Font size
WorksheetsAWS Practice Questions Part 3
Total questions: 72
Worksheet time: 36mins
Which AWS support plans provide access to AWS Incident Detection and Response at an additional cost?
AWS Developer Support
AWS Business Support
AWS Enterprise On-Ramp Support
AWS Enterprise Support
Which capabilities are in the security perspective of AWS Cloud Adoption Framework?
Patch Management
IAM
Risk Management
Strategy Management
Which AWS support plans provide customers with annual consultative and architectural guidance?
AWS Developer Support
AWS Business Support
AWS Enterprise On-Ramp Support
AWS Enterprise Support
A company needs to connect multiple VPCs and on-premises networks through a single network connection to the AWS cloud. Which solution meets this requirement?
AWS Transit Gateway
AWS Direct Connect
AWS VPC Peering
AWS Client VPN
Which actions are the responsibility of AWS under the AWS Shared Responsibility Model? (Select Two)
Scanning AWS Service Endpoints for Vulnerabilities
Enabling Encryption on an Amazon S3 Bucket
Configuring Security Group Rules
Encrypting Traffic on the AWS Backbone between Global and Regional AWS Facilities
Which AWS service helps protect applications against Distributed Denial of Service (DDoS) attacks?
AWS Firewall Manager
AWS Shield
Amazon Inspector
AWS Config
Which of the following tasks are the responsibility of the customer under the AWS shared responsibility model? (Select TWO)
Managing physical security of AWS data centers
Patching the guest operating system
Patching the network infrastructure
Configuring security groups
Maintaining hardware components
Which AWS service allows users to run code without provisioning or managing servers?
Amazon EC2
AWS Fargate
AWS Lambda
AWS Elastic Beanstalk
Which service provides a virtual firewall to control inbound and outbound traffic for Amazon EC2 instances?
AWS WAF
AWS Shield
Security Groups
Network ACLs
What is the purpose of Amazon CloudWatch?
Store log files
Monitor AWS resources and applications
Automatically scale resources
Provision infrastructure as code
Which AWS service enables you to manage users and their access to AWS services and resources?
AWS Directory Service
AWS IAM
Amazon Cognito
AWS KMS
Which service lets you set up private network connectivity between your data center and AWS?
AWS VPN
Amazon VPC
AWS Direct Connect
AWS Transit Gateway
Which service helps automate security assessments of applications deployed on AWS?
AWS Shield
Amazon GuardDuty
Amazon Inspector
AWS Config
Which feature of Amazon VPC allows you to capture information about the IP traffic going to and from network interfaces?
VPC Peering
VPC Flow Logs
NAT Gateway
Subnet Route Tables
Which service allows AWS customers to define a virtual network in their AWS account?
Amazon EC2
Amazon VPC
AWS Direct Connect
AWS Lambda
Which service helps detect unauthorized and malicious activity in your AWS accounts?
AWS CloudTrail
AWS Config
Amazon Inspector
Amazon GuardDuty
Which AWS service makes it easier to migrate databases to AWS quickly and securely?
AWS Database Migration Service (DMS)
AWS Snowball
Amazon RDS
AWS DataSync
Which service helps you to define and enforce organizational units and service control policies (SCPs)?
AWS IAM
AWS Organizations
AWS Shield
AWS Config
What are the AWS global infrastructure composed of?
Availability Zones and Regions
Regions and Edge Locations
Availability Zones, Regions, and Edge Locations
Data Centres and Servers
Which AWS service allows developers to deploy and manage applications without dealing with the infrastructure?
AWS CloudFormation
AWS CodeDeploy
AWS Lambda
AWS Elastic Beanstalk
Which AWS support plan provides a Technical Account Manager (TAM)?
Developer Support
Business Support
Enterprise On-Ramp Support
Enterprise Support
Which tool helps you view and manage your AWS spending and usage?
AWS Budgets
AWS Cost Explorer
AWS Trusted Advisor
Amazon CloudWatch
Which storage class is ideal for data that is accessed infrequently, but requires rapid access when needed?
Amazon S3 Glacier
Amazon S3 Intelligent-Tiering
Amazon S3 Standard-IA
Amazon EBS Cold HDD
Which AWS service enables real-time monitoring and alarming based on custom metrics?
Amazon CloudWatch
AWS Config
AWS CloudTrail
Amazon Inspector
Which tool provides real-time guidance to help provision your resources following AWS best practices?
AWS Config
AWS Trusted Advisor
AWS Budgets
AWS Cost Explorer
A company has an AWS account. The company wants to audit its password and access key rotation details. For compliance purposes, which AWS service or tool will meet this requirement?
