Worksheetspractition test 6
Total questions: 65
Worksheet time: 33mins
Name
Class
Date
1.
A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server. Which Amazon EC2 instance pricing option will meet these requirements?
a)
Dedicated Hosts
b)
Dedicated Instances
c)
Spot Instances
d)
Reserved Instances
2.
Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.)
a)
Amazon Macie
b)
AWS Certificate Manager
c)
AWS Key Management Service (AWS KMS)
d)
AWS Secrets Manager
e)
AWS CloudHSM
3.
A company is planning to migrate from on-premises to the AWS Cloud. Which AWS tool or service provides detailed reports on estimated cost savings after migration?
a)
AWS Total Cost of Ownership (TCO) Calculator
b)
Cost Explorer
c)
AWS Budgets
d)
AWS Migration Hub
4.
What can assist in evaluating an application for migration to the cloud? (Choose two.)
a)
AWS Trusted Advisor
b)
AWS Professional Services
c)
AWS Systems Manager
d)
AWS Partner Network (APN)
e)
AWS Secrets Manager
5.
Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
a)
AWS Secrets Manager
b)
AWS CloudHSM
c)
AWS Key Management Service (AWS KMS)
d)
AWS Directory Service
6.
Under the AWS shared responsibility model, the customer manages which of the following? (Choose two.)
a)
Decommissioning of physical storage devices
b)
Security group and ACL configuration
c)
Patch management of an Amazon RDS instance operating system
d)
Controlling physical access to data centers
e)
Patch management of an Amazon EC2 instance operating system
7.
Which AWS service is suitable for an event-driven workload?
a)
Amazon EC2
b)
AWS Elastic Beanstalk
c)
AWS Lambda
d)
Amazon Lumberyard
8.
What is a value proposition of the AWS Cloud?
a)
AWS is responsible for security in the AWS Cloud
b)
No long-term contract is required
c)
Provision new servers in days
d)
AWS manages user applications in the AWS Cloud
9.
What is a characteristic of Amazon S3 cross-region replication?
a)
Both source and destination S3 buckets must have versioning disabled
b)
The source and destination S3 buckets cannot be in different AWS Regions
c)
S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts
d)
The source S3 bucket owner must have the source and destination AWS Regions disabled for their account
10.
What is a user responsible for when running an application in the AWS Cloud?
a)
Managing physical hardware
b)
Updating the underlying hypervisor
c)
Providing a list of users approved for data center access
d)
Managing application software updates
11.
A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market. Which AWS Cloud feature can provide this?
a)
Elasticity
b)
High availability
c)
Agility
d)
Reliability
12.
Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.)
a)
AWS Cost and Usage report
b)
AWS product pages
c)
AWS Simple Monthly Calculator
d)
Billing alerts and Amazon CloudWatch alarms
e)
AWS Price List API
13.
Amazon Route 53 enables users to:
a)
encrypt data in transit
b)
register DNS domain names
c)
generate and manage SSL certificates
d)
establish a dedicated network connection to AWS
14.
Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?
a)
Amazon Rekognition
b)
AWS Trusted Advisor
c)
Amazon GuardDuty
d)
Amazon CloudWatch
15.
A company wants to try a third-party ecommerce solution before deciding to use it long term. Which AWS service or tool will support this effort?
a)
AWS Marketplace
b)
AWS Partner Network (APN)
c)
AWS Managed Services
d)
AWS Service Catalog
16.
Which AWS service is a managed NoSQL database?
a)
Amazon Redshift
b)
Amazon DynamoDB
c)
Amazon Aurora
d)
Amazon RDS for MariaDB
17.
Which AWS service should be used to create a billing alarm?
a)
AWS Trusted Advisor
b)
AWS CloudTrail
c)
Amazon CloudWatch
d)
Amazon QuickSight
18.
A company is hosting a web application in a Docker container on Amazon EC2. AWS is responsible for which of the following tasks?
a)
Scaling the web application and services developed with Docker
b)
Provisioning or scheduling containers to run on clusters and maintain their availability
c)
Performing hardware maintenance in the AWS facilities that run the AWS Cloud
d)
Managing the guest operating system, including updates and security patches
19.
