Font size
WorksheetsAWS-3 (51-100)
Total questions: 50
Worksheet time: 27mins
What are the two ways that an application can be scaled?
Vertically and horizontally
Diagonally and vertically
Horizontally and diagonally
Independently and vertically
Which elements in Amazon CloudWatch dashboards can be used to view and analyze metrics?
Widgets
Metrics
Icons
Components
What are the possible states of a metric alarm in Amazon CloudWatch?
OK, ALARM, NOT_AVAILABLE
OK, ALERT, INSUFFICIENT_DATA
OK, ALARM, INSUFFICIENT_DATA
OK, ALERT, NOT_AVAILABLE
What kind of data can a company collect with VPC Flow Logs?
Data about network traffic that comes into and out of a virtual private cloud (VPC)
Malicious activity and unauthorized behavior
Configurations of AWS resources
Compliance-related information
What is a benefit of monitoring on AWS?
Monitoring creates operation overhead.
Monitoring recognizes security threats and events.
Monitoring decreases the performance and reliability of resources.
Monitoring increases speed and agility
True or False: When a company redesigns an application by using a serverless service on AWS, they might not need to configure networking components, such as a virtual private cloud (VPC), subnets, and security groups.
True
False
What are the four main factors that a solutions architect should consider when they must choose a Region?
Latency, price, service availability, and compliance
Latency, high availability, taxes, and compliance.
Latency, taxes, speed, and compliance
Latency, security, high availability, and resiliency
Which statement BEST describes the relationship between Regions, Availability Zones and data centers?
Availability Zones are clusters of Regions. Regions are clusters of data centers.
Data centers are cluster of Availability Zones. Regions are clusters of Availability Zones.
Regions are clusters of Availability Zones. Availability Zones are clusters of data centers.
Data centers are clusters of Regions. Regions are clusters of Availability Zones.
Which of the following can be found in an AWS Identity and Access Management (IAM) policy?
А. Effect
В. Action
С. Object
A and B
B and C
Question 4 A solutions architect is consulting for a company. When users in the company authenticate to a corporate network, they want to be able to use AWS without needing to sign in again. Which AWS identity should the solutions architect recommend for this use case?
AWS account root user
AWS Identity and Access Management (IAM) user
IAM Role
IAM Group
A company wants to allow resources in a public subnet to communicate with the internet. Which of the following must the company do to meet this requirement?
А. Create a route to a private subnet
В. Attach an internet gateway to their VPC
С. Create a route in a route table to the internet gateway
A and B
B and C
What does an Amazon Elastic Compute Cloud (Amazon EC2) instance type indicate?
Instance family and instance size
Instance placement and instance size
Instance tenancy and instance billing
Instance Amazon Machine Image (AMI) and networking speed
What is a typical use case for Amazon Simple Storage Service (Amazon S3)?
Object storage for media hosting
Object storage for a boot drive
Block storage for an EC2 instance
File storage for multiple EC2 instances
A solutions architect is working for a healthcare facility, and they are tasked with storing 7 years of patient information that is rarely accessed. The facility’s IT manager asks the solutions architect to consider one of the Amazon Simple Storage Service (Amazon S3) storage tiers to store the patient information. Which storage tier should the solutions architect suggest?
Amazon S3 Standard
Amazon S3 Glacier Deep Archive
Amazon S3 Standard-Infrequent Access
Amazon S3 Intelligent-Tiering
Which task of running and operating the database are users responsible for when they use Amazon Relational Database Service (Amazon RDS)?
Optimizing the database
Provisioning and managing the underlying infrastructure
Installing the relational database management system on the database instance
Installing patches to the operating system for the database instance
True or false: A Multi-AZ deployment is beneficial when users want to increase the availability of their database
True
False
What are the three components of Amazon EC2 Auto Scaling?
Scaling policies, security group, EC2 Auto Scaling group
Launch template, scaling policies, EC2 Auto Scaling group
Security group, instance type, key pair
Amazon Machine Image (AMI) ID, instance type, storage
An application must choose target groups by using a rule that is based on the path of a URL. Which Elastic Load Balancing (ELB) type should be used for this use case?
