Font size
WorksheetsAWS Cloud Practitioner - Simulador #8
Total questions: 65
Worksheet time: 35mins
Which of the following allows AWS users to manage cost allocations for billing?
Tagging resources
Limiting who can create resources
Adding a secondary payment method
Running all operations on a single AWS account
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?
Amazon GuardDuty
AWS Security Hub
AWS Artifact
AWS Shield
Which of the following AWS services are serverless? (Choose two.)
AWS Lambda
Amazon Elasticsearch Service
AWS Elastic Beanstalk
Amazon DynamoDB
Amazon Redshif
Which AWS managed services can be used to extend an on-premises data center to the AWS network? (Choose two.)
AWS VPN
NAT gateway
AWS Direct Connect
Amazon Connect
Amazon Route 53
Which requirement must be met for a member account to be unlinked from an AWS Organizations account?
The linked account must be actively compliant with AWS System and Organization Controls (SOC).
The payer and the linked account must both create AWS Support cases to request that the member account be unlinked from the organization.
The member account must meet the requirements of a standalone account.
The payer account must be used to remove the linked account from the organization.
What AWS benefit refers to a customerגTM€s ability to deploy applications that scale up and down the meet variable demand?
Elasticity
Agility
Security
Scalability
During a compliance review, one of the auditors requires a copy of the AWS SOC 2 report. Which service should be used to submit this request?
AWS Personal Health Dashboard
AWS Trusted Advisor
AWS Artifact
Amazon S3
A company wants to set up a highly available workload in AWS with a disaster recovery plan that will allow the company to recover in case of a regional service interruption. Which configuration will meet these requirements?
Run on two Availability Zones in one AWS Region, using the additional Availability Zones in the AWS Region for the disaster recovery site.
Run on two Availability Zones in one AWS Region, using another AWS Region for the disaster recovery site.
Run on two Availability Zones in one AWS Region, using a local AWS Region for the disaster recovery site.
Run across two AWS Regions, using a third AWS Region for the disaster recovery site.
A company has a 500 TB image repository that needs to be transported to AWS for processing. Which AWS service can import this data MOST cost-effectively?
AWS Snowball
AWS Direct Connect
AWS VPN
Amazon S3
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
Amazon DynamoDB
Amazon Athena
Amazon RDS
Amazon EMR
Which of the following assist in identifying costs by department? (Choose two.)
Using tags on resources
Using multiple AWS accounts
Using an account manager
Using AWS Trusted Advisor
Using Consolidated Billing
A company wants to allow full access to an Amazon S3 bucket for a particular user. Which element in the S3 bucket policy holds the user details that describe who needs access to the S3 bucket?
Principal
Action
Resource
Statement
Which AWS service allows for effective cost management of multiple AWS accounts?
AWS Organizations
AWS Trusted Advisor
AWS Direct Connect
Amazon Connect
A company is piloting a new customer-facing application on Amazon Elastic Compute Cloud (Amazon EC2) for one month. What pricing model is appropriate?
Reserved Instances
Spot Instances
On-Demand Instances
Dedicated Hosts
Which AWS tools automatically forecast future AWS costs?
AWS Support Center
AWS Total Cost of Ownership (TCO) Calculator
AWS Simple Monthly Calculator
Cost Explorer
Under the AWS shared responsibility model, which of the following is a responsibility of AWS?
Enabling server-side encryption for objects stored in S3
Applying AWS IAM security policies
Patching the operating system on an Amazon EC2 instance
Applying updates to the hypervisor
A user is able to set up a master payer account to view consolidated billing reports through:
AWS Budgets.
Amazon Macie.
Amazon QuickSight.
AWS Organizations.
Performing operations as code is a design principle that supports which pillar of the AWS Well-Architected Framework?
Performance efficiency
Operational excellence
Reliability
Security
Which design principle is achieved by following the reliability pillar of the AWS Well-Architected Framework?
Vertical scaling
Manual failure recovery
Testing recovery procedures
Changing infrastructure manually
What is a characteristic of Convertible Reserved Instances (RIs)?
Users can exchange Convertible RIs for other Convertible RIs from a different instance family.
Users can exchange Convertible RIs for other Convertible RIs in different AWS Regions.
Users can sell and buy Convertible RIs on the AWS Marketplace.
Users can shorten the term of their Convertible RIs by merging them with other Convertible RIs.
The user is fully responsible for which action when running workloads on AWS?
Patching the infrastructure components
Implementing controls to route application traffic
Maintaining physical and environmental controls
Maintaining the underlying infrastructure components
An architecture design includes Amazon EC2, an Elastic Load Balancer, and Amazon RDS. What is the BEST way to get a monthly cost estimation for this architecture?
Open an AWS Support case, provide the architecture proposal, and ask for a monthly cost estimation.
Collect the published prices of the AWS services and calculate the monthly estimate.
Use the AWS Simple Monthly Calculator to estimate the monthly cost.
