Font size
WorksheetsUDMY-SWA 4
Total questions: 65
Worksheet time: 37mins
Which of the following are examples of AWS-managed databases? (Choose TWO)
Amazon CloudSearch
MySQL on Amazon EC2
Amazon Neptune
Amazon RDS for MySQL
Microsoft SQL Server on Amazon EC2
A company wants to grant a new employee long-term access to manage Amazon DynamoDB databases. Which of the following is a recommended best-practice when granting these permissions?
Create an IAM role and attach a policy with Administrator access permissions
Create an IAM user and attach a policy with Administrator access permissions
Create an IAM user and attach a policy with Amazon DynamoDB access permissions
Create an IAM role and attach a policy with Amazon DynamoDB access permissions
A company’s AWS workflow requires that it periodically perform large-scale image and video processing jobs. The customer is seeking to minimize cost and has stated that the amount of time it takes to process these jobs is not critical, but that cost minimization is the most important factor in designing the solution. Which EC2 instance class is best suited for this processing?
EC2 On-Demand Instances
EC2 Reserved Instances - No Upfront
EC2 Spot Instances
EC2 Reserved Instances - All Upfront
Which of the following factors should be considered when determining the region in which AWS Resources will be deployed? (Choose TWO)
Geographic proximity to the company's location
The AWS Region’s security level
Cost
Data sovereignty
The planned number of VPCs
Which AWS Service provides integration with Chef to automate the configuration of EC2 instances?
AWS CloudFormation
AWS Config
AWS OpsWorks
AutoScaling
Which of the following is a type of MFA device that customers can use to protect their AWS resources?
AWS CloudHSM
AWS Access Keys
FIDO Security Key
AWS Key Pair
Which AWS service enables you to quickly purchase and deploy SSL/TLS certificates?
AWS ACM
AWS WAF
Amazon Detective
Amazon GuardDuty
Which of the following will help AWS customers save on costs when migrating their workloads to AWS?
Migrate production workloads to AWS edge locations instead of AWS Regions
Use servers instead of managed service
Use existing third-party software licenses on AWS
Use AWS Outposts to run all workloads in a cost-optimized environment
An organization has a legacy application designed using monolithic-based architecture. Which AWS Service can be used to decouple the components of the application?
Amazon SQS
Amazon CloudFront
AWS Artifact
Virtual Private Gateway
Which of the following are advantages of using AWS as a cloud computing provider? (Choose TWO)
Manages all the compliance and auditing tasks
Enables customers to trade their capital expenses for operational expenses
Provides custom hardware to meet any specification
Eliminates the need to monitor servers and applications
Eliminates the need to guess on infrastructure capacity needs
A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly?
AWS Application Load Balancer (ALB)
AWS Gateway Load Balancer (GWLB)
AWS Global Accelerator
Amazon CloudFront
An external auditor is requesting a log of all accesses to the AWS resources in the company’s account. Which of the following services will provide the auditor with the requested information?
AWS CloudTrail
AWS CloudFormation
Amazon CloudWatch
Amazon CloudFront
Which features are included in the AWS Business Support Plan? (Choose TWO)
Access to Cloud Support Engineers via email only during business hours
Access to the Infrastructure Event Management (IEM) feature for additional fee
Partial access to the core Trusted Advisor checks
24x7 access to the TAM feature
24x7 access to customer service
One of the major advantages of using AWS is cost savings. What does AWS provide to reduce the cost of running Amazon EC2 instances?
Low monthly instance maintenance costs
Per-second instance billing
Low instance start-up fees
Low-cost instance tagging
Which methods can be used by customers to interact with AWS Identity and Access Management (IAM)? (Choose TWO)
AWS Security Groups
AWS CodeCommit
AWS Network Access Control Lists
AWS CLI
AWS SDKs
A customer is planning to migrate their Microsoft SQL Server databases to AWS. Which AWS Services can the customer use to run their Microsoft SQL Server database on AWS? (Choose TWO)
Amazon Elastic Compute Cloud
Amazon RDS
AWS Fargate
AWS Lambda
AWS Database Migration service (DMS)
When granting permissions to applications running on Amazon EC2 instances, which of the following is considered best practice?
