Font size
WorksheetsAWS Cloud Practitioner - Practice Test I
Total questions: 65
Worksheet time: 34mins
Which AWS services can be used to store file? Choose 2 answers from the options given below.
Amazon CloudWatch
Amazon Simple Storage Service (Amazon S3)
Amazon Elastic Block Store (Amazon EBS)
Amazon Config
Amazon Athena
When an administrator is looking to deploy shared file access Linux-based workloads which will require up to petabytes of data stores, what is the best-suited file storage option to use?
Amazon EFS
Amazon S3
AWS Snowball
Amazon EBS
Which Amazon Route 53 routing policy can be implemented to route traffic to multiple resources basec upon user location?
Geolocation routing policy
Geoproximity routing policy
Simple routing policy
Latency routing policy
Which AWS service provides infrastructure security optimization recommendations?
AWS Application Programming Interface(API)
Reserved Instances
AWS Trusted Advisor
Amazon Elastic Compute Cloud (Amazon EC2) SpotFleet
Which Amazon Route 53 routing policy will be best suited to divert traffic in proportions to multiple resources?
Latency routing policy
Weighted routing policy
Failover routing policy
Multivalue answer routing policy
A company needs to know which user was responsible for terminating several critical Amazon Elastic Compute Cloud (EC2) Instances. Where can the customer find this information?
AWS Trusted Advisor
Amazon EC2 instance usage report
Amazon CloudWatch
AWS CloudTrail logs
I Have a client who is moving their on premise workloads to AWS. Since they are very cost conscious, they would like to get first hand information on their expenses they will incur while using AWS services. Which of the following will help them do that?
AWS Cost Explorer
AWS Organizations
AWS Budgets
AWS Pricing Calculator
What is the value of having AWS Cloud services accessible through an Application Programming Interface (API)?
It allows developers to work with AWS resources programmatically
AWS resources will always be cost-optimized
All application testing can be managed by AWS.
Customer-owned, on-premises infrastructure becomes programmable.
Which is the correct statement for Spot Price with respect to Spot Instance?
Spot Price is static & changes every 6 hours
Spot Price is static & changes every 24 hours
Spot Price varies based upon demand
Spot Price is always less than Spot Instance request
A file-sharing service uses Amazon S3 to store files uploaded by users. Files are accessed with random frequency. Popular ones are downloaded every day whilst others not so often and some rarely. What is the most-effective Amazon S3 object storage class to implement?
Amazon S3 Standard
Amazon S3 Glacier
Amazon S3 One Zone-Infrequently
Amazon S3 Intelligent-Tiering
Which AWS service automates infrastructure provisioning and administrative tasks for an analytical data warehouse?
Amazon Redshift
Amazon DynamoDB
Amazon ElastiCache
Amazon Aurora
An administrator would like to automate the creation of new AWS accounts for the organization's research and development department. New workloads need to be spun-up promptly and categorized into groups. How can this be achieved efficiently?
Use of AWS CloudFormation would be sufficient.
Use of AWS Organizations.
Using the AWS API to programmatically create each account via command line interface.
AWS Identity Access Management (IAM)
Which service can be used to download AWS security & compliance documents?
AWS Well-Architected Tool
AWS Audit Manager
AWS Trusted Advisor
AWS Artifact
Development team has purcharsed a new application with limited licences. Administrator wants to be alerted when usage of license is exceeded on Amazon EC2 instance. Which service can be used to meet this requirement?
AWS Control Tower
AWS Config
AWS Service Catalog
AWS License Manager
Which service can be best suited to import third-party SSL/TLS certifiactes that can be used to deploy on Amazon Elastic Load Balancer?
AWS Artifacts
AWS Secrets Manager
AWS Certificate Manager
AWS Systems Manager Parameter Store
Development team is looking to offload SSL processing from existing Web servers. Which service can be used for this purpose?
AWS Certificate Manager
AWS CloudHSM
AWS KMS
AWS Secrets Manager
Developer Team is creating a new mobile app using AWS resources which will be accessed by thousands of users. Which of the following services can be used for creating a directory for managing sign-in for these users?
AWS Secrets Manager
Amazon Cognito Identity Pools
AWS Single Sign-On
AWS IAM
According to the AWS, what is the benefit of Elasticity?
Minimize storage requirements by reducing logging and auditing activities
Create systems that scale to the required capacity based on changes in demand
Enable AWS to automatically select the most cost-effective services.
Accelerate the design process because recovery from failure is automated, reducing the need for testing
For which of the following scenarios are the Amazon Elastic Compute Cloud (Amazon EC2) Spot instances most appropriate?
