WorksheetsJBA vs EDDY trial 1
Total questions: 65
Worksheet time: 33mins
A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud.
Which activities related to a Snowball Edge device are available to the company at no cost?
A. Use of the Snowball Edge appliance for a 10-day period
B. The transfer of data out of Amazon S3 and to the Snowball Edge appliance
C. The transfer of data from the Snowball Edge appliance into Amazon S3
D. Daily use of the Snowball Edge appliance after 10 days
A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices.
Which AWS service can the company use to meet these requirements?
AWS Trusted Advisor
Amazon Inspector
AWS Config
Amazon GuardDuty
A company has a centralized group of users with large file storage requirements that have exceeded the space available on premises. The company wants to extend its file storage capabilities for this group while retaining the performance benefit of sharing content locally.
What is the MOST operationally efficient AWS solution for this scenario?
Create an Amazon S3 bucket for each user. Mount each bucket by using an S3 file system mounting utility.
Configure and deploy an AWS Storage Gateway file gateway. Connect each user’s workstation to the file gateway.
Move each user’s working environment to Amazon WorkSpaces. Set up an Amazon WorkDocs account for each user.
Deploy an Amazon EC2 instance and attach an Amazon Elastic Block Store (Amazon EBS) Provisioned IOPS volume. Share the EBS volume directly with the users.
Which AWS service can identify when an Amazon EC2 instance was terminated?
AWS Identity and Access Management (IAM)
AWS CloudTrail
AWS Compute Optimizer
Amazon EventBridge
Which of the following services can be used to block network traffic to an instance? (Choose two.)
Security groups
Amazon Virtual Private Cloud (Amazon VPC) flow logs
Network ACLs
Amazon CloudWatch
AWS CloudTrail
Which AWS service gives users the ability to discover and protect sensitive data that is stored in Amazon S3 buckets?
Amazon Macie
Amazon Detective
Amazon GuardDuty
AWS IAM Access Analyzer
A company has a test AWS environment. A company is planning on testing an application within AWS. The application testing can be interrupted and does not need to run continuously.
Which Amazon EC2 purchasing option will meet these requirements MOST cost-effectively?
On-Demand Instance
Dedicated Instances
Spot Instances
Reserved Instances
A company is using Amazon DynamoDB.
Which task is the company’s responsibility, according to the AWS shared responsibility model?
Patch the operating system.
Provision hosts.
Manage database access permissions.
Secure the operating system.
Which AWS service is always provided at no charge?
Amazon S3
AWS Identity and Access Management (IAM)
Elastic Load Balancers
AWS WAF
Which AWS service is a cloud security posture management (CSPM) service that aggregates alerts from various AWS services and partner products in a standardized format?
AWS Security Hub
AWS Trusted Advisor
Amazon EventBridge
Amazon GuardDuty
A company is developing an application that uses multiple AWS services. The application needs to use temporary, limited-privilege credentials for authentication with other AWS APIs.
Which AWS service or feature should the company use to meet these authentication requirements?
Amazon API Gateway
IAM users
AWS Security Token Service (AWS STS)
IAM instance profiles
Which of the following is a software development framework that a company can use to define cloud resources as code and provision the resources through AWS CloudFormation?
AWS CLI
AWS Developer Center
AWS Cloud Development Kit (AWS CDK)
AWS CodeStar
Which option is a benefit of the economies of scale based on the advantages of cloud computing?
The ability to trade variable expense for fixed expense
. Increased speed and agility
Lower variable costs over fixed costs
Increased operational costs across data centers
A company is building an application that needs to deliver images and videos globally with minimal latency.
Which approach can the company use to accomplish this in a cost effective manner?
Deliver the content through Amazon CloudFront.
Store the content on Amazon S3 and enable S3 cross-region replication.
Implement a VPN across multiple AWS Regions.
Deliver the content through AWS PrivateLink.
A company is exploring the use of the AWS Cloud, and needs to create a cost estimate for a project before the infrastructure is provisioned.
Which AWS service or feature can be used to estimate costs before deployment?