Classic Load Balancer
Application Load Balancer
Network Load Balancer
Gateway Load Balancer
A solutions architect must design a solution to help manage their customer’s containerized applications. Currently, the customer workload runs in Docker containers on top of Amazon Elastic Compute Cloud (Amazon EC2) instances and on-premises servers that run a hybrid Kubernetes cluster. The customer wants to migrate part of their hybrid Kubernetes deployment to the cloud with a minimum amount of effort, and they want to keep all the native features of Kubernetes. The customer also wants to reduce their operational overhead for managing their Kubernetes cluster. Which managed AWS service should the solutions architect suggest to best satisfy these requirements?
AWS Fargate with Amazon Elastic Container Service (Amazon ECS)
AWS Fargate with Amazon Elastic Kubernetes Service (Amazon EKS)
Amazon Elastic Container Service (Amazon ECS)
Amazon Elastic Kubernetes Service (Amazon EKS)
An application needs to process events that are received through an API. Multiple consumers must be able to process the data concurrently. Which AWS managed service would best meet this requirement in the most cost-effective way?
Amazon Simple Notification Service (Amazon SNS) with a fan-out strategy
Amazon Simple Queue Service (Amazon SQS) with FIFO queues
Amazon EventBridge with rules
Amazon Elastic Compute Cloud (Amazon EC2) with Spot Instances
Question 3 True or False: Amazon Relational Database Service (Amazon RDS) is more suitable for databases that handle structured or relational data, where users can count with features like auto-increment and table joins. Amazon DynamoDB is more suitable for NoSQL database workloads, where tables are collection of items that have their own attributes.
True
False
Amazon DynamoDB is designed for scale and performance. In most cases, the DynamoDB response times can be measured in single-digit milliseconds. However, there are certain use cases that require response times in microseconds. For these use cases, DynamoDB Accelerator (DAX) delivers fast response times for accessing eventually consistent data. Which statements about DAX are correct? (Choose THREE.)
DAX reduces operational and application complexity by providing a managed service that is compatible with the DynamoDB API.
Although using DAX has a cost, it can reduce the consumption of DynamoDB table capacity. If the data is read intensive (that is, millions of requests per second), DAX can result in cost savings by caching the data while also providing better read latency, being beneficial for scenarios in need of repeated reads for individual keys.
DAX does not support server-side encryption (SSE).
DAX is not designed for applications that are write-intensive. It can also add cost to applications that do not perform much read activity.
DAX does not support encrypting data in transit, which means that communication between an application and DAX cannot be encrypted.
True or False: AWS Lambda is a compute service that runs code without the need to provision or manage servers. Lambda runs code on a high-availability compute infrastructure. It also performs all the administration of compute resources, including server and operating system maintenance, capacity provisioning and automatic scaling, and logging. Lambda can run code for virtually any type of application or backend service.
True
False
A solutions architect is designing an architecture that can provide HTML pages to customers. They want a serverless solution that can host content over the internet and serve a static website with minimal effort. Which AWS service should the solutions architect choose to meet these requirements?
Amazon Simple Storage Service (Amazon S3)
Amazon Elastic Compute Cloud (Amazon EC2)
Amazon DynamoDB
Amazon Kinesis
A solutions architect is designing a solution that needs real-time data ingestion. They are considering either Amazon Kinesis Data Firehose or Amazon Kinesis Data Streams for this solution. Which service should the solutions architect choose to meet the requirement for real-time data ingestion, and why? (Remember that lower data latency means a lower roundtrip time from when data is ingested and available.)
Amazon Kinesis Data Firehose, because it has lower latency when compared to Amazon Kinesis Data Streams
Amazon Kinesis Data Firehose, because it has higher latency when compared to Amazon Kinesis Data Streams
Amazon Kinesis Data Streams, because it has lower latency when compared to Amazon Kinesis Data Firehose
Amazon Kinesis Data Streams, because it has higher latency when compared to Amazon Kinesis Data Firehose
True or False: When creating data lakes for analytics on AWS, Amazon Simple Storage Service (Amazon S3) would be a preferred service. Users can use data in an S3 bucket with an independent data-processing or visualization layer, such as Amazon QuickSight, Amazon Athena, or Amazon EMR.
