[Modified/Added] Practice Exam 6 & 7 Added
This commit is contained in:
@@ -15,5 +15,7 @@ If this guide has been helpful to you please share it with others and react to t
|
||||
- [Practice Exam - 3](./practice-exam-3.md)
|
||||
- [Practice Exam - 4](./practice-exam-4.md)
|
||||
- [Practice Exam - 5](./practice-exam-5.md)
|
||||
- [Practice Exam - 6](./practice-exam-6.md)
|
||||
- [Practice Exam - 7](./practice-exam-7.md)
|
||||
|
||||
#### We will be adding more practice exam
|
||||
|
||||
786
practice-exam/practice-exam-6.md
Normal file
786
practice-exam/practice-exam-6.md
Normal file
@@ -0,0 +1,786 @@
|
||||
# Practice Exam 6
|
||||
|
||||
Click on the **Answer** button for the correct answer and its explanation.
|
||||
|
||||
If this practice exam has been helpful to you please share it with others and react to this below.
|
||||
|
||||
---
|
||||
|
||||
1. Under the AWS shared responsibility model, which of the following is an example of security in the AWS Cloud?
|
||||
- A. Managing edge locations
|
||||
- B. Physical security
|
||||
- C. Firewall configuration
|
||||
- D. Global infrastructure
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/compliance/shared-responsibility-model/>
|
||||
|
||||
</details>
|
||||
|
||||
2. How can an AWS user with an AWS Basic Support plan obtain technical assistance from AWS?
|
||||
- A. AWS Senior Support Engineers
|
||||
- B. AWS Technical Account Managers
|
||||
- C. AWS Trusted Advisor
|
||||
- D. AWS Discussion Forums
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/faqs/>
|
||||
|
||||
</details>
|
||||
|
||||
3. Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)
|
||||
- A. Multiple Availability Zones
|
||||
- B. Performance efficiency
|
||||
- C. Security
|
||||
- D. Encryption usage
|
||||
- E. High availability
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BC
|
||||
|
||||
Explanation: <https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf>
|
||||
|
||||
</details>
|
||||
|
||||
4. After selecting an Amazon EC2 Dedicated Host reservation, which pricing option would provide the largest discount?
|
||||
- A. No upfront payment
|
||||
- B. Hourly on-demand payment
|
||||
- C. Partial upfront payment
|
||||
- D. All upfront payment
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/ec2/pricing/reserved-instances/pricing/>
|
||||
|
||||
</details>
|
||||
|
||||
5. What is an advantage of deploying an application across multiple Availability Zones?
|
||||
- A. There is a lower risk of service failure if a natural disaster causes a service disruption in a given AWS Region.
|
||||
- B. The application will have higher availability because it can withstand a service disruption in one Availability Zone.
|
||||
- C. There will be better coverage as Availability Zones are geographically distant and can serve a wider area.
|
||||
- D. There will be decreased application latency that will improve the user experience.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html>
|
||||
|
||||
</details>
|
||||
|
||||
6. A Cloud Practitioner is asked how to estimate the cost of using a new application on AWS. <br/> What is the MOST appropriate response?
|
||||
- A. Inform the user that AWS pricing allows for on-demand pricing.
|
||||
- B. Direct the user to the AWS Simple Monthly Calculator for an estimate.
|
||||
- C. Use Amazon QuickSight to analyze current spending on-premises.
|
||||
- D. Use Amazon AppStream 2.0 for real-time pricing analytics.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/knowledge-center/estimating-aws-resource-costs/>
|
||||
|
||||
</details>
|
||||
|
||||
7. A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. <br/> What combination of actions will enable the company to accomplish this goal? (Choose two.)
|
||||
- A. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated.
|
||||
- B. Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC.
|
||||
- C. Use Amazon Athena to query data from the on-premises database servers.
|
||||
- D. Connect the company's on-premises data center to AWS using AWS Direct Connect.
|
||||
- E. Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BD
|
||||
|
||||
Explanation: <https://aws.amazon.com/blogs/apn/amazon-vpc-for-on-premises-network-engineers-part-one/>
|
||||
|
||||
</details>
|
||||
|
||||
8. A web application running on AWS has been spammed with malicious requests from a recurring set of IP addresses. <br/> Which AWS service can help secure the application and block the malicious traffic?
|
||||
- A. AWS IAM
|
||||
- B. Amazon GuardDuty
|
||||
- C. Amazon Simple Notification Service (Amazon SNS)
|
||||
- D. AWS WAF
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- AWS WAF is a web application firewall that helps protect web applications from common web exploits that could affect application availability, compromise security, or consume excessive resources.
|
||||
- You can use AWS WAF to define customizable web security rules that control which traffic accesses your web applications.
|
||||
- If you use AWS Shield Advanced, you can use AWS WAF at no extra cost for those protected resources and can engage the DRT to create WAF rules.
|
||||
|
||||
Reference: <https://aws.amazon.com/answers/networking/aws-ddos-attack-mitigation/>
|
||||
|
||||
</details>
|
||||
|
||||
9. Treating infrastructure as code in the AWS Cloud allows users to:
|
||||
- A. automate migration of on-premises hardware to AWS data centers.
|
||||
- B. let a third party automate an audit of the AWS infrastructure.
|
||||
- C. turn over application code to AWS so it can run on the AWS infrastructure.
|
||||
- D. automate the infrastructure provisioning process.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://asperbrothers.com/blog/infrastructure-as-code-aws/>
|
||||
|
||||
</details>
|
||||
|
||||
10. A company requires a dedicated network connection between its on-premises servers and the AWS Cloud. <br/> Which AWS service should be used?
|
||||
- A. AWS VPN
|
||||
- B. AWS Direct Connect
|
||||
- C. Amazon API Gateway
|
||||
- D. Amazon Connect
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
- You can use AWS Direct Connect to establish a private virtual interface from your on-premise network directly to your Amazon VPC, providing you with a private, high bandwidth network connection between your network and your VPC.
|
||||
- With multiple virtual interfaces, you can even establish private connectivity to multiple VPCs while maintaining network isolation.