Users are reporting latency when connecting to a website with a global customer base. Which AWS service will improve the customer experience by reducing latency?
a)
Amazon CloudFront
b)
AWS Direct Connect
c)
Amazon EC2 Auto Scaling
d)
AWS Transit Gateway
20.
Which actions represent best practices for using AWS IAM? (Choose two.)
a)
Configure a strong password policy
b)
Share the security credentials among users of AWS accounts who are in the same Region
c)
Use access keys to log in to the AWS Management Console
d)
Rotate access keys on a regular basis
e)
Avoid using IAM roles to delegate permissions
21.
Which AWS feature or service can be used to capture information about incoming and outgoing traffic in an AWS VPC infrastructure?
a)
AWS Config
b)
VPC Flow Logs
c)
AWS Trusted Advisor
d)
AWS CloudTrail
22.
A company wants to use an AWS service to monitor the health of application endpoints, with the ability to route traffic to healthy regional endpoints to improve application availability. Which service will support these requirements?
a)
Amazon Inspector
b)
Amazon CloudWatch
c)
AWS Global Accelerator
d)
Amazon CloudFront
23.
According to the AWS Well-Architected Framework, what change management steps should be taken to achieve reliability in the AWS Cloud? (Choose two.)
a)
Use AWS Config to generate an inventory of AWS resources
b)
Use service limits to prevent users from creating or making changes to AWS resources
c)
Use AWS CloudTrail to record AWS API calls into an auditable log file
d)
Use AWS Certificate Manager to whitelist approved AWS resources and services
e)
Use Amazon GuardDuty to validate configuration changes made to AWS resources
24.
Which service can be used to monitor and receive alerts for AWS account root user AWS Management Console sign-in events?
a)
Amazon CloudWatch
b)
AWS Config
c)
AWS Trusted Advisor
d)
AWS IAM
25.
Which design principle should be considered when architecting in the AWS Cloud?
a)
Think of servers as non-disposable resources
b)
Use synchronous integration of services
c)
Design loosely coupled components
d)
Implement the least permissive rules for security groups
26.
Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.)
a)
AWS Snowball
b)
AWS Lambda
c)
AWS ElastiCache
d)
AWS Database Migration Service (AWS DMS)
e)
Amazon API Gateway
27.
A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional. What is the best cloud architecture to address this consistently growing demand?
a)
Run the application on a bigger EC2 instance size.
b)
Switch to an EC2 instance family that better matches batch requirements.
c)
Distribute the application across multiple EC2 instances and run the workload in parallel.
d)
Run the application on a bare metal EC2 instance.
28.
Each department within a company has its own independent AWS account and its own payment method. New company leadership wants to centralize departmental governance and consolidate payments. How can this be achieved using AWS services or features?
a)
Forward monthly invoices for each account. Then create IAM roles to allow cross-account access.
b)
Create a new AWS account. Then configure AWS Organizations and invite all existing accounts to join.
c)
Configure AWS Organizations in each of the existing accounts. Then link all accounts together.
d)
Use Cost Explorer to combine costs from all accounts. Then replicate IAM policies across accounts.
29.
The ability to horizontally scale Amazon EC2 instances based on demand is an example of which concept in the AWS Cloud value proposition?
a)
Economy of scale
b)
Elasticity
c)
High availability
d)
Agility
30.
An ecommerce company anticipates a huge increase in web traffic for two very popular upcoming shopping holidays. Which AWS service or feature can be configured to dynamically adjust resources to meet this change in demand?
a)
AWS CloudTrail
b)
Amazon EC2 Auto Scaling
c)
Amazon Forecast
d)
AWS Config
31.
Which AWS service enables users to securely connect to AWS resources over the public internet?
a)
Amazon VPC peering
b)
AWS Direct Connect
c)
AWS VPN
d)
Amazon Pinpoint
32.
Which tool is used to forecast AWS spending?
a)
AWS Trusted Advisor
b)
AWS Organizations
c)
Cost Explorer
d)
Amazon Inspector
33.
A company is running an ecommerce application hosted in Europe. To decrease latency for users who access the website from other parts of the world, the company would like to cache frequently accessed static content closer to the users. Which AWS service will support these requirements?
a)
Amazon ElastiCache
b)
Amazon CloudFront
c)
Amazon Elastic File System (Amazon EFS)
d)
Amazon Elastic Block Store (Amazon EBS)
34.
