Font size
WorksheetsWL-PT2
Total questions: 65
Worksheet time: 35mins
Which of the following can be attached to EC2 Instances to store data?
Under the “Shared Responsibility Model,” which of the listed below is Customer’s Responsibility?
Networking of the AWS infrastructure
Database of the AWS infrastructure
Client-side data encryption
Hardware of the AWS underlying infrastructure
ABC Corporation provides cloud services to its customers and needs a way to customize billing datafor different accounts, assign pricing logic, and display cost data according to defined rates for eachbilling group. Which AWS service is designed to fulfill these requirements?
Which of the following components of the CloudFront service can be used to distribute content tousers across the globe?
Your company is planning to move to the AWS Cloud. You need to give a presentation on the costperspective when moving existing resources to the AWS Cloud. Considering Amazon EC2, which of thefollowing is an advantage from the cost perspective?
Ability to tag instances to reduce the overall cost.
The ability to only pay for what you use
The ability to choose low cost AMI’s to prepare the EC2 Instances
Having the ability of automated backups of the EC2 instance, so that you don’t need to worryabout the maintenance costs
Your company is planning to move to the AWS Cloud. Once it completely moves to the cloud, it wantsto ensure that the right security settings are put in place. Which of the following tools are helpful?(Select TWO.)
AWS Kinesis
AWS inspector
AWS Trusted Advisor
There is a requirement to collect important metrics from AWS RDS and EC2 Instances. Which AWSservice would be helpful to fulfill this requirement?
I need to upload a large number of large-size objects from different Geographic locations to an S3bucket. What is the best mechanism to do so in a fast, reliable, and cost-effective way?
I can directly access the S3 bucket from the different locations & use a multi-part-upload fortransferring huge objects
I can use S3 Transfer Acceleration from each Geographic location that will route the data fromtheir respective Edge locations to S3.
can use a Direct Connect link from each of the Geographic location for transferring dataquickly
I can connect to an application running on AWS EC2 that is hosted in multiple regions usingRoute 53 & use latency based routing to upload files to the S3 bucket.
We have developed an application using AWS services that need to be deployed to multiple regionsto improve performance. What should be performed to achieve the optimal endpoint-basedperformance to increase the availability of your applications
Use Route 53 latency based routing.
Use a CloudFront distribution
Use Global Accelerator.
What is the ability of AWS products and services to recover from disruptions and mitigate disruptionsknown as?
When designing a system, you use the principle of “design for failure and nothing will fail”. Which of thefollowing services/features of AWS can assist in supporting this design principle? Choose 3 answersfrom the options given below.
Availability Zones
Regions
Elastic Load Balancer
Pay as you go
While proposing AWS Cloud solution to a client as a value proposition, which of the following is not anadvantage to use the AWS Cloud?
The AWS Cloud offers a pay-as-you-go model to trade Capital expense for Variable expense.
The AWS Cloud offers a Scale-on-demand model to eliminate wasted capacity.
The AWS Cloud gives complete control of Security to its users so that they can replicate theirData Center Security model on the Cloud.
AWS Cloud frees the users from spending time & money for maintaining their Data Centers.
You have a DevOps team in your current organization structure. They are keen to know if there is anyservice available in AWS which can be used to manage infrastructure as code. Which of the followingcan be met with such a requirement?
Using AWS CloudFormation
Using AWS Config
Using AWS Inspector
Using AWS Trusted Advisor
Which one of the following features does NOT belong to any Well-Architected Framework pillar inAWS?
It provides the ability to protect information, systems & assets.
It provides the ability to configure servers with much more CPU resources than required so thatusers do not need to maintain the CPU resources for a long time.
It provides the ability to avoid or eliminate unneeded costs.
It provides the ability to recover from infrastructure or system failures.
Which of the following is the responsibility of AWS according to the Shared Security Model? Choose 3answers from the options given below.
Managing AWS Identity and Access Management (IAM)
Securing edge locations
Monitoring physical device security
securing Data centers
What features and capabilities does AWS Network Firewall offer for enhancing network security in anAmazon Web Services (AWS) environment? Select the correct option.
AWS Network Firewall offers load balancing and auto-scaling for applications within AmazonVPCs
AWS Network Firewall provides protection against Distributed Denial of Service (DDoS) attacks
AWS Network Firewall is a managed, stateful firewall for securing your Amazon VPC
AWS Network Firewall is a managed, stateless firewall for securing your Amazon VPC
Your design team is planning to design an application that will be hosted on the AWS Cloud. One oftheir main non-functional requirements is given below:Reduce inter-dependencies so failures do not impact other components.Which of the following concepts does this requirement relate to?