|
||||
|
||||
Reference: <https://aws.amazon.com/directconnect/>
|
||||
|
||||
</details>
|
||||
|
||||
11. Which AWS service can be used to query stored datasets directly from Amazon S3 using standard SQL?
|
||||
- A. AWS Glue
|
||||
- B. AWS Data Pipeline
|
||||
- C. Amazon CloudSearch
|
||||
- D. Amazon Athena
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- Amazon Athena is defined as "an interactive query service that makes it easy to analyze data directly in Amazon Simple Storage Service (Amazon S3) using standard SQL." So, it's another SQL query engine for large data sets stored in S3.
|
||||
- This is very similar to other SQL query engines, such as Apache Drill.
|
||||
- But unlike Apache Drill, Athena is limited to data only from Amazon's own S3 storage service. However, Athena is able to query a variety of file formats, including, but not limited to CSV, Parquet, JSON, etc.
|
||||
|
||||
</details>
|
||||
|
||||
12. AWS CloudFormation is designed to help the user:
|
||||
- A. model and provision resources.
|
||||
- B. update application code.
|
||||
- C. set up data lakes.
|
||||
- D. create reports for billing.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- AWS CloudFormation provides a common language for you to model and provision AWS and third party application resources in your cloud environment.
|
||||
- AWS CloudFormation allows you to use programming languages or a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.
|
||||
- This gives you a single source of truth for your AWS and third party resources.
|
||||
|
||||
Reference: <https://aws.amazon.com/cloudformation/>
|
||||
|
||||
</details>
|
||||
|
||||
13. Which of the following is an AWS database service?
|
||||
- A. Amazon Redshift
|
||||
- B. Amazon Elastic Block Store (Amazon EBS)
|
||||
- C. Amazon S3 Glacier
|
||||
- D. AWS Snowball
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://www.sisense.com/glossary/redshift-database/>
|
||||
|
||||
</details>
|
||||
|
||||
14. A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. <br/> What is the SIMPLEST way to do this?
|
||||
- A. Review the inbound rules for each security group in the Amazon EC2 management console to check for port 0.0.0.0/0.
|
||||
- B. Run AWS Trusted Advisor and review the findings.
|
||||
- C. Open the AWS IAM console and check the inbound rule filters for open access.
|
||||
- D. In AWS Config, create a custom rule that invokes an AWS Lambda function to review rules for inbound access.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/ec2-security-groups.html>
|
||||
|
||||
</details>
|
||||
|
||||
15. What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Choose two.)
|
||||
- A. AWS automatically distributes the data globally for higher durability.
|
||||
- B. AWS will take care of operating the application.
|
||||
- C. AWS makes it easy to architect for high availability.
|
||||
- D. AWS can easily accommodate application demand changes.
|
||||
- E. AWS takes care application security patching.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: CD
|
||||
|
||||
</details>
|
||||
|
||||
16. A user needs an automated security assessment report that will identify unintended network access to Amazon EC2 instances and vulnerabilities on those instances. <br/> Which AWS service will provide this assessment report?
|
||||
- A. EC2 security groups
|
||||
- B. AWS Config
|
||||
- C. Amazon Macie
|
||||
- D. Amazon Inspector
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- Amazon Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.
|
||||
- AmazonInspector automatically assesses applications for exposure, vulnerabilities, and deviations from best practices.
|
||||
- After performing an assessment, Amazon Inspector produces a detailed list of security findings prioritized by level of severity.
|
||||
- These findings can be reviewed directly or as part of detailed assessment reports which are available via the Amazon Inspector console or API.
|
||||
|
||||
Reference: <https://aws.amazon.com/inspector/>
|
||||
|
||||
</details>
|
||||
|
||||
17. How can a company isolate the costs of production and non-production workloads on AWS?
|
||||
- A. Create Identity and Access Management (IAM) roles for production and non-production workloads.
|
||||
- B. Use different accounts for production and non-production expenses.
|
||||
- C. Use Amazon EC2 for non-production workloads and other services for production workloads.
|
||||
- D. Use Amazon CloudWatch to monitor the use of services.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/answers/account-management/aws-multi-account-billing-strategy/>
|
||||
|
||||
</details>
|
||||
|
||||
18. Where can users find a catalog of AWS-recognized providers of third-party security solutions?
|
||||
- A. AWS Service Catalog
|
||||
- B. AWS Marketplace
|
||||
- C. AWS Quick Start
|
||||
- D. AWS CodeDeploy
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- AWS Service Catalog Delivery Partners are APN Consulting Partners who help create catalogs of IT services that are approved by the customer's organization for use on AWS.
|
||||
- With AWS Service Catalog, customers and partners can centrally manage commonly deployed IT services to help achieve consistent governance and meet compliance requirements while enabling users to self-provision approved services.
|
||||
|
||||
Reference: <https://aws.amazon.com/servicecatalog/partners/>
|
||||
|
||||
</details>
|
||||
|
||||
19. A Cloud Practitioner needs to store data for 7 years to meet regulatory requirements. <br/> Which AWS service will meet this requirement at the LOWEST cost?
|
||||
- A. Amazon S3
|
||||
- B. AWS Snowball
|
||||
- C. Amazon Redshift
|
||||
- D. Amazon S3 Glacier
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- S3 Glacier Deep Archive is Amazon S3's lowest-cost storage class and supports long-term retention and digital preservation for data that may be accessed once or twice in a year.
|
||||
- It is designed for customers --particularly those in highly-regulated industries, such as the Financial Services, Healthcare, and Public Sectors -- that retain data sets for 7-10 years or longer to meet regulatory compliance requirements.
|
||||
- S3 Glacier Deep Archive can also be used for backup and disaster recovery use cases, and is a cost-effective and easy-to-manage alternative to magnetic tape systems, whether they are on-premises libraries or off-premises services.
|
||||
|
||||
Reference: <https://aws.amazon.com/s3/storage-classes/>
|
||||
|
||||
</details>
|
||||
|
||||
20. What are the immediate benefits of using the AWS Cloud? (Choose two.)
|
||||
- A. Increased IT staff.
|
||||
- B. Capital expenses are replaced with variable expenses.
|
||||
- C. User control of infrastructure.
|
||||
- D. Increased agility.