True
False
A solutions architect is designing a serverless solution that can do Structured Query Language (SQL) queries over multiple objects that are stored in Amazon Simple Storage Service (Amazon S3). All the objects share the same data structure (schema) and are in JSON. Which service would make it easier to query the data, in addition to providing serverless capabilities?
Amazon Athena
AWS Database Migration Service (AWS DMS)
Amazon S3 Select
AWS Data Exchange
True or False: When architecting a solution that can handle high demand and usage spikes, Amazon CloudFront should be used in front of an Amazon Simple Storage Service (Amazon S3) bucket. CloudFront can cache data that gets delivered to customers, and it lets customers use custom domain names. In addition, CloudFront can serve custom SSL certificates that are issued by Amazon Certificate Manager (at no additional cost) and it can provide distributed denial of service (DDoS) protection that is powered by AWS WAF and AWS Shield.
True
False
Which of the following options includes true statements for both Amazon Simple Storage Service (Amazon S3) cross-Region replication and AWS Key Management Service (AWS KMS)?
To configure Amazon S3 cross-Region replication, both the source and destination buckets must belong to the same AWS account. Server-side encryption (SSE) is possible for replicated objects.
To configure Amazon S3 cross-Region replication, both the source and destination buckets must belong to the same AWS account. Server-side encryption (SSE) is not possible for replicated objects.
To configure Amazon S3 cross-Region replication, the source and destination buckets can belong to different AWS accounts. Server-side encryption (SSE) is possible for replicated objects.
To configure Amazon S3 cross-Region replication, the source and destination buckets can belong to different AWS accounts. Server-side encryption is not possible for replicated objects.
A solutions architect is designing a hybrid solution. The solution uses Amazon Virtual Private Cloud (Amazon VPC) resources, such Amazon Relational Database Service (Amazon RDS) and Amazon Elastic Compute Cloud (Amazon EC2). It also uses services that are not in a VPC, such as Amazon Simple Storage Service (Amazon S3) and AWS Systems Manager. Which statements about Amazon VPC and the scope of AWS services are correct? (Choose THREE.)
Amazon VPC gives the user full control over their virtual networking environment. Therefore, the solutions architect can define firewall rules on the networking level for VPC-based resources.
Because S3 buckets do not reside inside a VPC, the customer can rely on AWS to configure security mechanisms, such as permissions and bucket policies. Thus, security is automatically applied on the data level because this level of security is the responsibility of AWS.
VPC-based services that reside in a private subnet require specific configurations to enable internet access, such as a NAT gateway and route tables.
When possible, customers should avoid having services reside in VPCs because a networking misconfiguration can accidentally leave the infrastructure in an unsafe state.
Using AWS resources like Amazon S3 is less secure because they are public resources by default.
AWS VPN solutions can be configured to establish secure connections between on-premises networks, remote offices, client devices, and the AWS global network.
Which statements about AWS Storage Gateway are correct? (Choose THREE.)
AWS Storage Gateway is a set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage.
AWS Storage Gateway offers virtually unlimited cloud storage to users and applications, at the cost of new storage hardware.
AWS Storage Gateway delivers data access to on-premises applications while taking advantage of the agility, economics, and security capabilities of the AWS Cloud.
AWS Storage Gateway is limited to only on-premises applications, which means that it cannot be used from cloud to cloud.
AWS Storage Gateway helps support compliance requirements through integration with AWS Backup to manage the backup and recovery of Volume Gateway volumes, which simplifies backup management.
Which set of AWS services is the BEST fit for the “Object, file, and block storage” category (which means that the services are dedicated to storing data in a durable way)?