Use temporary security credentials (IAM roles) instead of long-term access keys
Store the required AWS credentials directly within the application code
Do nothing; Applications that run on Amazon EC2 instances do not need permission to interact with other AWS services or resources
Generate new IAM access keys every time you delegate permissions
A company is seeking to deploy an existing .NET application onto AWS as quickly as possible. Which AWS Service should the customer use to achieve this goal?
AWS Systems Manager
AWS Elastic Beanstalk
AWS Trusted Advisor
AWS Amplify
What features does AWS offer to help protect your data in the Cloud? (Choose TWO)
Data encryption
Load balancing
Access control
Unlimited storage
Physical MFA devices
Your company requires a response time of less than 15 minutes from support interactions about their business-critical systems that are hosted on AWS if those systems go down. Which AWS Support Plan should this company use?
AWS Developer Support
AWS Basic Support
AWS Business Support
AWS Enterprise Support
An AWS customer has used one Amazon Linux instance for 2 hours, 5 minutes and 9 seconds, and one CentOS instance for 4 hours, 23 minutes and 7 seconds. How much time will the customer be billed for?
2 hours, 5 minutes and 9 seconds for the Linux instance and 4 hours, 23 minutes and 7 seconds for the CentOS instance
3 hours for the Linux instance and 5 hours for the CentOS instance
3 hours for the Linux instance and 4 hours, 23 minutes and 7 seconds for the CentOS instance
2 hours, 5 minutes and 9 seconds for the Linux instance and 5 hours for the CentOS instance
Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects?
AWS Config
AWS CloudTrail
AWS Auto Scaling
AWS CloudFormation
Which of the below options is true of Amazon Cloud Directory?
Amazon Cloud Directory allows for registration and management of domain names
Amazon Cloud Directory allows users to access AWS with their existing Active Directory credentials
Amazon Cloud Directory allows the organization of hierarchies of data across multiple dimensions
Amazon Cloud Directory enables the analysis of data streams in real time
What should you do if you see resources, which you don’t remember creating, in the AWS Management Console? (Choose TWO)
Stop all running services and open an investigation
Give your root account password to AWS Support so that they can assist in troubleshooting and securing the account
Open an investigation and delete any potentially compromised IAM users
Change your AWS root account password and the passwords of any IAM users
Check the AWS CloudTrail logs and delete all IAM users that have access to your resources
Which AWS Service helps enterprises extend their on-premises storage to AWS in a cost-effective manner?
AWS Storage Gateway
Amazon Aurora
Amazon EFS
AWS Data Pipeline
Availability Zones within a Region are connected over low-latency links. Which of the following is a benefit of these links?
Create private connection to your data center
Automate the process of provisioning new compute resources
Achieve global high availability
Make synchronous replication of your data possible
You are running a financial services web application on AWS. The application uses a MySQL database to store the data. Which of the following AWS services would improve the performance of your application by allowing you to retrieve information from fast in-memory caches?
Amazon EFS
Amazon ElastiCache
Amazon Neptune
DAX
A company is using EC2 Instances to run their e-commerce site on the AWS platform. If the site becomes unavailable, the company will lose a significant amount of money for each minute the site is unavailable. Which design principle should the company use to minimize the risk of an outage?
Pilot Light
Multi-threading
Least Privilege
Fault Tolerance
Which AWS Service offers volume discounts based on usage?
Amazon VPC
Amazon S3
Amazon Lightsail
AWS Cost Explorer
A user has opened a "Production System Down" support case to get help from AWS Support after a production system disruption. What is the expected response time for this type of support case?
15 minutes
12 hours
24 hours
One hour
Which of the following services can be used to monitor the HTTP and HTTPS requests that are forwarded to Amazon CloudFront distributions or Amazon API Gateway APIs?
