Font size
WorksheetsAWS Dump Questions
Total questions: 64
Worksheet time: 37mins
Which AWS support plans provide access to AWS Incident Detection and Response at an additional cost?
AWS Developer Support
AWS Business Support
AWS Enterprise On-Ramp Support
AWS Enterprise Support
Which AWS support plans provide customers with annual consultative and architectural guidance?
AWS Developer Support
AWS Business Support
AWS Enterprise On-Ramp Support
AWS Enterprise Support
A company needs to connect multiple VPCs and on-premises networks through a single network connection to the AWS cloud. Which solution meets this requirement?
AWS Transit Gateway
AWS Direct Connect
AWS VPC Peering
AWS Client VPN
Which actions are the responsibility of AWS under the AWS Shared Responsibility Model?
Scanning AWS Service Endpoints for Vulnerabilities
Enabling Encryption on an Amazon S3 Bucket
Configuring Security Group Rules
Encrypting Traffic on the AWS Backbone between Global and Regional AWS Facilities
Which AWS service helps protect applications against Distributed Denial of Service (DDoS) attacks?
AWS Firewall Manager
AWS Shield
Amazon Inspector
AWS Config
Which TWO of the following are responsibilities of customers when using AWS services?
Managing physical security of AWS data centers
Patching the guest operating system
Patching the network infrastructure
Configuring security groups
Maintaining hardware components
Which AWS service allows users to run code without provisioning or managing servers?
Amazon EC2
AWS Fargate
AWS Lambda
AWS Elastic Beanstalk
Which service provides a virtual firewall to control inbound and outbound traffic for Amazon EC2 instances?
AWS WAF
AWS Shield
Security Groups
Network ACLs
Which AWS service enables you to manage users and their access to AWS services and resources?
AWS Directory Service
AWS IAM
Amazon Cognito
AWS KMS
Which service lets you set up private network connectivity between your data center and AWS?
AWS VPN
Amazon VPC
AWS Direct Connect
AWS Transit Gateway
Which service allows AWS customers to define a virtual network in their AWS account?
Amazon EC2
Amazon VPC
AWS Direct Connect
AWS Lambda
Which service helps detect unauthorized and malicious activity in your AWS accounts?
AWS CloudTrail
AWS Config
Amazon Inspector
Amazon GuardDuty
Which AWS service makes it easier to migrate databases to AWS quickly and securely?
AWS Database Migration Service (DMS)
AWS Snowball
Amazon RDS
AWS DataSync
Which AWS support plan provides a Technical Account Manager (TAM)?
Developer Support
Business Support
Enterprise On-Ramp Support
Enterprise Support
A company has an AWS account. The company wants to audit its password and access key rotation details. For compliance purposes, which AWS service or tool will meet this requirement?
IAM Access Analyzer
AWS Artifact
IAM Credential Report
AWS Audit Manager
A company needs to use an offline transfer strategy to move petabytes of databases, backups, and data records from on-premises to the AWS cloud. Which solution will meet this requirement with the most operational efficiency?
AWS Snowball Edge Compute Optimization
AWS Snowcone Devices
AWS Storage Gateway
AWS DataSync
Which actions are the responsibility of AWS under the AWS Shared Responsibility Model?
Scanning AWS services, service endpoints for vulnerabilities
Enabling encryption on an Amazon S3 bucket
Configuring security group rules
Encrypting traffic on the AWS backbone between global and regional AWS services
A company plans to deploy its application globally. The company wants to cache content at edge locations and deliver the content to users with the lowest possible latency. Which AWS service will meet these requirements?
AWS Global Accelerator
AWS Outposts
Amazon Route 53
Amazon CloudFront
A company needs to identify personally identifiable information such as credit card numbers from data stored in Amazon S3. Which AWS service should the company use?
Amazon Inspector
AWS Shield
Amazon GuardDuty
Amazon Macie
A company uses AWS Organizations. The company wants to apply security best practices from the AWS Well-Architected Framework to all of its AWS accounts. Which service will meet these requirements?