Which of the following is a component of the AWS Global Infrastructure?
a)
Amazon Alexa
b)
AWS Regions
c)
Amazon Lightsail
d)
AWS Organizations
35.
Which AWS service will help users determine if an application running on an Amazon EC2 instance has sufficient CPU capacity?
a)
Amazon CloudWatch
b)
AWS Config
c)
AWS CloudTrail
d)
Amazon Inspector
36.
Why is it beneficial to use Elastic Load Balancers with applications?
a)
They allow for the conversion from Application Load Balancers to Classic Load Balancers.
b)
They are capable of handling constant changes in network traffic patterns.
c)
They automatically adjust capacity
d)
They are provided at no charge to users.
37.
Which tasks are the customer’s responsibility in the AWS shared responsibility model? (Choose two.)
a)
Infrastructure facilities access management
b)
Cloud infrastructure hardware lifecycle management
c)
Configuration management of user’s applications
d)
Networking infrastructure protection
e)
Security groups configuration
38.
IT systems should be designed to reduce interdependencies, so that a change or failure in one component does not cascade to other components. This is an example of which principle of cloud architecture design?
a)
Scalability
b)
Loose coupling
c)
Automation
d)
Automatic scaling
39.
Which AWS service or feature can enhance network security by blocking requests from a particular network for a web application on AWS? (Choose two.)
a)
AWS WAF
b)
AWS Trusted Advisor
c)
AWS Direct Connect
d)
AWS Organizations
e)
Network ACLs
40.
An application runs on multiple Amazon EC2 instances that access a shared file system simultaneously. Which AWS storage service should be used?
a)
Amazon EBS
b)
Amazon EFS
c)
Amazon S3
d)
AWS Artifact
41.
A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS? (Choose two.)
a)
Running a virus scan on EC2 instances
b)
Protecting against IP spoofing and packet sniffing
c)
Installing the latest security patches on the RDS instance
d)
Encrypting communication between the EC2 instances and the Elastic Load Balancer
e)
Configuring a security group and a network access control list (NACL) for EC2
42.
What is the benefit of elasticity in the AWS Cloud?
a)
Ensure web traffic is automatically spread across multiple AWS Regions.
b)
Minimize storage costs by automatically archiving log data.
c)
Enable AWS to automatically select the most cost-effective services.
d)
Automatically adjust the required compute capacity to maintain consistent performance.
43.
The continual reduction of AWS Cloud pricing is due to:
a)
pay-as-you go pricing
b)
the AWS global infrastructure
c)
economies of scale
d)
reserved storage pricing
44.
A company needs an Amazon S3 bucket that cannot have any public objects due to compliance requirements. How can this be accomplished?
a)
Enable S3 Block Public Access from the AWS Management Console.
b)
Hold a team meeting to discuss the importance if only uploading private S3 objects.
c)
Require all S3 objects to be manually approved before uploading.
d)
Create a service to monitor all S3 uploads and remove any public uploads.
45.
A Cloud Practitioner identifies a billing issue after examining the AWS Cost and Usage report in the AWS Management Console. Which action can be taken to resolve this?
a)
Open a detailed case related to billing and submit it to AWS Support for help.
b)
Upload data describing the issue to a new object in a private Amazon S3 bucket.
c)
Create a pricing application and deploy it to a right-sized Amazon EC2 instance for more information.
d)
Proceed with creating a new dashboard in Amazon QuickSight.
46.
What does the AWS Simple Monthly Calculator do?
a)
Compares on-premises costs to colocation environments
b)
Estimates monthly billing based on projected usage
c)
Estimates power consumption at existing data centers
d)
Estimates CPU utilization
47.
Who is responsible for patching the guest operating system for Amazon RDS?
a)
The AWS Product team
b)
The customer Database Administrator
c)
Managed partners
d)
AWS Support
48.
Which AWS services may be scaled using AWS Auto Scaling? (Choose two.)
a)
Amazon EC2
b)
Amazon DynamoDB
c)
Amazon S3
d)
Amazon Route 53
e)
Amazon Redshift
49.
Which of the following are benefits of AWS Global Accelerator? (Choose two.)
a)
Reduced cost to run services on AWS
b)
Improved availability of applications deployed on AWS
c)
Higher durability of data stored on AWS
d)
Decreased latency to reach applications deployed on AWS
e)
Higher security of data stored on AWS
50.