AWS WAF
AWS CloudTrail
Amazon CloudWatch
AWS Cloud9
Which of the following are true regarding the languages that are supported on AWS Lambda? (Choose TWO)
Lambda can support any programming language using an API
Lambda only supports Python and Node.js, but third party plugins are available to convert code in other languages to these formats
Lambda is AWS’ proprietary programming language for microservices
Lambda natively supports a number of programming languages such as Node.js, Python, and Java
Lambda doesn’t support programming languages; it is a serverless compute service
How does AWS notify customers about security and privacy events pertaining to AWS services?
Using Security Bulletins
Using the AWS ACM service
Using the AWS Management Console
Using Compliance Resources
What are the advantages of using Auto Scaling Groups for EC2 instances?
Auto Scaling Groups distributes application traffic across multiple Availability Zones to enhance performance
Auto Scaling Groups caches the most recent responses at global edge locations to reduce latency and improve performance
Auto Scaling Groups scales EC2 instances across multiple regions to reduce latency for global users
Auto Scaling Groups scales EC2 instances in multiple Availability Zones to increase application availability and fault tolerance
Which of the below options is a best practice for making your application on AWS highly available?
Use Elastic Load Balancing (ELB) across multiple AWS Regions
Deploy the application to at least two Availability Zones
Deploy the application code on at least two servers in the same Availability Zone
Rewrite the application code to handle all incoming requests
Which of the following AWS offerings are serverless services? (Choose TWO)
Amazon EC2
Amazon RDS for Oracle
Amazon RDS for MySQL
Amazon DynamoDB
AWS Lambda
A company is building an online cloud storage platform. They need a storage service that can scale capacity automatically, while minimizing cost. Which AWS storage service should the company use to meet these requirements?
Amazon Elastic Container Service
Amazon Elastic Block Store
AWS Storage Gateway
Amazon Simple Storage Service
Which IAM entity can best be used to grant temporary access to your AWS resources?
IAM Users
IAM Roles
IAM User Groups
Key Pair
According to best practices, which of the below options is best suited for processing a large number of binary files?
Vertically scaling EC2 instances
Running EC2 instances in parallel
Vertically scaling RDS instances
Running RDS instances in parallel
Which AWS Service can perform health checks on Amazon EC2 instances?
AWS CloudFormation
Amazon Aurora
Amazon Route 53
Amazon Chime
The TCO gap between AWS infrastructure and traditional infrastructure has widened over the recent years. Which of the following could be the reason for that?
AWS secures AWS resources at no additional charge
AWS automates all infrastructure operations, so customers save more on human resources costs
AWS continues to lower the cost of cloud computing for its customers
AWS helps customers invest more in capital expenditures
A company is developing an application that will leverage facial recognition to automate photo tagging. Which AWS Service should the company use for facial recognition?
Amazon Comprehend
AWS IAM
Amazon Polly
Amazon Rekognition
Which AWS Service offers an NFS file system that can be mounted concurrently from multiple EC2 instances?
Amazon Elastic Block Store
AWS Storage Gateway
Amazon Simple Storage Service
Amazon Elastic File System
A key practice when designing solutions on AWS is to minimize dependencies between components so that the failure of a single component does not impact other components. What is this practice called?
Scalable coupling
Elastic coupling
Loosely coupling
Tightly coupling
Which of the following can be used to enable the Virtual Multi-Factor Authentication? (Choose TWO)
AWS Secrets Manager
Amazon Connect
AWS Identity and Access Management (IAM)
AWS CLI
Amazon SNS
Which of the following approaches will help you eliminate human error and automate the process of creating and updating your AWS environment?
Use code to provision and operate your AWS infrastructure
Use Software test automation tools
Migrate all of your applications to a dedicated host
Use AWS CodeDeploy to build and automate your AWS environment
A company is seeking to better secure its AWS account from unauthorized access. Which of the below options can the customer use to achieve this goal?
Require Multi-Factor Authentication (MFA) for all IAM User access
Set up two login passwords
Restrict any API call made through SDKs or CLI
Create one IAM account for each department in the company (Development, QA, Production), and share it across all staff in that department
Which of the following is NOT a factor when estimating the costs of Amazon EC2? (Choose TWO)
Allocated Elastic IP Addresses
Number of instances
Number of security groups
Number of Hosted Zones
The amount of time the instances will be running
A company is developing a mobile application and wants to allow users to use their Amazon, Apple, Facebook, or Google identities to authenticate to the application. Which AWS Service should the company use for this purpose?