|
||||
- E. AWS holds responsibility for security in the cloud.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: CD
|
||||
|
||||
</details>
|
||||
|
||||
21. Which security service automatically recognizes and classifies sensitive data or intellectual property on AWS?
|
||||
- A. Amazon GuardDuty
|
||||
- B. Amazon Macie
|
||||
- C. Amazon Inspector
|
||||
- D. AWS Shield
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
- Amazon Macie is a security service that uses machine learning to automatically discover, classify, and protect sensitive data in AWS.
|
||||
- Macie recognizes sensitive data such as personally identifiable information (PII) or intellectual property.
|
||||
- It provides you with dashboards and alerts that give visibility into how this data is being accessed or moved.
|
||||
|
||||
Reference: <https://docs.aws.amazon.com/macie/latest/userguide/what-is-macie.html>
|
||||
|
||||
</details>
|
||||
|
||||
22. What is the purpose of AWS Storage Gateway?
|
||||
- A. It ensures on-premises data storage is 99.999999999% durable.
|
||||
- B. It transports petabytes of data to and from AWS.
|
||||
- C. It connects to multiple Amazon EC2 instances.
|
||||
- D. It connects on-premises data storage to the AWS Cloud.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- Moving data to the cloud is not quite as simple as flipping a switch.
|
||||
- For companies that have managed their own data centers or server rooms for decades, there are a few steps to consider --and it's not always wise to pull the plug on an internal infrastructure quite so quickly.
|
||||
- If a startup uses on-premise business servers and then experiences unexpected growth, abandoning those servers doesn't make sense (even if the long-term plan is to do exactly that).
|
||||
- AWS Storage Gateway is a way to bridge this gap for companies of any size.
|
||||
- It's a hybrid storage option that connects on-premise storage including age-old tape backup systems to the cloud in a way that also provides one console to access all storage configurations.
|
||||
|
||||
Reference: <https://www.techradar.com/news/what-is-aws-storage-gateway>
|
||||
|
||||
</details>
|
||||
|
||||
23. What should users do if they want to install an application in geographically isolated locations?
|
||||
- A. Install the application using multiple internet gateways.
|
||||
- B. Deploy the application to an Amazon VPC.
|
||||
- C. Deploy the application to multiple AWS Regions.
|
||||
- D. Configure the application using multiple NAT gateways.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-regions-availability-zones.html>
|
||||
|
||||
</details>
|
||||
|
||||
24. A system in the AWS Cloud is designed to withstand the failure of one or more components. <br/> What is this an example of?
|
||||
- A. Elasticity
|
||||
- B. High Availability
|
||||
- C. Scalability
|
||||
- D. Agility
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://wa.aws.amazon.com/wat.question.REL_7.en.html>
|
||||
|
||||
</details>
|
||||
|
||||
25. A Cloud Practitioner needs a consistent and dedicated connection between AWS resources and an on-premises system. <br/> Which AWS service can fulfill this requirement?
|
||||
- A. AWS Direct Connect
|
||||
- B. AWS VPN
|
||||
- C. Amazon Connect
|
||||
- D. AWS Data Pipeline
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- You can use AWS Direct Connect to establish a private virtual interface from your on-premise network directly to your Amazon VPC, providing you with a private, high bandwidth network connection between your network and your VPC.
|
||||
- With multiple virtual interfaces, you can even establish private connectivity to multiple VPCs while maintaining network isolation.
|
||||
|
||||
Reference: <https://aws.amazon.com/directconnect/>
|
||||
|
||||
</details>
|
||||
|
||||
26. Within the AWS shared responsibility model, who is responsible for security and compliance?
|
||||
- A. The customer is responsible.
|
||||
- B. AWS is responsible.
|
||||
- C. AWS and the customer share responsibility.
|
||||
- D. AWS shares responsibility with the relevant governing body.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation:
|
||||
- Security and Compliance is a shared responsibility between AWS and the customer.
|
||||
- This shared model can help relieve the customer's operational burden as AWS operates, manages and controls the components from the host operating system and virtualization layer down to the physical security of the facilities in which the service operates.
|
||||
|
||||
Reference: <https://aws.amazon.com/compliance/shared-responsibility-model/>
|
||||
|
||||
</details>
|
||||
|
||||
27. To use the AWS CLI, users are required to generate:
|
||||
- A. a password policy.
|
||||
- B. an access/secret key.
|
||||
- C. a managed policy.
|
||||
- D. an API key.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
</details>
|
||||
|
||||
28. Which AWS service is used to provide encryption for Amazon EBS?
|
||||
- A. AWS Certificate Manager
|
||||
- B. AWS Systems Manager
|
||||
- C. AWS KMS
|
||||
- D. AWS Config
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/kms/latest/developerguide/services-ebs.html>
|
||||
|
||||
</details>
|
||||
|
||||
29. How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (Choose two.)
|
||||
- A. By the time it takes for the Lambda function to execute.
|
||||
- B. By the number of versions of a specific Lambda function.
|
||||
- C. By the number of requests made for a given Lambda function.
|
||||
- D. By the programming language that is used for the Lambda function.
|
||||
- E. By the total number of Lambda functions in an AWS account.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: CE
|
||||
|
||||
Explanation: <https://aws.amazon.com/lambda/pricing/>
|
||||
|
||||
</details>
|
||||
|
||||
30. Which of the following describes the relationships among AWS Regions, Availability Zones, and edge locations? (Choose two.)
|
||||
- A. There are more AWS Regions than Availability Zones.
|
||||
- B. There are more edge locations than AWS Regions.
|
||||
- C. An edge location is an Availability Zone.
|
||||
- D. There are more AWS Regions than edge locations.
|
||||
- E. There are more Availability Zones than AWS Regions.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BE
|
||||
|
||||
</details>
|
||||
|
||||
31. What does AWS Shield Standard provide?
|
||||
- A. WAF rules
|
||||
- B. DDoS protection
|
||||
- C. Identity and Access Management (IAM) permissions and access to resources
|
||||
- D. Data encryption
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
- AWS Shield Standard provides protection for all AWS customers from common, most frequently occurring network and transport layer DDoS attacks that target your web site or application at no additional charge.