Which of the following can be used to increase the fault tolerance of an application?
Deploying resources across multiple edge locations
Deploying resources across multiple VPC’s
Deploying resources across multiple Availability Zones
Deploying resources across multiple AWS Accounts
Which of the following security requirements are managed by AWS? Select 3 answers from theoptions given below.
Hardware patching
Disk disposal
Physical security
User permissions
Password Policies
Which of the following is not the pillars of AWS Well-Architected Framework?
Automation
Your company is planning to offload some of the batch processing workloads on to AWS. These jobscan be interrupted and resumed at any time. Which of the following instance types would be themost cost-effective to use for this purpose?
Which service can be used to create steps required to automate build, test and deployments for a web application?
AWS opswork
Cloud Build
A manufacturing firm has recently migrated their application servers to the Amazon EC2 instance. TheIT Manager is looking for the details of upcoming scheduled maintenance activities which AWS wouldbe performing on AWS resources, that may impact the services on these EC2 instances.
Which of the following services can alert you about the changes that can affect resources in youraccount?
Which of the following can be used as an additional security layer for the user name and passwordwhen logging into the AWS Console?
Which AWS Cloud service helps in the quick deployment of resources which can use differentprogramming languages such as .Net and Java?
Your company handles a crucial e-Commerce application. This application needs to have an uptimeof at least 99.5%. There is a decision to move the application to the AWS Cloud. Which of the followingdeployment strategies can help build a robust architecture for such an application?
Your company is moving a large application to AWS using a set of EC2 instances. A key requirement isreusing existing server-bound software licensing. Which of the following options is the best forsatisfying the requirement?
Dedicated Host
You are planning on deploying a video-based application onto the AWS Cloud. Users across the worldwill access these videos. Which of the below services can help efficiently stream the content to theusers across the globe?
Using Content Delivery Network (CDN), an administrator would like to serve varying types of contentbased on the viewer’s browser cookies. Which is the most appropriate serverless technique that canbe used to achieve this?
What role does AWS Security Hub play in helping organizations improve their security posture withinan AWS environment?
AWS Security Hub offers real-time traffic analysis and alerting, preventing unauthorizedaccess to AWS resources
AWS Security Hub automatically generates and enforces IAM policies for access control
AWS Security Hub centralizes and analyzes security findings from various AWSservices
AWS Security Hub automates the deployment of security patches to EC2 instances
An administrator would like to check if the Amazon CloudFront identity is making access API calls to anS3 bucket where a static website is hosted. Where can this information be obtained?
Configuring Amazon Athena to run queries on the Amazon CloudFront distribution.
Check AWS CloudWatch logs on the S3 bucket
In the webserver, tail for identity access logs from the Amazon CloudFront identity.
In AWS CloudTrail Event history, look up access calls and filter for the Amazon CloudFrontidentity.
Which of the following AWS services can be used to retrieve configuration changes made to AWSresources causing operational issues?
In a complex AWS environment with multiple AWS accounts and resources, an organization needs acentralized solution to manage and enforce consistent firewall rules and policies. This helps ensure auniform security posture and compliance across the infrastructure. Which AWS service provides thecapability to achieve this?
An organization runs several EC2 instances inside a VPC using three subnets, one for Development,one for Test, and one for Production. The Security team has some concerns about the VPCconfiguration. It requires restricting communication across the EC2 instances using Security Groups.
Which of the following options is true for Security Groups related to the scenario?
You can change a Security Group associated with an instance if the instance is in the runningstate.
You can change a Security Group associated with an instance if the instance is in the hibernate state.
You can change a Security Group only if there are no instances associated to it
The only Security Group you can change is the Default Security Group.
Which of the below-mentioned services is equivalent to hosting virtual servers on an on-premiseslocation?
AWS ec2
S3
RDS
DNS
You have a set of EC2 Instances hosted on the AWS Cloud. The EC2 Instances are hosting a webapplication. Which of the following acts as a firewall to your VPC and the instances in it? Choose 2answers from the options given below.
Usage of the Internet gateway
Usage of Network Access Control Lists
Usage of AWS Config
Usage of Security Groups
Which of the following can be used to launch EC2 instances on the AWS Cloud?
EBS volumes
AMI
EBS snapshots
Which of the below options cannot be used to upload archives to Amazon Glacier?
AWS S3 Lifecycle policies
AWS SDKs with Amazon S3 Glacier
Amazon S3 Glacier console
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year.
Which AWS service or tool provides this information?
A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application.
