Font size
WorksheetsAWS Cloud Practitioner - Simulador #7
Total questions: 65
Worksheet time: 35mins
Which features and benefits does the AWS Organizations service provide? (Choose two.)
Establishing real-time communications between members of an internal team
Facilitating the use of NoSQL databases
Providing automated security checks
Implementing consolidated billing
Enforcing the governance of AWS accounts
Which AWS service is used to automate configuration management using Chef and Puppet?
AWS Config
AWS OpsWorks
AWS CloudFormation
AWS Systems Manager
Which tool is best suited for combining the billing of AWS accounts that were previously independent from one another?
Detailed billing report
Consolidated billing
AWS Cost and Usage report
Cost allocation report
The AWS Total Cost of Ownership (TCO) Calculator is used to:
receive reports that break down AWS Cloud compute costs by duration, resource, or tags
estimate savings when comparing the AWS Cloud to an on-premises environment
estimate a monthly bill for the AWS Cloud resources that will be used
enable billing alerts to monitor actual AWS costs compared to estimated costs
Which AWS services can be used to provide network connectivity between an on-premises network and a VPC? (Choose two.)
Amazon Route 53
AWS Direct Connect
AWS Data Pipeline
AWS VPN
Amazon Connect
Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.)
Setting up server-side encryption on an Amazon S3 bucket
Amazon RDS instance patching
Network and firewall configurations
Physical security of data center facilities
Compute capacity availability
What is the MINIMUM AWS Support plan level that will provide users with access to the AWS Support API?
Developer
Enterprise
Business
Basic
A company has deployed several relational databases on Amazon EC2 instances. Every month, the database software vendor releases new security patches that need to be applied to the databases. What is the MOST efficient way to apply the security patches?
Connect to each database instance on a monthly basis, and download and apply the necessary security patches from the vendor.
Enable automatic patching for the instances using the Amazon RDS console.
In AWS Config, configure a rule for the instances and the required patch level.
Use AWS Systems Manager to automate database patching according to a schedule.
A company wants to use Amazon Elastic Compute Cloud (Amazon EC2) to deploy a global commercial application. The deployment solution should be built with the highest redundancy and fault tolerance. Based on this situation, the Amazon EC2 instances should be deployed:
in a single Availability Zone in one AWS Region
with multiple Elastic Network Interfaces belonging to different subnets
across multiple Availability Zones in one AWS Region
across multiple Availability Zones in two AWS Regions
A company has an application with users in both Australia and Brazil. All the company infrastructure is currently provisioned in the Asia Pacific (Sydney) Region in Australia, and Brazilian users are experiencing high latency. What should the company do to reduce latency?
Implement AWS Direct Connect for users in Brazil
Provision resources in the South America (S◌ֳ £o Paulo) Region in Brazil
Use AWS Transit Gateway to quickly route users from Brazil to the application
Launch additional Amazon EC2 instances in Sydney to handle the demand
An Amazon EC2 instance runs only when needed yet must remain active for the duration of the process. What is the most appropriate purchasing option?
Dedicated Instances
Spot Instances
On-Demand Instances
Reserved Instances
Which AWS dashboard displays relevant and timely information to help users manage events in progress, and provides proactive notifications to help plan for scheduled activities?
AWS Service Health Dashboard
AWS Personal Health Dashboard
AWS Trusted Advisor dashboard
Amazon CloudWatch dashboard
Which AWS hybrid storage service enables a userגTM€s on-premises applications to seamlessly use AWS Cloud storage?
AWS Backup
Amazon Connect
AWS Direct Connect
AWS Storage Gateway
Which of the following acts as a virtual firewall at the Amazon EC2 instance level to control traffic for one or more instances?
Access keys
Virtual private gateways
Security groups
Access Control Lists (ACL)
What is the most efficient way to establish network connectivity from on-premises to multiple VPCs in different AWS Regions?
Use AWS Direct Connect
Use AWS VPN
Use AWS Client VPN
Use an AWS Transit Gateway
Which AWS Support plan provides access to architectural and operational reviews, as well as 24/7 access to Senior Cloud Support Engineers through email, online chat, and phone?
Basic
Business
Developer
Enterprise
Which AWS service or feature helps restrict the AWS services, resources, and individual API actions the users and roles in each member account can access?
Amazon Cognito
AWS Organizations
AWS Shield
AWS Firewall Manager
What is the best resource for a user to find compliance-related information and reports about AWS?
AWS Artifact
AWS Marketplace
Amazon Inspector
AWS Support
Which Amazon S3 storage class is optimized to provide access to data with lower resiliency requirements, but rapid access when needed such as duplicate backups?
Amazon S3 Standard
Amazon S3 Glacier Deep Archive
Amazon S3 One Zone-Infrequent Access
Amazon S3 Glacier
What is an Availability Zone in AWS?
