Worksheetspracticioner
Total questions: 20
Worksheet time: 11mins
Which Amazon S3 storage class is optimized to provide access to data with lower resiliency requirements, but rapid access when needed such as duplicate backups?
Amazon S3 Standard
Amazon S3 Glacier Deep Archive
Amazon S3 One Zone-Infrequent Access
Amazon S3 Glacier
What is an Availability Zone in AWS?
One or more physical data centers
A completely isolated geographic location
One or more edge locations based around the world
A data center location with a single source of power and networking
Which AWS services can be used as infrastructure automation tools? (Choose two.)
AWS CloudFormation
Amazon CloudFront
AWS Batch
AWS OpsWorks
Which AWS service enables users to create copies of resources across AWS Regions?
Amazon ElastiCache
AWS CloudFormation
AWS CloudTrail
AWS Systems Manager
A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability?
AWS Secrets Manager
AWS Systems Manager
AWS Key Management Service (AWS KMS)
AWS Certificate Manager
Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage?
Easy and fast deployment of applications in multiple Regions around the world
Security of the AWS Cloud
Elasticity of the AWS Cloud
Lower variable costs due to massive economies of scale
What credential components are required to gain programmatic access to an AWS account? (Choose two.)
An access key ID
A primary key
A secret access key
A user ID
Which of the following are AWS compute services? (Select two.)
Amazon Lightsail
AWS Systems Manager
AWS CloudFormation
AWS Batch
Amazon Inspector
How can a company separate costs for network traffic, Amazon EC2, Amazon S3, and other AWS services by department?
Add department-specific tags to each resource
Create a separate VPC for each department
Create a separate AWS account for each department
Use AWS Organizations
What is a benefit of consolidated billing for AWS accounts?
Access to AWS Personal Health Dashboard
Combined usage volume discounts
Improved account security
Centralized AWS IAM
Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?
AWS Organizations
AWS Budgets
Cost Explorer
AWS Trusted Advisor
Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?
Amazon GuardDuty
Amazon Inspector
Amazon Macie
AWS Shield
Which tool can be used to monitor AWS service limits?
AWS Total Cost of Ownership (TCO) Calculator
AWS Trusted Advisor
AWS Personal Health Dashboard
AWS Cost and Usage report
A company has distributed its workload on both the AWS Cloud and some on-premises servers. What type of architecture is this?
Virtual private network
Virtual private cloud
Hybrid cloud
Private cloud
Which of the following describes a security best practice that can be implemented using AWS IAM?
Disable AWS Management Console access for all users
Generate secret keys for every IAM user
Grant permissions to users who are required to perform a given task only
Store AWS credentials within Amazon EC2 instances
What can be used to automate and manage secure, well-architected, multi-account AWS environments?
AWS shared responsibility model
AWS Control Tower
AWS Security Hub
AWS Well-Architected Tool
Which AWS service or feature allows a user to easily scale connectivity among thousands of VPCs?
VPC peering
AWS Transit Gateway
AWS Direct Connect
AWS Global Accelerator
A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?
AWS Shield Advanced
AWS Firewall Manager
AWS WAF
Amazon GuardDuty
A company’s application has flexible start and end times. Which Amazon EC2 pricing model will be the MOST cost-effective?
On-Demand Instances
Spot Instances
Reserved Instances
Dedicated Hosts
Under the AWS shared responsibility model, what are the customer’s responsibilities? (Choose two.)
Physical and environmental security
Physical network devices including firewalls
Storage device decommissioning
Security of data in transit
Data integrity authentication