Workloads that are only run in the morning and stopped at night
Workloads where the availability of the Amazon EC2 instances can be flexible
Workloads that need to run for long periods of time without interruption
Workloads that are critical and need Amazon EC2 instances with termination protection
A financial company with many resources running on AWS would like a machine learning-drive and proactive security solution that would promptly identify security vulnerabilities, particularly flagging suspicious or abnormal data patterns or activity between AWS services. Which AWS service would best meet this requirement?
AWS Detective
AWS Macie
AWS Shield
Amazon CloudWatch Anomaly Detection
Which tool can you use to forecast your AWS spending?
AWS Organizations
Amazon Dev Pay
AWS Trusted Advisor
AWS Cost Explorer
Which of the following is an optional Security layer attached to a subnet within a VPC for controlling traffic in & out of the VPC?
VPC Flow Logs
Web Application Firewall
Security Group
Network ACL
A radio station compiles a list of the most popular songs each year. The songs are frequently fetched within 180 days. After that, the users will have a default retrieval time of 12 hours for downloading the files. The files should be stored for over 10 years. Which is the most cost-effective object storage after 180 days?
Amazon S3 Glacier
Amazon S3 One Zone - Infrequently Accessed
Amazon S3 Glacier Deep Archive
Amazon S3 Standard - Infrequently Accessed
Which of the following is a customer responsibility under AWS Shared Responsibility Model?
Patching of host OS deployed on Amazon S3.
Logical Access controls for underlying infrastructure.
Physical security of the facilities.
Patching of guest OS deployed on Amazon EC2 instance.
Which of the following is a factor when calculating Total Cost of Ownership (TCO) for the AWS Cloud?
The number of servers migrated to AWS
The number of users migrated to AWS
The number of passwords migrated to AWS
The number of keys migrated to AWS
A group of developers for a startup company store their source code and binary files on a shared open-source repository platform which is publicly accessible over the internet. They have embarked on a new project in which their client requires high confidentiality and security on all development assets. Which AWS service can the developers use to store the source code?
AWS CodeCommit
AWS CodeDeploy
AWS Lambda
AWS CodeStar
An organization has a persistently high amount of throughput. It requires connectivity with no jitter and very low latency between its on-premise infrastructure and its AWS cloud build to support live streaming and real-time services. What is the MOST appropriate solution to meet this requirement?
AWS Data Streams
AWS Kinesis
Kinesis Data Firehose
AWS Direct Connet
A Professional Educational Institution maintains a dedicated web server and database cluster that hosts and exam result portal undertaken by its students. The resource is idle for most of the learning cycle and becomes excessively busy when exam result are released. How can this architecture with servers be improved to be cost-efficient?
Configure AWS Elastic load-balancing between the webserver and database cluster.
Configure RDS multi-availability zone for performance optimization.
Configure serverless architecture leveraring AWS lambda functions.
Migrate the web servers onto Amazon EC2 Spot Instances.
A business analyst would like to move away from creating complex database queries and static spreadsheets when generating regular reports for high-level management. They would like to publish insightful, graphically appealing reports with interactive dashboards. Which service can they use to accomplish this?
Amazon QuickSight
Business intelligence on Amazon Redshift
Amazon CloudWatch dashboards
Amazon Athena integrated with Amazon Glue
What is the AWS feature that enables fast, easy and secure transfers of files over long distances between your client and your Amazon S3 bucket?
File Transfer
HTTP Transfer
Amazon S3 Transfer Acceleration
Amazon S3 Transfer Acceleration
Which of the following AWS services is not the permitted services for penetration testing?
Amazon EC2 instances
AWS Fargate
Amazon Route 53
AWS Lambda
In which five categories does Trusted Advisor service provide insight for an AWS account?
Security, fault tolerance, high availability, connectivity and Service Limits
Security, access control, high availability, performance and Service Limits
Performance, cost optimization, security, fault tolerance and Service Limits
Performance, cost optimization, access control, connectivity and Service Limits
Which of the following AWS services is suitable to be used as a fully managed data warehouse?
Amazon Athena
Amazon RedShift
Amazon CloudWatch
Amazon Warehouse
What best describes the "Principle of Least Privilege"? Choose the correct answer from the options given below.
All users should have the same baseline permissions granted to them to use basic AWS services.
Users should be granted permission to access only resources they need to do their assined job.
Users should submit all access requests in written form so that there is a paper trail of who needs access to diffetent AWS resources.
Users should always have little more permission that they need.
Which support plan can be chosen to get AWS Technical Account manager proactively monitor a business-critital application on AWS?