IAM Access Analyzer
AWS Artifact
IAM Credential Report
AWS Audit Manager
The company is planning to host its workloads on AWS. Which service requires the company to update and patch the guest operating system?
Amazon DynamoDB
Amazon S3
Amazon EC2
Amazon Aurora
A company needs to use an offline transfer strategy to move petabytes of databases, backups, and data records from on-premises to the AWS cloud. Which solution will meet this requirement with the most operational efficiency?
AWS Snowball Edge Compute Optimization
AWS Snowcone Devices
AWS Storage Gateway
AWS DataSync
Which AWS Enterprise Framework capabilities are in the Business Perspective?
Data Engineering
Risk Management
Cloud Fluency
Strategic Partnership
Which actions are the responsibility of AWS under the AWS Shared Responsibility Model? (Select two)
Scanning AWS services, service endpoints for vulnerabilities
Enabling encryption on an Amazon S3 bucket
Configuring security group rules
Encrypting traffic on the AWS backbone between global and regional AWS services
A company plans to deploy its application globally. The company wants to cache content at edge locations and deliver the content to users with the lowest possible latency. Which AWS service will meet these requirements?
AWS Global Accelerator
AWS Outposts
Amazon Route 53
Amazon CloudFront
Which AWS service blocks SQL injection attacks?
AWS WAF
Network ACLs
Security Groups
Trusted Advisor
Which AWS service inspects a user's AWS environment and makes recommendations for cost savings and system performance improvements?
Cloud Explorer
AWS Trusted Advisor
Amazon Inspector
AWS Budgets
Which of the following are design principles for reliability in AWS Cloud? (Select two)
Build architectures with tightly coupled resources
Use AWS Trusted Advisor to meet security best practices
Use automation to recover immediately from failure
Stimulate failures to test recovery process
What actions represent best practices for using AWS IAM?
Confirm a strong password policy
Share security credentials among AWS users in the same region
Use access keys to log in to the AWS Management Console
Avoid using IAM roles to delegate permissions
A company needs to identify personally identifiable information such as credit card numbers from data stored in Amazon S3. Which AWS service should the company use?
Amazon Inspector
AWS Shield
Amazon GuardDuty
Amazon Macie
A company uses AWS Organizations. The company wants to apply security best practices from the AWS Well-Architected Framework to all of its AWS accounts. Which service will meet these requirements?
Amazon Macie
Amazon Detective
AWS Control Tower
AWS Secrets Manager
Which AWS services or features enable users to connect an on-premises network to a VPC? (Select two)
AWS VPN
Elastic Load Balancer
AWS Direct Connect
Amazon CloudFront
A company is designing an IAM solution for an application. The company wants users to use their social media, email, or online shopping accounts for access. Which AWS service provides this functionality?
AWS IAM Identity Center
AWS Config
AWS Cognito
AWS IAM
A company is using Amazon EC2 instances to test an application. The company needs to run uninterrupted tests for one month. Which EC2 instance purchasing option will meet these requirements most efficiently?
On-Demand Instances
Spot Instances
Reserved Instances
Compute Savings Plan
Which cloud concept is demonstrated by using AWS Compute Optimizer?
Security Validation
Rightsizing
Elasticity
Global Reach
Which AWS service or resource provides discounts on some AWS service costs in exchange for a spending commitment?
Amazon Detective
AWS Pricing Calculator
Savings Plan
Basic Support
A company is considering moving to the AWS cloud. The company wants to scale compute resources to accommodate changing loads. Which benefit of AWS cloud does this scenario describe?
Global Deployment in Minutes
Cost Savings
Security
Elasticity
A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance changes to 'running'. Which AWS service can the company use to meet these requirements?
Amazon SageMaker
Amazon Connect
Amazon EventBridge
AWS Fargate
A company needs a serverless data integration service to discover, prepare, and combine data for analytics. Which AWS service will meet these requirements?
Amazon EMR
Amazon Redshift
AWS Glue
AWS Step Functions
Which option is an environment that contains one or more data centers?
Amazon Cloud Workfront
Availability Zone
VPC
AWS Outposts
A company plans to move its test workloads to Amazon EC2. The test workloads can be interrupted and are not required to start at a particular time. Which EC2 instance purchase option is most cost-effective for this use case?
On-Demand Instances
Spot Instances
Reserved Instances
Dedicated Instances
What is the benefit of using AWS serverless computing?
Application deployment and management are not required.
Application security will be fully managed by AWS.
Monitoring and logging are not needed.
Management of infrastructure is offloaded to AWS.
A company needs to manage multiple AWS accounts in a single unit. A company must consolidate billing for all the accounts. Which AWS service should the company use to meet these requirements?