|
||||
|
||||
Reference: <https://aws.amazon.com/shield/pricing/>
|
||||
|
||||
</details>
|
||||
|
||||
32. A company wants to build its new application workloads in the AWS Cloud instead of using on-premises resources. <br/> What expense can be reduced using the AWS Cloud?
|
||||
- A. The cost of writing custom-built Java or Node .js code
|
||||
- B. Penetration testing for security
|
||||
- C. hardware required to support new applications
|
||||
- D. Writing specific test cases for third-party applications.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/pricing/cost-optimization/>
|
||||
|
||||
</details>
|
||||
|
||||
33. What does AWS Marketplace allow users to do? (Choose two.)
|
||||
- A. Sell unused Amazon EC2 Spot Instances.
|
||||
- B. Sell solutions to other AWS users.
|
||||
- C. Buy third-party software that runs on AWS.
|
||||
- D. Purchase AWS security and compliance documents.
|
||||
- E. Order AWS Snowball.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BC
|
||||
|
||||
Explanation: <https://aws.amazon.com/marketplace>
|
||||
|
||||
</details>
|
||||
|
||||
34. What does it mean if a user deploys a hybrid cloud architecture on AWS?
|
||||
- A. All resources run using on-premises infrastructure.
|
||||
- B. Some resources run on-premises and some run in a colocation center.
|
||||
- C. All resources run in the AWS Cloud.
|
||||
- D. Some resources run on-premises and some run in the AWS Cloud.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/hybrid/>
|
||||
|
||||
</details>
|
||||
|
||||
35. Which AWS service allows users to identify the changes made to a resource over time?
|
||||
- A. Amazon Inspector
|
||||
- B. AWS Config
|
||||
- C. AWS Service Catalog
|
||||
- D. AWS IAM
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/config/latest/developerguide/view-manage-resource.html>
|
||||
|
||||
</details>
|
||||
|
||||
36. How can a company reduce its Total Cost of Ownership (TCO) using AWS?
|
||||
- A. By minimizing large capital expenditures
|
||||
- B. By having no responsibility for third-party license costs
|
||||
- C. By having no operational expenditures
|
||||
- D. By having AWS manage applications
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- AWS helps you reduce Total Cost of Ownership (TCO) by reducing the need to invest in large capital expenditures and providing a pay-as-you-go model that empowers you to invest in the capacity you need and use it only when the business requires it.
|
||||
|
||||
Reference: <https://aws.amazon.com/tco-calculator/>
|
||||
|
||||
</details>
|
||||
|
||||
37. Which activity is a customer responsibility in the AWS Cloud according to the AWS shared responsibility model?
|
||||
- A. Ensuring network connectivity from AWS to the internet
|
||||
- B. Patching and fixing flaws within the AWS Cloud infrastructure
|
||||
- C. Ensuring the physical security of cloud data centers
|
||||
- D. Ensuring Amazon EBS volumes are backed up
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/blogs/security/the-aws-shared-responsibility-model-and-gdpr/>
|
||||
|
||||
</details>
|
||||
|
||||
38. What are the advantages of the AWS Cloud? (Choose two.)
|
||||
- A. Fixed rate monthly cost
|
||||
- B. No need to guess capacity requirements
|
||||
- C. Increased speed to market
|
||||
- D. Increased upfront capital expenditure
|
||||
- E. Physical access to cloud data centers
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BC
|
||||
|
||||
Explanation: <https://data-flair.training/blogs/aws-advantages/>
|
||||
|
||||
</details>
|
||||
|
||||
39. When comparing the total cost of ownership (TCO) of an on-premises infrastructure to a cloud architecture, what costs should be considered? (Choose two.)
|
||||
- A. The credit card processing fees for application transactions in the cloud.
|
||||
- B. The cost of purchasing and installing server hardware in the on-premises data.
|
||||
- C. The cost of administering the infrastructure, including operating system and software installations, patches, backups, and recovering from failures.
|
||||
- D. The costs of third-party penetration testing.
|
||||
- E. The advertising costs associated with an ongoing enterprise-wide campaign.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BC
|
||||
|
||||
Explanation: <https://aws.amazon.com/tco-calculator/>
|
||||
|
||||
</details>
|
||||
|
||||
40. Which AWS feature allows a company to take advantage of usage tiers for services across multiple member accounts?
|
||||
- A. Service control policies (SCPs)
|
||||
- B. Consolidated billing
|
||||
- C. All Upfront Reserved Instances
|
||||
- D. AWS Cost Explorer
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/tco-calculator/>
|
||||
|
||||
</details>
|
||||
|
||||
41. What is one of the customer's responsibilities according to the AWS shared responsibility model?
|
||||
- A. Virtualization infrastructure
|
||||
- B. Network infrastructure
|
||||
- C. Application security
|
||||
- D. Physical security of hardware
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://cloudacademy.com/blog/aws-shared-responsibility-model-security/>
|
||||
|
||||
</details>
|
||||
|
||||
42. What helps a company provide a lower latency experience to its users globally?
|
||||
- A. Using an AWS Region that is central to all users
|
||||
- B. Using a second Availability Zone in the AWS Region that is using used
|
||||
- C. Enabling caching in the AWS Region that is being used
|
||||
- D. Using edge locations to put content closer to all users
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html>
|
||||
|
||||
</details>
|
||||
|
||||
43. How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center?
|
||||
- A. Users do not have to wait for infrastructure provisioning.
|
||||
- B. The AWS Cloud infrastructure is much faster than an on-premises data center infrastructure.
|
||||
- C. AWS takes over application configuration management on behalf of users.
|
||||
- D. Users do not need to address security and compliance issues.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://d1.awsstatic.com/whitepapers/Migration/aws-migration-whitepaper.pdf>
|
||||
|
||||
</details>
|
||||
|
||||
44. Which AWS service provides a quick and automated way to create and manage AWS accounts?
|
||||
- A. AWS QuickSight
|
||||
- B. Amazon Lightsail
|
||||
- C. AWS Organizations
|
||||
- D. Amazon Connect
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/blogs/mt/automate-account-creation-and-resource-provisioning-using-aws-service-catalog-aws-organizations-and-aws-lambda/>
|
||||
|
||||
</details>
|
||||
|
||||
45. Which Amazon RDS feature can be used to achieve high availability?
|
||||
- A. Multiple Availability Zones
|
||||
- B. Amazon Reserved Instances
|
||||
- C. Provisioned IOPS storage
|
||||
- D. Enhanced monitoring
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- Amazon RDS provides high availability and failover support for DB instances using Multi-AZ deployments.
