WorksheetsAWS Cloud Practitioner Practice Questions (ND2)
Total questions: 65
Worksheet time: 1hrs 5mins
A company has a global user base and needs to deploy AWS services that can decrease network latency for their users. Which services may assist? (Select TWO.)
Amazon CloudFront
Amazon VPC
Application Auto Scaling
AWS Direct Connect
AWS Global Accelerator
Which on-premises costs must be included in a Total Cost of Ownership (TCO) calculation when comparing against the AWS Cloud? (Select TWO.)
Physical compute hardware
Operating system administration
Network infrastructure in the data center
Project management services
Database schema development
Which of the following tasks can a user perform to optimize Amazon EC2 costs? (Select TWO.)
Implement Auto Scaling groups to add and remove instances based on demand.
Create a policy to restrict IAM users from accessing the Amazon EC2 console.
Set a budget to limit spending on Amazon EC2 instances using AWS Budgets.
Purchase Amazon EC2 Reserved Instances.
Create users in a single Region to reduce the spread of EC2 instances globally.
A company plan to move the application development to AWS. Which benefits can they achieve when developing and running applications in the AWS Cloud compared to on-premises? (Select TWO.)
AWS automatically replicates all data globally.
AWS will fully manage the entire application.
AWS makes it easy to implement high availability.
AWS can accommodate large changes in application demand.
AWS takes care of application security patching.
A company recently migrated to AWS and wants to implement a solution to protect the traffic that flows in and out of the production VPC. The company had an inspection server in its on-premises data center. The inspection server performed specific operations such as traffic flow inspection and traffic filtering. The company wants to have the same functionalities in the AWS Cloud.
Which solution will meet these requirements?
Use Amazon GuardDuty for traffic inspection and traffic filtering in the production VPC.
Use Traffic Mirroring to mirror traffic from the production VPC for traffic inspection and filtering.
Use AWS Network Firewall to create the required rules for traffic inspection and traffic filtering for the production VPC.
Use AWS Firewall Manager to create the required rules for traffic inspection and traffic filtering for the production VPC.
A Cloud Practitioner is re-architecting a monolithic application. Which design principles for cloud architecture do AWS recommend? (Select TWO.)
Implement manual scalability.
Implement loose coupling.
Use self-managed servers.
Rely on individual components.
Design for scalability.
Which of the following a valid best practices for using the AWS Identity and Access Management (IAM) service? (Select TWO.)
Embed access keys in application code.
Create individual IAM users.
Use inline policies instead of customer managed policies.
Use groups to assign permissions to IAM users.
Grant maximum privileges to IAM users.
Which of the following is an advantage for a company running workloads in the AWS Cloud vs on-premises? (Select TWO.)
Less staff time is required to launch new workloads.
Increased time to market for new application features.
Higher acquisition costs to support elastic workloads.
Lower overall utilization of server and storage systems.
Increased productivity for application development teams.
A Cloud Practitioner wants to configure the AWS CLI for programmatic access to AWS services. Which credential components are required? (Select TWO.)
An access key ID
A public key
A secret access key
An IAM Role
A private key
What can a Cloud Practitioner do with the AWS Cost Management tools? (Select TWO.)
Visualize AWS costs by day, service, and linked AWS account.
Terminate EC2 instances automatically if budget thresholds are exceeded.
Automatically modify EC2 instances to use Spot pricing to reduce costs.
Create budgets and receive notifications if current or forecasted usage exceeds the budgets.
Archive data to Amazon Glacier if it is not acc
Which of the following should be used to improve the security of access to the AWS Management Console? (Select TWO.)
AWS Secrets Manager
AWS Multi-Factor Authentication (AWS MFA)
Security group rules
Strong password policies
An application has highly dynamic usage patterns. Which characteristics of the AWS Cloud make it cost-effective for this type of workload? (Select TWO.)
High availability
Strict security
Elasticity
Pay-as-you-go pricing
Reliability
Which benefits can a company immediately realize using the AWS Cloud? (Select TWO.)
Variable expenses are replaced with capital expenses
Capital expenses are replaced with variable expenses
User control of physical infrastructure
Increased agility
No responsibility for security
Which services are involved with security? (Select TWO.)
AWS CloudHSM
AWS DMS
AWS KMS
AWS SMS
Amazon ELB
What are the names of two types of AWS Storage Gateway? (Select TWO.)
S3 Gateway
File Gateway
Block Gateway
Tape Gateway
Cached Gateway
Which AWS support plans provide support via email, chat and phone? (Select TWO.)
Basic
Developer
Business
Enterprise
Global
Which of the following are AWS recommended best practices in relation to IAM? (Select TWO.)
