Font size
WorksheetsAWS Cloud Quiz Part 1
Total questions: 1
Worksheet time: 25hrs 45mins
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. Which activities related to a Snowball Edge device are available to the company at no cost?
Use of the Snowball Edge appliance for a 10-day period
The transfer of data out of Amazon S3 and to the Snowball Edge appliance
The transfer of data from the Snowball Edge appliance into Amazon S3
Daily use of the Snowball Edge appliance after 10 days
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. Which AWS service can the company use to meet these requirements?
AWS Trusted Advisor
Amazon Inspector
AWS Config
Amazon GuardDuty
What is the MOST operationally efficient AWS solution for extending file storage capabilities while retaining the benefit of sharing content locally for a company with centralized large file storage requirements?
Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.
Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.
According to security best practices, how should an Amazon EC2 instance be given access to an Amazon S3 bucket?
Hard code an IAM user’s secret key and access key directly in the application, and upload the file.
Store the IAM user’s secret key and access key in a text file on the EC2 instance, read the keys, then upload the file.
Have the EC2 instance assume a role to obtain the privileges to upload the file.
Modify the S3 bucket policy so that any service can upload to it at any time.
Which option is a customer responsibility when using Amazon DynamoDB under the AWS Shared Responsibility Model?
Physical security of DynamoDB
Patching of DynamoDB
Access to DynamoDB tables
Encryption of data at rest in DynamoDB
Which option is a perspective that includes foundational capabilities of the AWS Cloud Adoption Framework (AWS CAF)?
Security Perspective
Governance Perspective
Business Perspective
Technology Perspective
Which AWS service is an alternative to help manage Docker environments on Amazon EC2 instances for tasks like cluster size, scheduling, and environment maintenance?
AWS Lambda
Amazon RDS
AWS Fargate
Amazon Athena
What is AWS responsible for in a scenario where a company runs a NoSQL database on Amazon EC2 instances?
Update the guest operating system of the EC2 instances
Maintain high availability at the database layer
Patch the physical infrastructure that hosts the EC2 instances
Configure the security group firewall
Which AWS services or tools can identify rightsizing opportunities for Amazon EC2 instances? (Choose two.)
AWS Cost Explorer
AWS Billing Conductor
Amazon CodeGuru
Amazon SageMaker
AWS Compute Optimizer
Which of the following are benefits of using AWS Trusted Advisor? (Choose two.)
Providing high-performance container orchestration
Creating and rotating encryption keys
Reducing costs by identifying unused resources
Ensuring security by checking for open access to certain ports
Improving performance by optimizing Amazon EBS volume settings
Which of the following are benefits of detecting underutilized resources to save costs and proactively monitoring the AWS environment? (Choose two.)
Improving security by proactively monitoring the AWS environment
Implementing enforced tagging across AWS resources
Detecting underutilized resources to save costs
Distribution of all operational controls to AWS
Elimination of operational expenses
What is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
Elimination of expenses for running and maintaining data centers
Price discounts that are identical to discounts from hardware providers
Distribution of all operational controls to AWS
Elimination of operational expenses
Which AWS service will meet the requirement of managing deployed IT services and governing its infrastructure as code (IaC) templates?
AWS Resource Explorer
AWS Service Catalog
AWS Organizations
AWS Systems Manager
Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?
AWS Organizations
AWS Pricing Calculator
AWS Cost Explorer
AWS Service Catalog
For a company using a central data platform to manage multiple types of data for its customers, which combination of AWS services should be used to discover, transform, and visualize the data? (Choose two.)
AWS Glue
Amazon Elastic File System (Amazon EFS)
Amazon Redshift
Amazon QuickSight
Which AWS service or resource will meet the requirements of a global company that wants to migrate its third-party applications to the AWS Cloud with the help of a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices?
AWS Support
AWS Professional Services
AWS Launch Wizard
AWS Managed Services (AMS)
An e-learning platform needs to run an application for 2 months each year without any downtime. Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
Reserved Instances
Dedicated Hosts
Spot Instances
On-Demand Instances
Which AWS service will meet the requirements of a developer who wants to deploy an application quickly on AWS without manually creating the required resources?
Amazon EC2
AWS Elastic Beanstalk
AWS CodeBuild
Amazon Personalize
Which S3 feature should a company use to protect sensitive customer data in an Amazon S3 bucket from accidental deletion or overwriting?
S3 Lifecycle rules
S3 Versioning
S3 bucket policies
S3 Transfer Acceleration
Which AWS service provides the ability to manage infrastructure as code?
