WorksheetsI part Cloud(Final)
Total questions: 20
Worksheet time: 11mins
Which statement is an advantage of the platform as a service (PaaS) cloud service model?
A: PaaS is the most similar to traditional on-premises models for IT resources
B: PaaS provides the greatest level of control over IT resources
C: PaaS avoids the need to manage operating systems
D: PaaS reduces the need to handle application deployments
How does cloud computing improve a company's ability to provision resources to meet capacity demands compared to on-premises computing:
A: Cloud resources can be cost forecasted
B: Cloud resources can be locked down to the resource level
C: Cloud resources can experience peaks and valleys in usage
D: Cloud resources can scale up or down based on demand
Which statements about how a company would use AWS Organizations are accurate? (Select TWO)
A: A company can use AWS Organizations consolidated identity and access management (IAM) feature to replace the existing IAM system for an individual account
B: A company can benefit from volume discounts with consolidated billing
C: A company can only manage AWS Organizations through the AWS Management Console
D: A company can consolidate and centrally manage multiple AWS accounts
E: A company can use AWS Organizations to create security groups that control access to resources
Which factors are considered in calculating the total cost of ownership (TCO) for the AWS Cloud? (Select TWO.)
A: The number of users that need to be migrated to the cloud
B: The number to groups that need to be migrated to the cloud
D: The amount of storage that needs to be migrated to the cloud
E: The number of roles that need to be migrated to the cloud
C: The number of servers that need to be migrated
An AWS account administrator wants to grant temporary cross-account access that allows external users to access specific resources within their own account. Which action would align with the best practice of using temporary sessions:
A: Create a new AWS Identity and Access Management (IAM) user account for each user that needs access
B: Create an AWS Identity and Access Management (IAM) group, grant resource permissions to the group, then add IAM users to the group
C: Create an AWS Identity and Access Management (IAM) role that can be assumed by external users and grant it permissions to the specific resources
D: Create an AWS Identity and Access Management (IAM) policy that allows external users to access the specifc resources
Which statement about AWS Regions is true?
A: Using a Region as close as possible to users can reduce latency
B: Data stored in an AWS Region isn't subject to geographical compliance requirements
C: All available Regions are enabled by default in an AWS account
D: All AWS accounts can access all AWS Regions
A company must produce reports of any changes to its Amazon EC2 instance settings. Which AWS service should they use?
A: AWS Config
B: AWS Cloudtrail
C: AWS Artifact
D: Amazon CloudWatch
A network administrator wants to configure a public subnet and route incoming and outgoing traffic to and from an Amazon EC2 instance in the public subnet to the public internet. Which virtual private cloud (VPC) feature should they use?
A: A network access control list (ACL)
B: A network address translation (NAT) gateway
C: An internet gateway
D: VPC sharing
Which configuration represents a valid use of security groups in a virtual private cloud (VPC)?
Хз что тут но точно NOT B and NOT A
A: Limit inbound access to the private subnet of the VPC
B: Set a deny rule that prevents outbound traffic from an Amazon EC2 instance in a VPC
C: Set a deny rule that prevents access to the subnet from the public internet.
D: Limit outbound traffic from an Amazon EC2 instance in the VPC to a specific database server
A Company needs to run a short script each time a new item is added to an Amazon S3 bucket. Which compute option meets the need with the least amount of resource provisioning
A: Set up the script to run in a container, and deploy the container on Amazon Elastic Container Service (Amazon ECS)
B: Create an AWS Lambda function to run the script whenever a new item is added to the bucket
C: Set up a small Amazon EC2 instance that runs code to check for new uploads to the bucket and runs the script
D: Write a batch job to run the script on all new items overnight when there's less competition for resources. Run the batch on Spot Instances
A developer needs temporary block storage for cache data on an Amazon EC2 instance. Which option should they choose?
A: Amazon EC2 Instance store
B: Amazon Elastic File System (Amazon EFS)
C: Amazon Elastic Block Store (Amazon EBS)
D: Amazon S3
Which scenario is a good fit for Amazon EFS storage?
A: A company needs temporary file storage for its application running on Amazon EC2
B: A company wants to build a petabyte-sized data lake for analytics
C: A company needs to give all Amazon EC2 instances in its virtual private cloud read and write access to a network file system
D: A company wants to host a website
A company needs to store long-lived data. They need the data to be available immediately, but access patterns are unpredictable. Which Amazon S3 storage class would be most cost-effective
A: Amazon S3 One Zone-infrequent Access
B: Amazon S3 Intelligent-Tiering
C: Amazon S3 Glacier
D: Amazon S3 Standard
A company needs to store billions of low volume daily events that will be used for analytics. Which storage option best fits this use case?
A: Amazon Elastic Container Service
B: Amazon S3
C: Amazon Elastic Block Store (Amazon EBS)
D: Amazon EC2 Instance store
A company has an ecommerce site that requires storage and retrieval of unstructured customer metadata to support one of its microservices. Which database option is best suited to store this data?
A: Amazon Aurora
B: Amazon DynamoDB
C: Amazon Redshift
D: Amazon RDS
Which scenario is a good fit for Amazon Redshift?
A: A company needs to store a database for managing unstructured data
B: A company needs to store large volumes of mixed media image and video files
C: A company needs a data warehouse to support analytics applications
D: A company needs a relational database for a line-of-business transactional database
Which statement reflects a design principle of the Security pillar of the AWS Well-Architected Framework
A: Ensure that staff are actively monitoring potential risks manually
B: Decentralize permissions management
C: Apply security at all layers of an architecture
D: Don't deploy a solution to production until you're certain that there are no security risks
What type of alert might be provided by AWS Trusted Advisor?
A: An alert of unauthorized access in an AWS account
B: An alert that multi-factor authentication isn't activated on an AWS account
C: An alert that an AWS IAM user has requested service quota changes
D: An alert of unusual API calls made in an AWS account
A company has an application running on two Amazon EC2 instances. They want to reduce idle EC2 capacity. The application load is difficult to forecast, and they want to keep the CPU utilization close to 40 percent on all instances. Which type of Amazon EC2 Auto Scaling should they configure?
A: Predictive scaling
B: Scheduled scaling
C: Manual scaling
D: Dynamic scaling
How is Elastic Load Balancing (ELB) used with Amazon EC2 Auto Scaling? (Select TWO)
A: ELB triggers an Amazon EC2 Auto Scaling event when a threshold is reached
B: ELB automatically adds new instances to the Amazon EC2 Auto Scaling group when they load reaches a predetermined limit
C: ELB performs health checks on new Amazon EC2 instances that are added to the Amazon EC2 Auto Scaling group
D: ELB establishes the minimum and maximum number of instances in the Amazon EC2 Auto Scaling Group
E: ELB Distributes traffic between Amazon EC2 instances in an Amazon EC2 Auto Scaling group