AWS Free Tier
AWS Pricing Calculator
AWS Billing and Cost Management
AWS Cost and Usage Report
A company wants to migrate its on-premises relational databases to the AWS Cloud. The company wants to use infrastructure as close to its current geographical location as possible.
Which AWS service or resource should the company use to select its Amazon RDS deployment area?
Amazon Connect
AWS Wavelength
AWS Regions
. AWS Direct Connect
A company wants to make an upfront commitment for continued use of its production Amazon EC2 instances in exchange for a reduced overall cost.
Which pricing options meet these requirements with the LOWEST cost? (Choose two.)
Spot Instances
On-Demand Instances
Reserved Instances
Savings Plans
Dedicated Hosts
Which AWS Cloud Adoption Framework (AWS CAF) capability belongs to the people perspective?
Data architecture
Event management
Cloud fluency
Strategic partnership
Which AWS service can be used at no additional cost?
Amazon SageMaker
AWS Config
AWS Organizations
Amazon CloudWatch
A company has 5 TB of data stored in Amazon S3. The company plans to occasionally run queries on the data for analysis.
Which AWS service should the company use to run these queries in the MOST cost-effective manner?
Amazon Redshift
Amazon Athena
Amazon Kinesis
Amazon RDS
What is a customer responsibility when using AWS Lambda according to the AWS shared responsibility model?
Managing the code within the Lambda function
Confirming that the hardware is working in the data center
Patching the operating system
Shutting down Lambda functions when they are no longer in use
Which service enables customers to audit API calls in their AWS accounts?
AWS CloudTrail
AWS Trusted Advisor
Amazon Inspector
AWS X-Ray
Elasticity in the AWS Cloud refers to which of the following? (Choose two.)
How quickly an Amazon EC2 instance can be restarted
The ability to rightsize resources as demand shifts
The maximum amount of RAM an Amazon EC2 instance can use
The pay-as-you-go billing model
How easily resources can be procured when they are needed
A company is setting up AWS Identity and Access Management (IAM) on an AWS account.
Which recommendation complies with IAM security best practices?
Use the account root user access keys for administrative tasks.
Grant broad permissions so that all company employees can access the resources they need.
Turn on multi-factor authentication (MFA) for added security during the login process.
Avoid rotating credentials to prevent issues in production applications.
An ecommerce company has migrated its IT infrastructure from an on-premises data center to the AWS Cloud.
Which cost is the company’s direct responsibility?
Cost of application software licenses
Cost of the hardware infrastructure on AWS
C. Cost of power for the AWS servers
. Cost of physical security for the AWS data center
A cloud practitioner needs to obtain AWS compliance reports before migrating an environment to the AWS Cloud.
How can these reports be generated?
Contact the AWS Compliance team.
. Download the reports from AWS Artifact.
Open a case with AWS Support.
Generate the reports with Amazon Macie.
Which AWS service or feature identifies whether an Amazon S3 bucket or an IAM role has been shared with an external entity?
. AWS Service Catalog
. AWS Systems Manager
AWS IAM Access Analyzer
AWS Organizations
A company needs to block SQL injection attacks.
Which AWS service or feature can meet this requirement?
AWS WAF
AWS Shield
Network ACLs
Security groups
What does the concept of agility mean in AWS Cloud computing? (Choose two.)
The speed at which AWS resources are implemented
The speed at which AWS creates new AWS Regions
The ability to experiment quickly
The elimination of wasted capacity
The low cost of entry into cloud computing
A company runs thousands of simultaneous simulations using AWS Batch. Each simulation is stateless, is fault tolerant, and runs for up to 3 hours.
Which pricing model enables the company to optimize costs and meet these requirements?
Reserved Instances
Spot Instances
On-Demand Instances
Dedicated Instances
A user needs programmatic access to AWS resources through the AWS CLI or the AWS API.
Which option will provide the user with the appropriate access?
Amazon Inspector
Access keys
SSH public keys
AWS Key Management Service (AWS KMS) keys
Which AWS service or feature is used to send both text and email messages from distributed applications?