AWS CodePipeline
AWS CodeDeploy
AWS Direct Connect
AWS CloudFormation
An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption. Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
On-Demand Instances
Reserved Instances
Spot Instances
Spot Fleet
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
AWS Direct Connect
VPC peering
AWS VPN
Amazon Route 53
Which option is a physical location of the AWS global infrastructure?
AWS DataSync
AWS Region
Amazon Connect
AWS Organizations
Which pillar of the AWS Well-Architected Framework is supported by the goal of protecting AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks?
Reliability
Security
Operational excellence
Performance efficiency
What is the purpose of having an internet gateway within a VPC?
To create a VPN connection to the VPC
To allow communication between the VPC and the internet
To impose bandwidth constraints on internet traffic
To load balance traffic from the internet across Amazon EC2 instances
Which best practice of the AWS Well-Architected Framework is the company following by planning to migrate a monolithic on-premises application to AWS and divide the application into microservices?
Integrate functional testing as part of AWS deployment.
Use automation to deploy changes.
Deploy the application to multiple locations.
Implement loosely coupled dependencies.
Which AWS service or tool will meet the requirement of auditing password and access key rotation details for compliance purposes?
IAM Access Analyzer
AWS Artifact
IAM credential report
AWS Audit Manager
A company wants to receive a notification when a specific AWS cost threshold is reached. Which AWS services or tools can the company use to meet this requirement? (Choose two.)
Amazon Simple Queue Service (Amazon SQS)
AWS Budgets
Cost Explorer
Amazon CloudWatch
AWS Cost and Usage Report
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
AWS Artifact
Amazon Connect
AWS Chatbot
AWS Knowledge Center
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
Configure the AWS provided security group firewall
Classify company assets in the AWS Cloud
Determine which Availability Zones to use for Amazon S3 buckets
Patch or upgrade Amazon DynamoDB
Select Amazon EC2 instances to run AWS Lambda on
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
Availability
Reliability
Scalability
Responsive design
Operational excellence
Which AWS service or feature is used to send both text and email messages from distributed applications?
Which AWS service allows you to send notifications to end-users using mobile push, SMS, and email?
Amazon Simple Notification Service (Amazon SNS)
Amazon Simple Email Service (Amazon SES)
Amazon CloudWatch alerts
Amazon Simple Queue Service (Amazon SQS)
How can a user programmatically access AWS resources through the AWS CLI or the AWS API?
Amazon Inspector
Access keys
SSH public keys
AWS Key Management Service (AWS KMS) keys
For running stateless, fault tolerant simulations for up to 3 hours on AWS, which pricing model is most suitable?
Reserved Instances
Spot Instances
On-Demand Instances
Dedicated Instances
What are two aspects of agility in AWS Cloud computing? (Choose two.)
The speed at which AWS resources are implemented
The speed at which AWS creates new AWS Regions
The ability to experiment quickly
The elimination of wasted capacity
The low cost of entry into cloud computing
Which AWS service or feature is designed to block SQL injection attacks?
AWS WAF
AWS Shield
Network ACLs
Security groups
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
AWS Service Catalog
AWS Systems Manager
AWS IAM Access Analyzer
AWS Organizations
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud. How can these reports be generated?
Contact the AWS Compliance team
Download the reports from AWS Artifact
Open a case with AWS Support
Generate the reports with Amazon Macie
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud. Which cost is the company’s direct responsibility?
Cost of application software licenses
Cost of the hardware infrastructure on AWS
Cost of power for the AWS servers
Cost of physical security for the AWS data center
A company is setting up AWS Identity and Access Management (IAM) on an AWS account. Which recommendation complies with IAM security best practices?
Use the account root user access keys for administrative tasks
Grant broad permissions so that all company employees can access the resources they need
Turn on multi-factor authentication (MFA) for added security during the login process
Avoid rotating credentials to prevent issues in production applications
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
How quickly an Amazon EC2 instance can be restarted
The ability to rightsize resources as demand shifts
The maximum amount of RAM an Amazon EC2 instance can use
The pay-as-you-go billing model
How easily resources can be procured when they are needed
Which service enables customers to audit API calls in their AWS accounts?
AWS CloudTrail
AWS Trusted Advisor
Amazon Inspector
AWS X-Ray
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
Managing the code within the Lambda function
Confirming that the hardware is working in the data center
Patching the operating system
Shutting down Lambda functions when they are no longer in use
A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis. Which AWS service should the company use to run these queries in the MOST cost-effective manner?
Amazon Redshift
Amazon Athena
Amazon Kinesis
Amazon RDS
Which AWS service can be used at no additional cost?