One or more physical data centers
A completely isolated geographic location
One or more edge locations based around the world
A data center location with a single source of power and networking
Which AWS services can be used as infrastructure automation tools? (Choose two.)
AWS CloudFormation
Amazon CloudFront
AWS Batch
AWS OpsWorks
Amazon QuickSight
Which AWS service enables users to create copies of resources across AWS Regions?
Amazon ElastiCache
AWS CloudFormation
AWS CloudTrail
AWS Systems Manager
A user would like to encrypt data that is received, stored, and managed by AWS CloudTrail. Which AWS service will provide this capability?
AWS Secrets Manager
AWS Systems Manager
AWS Key Management Service (AWS KMS)
AWS Certificate Manager
Which AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage?
Easy and fast deployment of applications in multiple Regions around the world
Security of the AWS Cloud
Elasticity of the AWS Cloud
Lower variable costs due to massive economies of scale
What credential components are required to gain programmatic access to an AWS account? (Choose two.)
An access key ID
A primary key
A secret access key
A user ID
A secondary key
Which of the following are AWS compute services? (Choose two.)
Amazon Lightsail
AWS Systems Manager
AWS CloudFormation
AWS Batch
Amazon Inspector
How can a company separate costs for network traffic, Amazon EC2, Amazon S3, and other AWS services by department?
Add department-specific tags to each resource
Create a separate VPC for each department
Create a separate AWS account for each department
Use AWS Organizations
What is a benefit of consolidated billing for AWS accounts?
Access to AWS Personal Health Dashboard
Combined usage volume discounts
Improved account security
Centralized AWS IAM
Which AWS service will allow a user to set custom cost and usage limits, and will alert when the thresholds are exceeded?
AWS Organizations
AWS Budgets
Cost Explorer
AWS Trusted Advisor
Which AWS service provides the ability to detect inadvertent data leaks of personally identifiable information (PII) and user credential data?
Amazon GuardDuty
Amazon Inspector
Amazon Macie
AWS Shield
Which tool can be used to monitor AWS service limits?
AWS Total Cost of Ownership (TCO) Calculator
AWS Trusted Advisor
AWS Personal Health Dashboard
AWS Cost and Usage report
A company has distributed its workload on both the AWS Cloud and some on-premises servers. What type of architecture is this?
Virtual private network
Virtual private cloud
Hybrid cloud
Private cloud
Which of the following describes a security best practice that can be implemented using AWS IAM?
Disable AWS Management Console access for all users
Generate secret keys for every IAM user
Grant permissions to users who are required to perform a given task only
Store AWS credentials within Amazon EC2 instances
What can be used to automate and manage secure, well-architected, multi-account AWS environments?
AWS shared responsibility model
AWS Control Tower
AWS Security Hub
AWS Well-Architected Too
Which AWS service or feature allows a user to easily scale connectivity among thousands of VPCs?
VPC peering
AWS Transit Gateway
AWS Direct Connect
AWS Global Accelerator
A company needs protection from expanded distributed denial of service (DDoS) attacks on its website and assistance from AWS experts during such events. Which AWS managed service will meet these requirements?
AWS Shield Advanced
AWS Firewall Manager
AWS WAF
Amazon GuardDuty
A companyגTM€s application has flexible start and end times. Which Amazon EC2 pricing model will be the MOST cost-effective?
On-Demand Instances
Spot Instances
Reserved Instances
Dedicated Hosts
Under the AWS shared responsibility model, what are the customerגTM€s responsibilities? (Choose two.)
Physical and environmental security
Physical network devices including firewalls
Storage device decommissioning
Security of data in transit
Data integrity authentication
A cloud practitioner has a data analysis workload that is infrequently executed and can be interrupted without harm. To optimize for cost, which Amazon EC2 purchasing option should be used?
On-Demand Instances
Reserved Instances
Spot Instances
Dedicated Hosts
Which AWS container service will help a user install, operate, and scale the cluster management infrastructure?
Amazon Elastic Container Registry (Amazon ECR)
AWS Elastic Beanstalk
Amazon Elastic Container Service (Amazon ECS)
Amazon Elastic Block Store (Amazon EBS)
Which of the following allows an application running on an Amazon EC2 instance to securely write data to an Amazon S3 bucket without using long term credentials?
Amazon Cognito
AWS Shield
AWS IAM role
AWS IAM user access key
A company with a Developer-level AWS Support plan provisioned an Amazon RDS database and cannot connect to it. Who should the developer contact for this level of support?
AWS Support using a support case
AWS Professional Services
AWS technical account manager
AWS consulting partners
What is the purpose of having an internet gateway within a VPC?
To create a VPN connection to the VPC
To allow communication between the VPC and the Internet
To impose bandwidth constraints on internet traffic
To load balance traffic from the Internet across Amazon EC2 instances
A company must ensure that its endpoint for a database instance remains the same after a single Availability Zone service interruption. The application needs to resume database operations without the need for manual administrative intervention. How can these requirements be met?