Assign permissions to users
Create individual IAM users
Embed access keys in application code
Enable MFA for all users
Grant greatest privilege
Which of the following security operations tasks must be performed by AWS customers? (Select TWO.)
Collecting syslog messages from physical firewalls
Issuing data center access keycards
Installing security updates on EC2 instances
Enabling multi-factor authentication (MFA) for privileged users
Installing security updates for server firmware
Which of the statements below is correct in relation to Consolidated Billing? (Select TWO.)
You receive one bill per AWS account
You receive a single bill for multiple accounts
You pay a fee per linked account
You can combine usage and share volume pricing discounts
You are charged a fee per user
Amazon S3 is typically used for which of the following use cases? (Select TWO.)
Host a static website
Install an operating system
Media hosting
In-memory data cache
Message queue
A Service Control Policy (SCP) is used to manage the maximum available permissions and is associated with which of the following? Service control policies (SCPs) manage permissions for which of the following?
AWS Global Infrastructure
AWS Regions
AWS Organizations
Availability Zones
Which AWS service is used to send both text and email messages from distributed applications?
Amazon Simple Email Service (Amazon SES)
Amazon Simple Workflow Service (Amazon SWF)
Amazon Simple Queue Service (Amazon SQS)
Amazon Simple Notification Service(SNS)
Which AWS service can be used to run Docker containers?
AWS Lambda
Amazon ECR
Amazon ECS
Amazon AMI
Which technology can automatically adjust compute capacity as demand for an application increases or decreases?
Load balancing
Auto Scaling
Fault tolerance
High availability
How can an organization assess applications for vulnerabilities and deviations from best practice?
Use AWS Artifact
Use AWS Inspector
Use AWS Shield
Use AWS WAF
Which cloud architecture design principle is supported by deploying workloads across multiple Availability Zones?
Automate infrastructure.
Design for agility.
Enable elasticity.
Design for failure.
Which AWS service should a Cloud Practitioner use to establish a secure network connection between an on-premises network and AWS?
AWS Mobile Hub
AWS Web Application Firewall (WAF)
Amazon Virtual Private Cloud (VPC)
Virtual Private Network
Which service can a Cloud Practitioner use to configure custom cost and usage limits and enable alerts for when defined thresholds are exceeded?
Consolidated billing
AWS Trusted Advisor
Cost Explorer
AWS Budgets
According to the AWS shared responsibility model, which task is the customer's responsibility?
Maintaining the infrastructure needed to run Amazon DynamoDB
Updating the operating system of AWS Lambda instances
Maintaining Amazon API Gateway infrastructure
Updating the guest operating system on Amazon EC2 instances
Which AWS service or feature allows a company to receive a single monthly AWS bill when using multiple AWS accounts?
Consolidated billing
Amazon Cloud Directory
AWS Cost Explorer
AWS Cost and Usage report
AWS are able to continue to reduce their pricing due to:
Pay-as-you go pricing
The AWS global infrastructure
Economies of scale
Reserved instance pricing
According to the shared responsibility model, which security-related task is the responsibility of the customer?
Maintaining server-side encryption.
Securing servers and racks at AWS data centers.
Maintaining firewall configurations at a hardware level.
Maintaining physical networking configuration.
A company requires a dashboard for reporting when using a business intelligence solution. Which AWS service can a Cloud Practitioner use?
Amazon Redshift
Amazon Kinesis
Amazon Athena
Amazon QuickSight
Which AWS dashboard displays relevant and timely information to help users manage events in progress, and provides proactive notifications to help plan for scheduled activities?
AWS Service Health Dashboard
AWS Personal Health Dashboard
AWS Trusted Advisor dashboard
Amazon CloudWatch dashboard
Which AWS-managed service can be used to process vast amounts of data using a hosted Hadoop framework?
Amazon DynamoDB
Amazon Athena
Amazon EMR
Amazon Redshift
Which AWS service helps customers meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
AWS Secrets Manager
AWS CloudHSM
AWS Key Management Service (AWS KMS)
AWS Directory Service
Which of the following best describes an Availability Zone in the AWS Cloud?
One or more physical data centers
A completely isolated geographic location
One or more edge locations based around the world
A subnet for deploying resources into
According to the shared responsibility mode, which security and compliance task is AWS responsible for?
Granting permissions to users and services
Updating Amazon EC2 host firmware
Encrypting data at rest
Updating operating systems
Which benefit of AWS enables companies to replace upfront fixed expenses with variable expenses when using on-demand technology services?
Pay-as-you-go pricing
Economies of scale
Global reach
High availability
Which Amazon EC2 pricing model should be avoided if a workload cannot accept interruption if capacity becomes temporarily unavailable?
Spot Instances
On-Demand Instances
Standard ReservedInstances
Convertible Reserved Instances
What should a Cloud Practitioner ensure when designing a highly available architecture on AWS?