Amazon Simple Notification Service (Amazon SNS)
Amazon Simple Email Service (Amazon SES)
Amazon CloudWatch alerts
Amazon Simple Queue Service (Amazon SQS)
Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
Availability
Reliability
calability
Responsive design
Operational excellence
Which tasks are customer responsibilities, according to the AWS shared responsibility model? (Choose two.)
Configure the AWS provided security group firewall.
Classify company assets in the AWS Cloud.
. Determine which Availability Zones to use for Amazon S3 buckets.
Patch or upgrade Amazon DynamoDB.
. Select Amazon EC2 instances to run AWS Lambda on.
Which AWS service or resource provides answers to the most frequently asked security-related questions that AWS receives from its users?
AWS Artifact
Amazon Connect
. AWS Chatbot
. AWS Knowledge Center
A company wants to receive a notification when a specific AWS cost threshold is reached.
Which AWS services or tools can the company use to meet this requirement? (Choose two.)
Amazon Simple Queue Service (Amazon SQS)
AWS Budgets
Cost Explorer
Amazon CloudWatch
AWS Cost and Usage Report
A company has an AWS account. The company wants to audit its password and access key rotation details for compliance purposes.
Which AWS service or tool will meet this requirement?
IAM Access Analyzer
AWS Artifact
IAM credential report
AWS Audit Manager
A company is running a monolithic on-premises application that does not scale and is difficult to maintain. The company has a plan to migrate the application to AWS and divide the application into microservices.
Which best practice of the AWS Well-Architected Framework is the company following with this plan?
Integrate functional testing as part of AWS deployment.
Use automation to deploy changes.
Deploy the application to multiple locations.
Implement loosely coupled dependencies.
What is the purpose of having an internet gateway within a VPC?
To create a VPN connection to the VPC
To allow communication between the VPC and the internet
To impose bandwidth constraints on internet traffic
To load balance traffic from the internet across Amazon EC2 instances
A company wants to protect its AWS Cloud information, systems, and assets while performing risk assessment and mitigation tasks.
Which pillar of the AWS Well-Architected Framework is supported by these goals?
Reliability
Security
Operational excellence
Performance efficiency
Which option is a physical location of the AWS global infrastructure?
AWS DataSync
AWS Region
Amazon Connect
AWS Organizations
Which AWS service or feature allows a user to establish a dedicated network connection between a company’s on-premises data center and the AWS Cloud?
AWS Direct Connect
VPC peering
AWS VPN
Amazon Route 53
An online gaming company needs to choose a purchasing option to run its Amazon EC2 instances for 1 year. The web traffic is consistent, and any increases in traffic are predictable. The EC2 instances must be online and available without any disruption.
Which EC2 instance purchasing option will meet these requirements MOST cost-effectively?
On-Demand Instances
Reserved Instances
Spot Instances
Spot Fleet
Which AWS service provides the ability to manage infrastructure as code?
AWS CodePipeline
AWS CodeDeploy
AWS Direct Connect
AWS CloudFormation
A company is storing sensitive customer data in an Amazon S3 bucket. The company wants to protect the data from accidental deletion or overwriting.
Which S3 feature should the company use to meet these requirements?
S3 Lifecycle rules
S3 Versioning
S3 bucket policies
. S3 server-side encryption
A developer wants to deploy an application quickly on AWS without manually creating the required resources.
Which AWS service will meet these requirements?
Amazon EC2
AWS Elastic Beanstalk
AWS CodeBuild
Amazon Personalize
An e-learning platform needs to run an application for 2 months each year. The application will be deployed on Amazon EC2 instances. Any application downtime during those 2 months must be avoided.
Which EC2 purchasing option will meet these requirements MOST cost-effectively?
. Reserved Instances
Dedicated Hosts
Spot Instances
On-Demand Instances
A global company wants to migrate its third-party applications to the AWS Cloud. The company wants help from a global team of experts to complete the migration faster and more reliably in accordance with AWS internal best practices.
Which AWS service or resource will meet these requirements?