AWS DataSync, AWS Snow Family
Amazon Simple Storage Service (Amazon S3), Amazon Elastic File System (Amazon EFS), Amazon Elastic Block Store (Amazon EBS), Amazon FSx
AWS Storage Gateway, AWS Snow Family
AWS Elastic Disaster Recovery, AWS Backup
True or False: Amazon Simple Storage Service (Amazon S3) is better than Amazon Elastic Block Store (Amazon EBS) because it is designed to provide a higher level of data durability
True
False
A solutions architect is designing an architecture that can provide HTML pages to customers. They want a serverless solution that can host content over the internet and serve a static website with minimal effort. Which AWS service should the solutions architect choose to meet these requirements?
Amazon Simple Storage Service (Amazon S3)
Amazon Elastic Compute Cloud (Amazon EC2)
Amazon DynamoDB
Amazon KinesisAmazon Kinesis
Question 2 An application needs to process events that are received through an API. Multiple consumers must be able to process the data concurrently. Which AWS managed service would best meet this requirement in the most cost-effective way?
Amazon Simple Notification Service (Amazon SNS) with a fan-out strategy
Amazon Simple Queue Service (Amazon SQS) with FIFO queues
Amazon EventBridge with rules
Amazon Elastic Compute Cloud (Amazon EC2) with Spot Instances
True or False: Amazon Relational Database Service (Amazon RDS) is more suitable for databases that handle structured or relational data, where users can count with features like auto-increment and table joins. Amazon DynamoDB is more suitable for NoSQL database workloads, where tables are collection of items that have their own attributes.
True
False
Amazon DynamoDB is designed for scale and performance. In most cases, the DynamoDB response times can be measured in single-digit milliseconds. However, there are certain use cases that require response times in microseconds. For these use cases, DynamoDB Accelerator (DAX) delivers fast response times for accessing eventually consistent data. Which statements about DAX are correct? (Choose THREE.)
DAX reduces operational and application complexity by providing a managed service that is compatible with the DynamoDB API.
Although using DAX has a cost, it can reduce the consumption of DynamoDB table capacity. If the data is read intensive (that is, millions of requests per second), DAX can result in cost savings by caching the data while also providing better read latency, being beneficial for scenarios in need of repeated reads for individual keys.
DAX is not designed for applications that are write-intensive. It can also add cost to applications that do not perform much read activity.
DAX does not support encrypting data in transit, which means that communication between an application and DAX cannot be encrypted.
DAX does not support server-side encryption (SSE).
True or False: AWS Lambda is a compute service that runs code without the need to provision or manage servers. Lambda runs code on a high-availability compute infrastructure. It also performs all the administration of compute resources, including server and operating system maintenance, capacity provisioning and automatic scaling, and logging. Lambda can run code for virtually any type of application or backend service.
True
False
True or False: Amazon Simple Storage Service (Amazon S3) is better than Amazon Elastic Block Store (Amazon EBS) because it is designed to provide a higher level of data durability.
True
False
Which set of AWS services is the BEST fit for the “Object, file, and block storage” category (which means that the services are dedicated to storing data in a durable way)?
AWS DataSync, AWS Snow Family
Amazon Simple Storage Service (Amazon S3), Amazon Elastic File System (Amazon EFS), Amazon Elastic Block Store (Amazon EBS), Amazon FSx
AWS DataSync, AWS Snow Family
AWS Storage Gateway, AWS Snow Family
AWS Elastic Disaster Recovery, AWS Backup
True or False: When creating data lakes for analytics on AWS, Amazon Simple Storage Service (Amazon S3) would be a preferred service. Users can use data in an S3 bucket with an independent data-processing or visualization layer, such as Amazon QuickSight, Amazon Athena, or Amazon EMR.
True
False
Which statements about AWS Storage Gateway are correct? (Choose THREE.)
AWS Storage Gateway is a set of hybrid cloud storage services that provide on-premises access to virtually unlimited cloud storage.
AWS Storage Gateway offers virtually unlimited cloud storage to users and applications, at the cost of new storage hardware.
AWS Storage Gateway delivers data access to on-premises applications while taking advantage of the agility, economics, and security capabilities of the AWS Cloud.