Amazon SageMaker
AWS Trusted Advisor
Amazon Inspector
AWS CloudTrail
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
Data architecture
Event management
Cloud fluency
Strategic partnership
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost. Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
Spot Instances
On-Demand Instances
Reserved Instances
Savings Plans
Dedicated Hosts
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible. Which AWS service or resource should the company use to select its Amazon RDS deployment area?
Amazon Connect
AWS Wavelength
AWS Regions
AWS Direct Connect
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned. Which AWS service or feature can be used to estimate costs before deployment?
AWS Free Tier
AWS Pricing Calculator
AWS Billing and Cost Management
Which AWS service allows a company to deliver content with low latency using a global network of edge locations?
Amazon CloudFront
Amazon S3 with cross-region replication
AWS VPN across multiple AWS Regions
AWS PrivateLink
What is a benefit of cloud computing economies of scale?
Trading variable expense for fixed expense
Increased speed and agility
Lower variable costs over fixed costs
Higher operational costs across data centers
Which software development framework allows the definition of cloud resources as code and their provisioning through AWS CloudFormation?
AWS CLI
AWS Developer Center
AWS Cloud Development Kit (AWS CDK)
AWS CodeStar
For an application using multiple AWS services, which AWS feature provides temporary, limited-privilege credentials for authentication with AWS APIs?
Amazon API Gateway
IAM users
AWS Security Token Service (AWS STS)
IAM instance profiles
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?
AWS Security Hub
AWS Trusted Advisor
Amazon EventBridge
Amazon GuardDuty
Which AWS service is always provided at no charge?
To reduce costs, a company is planning to migrate a NoSQL database to AWS. Which AWS service is fully managed and can automatically scale throughput capacity to meet database workload demands?
(a)
A company is using Amazon DynamoDB. Which task is the company's responsibility, according to the AWS shared responsibility model?
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously. Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
(a)
Which type of AWS instances allows users to use unused EC2 computer capacity at reduced rates?
On-Demand Instances
Dedicated Instances
Spot Instances
Reserved Instances
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
Amazon Macie
Amazon Detective
Amazon GuardDuty
AWS IAM Access Analyzer
Which of the following services can be used to block network traffic to an instance? (Choose two.)
Security groups
Amazon Virtual Private Cloud (Amazon VPC) flow logs
Network ACLs
Amazon CloudWatch
AWS CloudTrail
Which AWS service can identify when an Amazon EC2 instance was terminated?
AWS Identity and Access Management (IAM)
AWS CloudTrail
AWS Compute Optimizer
Amazon EventBridge
Which of the following is a fully managed MySQL-compatible database?
Amazon S3
Amazon DynamoDB
Amazon Redshift
Amazon Aurora
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?
AWS Snowmobile
AWS Local Zones
AWS Outposts
AWS Fargate
Which AWS service can run a managed PostgreSQL database that provides online transaction processing (OLTP)?
Amazon DynamoDB
Amazon Athena
Amazon RDS
Amazon EMR
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections. Which AWS services can the company use to meet these requirements? (Choose two.)
Amazon AppStream 2.0
Amazon WorkSpaces
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports. Which AWS service will meet this requirement?
AWS Trusted Advisor
Amazon CloudWatch
Amazon GuardDuty
AWS Health Dashboard
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
Amazon DynamoDB
Amazon Aurora
Amazon DocumentDB (with MongoDB compatibility)
Amazon Neptune
A company is deploying a machine learning (ML) research project that will require a lot of compute power over several months. The ML processing jobs do not need to run at specific times. Which Amazon EC2 instance purchasing option will meet these requirements at the lowest cost?
On-Demand Instances
Spot Instances
Reserved Instances
Dedicated Instances
Which AWS service provides command line access to AWS tools and resources directly from a web browser?
AWS CloudHSM
AWS CloudShell
Amazon WorkSpaces
AWS Cloud Map
Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?
VPC endpoints
AWS Transit Gateway
Amazon Route 53
AWS Secrets Manager
A company wants to assess its operational readiness. It also wants to identify and mitigate any operational risks ahead of a new product launch. Which AWS Support plan offers guidance and support for this kind of event at no additional charge?
AWS Business Support
AWS Basic Support
AWS Developer Support
AWS Enterprise Support
A company wants to establish a schedule for rotating database user credentials. Which AWS service will support this requirement with the LEAST amount of operational overhead?
AWS Systems Manager
AWS Secrets Manager
AWS License Manager
AWS Managed Services
Which AWS service or feature can be used to create a private connection between an on-premises workload and an AWS Cloud workload?