|
||||
- Amazon RDS uses several different technologies to provide failover support.
|
||||
- Multi-AZ deployments for Oracle, PostgreSQL, MySQL, and MariaDB DB instances use Amazon's failover technology.
|
||||
- SQL Server DB instances use SQL Server Database Mirroring (DBM).
|
||||
|
||||
Reference: <https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.MultiAZ.html>
|
||||
|
||||
</details>
|
||||
|
||||
46. Where should users report that AWS resources are being used for malicious purposes?
|
||||
- A. AWS Abuse team
|
||||
- B. AWS Shield
|
||||
- C. AWS Support
|
||||
- D. AWS Developer Forums
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/knowledge-center/report-aws-abuse/>
|
||||
|
||||
</details>
|
||||
|
||||
47. Which AWS service needs to be enabled to track all user account changes within the AWS Management Console?
|
||||
- A. AWS CloudTrail
|
||||
- B. Amazon Simple Notification Service (Amazon SNS)
|
||||
- C. VPC Flow Logs
|
||||
- D. AWS CloudHSM
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.
|
||||
- With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure.
|
||||
- CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services.
|
||||
- This event history simplifies security analysis, resource change tracking, and troubleshooting.
|
||||
- In addition, you can use CloudTrail to detect unusual activity in your AWS accounts.
|
||||
- These capabilities help simplify operational analysis and troubleshooting.
|
||||
|
||||
Reference: <https://aws.amazon.com/cloudtrail/>
|
||||
|
||||
</details>
|
||||
|
||||
48. What is an AWS Cloud design best practice?
|
||||
- A. Tight coupling of components
|
||||
- B. Single point of failure
|
||||
- C. High availability
|
||||
- D. Overprovisioning of resources
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf>
|
||||
|
||||
</details>
|
||||
|
||||
49. Why is AWS more economical than traditional data centers for applications with varying compute workloads?
|
||||
- A. Amazon Elastic Compute Cloud (Amazon EC2) costs are billed on a monthly basis.
|
||||
- B. Customers retain full administrative access to their Amazon EC2 instances.
|
||||
- C. Amazon EC2 instances can be launched on-demand when needed.
|
||||
- D. Customers can permanently run enough instances to handle peak workloads.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation:
|
||||
- The ability to launch instances on-demand when needed allows customers launch and terminate instances in response to a varying workload.
|
||||
- This is a more economical practice than purchasing enough on-premises servers to handle the peak load.
|
||||
|
||||
</details>
|
||||
|
||||
50. Which AWS service would simplify migration of a database to AWS?
|
||||
- A. AWS Storage Gateway
|
||||
- B. AWS Database Migration Service (AWS DMS)
|
||||
- C. Amazon Elastic Compute Cloud (Amazon EC2)
|
||||
- D. Amazon AppStream 2.0
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/dms/>
|
||||
|
||||
</details>
|
||||
|
||||
Please feel free to comment below if any information is inaccurate or if any answers need correction.
|
||||
|
||||
[<img align="center" src="../images/list.png" height="30" width="30"/> Exam List](../practice-exam/exams.md)
|
||||
757
practice-exam/practice-exam-7.md
Normal file
757
practice-exam/practice-exam-7.md
Normal file
@@ -0,0 +1,757 @@
|
||||
# Practice Exam 7
|
||||
|
||||
Click on the **Answer** button for the correct answer and its explanation.
|
||||
|
||||
If this practice exam has been helpful to you please share it with others and react to this below.
|
||||
|
||||
---
|
||||
|
||||
1. Which AWS offering enables customers to find, buy, and immediately start using software solutions in their AWS environment?
|
||||
- A. AWS Config
|
||||
- B. AWS OpsWorks
|
||||
- C. AWS SDK
|
||||
- D. AWS Marketplace
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/mp/>
|
||||
|
||||
</details>
|
||||
|
||||
2. Which AWS networking service enables a company to create a virtual network within AWS?
|
||||
- A. AWS Config
|
||||
- B. Amazon Route 53
|
||||
- C. AWS Direct Connect
|
||||
- D. Amazon Virtual Private Cloud (Amazon VPC.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/vpc/>
|
||||
|
||||
</details>
|
||||
|
||||
3. Which of the following is AWS's responsibility under the AWS shared responsibility model?
|
||||
- A. Configuring third-party applications
|
||||
- B. Maintaining physical hardware
|
||||
- C. Securing application access and data
|
||||
- D. Managing custom Amazon Machine Images (AMIs)
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/compliance/shared-responsibility-model/>
|
||||
|
||||
</details>
|
||||
|
||||
4. Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery?
|
||||
- A. AWS Regions
|
||||
- B. AWS edge locations
|
||||
- C. AWS Availability Zones
|
||||
- D. Amazon Virtual Private Cloud (Amazon VPC.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/cloudfront/>
|
||||
|
||||
</details>
|
||||
|
||||
5. How would a system administrator add an additional layer of login security to a user's AWS Management Console?
|
||||
- A. Use AWS Cloud Directory
|
||||
- B. Audit AWS Identity and Access Management (IAM) roles
|
||||
- C. Enable Multi-Factor Authentication
|
||||
- D. Enable AWS CloudTrail
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/iam/details/mfa/>
|
||||
|
||||
</details>
|
||||
|
||||
6. Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud (Amazon EC2) instance is terminated?