Amazon Macie
Amazon Detective
AWS Control Tower
AWS Secrets Manager
Which AWS services or features enable users to connect an on-premises network to a VPC?
AWS VPN
Elastic Load Balancer
AWS Direct Connect
Amazon CloudFront
A company needs to invoke an AWS Step Functions workflow each time an Amazon EC2 instance changes to 'running'. Which AWS service can the company use to meet these requirements?
Amazon SageMaker
Amazon Connect
Amazon EventBridge
AWS Fargate
A company needs a serverless data integration service to discover, prepare, and combine data for analytics. Which AWS service will meet these requirements?
Amazon EMR
Amazon Redshift
AWS Glue
AWS Step Functions
A company plans to move its test workloads to Amazon EC2. The test workloads can be interrupted and are not required to start at a particular time. Which EC2 instance purchase option is most cost-effective for this use case?
On-Demand Instances
Spot Instances
A company needs to manage multiple AWS accounts in a single unit. A company must consolidate billing for all the accounts. Which AWS service should the company use to meet these requirements?
AWS Organizations
AWS Resource Access Manager
AWS IAM
AWS Control Tower
A team of researchers is going to collect data at remote locations around the world. Many locations do not have internet connectivity. The team needs to capture the data in the field and transfer it to the cloud later. Which AWS service will support this requirement?
AWS Outposts
AWS Transfer Family
AWS Snow Family
AWS Migration Hub
Which of the following is a pillar of the AWS Well-Architected Framework?
Redundancy
Operational Excellence
Availability
Multi-Region
A company wants to know more about the benefits offered by cloud computing. The company wants to understand the operational advantage of agility. How does AWS provide agility for users?
The ability to ensure high availability by deploying workloads to multiple regions
Apply Azure Go model for many services and resources
The ability to transfer infrastructure management to the AWS cloud
The ability to provision and deprovision resources quickly with minimal effort
A company needs to encrypt data at rest in the AWS cloud by using an encryption key that the company controls. Which AWS service should the company use to meet this requirement?
AWS Certificate Manager
AWS Cognito
AWS Key Management Service
AWS Trusted Advisor
Which AWS service should a cloud engineer use to view API calls to AWS services?
Amazon CloudWatch
AWS CloudTrail
AWS Config
AWS Artifact
A company needs an AWS Support plan that provides programmatic case management through AWS Support API. Which plan is the most cost-effective?
Developer Support Plan
Basic Support Plan
Business Support Plan
Enterprise Support Plan
Which AWS Support plan is the most economical plan that includes access to AWS Support APIs?
AWS Business Support
AWS Basic Support
AWS Developer Support
AWS Enterprise Support
Which cloud concept is demonstrated by using AWS Cost Explorer?
Rightsizing
Reliability
Resilience
Modernization
Which AWS service can a company use to create a private, secured, and scalable network environment in the AWS Cloud?
Amazon ECS
Amazon S3
Amazon VPC
Route Tables
A. The software's data encryption is managed by a third-party vendor. B. The software has been evaluated by vendors to ensure that it will run on AWS. C. Users do not need to upgrade to newer software versions. D. Users do not need to conduct security testing on the software.
The software's data encryption is managed by a third-party vendor.
The software has been evaluated by vendors to ensure that it will run on AWS.
Users do not need to upgrade to newer software versions.
Users do not need to conduct security testing on the software.
Which task is the responsibility of AWS, according to the AWS shared responsibility model?
Patch AWS network devices.
Set user password rules.
Provide physical security for compute resources.
Configure security groups.
Which AWS service requires customers to be fully responsible for applying OS patches?
Amazon DynamoDB
AWS Lambda
AWS Fargate
Amazon EC2
Which action should a company take to improve security in AWS accounts?
Which of the following is the best practice for securing privileged users in AWS?
Require multi-factor authentication (MFA) for privileged users
Remove the root user account
Create an access key for the AWS account root user
Create an access key for each privileged user
Which AWS feature is a deployable EC2 instance template that is prepackaged with software and security requirements?
Amazon EBS volume
AWS CloudFormation template
Amazon EBS snapshot
Amazon Machine Image (AMI)
Which AWS Cloud Adoption Framework (CAF) security perspective capability helps identify security misconfigurations?