AWS Storage Gateway is limited to only on-premises applications, which means that it cannot be used from cloud to cloud.
AWS Storage Gateway helps support compliance requirements through integration with AWS Backup to manage the backup and recovery of Volume Gateway volumes, which simplifies backup management.
What are some benefits of using multiple AWS accounts with AWS Organizations? (Choose THREE.)
Grouping workloads based on business purpose and ownership
Using different payment methods per account
Limiting the scope of impact from adverse events
Distributing AWS service quotas and API request rate limits
Having multiple account root users with unrestricted access on each account
True or False: A service control policy (SCP) statement with an explicit deny prevents even the account root user from performing API calls.
True
False
A solutions architect is designing a solution that provides single sign-on (SSO) to authenticate into AWS accounts that are in AWS Organizations. Which AWS service can the solutions architect use to implement identity federation with existing identity providers, such as Microsoft Active Directory?
AWS Identity and Access Management (IAM) users
Amazon CloudWatch
AWS IAM Identity Center (successor to AWS Single Sign-On)
AWS CloudTrail
Which statements are best practices for multi-account environments? (Choose THREE.)
Enable Amazon CloudWatch billing alarms per account and configure tagging policies in AWS Organizations.
Give AdministratorAccess policies to developers in their development AWS accounts.
Prevent CloudTrail configuration from being disabled in the shared services account.
Use multi-factor authentication (MFA) for users in centralized credentialing, such as using AWS IAM Identity Center (successor to AWS Single Sign-On).
Reuse passwords for simplicity and ease of access.
A solutions architect must create well-defined governance standards for a company that has multiple AWS accounts. The company needs centralized infrastructure logging for all AWS accounts. In addition, the company’s chief information security officer (CISO) would like to have a measurement that applies a circuit breaker to stop Amazon Elastic Compute Cloud (Amazon EC2) API activities if the billing alarms indicate suspicious activity. The company intends to use AWS Organizations. Which architectural scenario should the solutions architect propose to meet the company’s needs in the MOST effective way?
Enable AWS CloudTrail for all accounts in AWS Organizations. Use Organizations to centralize all logs into one Amazon Simple Storage Service (Amazon S3) bucket. As the circuit breaker, use service control policies (SCPs) that have an explicit deny for Amazon EC2 API activity. These SCPs can then be applied to the root organizational unit (OU) as needed.
Enable AWS CloudTrail for all accounts in AWS Organizations. Use Organizations to centralize all logs into one Amazon Simple Storage Service (Amazon S3) bucket. Use multi-factor authentication (MFA) devices for every user in AWS IAM Identity Center (successor to AWS Single Sign-On).
Enable AWS CloudTrail for only the production accounts in AWS Organizations. Use Organizations to centralize logs into one Amazon Simple Storage Service (Amazon S3 bucket). For single sign-on, use AWS IAM Identity Center (successor to AWS Single Sign-ON).
Enable AWS CloudTrail for all accounts in AWS Organizations. Use Organizations to centralize logs in one Amazon Simple Storage Service (Amazon S3) bucket. As the circuit breaker, use AWS Identity and Access Management (IAM) policies on each account that have an explicit deny for Amazon EC2 API activity. The IAM policies can then be applied to the root organizational unit (OU) as needed.
What is the main value proposition of data lakes?
The ability to ingest and store data that could be the answer for future questions when they are processed with the correct data processing mechanisms.
The ability to combine multiple databases together to expand their capacity and availability.
The ability to define the data schema before ingesting and storing data.
The ability to store user-generated data, such as data from antennas and sensors.
) True or False: Two of the fundamental components of data lakes are data catalog and search.
True
False
A company sorts and structures data before entering information into a database. They also store unstructured data in another storage location. These two data locations are siloed from each other. How can the company benefit from using a data lake?
Data lakes mostly process data after it has been stored in the cloud or on-premises.
A data lake provides the most secure way to store data in the AWS Cloud.
With a data lake, a company can store structured and unstructured data at virtually any scale.
A data lake is a direct replacement of a data warehouse