|
||||
- A. Amazon CloudWatch
|
||||
- B. AWS CloudTrail
|
||||
- C. AWS X-Ray
|
||||
- D. AWS Identity and Access Management (AWS IAM)
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <http://docs.aws.amazon.com/awscloudtrail/latest/userguide/cloudtrail-user-guide.html>
|
||||
|
||||
</details>
|
||||
|
||||
7. Which service would you use to send alerts based on Amazon CloudWatch alarms?
|
||||
- A. Amazon Simple Notification Service (Amazon SNS)
|
||||
- B. AWS CloudTrail
|
||||
- C. AWS Trusted Advisor
|
||||
- D. Amazon Route 53
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <http://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html>
|
||||
|
||||
</details>
|
||||
|
||||
8. Where can a customer find information about prohibited actions on AWS infrastructure?
|
||||
- A. AWS Trusted Advisor
|
||||
- B. AWS Identity and Access Management (IAM)
|
||||
- C. AWS Billing Console
|
||||
- D. AWS Acceptable Use Policy
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/aup/>
|
||||
|
||||
</details>
|
||||
|
||||
9. Which of the following is an example of how moving to the AWS Cloud reduces upfront cost?
|
||||
- A. By replacing large variable costs with lower capital investments
|
||||
- B. By replacing large capital investments with lower variable costs
|
||||
- C. By allowing the provisioning of compute and storage at a fixed level to meet peak demand
|
||||
- D. By replacing the repeated scaling of virtual servers with a simpler fixed-scale model
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
- AWS does not require minimum spend commitments or long-term contracts.
|
||||
- You replace large upfront expenses with low variable payments that only apply to what you use.
|
||||
- With AWS you are not bound to multi-year agreements or complicated licensing models.
|
||||
|
||||
Reference: <https://aws.amazon.com/economics/>
|
||||
|
||||
</details>
|
||||
|
||||
10. When designing a typical three-tier web application, which AWS services and/or features improve availability and reduce the impact failures? (Choose two.)
|
||||
- A. AWS Auto Scaling for Amazon EC2 instances
|
||||
- B. Amazon VPC subnet ACLs to check the health of a service
|
||||
- C. Distributed resources across multiple Availability Zones
|
||||
- D. AWS Server Migration Service (AWS SMS) to move Amazon EC2 instances into a different Region
|
||||
- E. Distributed resources across multiple AWS points of presence
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AC
|
||||
|
||||
Explanation: <https://d1.awsstatic.com/whitepapers/AWS_Cloud_Best_Practices.pdf>
|
||||
|
||||
</details>
|
||||
|
||||
11. Which cloud design principle aligns with AWS Cloud best practices?
|
||||
- A. Create fixed dependencies among application components
|
||||
- B. Aggregate services on a single instance
|
||||
- C. Deploy applications in a single Availability Zone
|
||||
- D. Distribute the compute load across multiple resources
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- Use load balancing for offloading encryption termination (TLS) to improve performance and to manage and route traffic effectively.
|
||||
- Distribute traffic across multiple resources or services to allow your workload to take advantage of the elasticity that AWS provides.
|
||||
|
||||
Reference: <https://d1.awsstatic.com/whitepapers/architecture/AWS_Well-Architected_Framework.pdf>
|
||||
|
||||
</details>
|
||||
|
||||
12. Which of the following are recommended practices for managing IAM users? (Choose two.)
|
||||
- A. Require IAM users to change their passwords after a specified period of time
|
||||
- B. Prevent IAM users from reusing previous passwords
|
||||
- C. Recommend that the same password be used on AWS and other sites
|
||||
- D. Require IAM users to store their passwords in raw text
|
||||
- E. Disable multi-factor authentication (MFA) for IAM users
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AB
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/IAM/latest/UserGuide/best-practices.html>
|
||||
|
||||
</details>
|
||||
|
||||
13. A company is migrating from on-premises data centers to the AWS Cloud and is looking for hands-on help with the project. <br/> How can the company get this support? (Choose two.)
|
||||
- A. Ask for a quote from the AWS Marketplace team to perform a migration into the company's AWS account.
|
||||
- B. Contact AWS Support and open a case for assistance
|
||||
- C. Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company's AWS account
|
||||
- D. Select a partner from the AWS Partner Network (APN) to assist with the migration
|
||||
- E. Use Amazon Connect to create a new request for proposal (RFP) for expert assistance in migrating to the AWS Cloud.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BC
|
||||
|
||||
Explanation: <https://aws.amazon.com/solutions/aws-landing-zone/>
|
||||
|
||||
</details>
|
||||
|
||||
14. How does the AWS Enterprise Support Concierge team help users?
|
||||
- A. Supporting application development
|
||||
- B. Providing architecture guidance
|
||||
- C. Answering billing and account inquires
|
||||
- D. Answering questions regarding technical support cases
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/plans/enterprise/>
|
||||
|
||||
</details>
|
||||
|
||||
15. An application designed to span multiple Availability Zones is described as:
|
||||
- A. being highly available
|
||||
- B. having global reach
|
||||
- C. using an economy of scale
|
||||
- D. having elasticity
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
</details>
|
||||
|
||||
16. A new service using AWS must be highly available. Yet, due to regulatory requirements, all of its Amazon EC2 instances must be located in a single geographic area. <br/> According to best practices, to meet these requirements, the EC2 instances must be placed in at least two:
|
||||
- A. AWS Regions
|
||||
- B. Availability Zones
|
||||
- C. subnets
|
||||
- D. placement groups
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
<https://aws.amazon.com/ec2/faqs/>
|
||||
|
||||
</details>
|
||||
|
||||
17. Which AWS tool is used to compare the cost of running an application on-premises to running the application in the AWS Cloud?
|
||||
- A. AWS Trusted Advisor
|
||||
- B. AWS Simple Monthly Calculator
|
||||
- C. AWS Total Cost of Ownership (TCO) Calculator
|
||||
- D. Cost Explorer
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/tco-calculator/>
|
||||
|
||||
</details>
|
||||
|
||||
18. A company has multiple AWS accounts within AWS Organizations and wants to apply the Amazon EC2 Reserved Instances benefit to a single account only. <br/> Which action should be taken?
|
||||
- A. Purchase the Reserved Instances from master payer account and turn off Reserved Instance sharing.
|
||||
- B. Enable billing alerts in the AWS Billing and Cost Management console.
|
||||
- C. Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level.
|
||||
- D. Enable Reserved Instance sharing in the AWS Billing and Cost Management console.