Identity and access management
Threat detection
Platform engineering
Availability and continuity management
A company wants to receive a notification via Amazon SNS when its AWS bill exceeds a certain amount. Which service should it use?
AWS Budgets
AWS CloudTrail
AWS Cost Explorer
AWS CloudFormation
Which AWS service can be used to set up billing alarms and receive notifications when monthly costs exceed a predefined threshold?
Amazon CloudWatch
AWS Cost Explorer
AWS Cost and Usage Report
AWS Pricing Calculator
Which AWS service provides a scalable data warehouse solution?
Amazon S3
Amazon DynamoDB
Amazon Kinesis Data Streams
Amazon Redshift
Which responsibility falls on customers when using Amazon DynamoDB?
Patch the operating system
Provision hosts
Manage database access permissions
Secure the operating system
Which benefits does AWS Cloud offer?
A company runs EC2 instances in a private subnet. How can they enable internet access?
Gateway endpoint
NAT gateway
Network Load Balancer
Amazon Route 53
A company needs temporary credentials for an application to access AWS resources. Which AWS service provides this?
AWS KMS
AWS CloudHSM
Amazon Cognito
AWS Security Token Service (STS)
What is an AWS Cloud best practice for elasticity and agility?
Provision capacity based on past usage and theoretical peaks
Dynamically scale to meet usage demands
Build applications in a data center that grants physical access
A company needs to run an application for a few hours daily. Which EC2 pricing model should they choose?
EC2 Standard Reserved Instances
EC2 On-Demand Instances
AWS Wavelength
Application Load Balancer
Which AWS Well-Architected Framework pillar focuses on efficient resource allocation?
Reliability
Operational excellence
Performance efficiency
Sustainability
Which AWS service allows users to deploy identical AWS resources using infrastructure templates?
AWS CloudFormation
AWS Directory Service
Amazon Lightsail
AWS CodeDeploy
Which AWS service allows companies to analyze AWS spending patterns over time?
AWS Pricing Calculator
AWS Cost and Usage Report
AWS Budgets
AWS Cost Explorer
Which AWS service provides a fully managed relational database?
Amazon DynamoDB
Amazon Redshift
Amazon RDS
AWS Lambda
What AWS service provides secure VPN connections to an on-premises network?
AWS Transit Gateway
AWS Direct Connect
AWS Site-to-Site VPN
AWS Snowball
What AWS service helps automate application deployment?
AWS CodeDeploy
AWS Glue
Amazon SageMaker
AWS Lambda
Which AWS service protects applications from DDoS attacks?
AWS WAF
AWS Shield
AWS Security Hub
AWS Firewall Manager
Amazon is deploying a mobile app on AWS. Thousands of users will access the app. Which AWS service should the company use to create a directory to manage sign-in for the users?
Amazon Cognito
Amazon S3
AWS Lambda
Amazon EC2
Which AWS service is designed for user authentication, authorization, and user management for web and mobile apps?
AWS Directory Service
AWS IAM Identity Center
Amazon Cognito
AWS Identity and Access Management (IAM)
Which option uses shared control between AWS and the customer according to the AWS Shared Responsibility Model?
Configuration Management
Physical and Environmental Controls
Data Integrity and Authentication
Identity and Access Management
A company needs to block SQL injection attacks. Which AWS service or feature can meet this requirement?
AWS WAF
AWS Shield
Network ACLs
Network Groups
Which AWS service or feature can a company use to apply security rules to a subnet for Amazon EC2 instances?
AWS WAF
AWS Shield
Network ACLs
Security Groups
Which part of the AWS global infrastructure does Amazon CloudFront use to cache copies of content for rapid delivery to global access?
Edge Locations
Availability Zones
AWS Regions
Local Zones
A company plans to migrate its application to AWS and run the application on Amazon EC2 instances. The application will have continuous usage for one year. Which EC2 instance purchasing option will meet these requirements most cost-effectively?
Reserved Instances
Spot Instances
On-Demand Instances
Dedicated Hosts