Amazon Route 53
Amazon Macie
AWS Direct Connect
AWS PrivateLink
Which AWS service is used to provide encryption for Amazon EBS?
AWS Certificate Manager
AWS Key Management Service (KMS)
AWS Shield
AWS CloudHSM
Which AWS service allows the management of AWS Cloud resources through a web interface?
AWS Management Console
AWS CLI
AWS SDK
AWS Cloud9
Which of the following are advantages of the AWS Cloud? (Choose two.)
Trade variable expenses for capital expenses
High economies of scale
Launch globally in minutes
Focus on managing hardware infrastructure
Overprovision to ensure capacity
Which AWS Cloud benefit is shown by an architecture’s ability to withstand failures with minimal downtime?
Agility
Elasticity
Scalability
High availability
Which AWS service should a developer use to maintain a development environment infrastructure and a production environment infrastructure in a repeatable fashion?
AWS Ground Station
AWS Shield
AWS IoT Device Defender
AWS CloudFormation
Which task is the customer's responsibility, according to the AWS shared responsibility model?
Maintain the security of the AWS Cloud.
Configure firewalls and networks.
Patch the operating system of Amazon RDS instances.
Implement physical and environmental controls.
Which AWS service helps deliver highly available applications with fast failover for multi-Region and Multi-AZ architectures?
AWS WAF
AWS Global Accelerator
AWS Shield
AWS Direct Connect
A company has a set of ecommerce applications. The applications need to be able to send messages to each other. Which AWS service meets this requirement?
AWS Auto Scaling
Elastic Load Balancing
Amazon Simple Queue Service (Amazon SQS)
Amazon Kinesis Data Streams
What are the benefits of consolidated billing for AWS Cloud services? (Choose two.)
Volume discounts
A minimal additional fee for use
One bill for multiple accounts
Installment payment options
Custom cost and usage budget creation
Which AWS service or resource will meet the requirement of reviewing all Amazon S3 buckets with ACLs and S3 bucket policies in the S3 console?
S3 Multi-Region Access Points
S3 Storage Lens
AWS IAM Identity Center (AWS Single Sign-On)
Access Analyzer for S3
What is the best resource for a user to find compliance-related information and reports about AWS?
AWS Artifact
AWS Marketplace
Amazon Inspector
AWS Support
Which AWS service enables companies to deploy an application close to end users?
Amazon CloudFront
AWS Auto Scaling
AWS AppSync
Amazon Route 53
Which AWS service or feature improves network performance by sending traffic through the AWS worldwide network infrastructure?
Route table
AWS Transit Gateway
AWS Global Accelerator
Amazon VPC
Which AWS service provides highly durable object storage?
Amazon S3
Amazon Elastic File System (Amazon EFS)
Amazon Elastic Block Store (Amazon EBS)
Amazon FSx
Which responsibility belongs to AWS when a company hosts its databases on Amazon EC2 instances?
Database backups
Database software patches
Operating system patches
Operating system installations
Which of the following are advantages of moving to the AWS Cloud? (Choose two.)
The ability to turn over the responsibility for all security to AWS
The ability to use the pay-as-you-go model
The ability to have full control over the physical infrastructure
No longer having to guess what capacity will be required
No longer worrying about user access controls
Which AWS service is a hybrid cloud storage service that provides on-premises users access to virtually unlimited cloud storage?
AWS DataSync
Amazon S3 Glacier
AWS Storage Gateway
Amazon Elastic Block Store (Amazon EBS)
A company plans to migrate to AWS and wants to create cost estimates for its AWS use cases. Which AWS service or tool can the company use to meet these requirements?
AWS Pricing Calculator
Amazon CloudWatch
AWS Cost Explorer
AWS Budgets
Which tool should a developer use to integrate AWS service features directly into an application?
AWS SDK
AWS CLI
AWS Management Console
AWS API Gateway
Which of the following is a recommended design principle of the AWS Well-Architected Framework?
Reduce downtime by making infrastructure changes infrequently and in large increments.
Invest the time to configure infrastructure manually.
Learn to improve from operational failures.
Use monolithic application design for centralization.
Using AWS Identity and Access Management (IAM) to grant access only to the resources needed to perform a task is a concept known as:
restricted access.
as-needed access.
least privilege access.
token access.
Which AWS service or tool can be used to set up a firewall to control traffic going into and coming out of an Amazon VPC subnet?
Security group
AWS WAF
AWS Firewall Manager
Network ACL
A company wants to operate a data warehouse to analyze data without managing the data warehouse infrastructure. Which AWS service will meet this requirement?
Amazon Aurora
Amazon Redshift Serverless
AWS Lambda
Amazon RDS