Enterprise Plan
Business Plan
Developer Plan
Enterprise On-Ramp Plan
As per AWS global infrastructure, which of the following components within an AWS Region provides a low latency redundant connectivity?
Data Centers
Edge Location
Availability Zones
Regional Cache
Which of the following routing policies can be used to provide the best performance to global users accessing a static website deployed on Amazon S3 buckets at multiple regions?
Use Route 53 weighted routing policy.
Use Route 53 latency routing policy.
Use Route 53 Geoproximity routing policy.
Use Route 53 Geolocation routing policy.
Which of the following services can be used to optimize performance for global users to transfer large-sized data objects to a centralized Amazon S3 bucket in us-west-1 region?
Enable S3 Transfer Acceleration on Amazon S3 Bucket.
Use Amazon CloudFront Put/Post commands
Use Multipart upload
Use Amazon ElastiCache
Which of the following is NOT an area of shared controls (Shared between AWS & Customer in different contexts) within the AWS Shared responsibility Model? (Select TWO.)
Configuration Management
Service & communication protection
Patch Management
IAM User Management
Training & Awareness
Which of the following services can be used to automate software deployments on a large number of Amazon EC2 instance and on-premise servers?
AWS CodePipeline
AWS CloudFormation
AWS CodeDeploy
AWS Config
Which of the following statements best describe the AWS Personal Health Dashboard?
A concise representation of the general status of AWS services
A service that prompts the user with alerts and notifications on AWS scheduled activities, pending issues, and planned changes.
A minute-by-minute update of system outages and service errors on the AWS global infrastructure.
A rolling log of all service interruptions across the AWS network and records of incidents persistent for a year.
A startup company that works on social media apps development would like to grant freelance developers temporary access to its Lambda functions setup on AWS. These developers would be signing-in via Facebook authentication. Which service is the most appropriate to grant secure access?
Create user credentials using Identity Access Management (IAM).
Use Amazon Cognito for web-identity federation.
Create temporary access roles using IAM.
Use a thrid-party Web ID, federated access provider.
There is a requirement to store objects. The objects must be downloadable via a URL. Which storage option would you choose?
Amazon S3
Amazon Glacier
Amazon Stotage Gateway
Amazon EBS
There is a requirement to host a database server for a minimum period of one year. Which of the following would result in the least cost?
Spot Instances
On-Demand
No Upfront costs Reserved
Partial Upfront costs Reserved
During an organiozation's information systems audit, the administrator is requested to provide a dossier of security and compliance reports and online service agreements between the organization and AWS. Which service can they utilize to acquire this information?
AWS Artifact
AWS Resource Center
AWS Service Catalog
AWS Directory Service
A new department has recentlly joined the organization and the administrator needs to compose access permissions for the group of users. Given that they have various roles and access needs, what is the best-practice approach when granting access?
After gathering information on their access needs, the administrator should allow every user to access the most common resources and privileges on the system.
The administrator should grant all users the same permissions and then grant more upon request.
The administrator should grant all users the least privilege and add more privileges to only to those who need it.
Users should have no access and be granted temporary access on the occacions that they need to execute a task.
Which of the following are advantages of having infrastructure hosted on the AWS Cloud? (Select TWO)
Having complete control over the physical infrastruture
Having the pay as you go model
No Upfront costs
No need to worry about security
There is an external audit being carried out on your company. The IT auditor needs to have a log of who made the requests to the AWS resources in the company's account. Which of the below services can assist in providing these details?
AWS CloudWatch
AWS CloudTrail
AWS EC2
AWS SNS
A web administrator maintains several public and private web-based resources for an organisation. Which service can they use to keep track of the expery dates of SSL/TLS certificates as well as updating and renewal?
AWS Data Lifecycle Manager
AWS License Manager
AWS Firewall Manager
AWS Certificate Manager
Which of the following statements regarding billing, cost optimization and cost management in AWS is accurate?
When considering migrating to the cloud, the AWS Total Cost of Ownership (TCO) calculator is guaranteed to save up to 80% of the cost of running on-premise infrastruture.
In AWS Budgets, utilizing Cost and Usage budgets will optimize and reduce the overwall spend by 79%.
The AWS Pricing Calculator will workout a revised bill that can reduce the overwall spend by 60% if you commit to long-term usage plan.
When using Saving Plans, 72% savings can be made on Amazon EC2, AWS Fargate, and AWS Lambda usage.
Which of the following features can be used to preview changes to be made to an AWS resource which will be deployed using the AWS CloudFormation template?
AWS CloudFormation Drift Detection
AWS CloudFormation Change Sets
AWS CloudFormation Stack Sets
AWS CloudFormation Intrinsic Functions
Which option best suits the implementation of an Amazon RDS database instance instead of a NoSQL/non-relational database?