Use multiple Amazon Route 53 routes to the standby database instance endpoint hosted on AWS Storage Gateway.
Configure Amazon RDS Multi-Availability Zone deployments with automatic failover to the standby.
Add multiple Application Load Balancers and deploy the database instance with AWS Elastic Beanstalk.
Deploy a single Network Load Balancer to distribute incoming traffic across multiple Amazon CloudFront origins.
Which AWS managed service can be used to distribute traffic between one or more Amazon EC2 instances?
NAT gateway
Elastic Load Balancing
Amazon Athena
AWS PrivateLink
AWS Trusted Advisor provides recommendations on which of the following? (Choose two.)
Cost optimization
Auditing
Serverless architecture
Performance
Scalability
Which of the following tasks can only be performed after signing in with AWS account root user credentials? (Choose two.)
Closing an AWS account
Creating a new IAM policy
Changing AWS Support plans
Attaching a role to an Amazon EC2 instance
Generating access keys for IAM users
Fault tolerance refers to:
the ability of an application to accommodate growth without changing design
how well and how quickly an applicationגTM€s environment can have lost data restored
how secure your application is
the built-in redundancy of an applicationגTM€s components
A company operating in the AWS Cloud requires separate invoices for specific environments, such as development, testing, and production. How can this be achieved?
Use multiple AWS accounts
Use resource tagging
Use multiple VPCs
Use Cost Explorer
Which AWS service can be used in the application deployment process?
AWS AppSync
AWS Batch
AWS CodePipeline
AWS DataSync
What can be used to reduce the cost of running Amazon EC2 instances? (Choose two.)
Spot Instances for stateless and flexible workloads
Memory optimized instances for high-compute workloads
On-Demand Instances for high-cost and sustained workloads
Reserved Instances for sustained workloads
Spend limits set using AWS Budgets
A company is launching an e-commerce site that will store and process credit card data. The company requires information about AWS compliance reports and AWS agreements. Which AWS service provides on-demand access to these items?
AWS Certificate Manager
AWS Config
AWS Artifact
AWS CloudTrail
Which AWS service or feature allows the user to manager cross-region application traffic?
Amazon AppStream 2.0
Amazon VPC
Elastic Load Balancer
Amazon Route 53
Which AWS service can be used to track unauthorized API calls?
AWS Config
AWS CloudTrail
AWS Trusted Advisor
Amazon Inspector
A user needs to regularly audit and evaluate the setup of all AWS resources, identify non-compliant accounts, and be notified when a resource changes. Which AWS service can be used to meet these requirements?
AWS Trusted Advisor
AWS Config
AWS Resource Access Manager
AWS Systems Manager
A user is planning to launch two additional Amazon EC2 instances to increase availability. Which action should the user take?
Launch the instances across multiple Availability Zones in a single AWS Region.
Launch the instances as EC2 Reserved Instances in the same AWS Region and the same Availability Zone.
Launch the instances in multiple AWS Regions, but in the same Availability Zone.
Launch the instances as EC2 Spot Instances in the same AWS Region, but in different Availability Zones.
A company must store critical business data in Amazon S3 with a backup to another AWS Region. How can this be achieved?
Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally
Set up Amazon S3 cross-region replication to another AWS Region
Configure the AWS Backup service to back up to the data to another AWS Region
Take Amazon S3 bucket snapshots and copy that data to another AWS Region
Which AWS Cloud service can send alerts to customers if custom spending thresholds are exceeded?
AWS Budgets
AWS Cost Explorer
AWS Cost Allocation Tags
AWS Organizations
What is the recommended method to request penetration testing on AWS resources?
Open a support case
Fill out the Penetration Testing Request Form
Request a penetration test from your technical account manager
Contact your AWS sales representative
A user needs to automatically discover, classify, and protect sensitive data stored in Amazon S3. Which AWS service can meet these requirements?
Amazon Inspector
Amazon Macie
Amazon GuardDuty
AWS Secrets Manager
Which components are required to build a successful site-to-site VPN connection on AWS? (Choose two.)
Internet gateway
NAT gateway
Customer gateway
Transit gateway
Virtual private gateway
Which Amazon EC2 pricing option is best suited for applications with short-term, spiky, or unpredictable workloads that cannot be interrupted?
Spot Instances
Dedicated Hosts
On-Demand Instances
Reserved Instances
Which AWS cloud architecture principle states that systems should reduce interdependencies?
Scalability
Services, not servers
Removing single points of failure
Loose coupling
What is the MOST effective resource for staying up to date on AWS security announcements?
AWS Personal Health Dashboard
AWS Secrets Manager
AWS Security Bulletins
Amazon Inspector
Which AWS service offers persistent storage for a file system?
Amazon S3
Amazon EC2 instance store
Amazon Elastic Block Store (Amazon EBS)
Amazon ElastiCache