Amazon GuardDuty
Amazon Cognito
AWS IAM
Amazon Personalize
Which of the following Amazon RDS features facilitates offloading of database read activity?
Read Replicas
Database Snapshots
Multi-AZ Deployments
Automated Backups
A company is planning to use Amazon S3 and Amazon CloudFront to distribute its video courses globally. What tool can the company use to estimate the costs of these services?
AWS Budgets
AWS Cost Explorer
AWS Pricing Calculator
AWS Cost & Usage Report
Which AWS Service allows customers to download AWS SOC & PCI reports?
AWS Glue
AWS Well-Architected Tool
AWS Artifact
Amazon Chime
Which of the following are examples of the customer’s responsibility to implement “security IN the cloud”? (Choose TWO)
Patch management of the underlying infrastructure
File system encryption
Building a schema for an application
Replacing physical hardware
Creating a new hypervisor
There is a requirement to grant a DevOps team full administrative access to all resources in an AWS account. Who can grant them these permissions?
AWS cloud support engineers
AWS account owner
AWS technical account manager
AWS security team
Which of the following is true regarding the AWS availability zones and edge locations?
An AWS Availability Zone is an isolated location within an AWS Region, however edge locations are located in multiple cities worldwide
An availability zone exists within an edge location to distribute content globally with low latency
Edge locations are located in separate Availability Zones worldwide to serve global customers
An Availability Zone is a geographic location where AWS provides multiple, physically separated and isolated edge locations
Which of the following should be taken into account when performing a TCO analysis regarding the costs of running an application on AWS VS on-premises? (Choose TWO)
Amazon EBS computing power
Software compatibility
Software architecture
Labor and IT costs
Cooling and power consumption
What are the capabilities of AWS X-Ray? (Choose TWO
Facilitates tracking of user requests to identify application issues
Deploys applications to Amazon EC2 instances
Deploys applications to on-premises servers
Automatically decouples application components
Helps improve application performance
A customer is seeking to store objects in their AWS environment and to make those objects downloadable over the internet. Which AWS Service can be used to accomplish this?
Amazon S3
Amazon Instance Store
Amazon EFS
Amazon EBS
Which AWS Group assists customers in achieving their desired business outcomes?
AWS Professional Services
AWS Concierge Support Team
AWS Security Team
AWS Trusted Advisor
You decide to buy a reserved instance for a term of one year. Which option provides the largest total discount?
Partial up-front reservation
No up-front reservation
All reserved instance payment options provide the same discount level
All up-front reservation
Which of the following are types of AWS Identity and Access Management (IAM) identities? (Choose TWO)
IAM Users
AWS Resource Groups
AWS Organizations
IAM Policies
IAM Roles
A company is migrating a web application to AWS. The application’s compute capacity is continually utilized throughout the year. Which of the below options offer the company the most cost-effective solution? (Choose TWO)
Reserved Instances
Dedicated Hosts
Spot Instances
On-demand Instances
Savings Plans
You have just hired a skilled sys-admin to join your team. As usual, you have created a new IAM user for him to interact with AWS services. On his first day, you ask him to create snapshots of all existing Amazon EBS volumes and save them in a new Amazon S3 bucket. However, the new member reports back that he is unable to create neither EBS snapshots nor S3 buckets. What might prevent him from doing this simple task?
There is not enough space in S3 to store the snapshots
The systems administrator must contact AWS Support first to activate his new IAM account
EBS and S3 are accessible only to the root account owner
There is a non-explicit deny to all new users
Which AWS service or feature is used to manage the keys used to encrypt customer data?
Multi-Factor Authentication (MFA)
AWS KMS
Amazon Macie
AWS Service Control Policies (SCPs)
What is the AWS Support feature that allows customers to manage support cases programmatically?
AWS Support API
AWS Health Dashboard
AWS Operations Support
AWS Trusted Advisor