Servers have low-latency and high throughput network connectivity.
The failure of a single component should not affect the application.
There are enough servers to run at peak load available at all times.
A single monolithic application component handles all operations.
Which of the following can be used to identify a specific user who terminated an Amazon RDS DB instance?
AWS CloudTrail
Amazon Inspector
Amazon CloudWatch
AWS Trusted Advisor
Which AWS service is a fully-managed source control service that hosts secure Git-based repositories?
AWS CodeBuild
AWS CodeDeploy
AWS CodeCommit
AWS CodePipeline
How should an organization deploy an application running on multiple EC2 instances to ensure that a power failure does not cause an application outage?
Launch the EC2 instances in separate regions
Launch the EC2 instances into different VPCs
Launch the EC2 instances into different Availability Zones
Launch the EC2 instances into Edge Locations
Which of the following can be used to identify a specific user who terminated an Amazon RDS DB instance?
AWS CloudTrail
Amazon Inspector
Amazon CloudWatch
AWS Trusted Advisor
What can be used to allow an application running on an Amazon EC2 instance to securely store data in an Amazon S3 bucket without using long-term credentials?
AWS Systems Manager
Amazon Connect
AWS IAM role
AWS IAM access key
What can a Cloud Practitioner use the AWS Total Cost of Ownership (TCO) Calculator for?
Generate reports that break down AWS Cloud compute costs by duration, resource, or tags
Estimate savings when comparing the AWS Cloud to an on-premises environment
Estimate a monthly bill for the AWS Cloud resources that will be used
Enable billing alerts to monitor actual AWS costs compared to estimated costs
An application stores images which will be retrieved infrequently, but must be available for retrieval immediately. Which is the most cost-effective storage option that meets these requirements?
Amazon Glacier with expedited retrievals
Amazon S3 Standard-Infrequent Access
Amazon EFS
Amazon S3 Standard
Which AWS service can be used to perform data extract, transform, and load (ETL) operations so you can prepare data for analytics?
Amazon QuickSight
AWS Glue
Amazon Athena
Amazon S3 Select
A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. Which AWS service will provide this assessment report?
EC2 security groups
AWS C
Amazon Macie
Amazon Inspector
Which AWS service protects against common exploits that could compromise application availability, compromise security or consume excessive resources?
AWS WAF
AWS Shield
Security Group
Network ACL
A new user is unable to access any AWS services, what is the most likely explanation?
The user needs to login with a key pair
The services are currently unavailable
By default new users are created without access to any AWS services
The default limit for user logons has been reached
Which AWS service can be used to load data from Amazon S3, transform it, and move it to another destination?
Amazon RedShift
Amazon EMR
Amazon Kinesis
AWS Glue
A cloud practitioner needs to migrate a 70 TB of data from an on-premises data center into the AWS Cloud. The company has a slow and unreliable internet connection. Which AWS service can the cloud practitioner leverage to transfer the data?
Amazon S3 Glacier
AWS Snowball
AWS Storage Gateway
AWS DataSync
An eCommerce company plans to use the AWS Cloud to quickly deliver new functionality in an iterative manner, minimizing the time to market. Which feature of the AWS Cloud provides this functionality?
Elasticity
Agility
Fault tolerance
Cost effectiveness
A company needs a consistent and dedicated connection between AWS resources and an on-premise system. Which service should be used?
AWS Direct Connect
AWS Managed VPN
Amazon Connect
AWS DataSync
What is the function of Amazon EC2 Auto Scaling?
Scales the size of EC2 instances up or down automatically, based on demand.
Automatically updates the EC2 pricing model, based on demand.
Scales the number of EC2 instances in or out automatically, based on demand.
Automatically modifies the network throughput of EC2 instances, based on demand.
Which AWS service can be used to host a static website?
Amazon S3
Amazon EBS
AWS CloudFormation
Amazon EFS
Which AWS service should be used to create a billing alarm?
Which Amazon EC2 pricing model should be used to comply with per-core software license requirements?
The ability to horizontally scale Amazon EC2 instances based on demand is an example of which concept?
Scalibility
Elasticity
Agility
You would like to collect custom metrics from a production application every 1 minute. What type of monitoring should you
use?
CloudTrail with detailed monitoring
CloudWatch with basic monitoring
CloudTrail with basic monitoring
CloudWatch with detailed monitoring
Which Amazon EC2 pricing option provides significant discounts for fixed term contracts?
Which tool can be used to provide real time guidance on provisioning resources following AWS best practices?
AWS Personal Health Dashboard
AWS Inspector
AWS Simple Monthly Calculator
Which AWS service uses a highly secure hardware storage device to store encryption keys?
AWS CloudHSM