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/knowledge-center/ec2-ri-consolidated-billing/>
|
||||
|
||||
</details>
|
||||
|
||||
19. Which situation should be reported to the AWS Abuse team?
|
||||
- A. In Availability Zone has a service disruption
|
||||
- B. An intrusion attempt is made from an AWS IP address
|
||||
- C. A user has trouble accessing an Amazon S3 bucket from an AWS IP address
|
||||
- D. A user needs to change payment methods due to a compromise
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/knowledge-center/report-aws-abuse/>
|
||||
|
||||
</details>
|
||||
|
||||
20. A company is planning to launch an ecommerce site in a single AWS Region to a worldwide user base. <br/> Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (Choose two.)
|
||||
- A. Application Load Balancer
|
||||
- B. AWS Global Accelerator
|
||||
- C. AWS Direct Connect
|
||||
- D. Amazon CloudFront
|
||||
- E. AWS Lambda
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AD
|
||||
|
||||
Explanation: <https://aws.amazon.com/cloudfront/faqs/>
|
||||
|
||||
</details>
|
||||
|
||||
21. Which AWS service or resource is serverless?
|
||||
- A. AWS Lambda
|
||||
- B. Amazon EC2 instances
|
||||
- C. Amazon Lightsail
|
||||
- D. Amazon ElastiCache
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://blogs.itemis.com/en/serverless-services-on-aws>
|
||||
|
||||
</details>
|
||||
|
||||
22. Which of the following are components of Amazon VPC? (Choose two.)
|
||||
- A. Objects
|
||||
- B. Subnets
|
||||
- C. Buckets
|
||||
- D. Internet gateways
|
||||
- E. Access key
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BD
|
||||
|
||||
Explanation: <https://subscription.packtpub.com/book/virtualization_and_cloud/9781788293723/3/ch03lvl1sec26/vpc-components>
|
||||
|
||||
</details>
|
||||
|
||||
23. AWS Budgets can be used to:
|
||||
- A. prevent a given user from creating a resource
|
||||
- B. send an alert when the utilization of Reserved Instances drops below a certain percentage
|
||||
- C. set resource limits in AWS accounts to prevent overspending
|
||||
- D. split an AWS bill across multiple forms of payment
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/budgets-managing-costs.html>
|
||||
|
||||
</details>
|
||||
|
||||
24. Which of the following will enhance the security of access to the AWS Management Console? (Choose two.)
|
||||
- A. AWS Secrets Manager
|
||||
- B. AWS Certificate Manager
|
||||
- C. AWS Multi-Factor Authentication (AWS MFA)
|
||||
- D. Security groups
|
||||
- E. Password policies
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AC
|
||||
|
||||
Explanation: <https://aws.amazon.com/blogs/security/guidelines-for-protecting-your-aws-account-while-using-programmatic-access/>
|
||||
|
||||
</details>
|
||||
|
||||
25. The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.)
|
||||
- A. Information on Amazon S3 bucket permissions
|
||||
- B. AWS service outages
|
||||
- C. Multi-factor authentication enabled on the AWS account root user
|
||||
- D. Available software patches
|
||||
- E. Number of users in the account
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AC
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/technology/trusted-advisor/best-practice-checklist/>
|
||||
|
||||
</details>
|
||||
|
||||
26. Which functions can users perform using AWS KMS?
|
||||
- A. Create and manage AWS access keys for the AWS account root user
|
||||
- B. Create and manage AWS access keys for an AWS account IAM user
|
||||
- C. Create and manage keys for encryption and decryption of data
|
||||
- D. Create and manage keys for multi-factor authentication
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/kms/latest/developerguide/control-access.html>
|
||||
|
||||
</details>
|
||||
|
||||
27. How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.)
|
||||
- A. It identifies software vulnerabilities in applications running on AWS
|
||||
- B. It provides a list of cost optimization recommendations based on current AWS usage
|
||||
- C. It detects potential security vulnerabilities caused by permissions settings on account resources
|
||||
- D. It automatically corrects potential security issues caused by permissions settings on account resources
|
||||
- E. It provides proactive alerting whenever an Amazon EC2 instance has been compromised
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BE
|
||||
|
||||
</details>
|
||||
|
||||
28. Which of the following are advantages of the AWS Cloud? (Choose two.)
|
||||
- A. AWS manages the maintenance of the cloud infrastructure
|
||||
- B. AWS manages the security of applications built on AWS
|
||||
- C. AWS manages capacity planning for physical servers
|
||||
- D. AWS manages the development of applications on AWS
|
||||
- E. AWS manages cost planning for virtual servers
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AC
|
||||
|
||||
Explanation: <https://aws.amazon.com/compliance/data-center/controls/>
|
||||
|
||||
</details>
|
||||
|
||||
29. A user deploys an Amazon RDS DB instance in multiple Availability Zones. <br/> This strategy involves which pillar of the AWS Well-Architected Framework?
|
||||
- A. Performance efficiency
|
||||
- B. Reliability
|
||||
- C. Cost optimization
|
||||
- D. Security
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
<https://aws.amazon.com/blogs/apn/the-5-pillars-of-the-aws-well-architected-framework/>
|
||||
|
||||
</details>
|
||||
|
||||
30. Which AWS services provide a user with connectivity between the AWS Cloud and on-premises resources? (Choose two.)
|
||||
- A. AWS VPN
|
||||
- B. Amazon Connect
|
||||
- C. Amazon Cognito
|
||||
- D. AWS Direct Connect
|
||||
- E. AWS Managed Services
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AD
|
||||
|
||||
Explanation:
|
||||
- <https://aws.amazon.com/directconnect/>
|
||||
- <https://aws.amazon.com/blogs/networking-and-content-delivery/introducing-aws-client-vpn-to-securely-access-aws-and-on-premises-resources/>
|
||||
|
||||
</details>
|
||||
|
||||
31. Which AWS service is used to pay AWS bills, and monitor usage and budget costs?
|
||||
- A. AWS Billing and Cost Management
|
||||
- B. Consolidated billing
|
||||
- C. Amazon CloudWatch
|
||||
- D. Amazon QuickSight
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/awsaccountbilling/latest/aboutv2/billing-what-is.html>
|
||||
|
||||
</details>
|
||||
|
||||
32. Which element of the AWS global infrastructure consists of one or more discrete data centers, each with redundant power, networking, and connectivity, which are housed in separate facilities?