Use the AWS Total Cost of Ownership (TCO) Calculator to estimate the monthly cost.
Which are benefits of using Amazon RDS over Amazon EC2 when running relational databases on AWS? (Choose two.)
Automated backups
Schema management
Indexing of tables
Software patching
Extract, transform, and load (ETL) management
What does the Amazon S3 Intelligent-Tiering storage class offer?
Payment flexibility by reserving storage capacity
Long-term retention of data by copying the data to an encrypted Amazon Elastic Block Store (Amazon EBS) volume
Automatic cost savings by moving objects between tiers based on access pattern changes
Secure, durable, and lowest cost storage for data archival
A company has multiple data sources across the organization and wants to consolidate data into one data warehouse. Which AWS service can be used to meet this requirement?
Amazon DynamoDB
Amazon Redshift
Amazon Athena
Amazon QuickSight
Which AWS service can be used to track resource changes and establish compliance?
Amazon CloudWatch
AWS Config
AWS CloudTrail
AWS Trusted Advisor
A user has underutilized on-premises resources. Which AWS Cloud concept can BEST address this issue?
High availability
Elasticity
Security
Loose coupling
A user has a stateful workload that will run on Amazon EC2 for the next 3 years. What is the MOST cost-effective pricing model for this workload?
On-Demand Instances
Reserved Instances
Dedicated Instances
Spot Instances
A cloud practitioner needs an Amazon EC2 instance to launch and run for 7 hours without interruptions. What is the most suitable and cost-effective option for this task?
On-Demand Instance
Reserved Instance
Dedicated Host
Spot Instance
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
Providing high-performance container orchestration
Creating and rotating encryption keys
Detecting underutilized resources to save costs
Improving security by proactively monitoring the AWS environment
Implementing enforced tagging across AWS resources
A developer has been hired by a large company and needs AWS credentials. Which are security best practices that should be followed? (Choose two.)
Grant the developer access to only the AWS resources needed to perform the job.
Share the AWS account root user credentials with the developer.
Add the developer to the administrator's group in AWS IAM.
Configure a password policy that ensures the developer's password cannot be changed.
Ensure the account password policy requires a minimum length.
Which AWS storage service is designed to transfer petabytes of data in and out of the cloud?
AWS Storage Gateway
Amazon S3 Glacier Deep Archive
Amazon Lightsail
AWS Snowball
Which service provides a user the ability to warehouse data in the AWS Cloud?
Amazon EFS
Amazon Redshift
Amazon RDS
Amazon VPC
A user is planning to migrate an application workload to the AWS Cloud. Which control becomes the responsibility of AWS once the migration is complete?
Patching the guest operating system
Maintaining physical and environmental controls
Protecting communications and maintaining zone security
Patching specific applications
Which services can be used to deploy applications on AWS? (Choose two.)
AWS Elastic Beanstalk
AWS Config
AWS OpsWorks
AWS Application Discovery Service
Amazon Kinesis
Which AWS service can be used to provide an on-demand, cloud-based contact center?
AWS Direct Connect
Amazon Connect
AWS Support Center
AWS Managed Services
What tool enables customers without an AWS account to estimate costs for almost all AWS services?
Cost Explorer
TCO Calculator
AWS Budgets
Simple Monthly Calculator
Which component must be attached to a VPC to enable inbound Internet access?
NAT gateway
VPC endpoint
VPN connection
Internet gateway
Which pricing model would result in maximum Amazon Elastic Compute Cloud (Amazon EC2) savings for a database server that must be online for one year?
Spot Instance
On-Demand Instance
Partial Upfront Reserved Instance
No Upfront Reserved Instance
A company has a MySQL database running on a single Amazon EC2 instance. The company now requires higher availability in the event of an outage. Which set of tasks would meet this requirement?
Add an Application Load Balancer in front of the EC2 instance
Configure EC2 Auto Recovery to move the instance to another Availability Zone
Migrate to Amazon RDS and enable Multi-AZ
Enable termination protection for the EC2 instance to avoid outages
A company wants to ensure that AWS Management Console users are meeting password complexity requirements. How can the company configure password complexity?
Using an AWS IAM user policy
Using an AWS Organizations service control policy (SCP)
Using an AWS IAM account password policy
Using an AWS Security Hub managed insight
Under the AWS shared responsibility model, which of the following is the customerגTM€s responsibility?
Patching guest OS and applications
Patching and fixing flaws in the infrastructure
Physical and environmental controls
Configuration of AWS infrastructure devices
Which of the following tasks is required to deploy a PCI-compliant workload on AWS?
Use any AWS service and implement PCI controls at the application layer
Use an AWS service that is in-scope for PCI compliance and raise an AWS support ticket to enable PCI compliance at the application layer
Use any AWS service and raise an AWS support ticket to enable PCI compliance on that service
Use an AWS service that is in scope for PCI compliance and apply PCI controls at the application layer
A company is building an application that requires the ability to send, store, and receive messages between application components. The company has another requirement to process messages in first-in, first-out (FIFO) order. Which AWS service should the company use?
