comprehend
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
A. Database backups
B. Database software patches
C. Operating system patches
D. Operating system installations
A company wants to use Amazon S3 to store its legacy data. The data is rarely accessed. However, the data is critical and cannot be recreated.
The data needs to be available for retrieval within seconds.
Which S3 storage class meets these requirements MOST cost-effectively?
A. S3 Standard
B. S3 One Zone-Infrequent Access (S3 One Zone-IA)
C. S3 Standard-Infrequent Access (S3 Standard-IA)
D. S3 Glacier
An online retail company wants to migrate its on-premises workload to AWS. The company needs to automatically handle a seasonal workload
increase in a cost- effective manner.
Which AWS Cloud features will help the company meet this requirement? (Choose two.)
A. Cross-Region workload deployment
B. Pay-as-you-go pricing
C. Built-in AWS CloudTrail audit capabilities
D. Auto Scaling policies
E. Centralized logging
Which AWS service helps developers use loose coupling and reliable messaging between microservices?
A. Elastic Load Balancing
B. Amazon Simple Notification Service (Amazon SNS)
C. Amazon CloudFront
D. Amazon Simple Queue Service (Amazon SQS)
A company needs to build an application that uses AWS services. The application will be delivered to residents in European Counties. The
company must abide by regional regulatory requirements.
Which AWS service or program should the company use to determine which AWS services meet the regional requirements?
A. AWS Audit Manager
B. AWS Shield
C. AWS Compliance Program
D. AWS Artifact
A company needs to implement identity management for a fleet of mobile apps that are running in the AWS Cloud.
Which AWS service will meet this requirement?
A. Amazon Cognito
B. AWS Security Hub
C. AWS Shield
D. AWS WAF
A company needs an Amazon EC2 instance for a rightsized database server that must run constantly for 1 year.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
A. Standard Reserved Instance
B. Convertible Reserved Instance
C. On-Demand Instance
D. Spot Instance
A company has multiple applications and is now building a new multi-tier application. The company will host the new application on Amazon EC2
instances. The company wants the network routing and traffic between the various applications to follow the security principle of least privilege.
Which AWS service or feature should the company use to enforce this principle?
A. Security groups
B. AWS Shield
C. AWS Global Accelerator
D. AWS Direct Connect gateway
A company's web application requires AWS credentials and authorizations to use an AWS service.
Which IAM entity should the company use as best practice?
A. IAM role
B. IAM user
C. IAM group
D. IAM multi-factor authentication (MFA)
A company is creating a document that defines the operating system patch routine for all the company's systems.
Which AWS resources should the company include in this document? (Choose two.)
A. Amazon EC2 instances
B. AWS Lambda functions
C. AWS Fargate tasks
D. Amazon RDS instances
E. Amazon Elastic Container Service (Amazon ECS) instances
Which AWS service or feature gives a company the ability to control incoming traffic and outgoing traffic for Amazon EC2 instances?
A. Security groups
B. Amazon Route 53
C. AWS Direct Connect
D. Amazon VPC
A company is starting to build its infrastructure in the AWS Cloud. The company wants access to technical support during business hours. The
company also wants general architectural guidance as teams build and test new applications.
Which AWS Support plan will meet these requirements at the LOWEST cost?
A. AWS Basic Support
B. AWS Developer Support
C. AWS Business Support
D. AWS Enterprise Support
A company is migrating its public website to AWS. The company wants to host the domain name for the website on AWS.
Which AWS service should the company use to meet this requirement?
A. AWS Lambda
B. Amazon Route 53
C. Amazon CloudFront
D. AWS Direct Connect
A company needs to evaluate its AWS environment and provide best practice recommendations in five categories: cost, performance, service
limits, fault tolerance, and security.
Which AWS service can the company use to meet these requirements?
A. AWS Shield
B. AWS WAF
C. AWS Trusted Advisor
D. AWS Service Catalog
Which AWS service provides the capability to view end-to-end performance metrics and troubleshoot distributed applications?
A. AWS Cloud9
B. AWS CodeStar
C. AWS Cloud Map
D. AWS X-Ray
Which cloud computing benefit does AWS demonstrate with its ability to offer lower variable costs as a result of high purchase volumes?
A. Pay-as-you-go pricing
B. High availability
C. Global reach
D. Economies of scale
Which AWS service provides threat detection by monitoring for malicious activities and unauthorized actions to protect AWS accounts, workloads,
and data that is stored in Amazon S3?
A. AWS Shield
B. AWS Firewall Manager
C. Amazon GuardDuty
D. Amazon Inspector