Where datasets are constantly evolving and cannot be confined to a static data schema.
Where vertical scaling of the database's resources is not permissible and is seldom necessary.
In an organisation whose dataset's are dynamic and document-based.
In an organisation where only a finite number of processes query the database in predictable and well-structured Schemas.
While making changes to AWS resources e.g. adding a new Security Group Ingress rule, I need to capture & record all these changes that will be helpful during an audit. Which of the following AWS service helps me do that?
AWS Trusted Advisor
AWS CloudWatch
AWS Config
AWS CloudFormation
AWS Organizations help manage multiple accounts effectively in a large enterprise. Which of the following statements related to AWS Organizations are correct? (Select TWO.)
An Organizational Unit (OU) can have only one parent.
An account can be a member of multiple Organizational Units (OU).
An SCP policy only impacts a particular AWS account even if it is applied at the root account.
Organizational level policies are known as Service Control Policies.
Service Control Policies (SCPs) can only allow actions instead of deny actions.
Which of the following statements are incorrect regarding NoSQL databases?
They are not realtional.
They need to have a well defined schema.
NoSQL databases are horizontally scalable.
A patient's record in a hospital system with changing data for every visit a good candidate to be modeled using a NoSQL database.
What is a valid difference between AWS Global Accelerator and Amazon CloudFront? Choose TWO responses.
AWS Global Accelerator uses the Anycast techniques to accelerate latency-sensitive applications Amazon CloudFront uses Unicast.
Amazon CloudFront makes use of Edge Locations and edge infrastructure, whilst AWS Global Accelerator does not.
AWS Global Accelerator does not include the content caching capability that Amazon CloudFront does.
AWS Global Accelerator is suitable for applications that are non-HTTP/S such as voIP, MTTQ and gaming where as Amazon CloudFront enhances the performance of HTTP-based content such as dymamic web applications, images and videos.
For the resource endpoint, Amazon CloudFront offers static public IP addresses whilst AWS Global Accelerator does not.
Which of the following is the responsibility of the customer to ensure the availability and backup of the EBS volumes?
Delete the data and create a new EBS volume.
Create EBS snapshots.
Attach new volumes to EC2 Instances.
Create copies of EBS Volumes.
Which AWS service gives the user the ability to group AWS resources across different AWS Regions by application and then collectively view their operational data for monitoring purposes?
Systems Manager
Management Console
Resource Groups
Resource Access Manager (AWS RAM)
Which of the following is a situation that would require using both Spot and Reserved EC2 Instances?
A build that has sudden unpredictable workload spikes but for a short time horizon.
One in which there is a predictable resource demand over a long time horizon.
One that has unpredictable spikes for a long time.
One that has a constantly predictable workload with brief unpredictable spikes.
When designing a highly available architecture, what is the difference between vertical scaling (scaling-up) and horizontal scaling (scaling-out)?
Scaling up provides for hign availability whilst scaling out brings fault-tolerance.
Scaling up provides for high availability whilst scaling out brings fault-tolerance.
Scaling up adds more resources to an instance, scaling out adds more instances.
Autoscaling groups require scaling up whilst launch configurations use scaling out.
A weather tracking system is designed to track weather conditions of any particular flight route. Flight travellers all over the world make use of this information prior to booking their flights. Travellers expect quick turnaround time in which the weather display & flight booking will happen which is critical to their business. You have designed this website and are using AWS Route 53 DNS. The routing policy that you will apply to this website is
GeoLocation routing policy
Failover routing policy
Multivalue answer routing policy
Latency based routing policy
Which of the following services can be used as an application firewall in AWS?
AWS Snowball
AWS WAF
AWS Firewall
AWS Protection
What can be termed as a user-defined label that has a key-value pair of variable character length? It is assigned to AWS resources as metadata for administration and management purposes.
Resource Tag
Resource Tag
Resource Flag
Tag key
A financial Organization has an on-premises Data Center that holds large volumes of customer's financial transaction data on its legacy mainframe systems. While accessing transaction data, they have implemented a caching solution in the AWS cloud that will hold the customer's financial data due to performance issues. The transaction data is extremely confidential & is heavy in bandwidth while transferring to the cloud. What connectivity would you recommend for this data transfer? Select the best answer.
Direct Connect with a VPN connection
Virtual Private Network (VPN)
AWS Storage Gateway
AWS Snowball
Which of the following services can be used by the Security team to investigate & analyze root cause of potential security threats on AWS resources?
Amazon Detective
AWS Shield
Amazon GuardDuty
AWS Security Hub