AWS Step Functions
Amazon Simple Notification Service (Amazon SNS)
Amazon Kinesis Data Streams
Amazon Simple Queue Service (Amazon SQS)
AnyCompany recently purchased Example Corp. Both companies use AWS resources, and AnyCompany wants a single aggregated bill. Which option allows AnyCompany to receive a single bill?
Example Corp. must submit a request to its AWS solutions architect or AWS technical account manager to link the accounts and consolidate billing.
AnyCompany must create a new support case in the AWS Support Center requesting that both bills be combined.
Send an invitation to join the organization from AnyCompanyגTM€s AWS Organizations master account to Example Corp.
Migrate the Example Corp. VPCs, Amazon EC2 instances, and other resources into the AnyCompany AWS account.
Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceeds a certain threshold?
Cost Explorer
AWS Budgets
AWS Cost and Usage Report
AWS CloudTrai
A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in the AWS Cloud. Which service should be used to deploy the application?
AWS CloudFormation
AWS Elastic Beanstalk
Amazon EC2
AWS OpsWorks
Which AWS Trusted Advisor check is available to all AWS users?
Core checks
All checks
Cost optimization checks
Fault tolerance checks
A web developer is concerned that a DDoS attack could target an application. Which AWS services or features can help protect against such an attack? (Choose two.)
AWS Shield
AWS CloudTrail
Amazon CloudFront
AWS Support Center
AWS Service Health Dashboard
Which AWS service gives users on-demand, self-service access to AWS compliance control reports?
AWS Config
Amazon GuardDuty
AWS Trusted Advisor
AWS Artifact
A company wants to provide one of its employees with access to Amazon RDS. The company also wants to limit the interaction to only the AWS CLI and AWS software development kits (SDKs). Which combination of actions should the company take to meet these requirements while following the principles of least privilege? (Choose two.)
Create an IAM user and provide AWS Management Console access only.
Create an IAM user and provide programmatic access only.
Create an IAM role and provide AWS Management Console access only.
Create an IAM policy with administrator access and attach it to the IAM user.
Create an IAM policy with Amazon RDS access and attach it to the IAM user.
A company has a compliance requirement to record and evaluate configuration changes, as well as perform remediation actions on AWS resources. Which AWS service should the company use?
AWS Config
AWS Secrets Manager
WS CloudTrail
AWS Trusted Advisor
What are the advantages of deploying an application with Amazon EC2 instances in multiple Availability Zones? (Choose two.)
Preventing a single point of failure
Reducing the operational costs of the application
Allowing the application to serve cross-region users with low latency
Increasing the availability of the application
Increasing the load of the application
A workload on AWS will run for the foreseeable future by using a consistent number of Amazon EC2 instances. What pricing model will minimize cost while ensuring that compute resources remain available?
Dedicated Hosts
On-Demand Instances
Spot Instances
Reserved Instances
Which tool can be used to identify scheduled changes to the AWS infrastructure?
AWS Personal Health Dashboard
AWS Trusted Advisor
Billing Dashboard
AWS Config
Which of the following is the customerגTM€s responsibility when using Amazon RDS?
Patching the operating system of underlying hardware
Controlling traffic to and from the database through security groups
Running backups that enable point-in-time recovery of a DB instance
Replacing failed DB instances
What is the customerגTM€s responsibility when using AWS Lambda?
Operating system configuration
Application management
Platform management
Code encryption
A company wants to be notified when its AWS Cloud costs or usage exceed defined thresholds. Which AWS service will support these requirements?
AWS Budgets
Cost Explorer
AWS CloudTrail
Amazon Macie
Which AWS service provides the ability to host a NoSQL database in the AWS Cloud?
Amazon Aurora
Amazon DynamoDB
Amazon RDS
Amazon Redshift
Which AWS service allows customers to purchase unused Amazon EC2 capacity at an often discounted rate?
Reserved Instances
On-Demand Instances
Dedicated Instances
Spot Instances
Which AWS service or feature requires an internet service provider (ISP) and a colocation facility to be implemented?
AWS VPN
Amazon Connect
AWS Direct Connect
Internet gateway
Which AWS services offer compute capabilities? (Choose two.)
Amazon EC2
Amazon S3
Amazon Elastic Block Store (Amazon EBS)
Amazon Cognito
AWS Lambda
Which AWS service can be used to privately store and manage versions of source code?
AWS CodeBuild
AWS CodeCommit
AWS CodePipeline
AWS CodeStar
Which AWS service should a cloud practitioner use to identify security vulnerabilities of an AWS account?
AWS Secrets Manager
Amazon Cognito
Amazon Macie
AWS Trusted Advisor
A company wants to ensure its infrastructure is designed for fault tolerance and business continuity in the event of an environmental disruption. Which AWS infrastructure component should the company replicate across?
Edge locations
Availability Zones
Regions
Amazon Route 53