Which AWS solution should the company use to meet these requirements?
Your company is planning to pay for an AWS Support plan. They have the following requirements asfar as the support plan goes 24x7 access to Cloud Support Engineers via email, chat & phone.
Response time of less than 15 minutes for any Mission-critical system faults Which of the following plans will suffice to keep in mind the above requirement?
Which of the following are features of an edge location? Choose 3 answers from the options givenbelow.
Used in conjunction with the Cloudfront service
Distribute load across multiple resources
Cache popular contents
Distribute content to users
Which of the following storage options provides the option of Lifecycle policies that can be used tomove objects to archive storage?
EFS
EBS
storage gateway
An organization needs to ensure the secure management of encryption keys for various services andresources. They require a centralized solution that allows them to create, rotate, and control access toencryption keys without the complexity of managing these keys manually. Which AWS serviceprovides the capability to achieve this?
A client who has adopted AWS Cloud would like to ensure that his systems deliver continuousbusiness value & improve supporting processes and procedures. Which design pillar will he need tofocus on for achieving this?
A large IT company is looking to enable its large user base to remotely access persistent Linuxdesktops from any location. Which service can be used for this purpose?
You are the architect of a custom application running inside your corporate data center. Theapplication runs with some unresolved bugs that produce a lot of data inside custom log filesgenerating time-consuming activities for the operation team responsible for analyzing them.
You want to move the application to AWS using EC2 instances. At the same time, you want to take theopportunity to improve logging and monitoring capabilities, but without touching the applicationcode.
What AWS service should you use to satisfy the requirement?
A research firm is planning to deploy a high-performance computing system in the AWS cloud for itsscientific research work. Which of the following services can be used to provide expert assistancefor deploying computing systems?
Which of the following features of AWS RDS allows you to reduce the load on the database whilereading data?
A company wants to have a relational database hosted on AWS. As much as possible they want to have controlover the database itself. Which of the following would be an ideal option for this?
Amazon EC2
On which of the following resources does Amazon Inspector perform network accessibility checks?
VPC
Which of the following services helps to achieve the computing elasticity in AWS?
Which AWS service offers a managed platform for a media production company to securely access and exchange various data sets, including video footage and datasets, while ensuring compliance and integration?
How does EBS Volume replication functionality work during any single hardware failure?
Replicates the volume across Edge locations
Replicates the volume across Regions
Replicates the volume in the same Availability Zone
Replicates the volume across Availability Zones
You are requested to expose your serverless application implemented with AWS Lambda to HTTPclients. ( using HTTP Proxy )
Which of the following AWS services can you use to accomplish the task? (Select TWO)
Application load balancer
Amazon API Gateway
You have an EC2 Instance in development that interacts with the Simple Storage Service. The EC2Instance is going to be promoted to the production environment. Which of the following featuresshould be used to grant the EC2 instance with suitable permissions to access the Simple StorageService?
A live online game uses DynamoDB service in the backend to store real-time scores of theparticipants as they compete against each other from various parts of the world. Which dataconsistency option is the most appropriate to implement?
Your company is planning to host a large e-commerce application on the AWS Cloud. One of theirmajor concerns is Internet attacks such as DDoS attacks. Which of the following services can helpmitigate this concern? Select 2
AWS WAF
A research team conducting its work in remote locations of the world, without internet access, wishesto leverage Amazon services for their storage. The team collects petabytes of data at a time. Whichservice will best meet to transfer the terabytes of data?
Which of the following AWS services use serverless technology? Choose 2 answers from the optionsgiven below.
DynamoDb
You're encountering a problem while configuring an AWS service and need step-by-step guidance totroubleshoot the issue. Where can you find detailed articles, solutions, and best practices provided byAWS experts to help you resolve the problem?
An application requires access to a database to retrieve certain information and this action wouldrequire the developer to hard-code the credentials.
Hard-coding the credentials is not a best practice. One can securely store encrypted credentials andretrieve them when required, eliminating the need of hard-coding credentials in the application.Which AWS service would you suggest to the developer?
A startup company in the e-commerce industry is embarking on its cloud journey with Amazon WebServices (AWS). They need recommendations on Cloud migration, modernization, and costoptimization that align with AWS best practices. Which AWS service provides the capability to achievethis?
AWS Trusted Advisor
AWS Prescriptive Guidance
Which AWS service or feature allows users to connect with and deploy AWS services programmatically
A company is launching an ecommerce application that must always be available. The application will run on Amazon EC2 instances continuously for the next
12 months.
What is the MOST cost-effective instance purchasing option that meets these requirements?