AWS Support
AWS Professional Services
AWS Launch Wizard
AWS Managed Services (AMS)
A company is using a central data platform to manage multiple types of data for its customers. The company wants to use AWS services to discover, transform, and visualize the data.
Which combination of AWS services should the company use to meet these requirements? (Choose two.)
AWS Glue
. Amazon Elastic File System (Amazon EFS)
Amazon Redshift
Amazon QuickSight
Amazon Quantum Ledger Database (Amazon QLDB)
Which AWS service or tool helps users visualize, understand, and manage spending and usage over time?
AWS Organizations
AWS Pricing Calculator
AWS Cost Explorer
AWS Service Catalog
A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates.
Which AWS service will meet this requirement?
AWS Resource Explorer
AWS Service Catalog
AWS Organizations
AWS Systems Manager
Which of the following is an advantage that users experience when they move on-premises workloads to the AWS Cloud?
Elimination of expenses for running and maintaining data centers
Price discounts that are identical to discounts from hardware providers
Distribution of all operational controls to AWS
Elimination of operational expenses
A customer needs to determine Total Cost of Ownership (TCO) for a workload that requires physical isolation. Which hosting model should be used?
Reserved Instances
Dedicated Hosts
On-Demand Instances
Spot Instances
Under the shared responsibility model, which of the following is a shared control between a customer and AWS? (Select TWO)
Physical controls.
Patch management.
Zone security.Zone security.
Data center auditing.
Which design principles are enabled by the AWS Cloud to improve the operation of workloads? (Select TWO)
Loose coupling
Customized hardware
Remove single points of failure
Minimize platform designMinimize platform design
Least privilege
Which of the following are main components of the AWS global infrastructure? (Select TWO)
Resource groups.
Points-of-presence
Security groups.
Regions.
Datacenters.
How do customers benefit from Amazon’s massive economies of scale?
Periodic price reductions as the result of Amazon’s operational efficiencies.
New Amazon EC2 instance types providing the latest hardware.
The ability to scale up and down when needed.
Increased reliability in the underlying hardware of Amazon EC2 instances.
Which of the following is a fully managed MySQL-compatible database?
. Amazon S3
Amazon DynamoDB
Amazon Redshift
Amazon Aurora
Which AWS service supports a hybrid architecture that gives users the ability to extend AWS infrastructure, AWS services, APIs, and tools to data centers, co-location environments, or on-premises facilities?
AWS Snowmobile
AWS Local Zones
AWS Outposts
AWS Fargate
A company wants to provide managed Windows virtual desktops and applications to its remote employees over secure network connections.
Which AWS services can the company use to meet these requirements? (Choose two.)
Amazon Connect
Amazon AppStream 2.0
Amazon WorkSpaces
AWS Site-to-Site VPN
Amazon Elastic Container Service (Amazon ECS)
A company wants to monitor for misconfigured security groups that are allowing unrestricted access to specific ports.
Which AWS service will meet this requirement?
AWS Trusted Advisor
Amazon CloudWatch
Amazon GuardDuty
AWS Health Dashboard
Which AWS service is a key-value database that provides sub-millisecond latency on a large scale?
Amazon DynamoDB
Amazon Aurora
Amazon DocumentDB (with MongoDB compatibility)
mazon Neptune
When architecting cloud applications, which of the following is a key design principle?
Use the largest instance possible.
Provision capacity for peak load.
Use the principle of least privilege.
Implement the layered security model.
A network engineer needs to build a hybrid cloud architecture connecting on-premises networks to the AWS Cloud using AWS Direct Connect. The company has a few VPCs in a single AWS Region and expects to increase the number of VPCs to hundreds over time.
Which AWS service or feature should the engineer use to simplify and scale this connectivity as the VPCs increase in number?
VPC endpoints
AWS Transit Gateway
Amazon Route 53
AWS Secrets Manager
Which AWS services or features provide disaster recovery solutions for Amazon EC2 instances? (Choose two.)
EC2 Reserved Instances
EC2 Amazon Machine Images (AMIs)
Amazon Elastic Block Store (Amazon EBS) snapshots
. AWS Shield
Amazon GuardDuty