A user who wants to get help with billing and reactivate a suspended account should submit an account and billing request to:
a)
the AWS Support forum
b)
the AWS Support forum
c)
an AWS Solutions Architect
d)
AWS Support
51.
Which AWS Cloud best practice uses the elasticity and agility of cloud computing?
a)
Provision capacity based on past usage and theoretical peaks
b)
Dynamically and predictively scale to meet usage demands
c)
Build the application and infrastructure in a data center that grants physical access
d)
Break apart the application into loosely coupled components
52.
Which method helps to optimize costs of users moving to the AWS Cloud?
a)
Paying only for what is used
b)
Purchasing hardware before it is needed
c)
Manually provisioning cloud resources
d)
Purchasing for the maximum possible load
53.
Under the AWS shared responsibility model, which of the following is a customer responsibility?
a)
Installing security patches for the Xen and KVM hypervisors
b)
Installing operating system patches for Amazon DynamoDB
c)
Installing operating system security patches for Amazon EC2 database instances
d)
Installing operating system security patches for Amazon RDS database instances
54.
The AWS Cost Management tools give users the ability to do which of the following? (Choose two.)
a)
Terminate all AWS resources automatically if budget thresholds are exceeded.
b)
Break down AWS costs by day, service, and linked AWS account.
c)
Create budgets and receive notifications if current of forecasted usage exceeds the budgets.
d)
Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective.
e)
Move data stored in Amazon S3 to a more cost-effective storage class.
55.
Under the AWS shared responsibility model, the security and patching of the guest operating system is the responsibility of:
a)
AWS Support
b)
the customer
c)
AWS Systems Manager
d)
AWS Config
56.
Which AWS service makes it easy to create and manage AWS users and groups, and provide them with secure access to AWS resources at no charge?
a)
AWS Direct Connect
b)
Amazon Connect
c)
AWS Identity and Access Management (IAM)
d)
AWS Firewall Manager
57.
Which AWS service provides on-demand of AWS security and compliance documentation?
a)
AWS Directory Service
b)
AWS Artifact
c)
AWS Trusted Advisor
d)
AWS Trusted Advisor
58.
Which AWS service can be used to turn text into life-like speech?
a)
Amazon Polly
b)
Amazon Transcribe
c)
Amazon Rekognition
d)
Amazon Lex
59.
What is one of the core principles to follow when designing a highly available application in the AWS Cloud?
a)
Design using a serverless architecture
b)
Assume that all components within an application can fail
c)
Design AWS Auto Scaling into every application
d)
Design all components using open-source code
60.
A user needs to generate a report that outlines the status of key security checks in an AWS account. The report must include:
The status of Amazon S3 bucket permissions.
Whether multi-factor authentication is enabled for the AWS account root user.
If any security groups are configured to allow unrestricted access.
Where can all this information be found in one location?
a)
Amazon QuickSight dashboard
b)
AWS CloudTrail trails
c)
AWS Trusted Advisor report
d)
IAM credential report
61.
Which Amazon EC2 pricing model should be used to comply with per-core software license requirements?
a)
Dedicated Hosts
b)
On-Demand Instances
c)
Spot Instances
d)
Reserved Instances
62.
Which of the AWS global infrastructure is used to cache copies of content for faster delivery to users across the globe?
a)
AWS Regions
b)
Availability Zones
c)
Edge locations
d)
Data centers
63.
Using AWS Config to record, audit, and evaluate changes to AWS resources to enable traceability is an example of which AWS Well-Architected Framework pillar?
a)
Security
b)
Operational excellence
c)
Performance efficiency
d)
Cost optimization
64.
A user needs to quickly deploy a non-relational database on AWS. The user does not want to manage the underlying hardware or the database software. Which AWS service can be used to accomplish this?
a)
Amazon RDS
b)
Amazon DynamoDB
c)
Amazon Aurora
d)
Amazon Redshift
65.
A Cloud Practitioner is developing a disaster recovery plan and intends to replicate data between multiple geographic areas. Which of the following meets these requirements?
a)
AWS Accounts
b)
AWS Regions
c)
Availability Zones
d)
Edge locations
100 %