AWS Organizations
AWS Resource Access Manager
AWS IAM
AWS Control Tower
A team of researchers is going to collect data at remote locations around the world. Many locations do not have internet connectivity. The team needs to capture the data in the field and transfer it to the cloud later. Which AWS service will support this requirement?
AWS Outposts
AWS Transfer Family
AWS Snow Family
AWS Migration Hub
Which AWS service or tool does AWS Control Tower use to create resources?
AWS CloudFormation
AWS Trusted Advisor
AWS Directory Service
AWS Cost Explorer
A company needs to set up a user-defined isolated environment in the AWS cloud. Which of the following can help the company meet this requirement?
AWS VPN
AWS VPC
AWS Legions
Availability Service
Which AWS service provides a single location to track the progress of application migrations?
AWS Application Discovery Service
AWS Application Migration Service
AWS Service Catalog
AWS Migration Hub
A company is migrating a traditional database server to the AWS cloud. A company wants to migrate administrative overhead to the database maintenance task. Which AWS service will meet these requirements?
Amazon DynamoDB
Amazon EC2
Amazon Redshift
Amazon RDS
Which actions are AWS security best practices for using IAM to manage an AWS account root user? (Select two)
Set up MFA for the root user.
Remove all IAM policies from the root user.
Delete the root user access keys.
Use the root user for daily tasks.
A company plans to deploy its application globally. Which AWS service or feature can a company use to determine which business unit has unit-specific AWS resources?
Cost allocation tags
Key pairs
Amazon Inspector
AWS Trusted Advisor
A company wants to identify Amazon S3 buckets that are shared with another AWS account. Which AWS service or feature will meet these requirements?
AWS Lake Formation
IAM Credential Reports
Amazon CloudWatch
IAM Access Analyzer
If the company needs to plan, schedule, and run hundreds of thousands of computing jobs on AWS, which service can the company use to meet this requirement?
AWS Step Functions
AWS Service Catalog
Amazon Simple Queue Service
AWS Batch
Which task is the responsibility of the customer according to the AWS Shared Responsibility Model?
Maintain the security of the hardware that runs Amazon EC2 instances
Patch the guest operating system of Amazon EC2 instances
Protect the security of the AWS global infrastructure
Patch Amazon RDS software
Which of the following is a pillar of the AWS Well-Architected Framework?
Redundancy
Operational Excellence
Availability
Multi-Region
A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?
The ability to ensure high availability by deploying workloads to multiple regions
Apply Azure Go model for many services and resources
The ability to transfer infrastructure management to the AWS cloud
The ability to provision and deprovision resources quickly with minimal effort
A company needs to encrypt data at rest in the AWS cloud by using an encryption key that the company controls. Which AWS service should the company use to meet this requirement?
AWS Certificate Manager
AWS Cognito
AWS Key Management Service
AWS Trusted Advisor
Which AWS service should a cloud engineer use to view API calls to AWS services?
Amazon CloudWatch
AWS CloudTrail
AWS Config
AWS Artifact
A company needs an AWS Support plan that provides programmatic case management through AWS Support API. Which plan is the most cost-effective?
AWS Business Support
AWS Basic Support
AWS Developer Support
AWS Enterprise Support
Which cloud concept is demonstrated by using AWS Cost Explorer?
Rightsizing
Reliability
Resilience
Modernization
Which AWS service can a company use to create a private, secured, and scalable network environment in the AWS Cloud?
Amazon ECS
Amazon S3
Amazon VPC
Route Tables
Which options are benefits of using third-party software from AWS Marketplace?
The software's data encryption is managed by a third-party vendor.
The software has been evaluated by vendors to ensure that it will run on AWS.
Users do not need to upgrade to newer software versions.
Users do not need to conduct security testing on the software.
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
Patch AWS network devices.
Set user password rules.
Provide physical security for compute resources.
Configure security groups.
Which AWS service requires customers to be fully responsible for applying OS patches?
Amazon DynamoDB
AWS Lambda
AWS Fargate
Amazon EC2
Which action should a company take to improve security in AWS accounts?
Require multi-factor authentication (MFA) for privileged users
Remove the root user account
Create an access key for the AWS account root user
Create an access key for each privileged user
Which AWS feature is a deployable EC2 instance template that is prepackaged with software and security requirements?
Amazon EBS volume
AWS CloudFormation template
Amazon EBS snapshot
Amazon Machine Image (AMI)
Which AWS Cloud Adoption Framework (CAF) security perspective capability helps identify security misconfigurations?
Identity and access management
Threat detection
Platform engineering
Availability and continuity management