|
||||
- A. AWS Regions
|
||||
- B. Availability Zones
|
||||
- C. Edge locations
|
||||
- D. Amazon CloudFront
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
<https://docs.aws.amazon.com/whitepapers/latest/aws-overview/global-infrastructure.html>
|
||||
|
||||
</details>
|
||||
|
||||
33. Which Amazon VPC feature enables users to capture information about the IP traffic that reaches Amazon EC2 instances?
|
||||
- A. Security groups
|
||||
- B. Elastic network interfaces
|
||||
- C. Network ACLs
|
||||
- D. VPC Flow Logs
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
- VPC Flow Logs is a feature that enables you to capture information about the IP traffic going to and from network interfaces in your VPC.
|
||||
- Flow log data can be published to Amazon CloudWatch Logs or Amazon S3. After you've created a flow log, you can retrieve and view its data in the chosen destination.
|
||||
|
||||
Reference: <https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html>
|
||||
|
||||
</details>
|
||||
|
||||
34. Which AWS service can be used to automatically scale an application up and down without making capacity planning decisions?
|
||||
- A. Amazon AutoScaling
|
||||
- B. Amazon Redshift
|
||||
- C. AWS CloudTrail
|
||||
- D. AWS Lambda
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://aws.amazon.com/blogs/aws/category/auto-scaling/>
|
||||
|
||||
</details>
|
||||
|
||||
35. AWS Enterprise Support users have access to which service or feature that is not available to users with other AWS Support plans?
|
||||
- A. AWS Trusted Advisor
|
||||
- B. AWS Support case
|
||||
- C. Concierge team
|
||||
- D. Amazon Connect
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/premiumsupport/plans/>
|
||||
|
||||
</details>
|
||||
|
||||
36. A company wants to migrate a MySQL database to AWS but does not have the budget for Database Administrators to handle routine tasks including provisioning, patching, and performing backups. <br/> Which AWS service will support this use case?
|
||||
- A. Amazon RDS
|
||||
- B. Amazon DynamoDB
|
||||
- C. Amazon DocumentDB
|
||||
- D. Amazon ElastiCache
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation:
|
||||
- Amazon RDS makes it easy to set up, operate, and scale a relational database in the cloud.
|
||||
- It provides cost-efficient and resizable capacity while automating time-consuming administration tasks, such as hardware provisioning, database setup, patching, and backups.
|
||||
- It frees you to focus on your applications, so you can give them the fast performance, high availability, security, and compatibility that they need.
|
||||
|
||||
Reference: <https://aws.amazon.com/blogs/database/part-1-role-of-the-dba-when-moving-to-amazon-rds-responsibilities/>
|
||||
|
||||
</details>
|
||||
|
||||
37. A company wants to expand from one AWS Region into a second AWS Region. <br/> What does the company need to do to start supporting the new Region?
|
||||
- A. Contact an AWS Account Manager to sign a new contract
|
||||
- B. Move an Availability Zone to the new Region
|
||||
- C. Begin deploying resources in the second Region
|
||||
- D. Download the AWS Management Console for the new Region
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
<https://docs.aws.amazon.com/emr/latest/ManagementGuide/emr-plan-region.html>
|
||||
|
||||
</details>
|
||||
|
||||
38. A user must meet compliance and software licensing requirements that state a workload must be hosted on a physical server. <br/> Which Amazon EC2 instance pricing option will meet these requirements?
|
||||
- A. Dedicated Hosts
|
||||
- B. Dedicated Instances
|
||||
- C. Spot Instances
|
||||
- D. Reserved Instances
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: A
|
||||
|
||||
Explanation: <https://aws.amazon.com/ec2/dedicated-hosts/>
|
||||
|
||||
</details>
|
||||
|
||||
39. Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.)
|
||||
- A. Amazon Macie
|
||||
- B. AWS Certificate Manager
|
||||
- C. AWS Key Management Service (AWS KMS)
|
||||
- D. AWS Secrets Manager
|
||||
- E. AWS CloudHSM
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: CE
|
||||
|
||||
Explanation:
|
||||
- <https://docs.aws.amazon.com/crypto/latest/userguide/awscryp-service-hsm.html>
|
||||
- <https://docs.aws.amazon.com/kms/latest/developerguide/overview.html>
|
||||
|
||||
</details>
|
||||
|
||||
40. A company is planning to migrate from on-premises to the AWS Cloud. <br/> Which AWS tool or service provides detailed reports on estimated cost savings after migration?
|
||||
- A. AWS Total Cost of Ownership (TCO) Calculator
|
||||
- B. Cost Explorer
|
||||
- C. AWS Budgets
|
||||
- D. AWS Migration Hub
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation:
|
||||
<https://docs.aws.amazon.com/migrationhub/latest/ug/hub-api.pdf> (26)
|
||||
|
||||
</details>
|
||||
|
||||
41. What can assist in evaluating an application for migration to the cloud? (Choose two.)
|
||||
- A. AWS Trusted Advisor
|
||||
- B. AWS Professional Services
|
||||
- C. AWS Systems Manager
|
||||
- D. AWS Partner Network (APN)
|
||||
- E. AWS Secrets Manager
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AD
|
||||
|
||||
</details>
|
||||
|
||||
42. Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?
|
||||
- A. AWS Secrets Manager
|
||||
- B. AWS CloudHSM
|
||||
- C. AWS Key Management Service (AWS KMS)
|
||||
- D. AWS Directory Service
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
- The AWS CloudHSM service helps you meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated Hardware Security Module (HSM) instances within the AWS cloud.
|
||||
- AWS and AWS Marketplace partners offer a variety of solutions for protecting sensitive data within the AWS platform, but for some applications and data subject to contractual or regulatory mandates for managing cryptographic keys, additional protection may be necessary.
|
||||
- CloudHSM complements existing data protection solutions and allows you to protect your encryption keys within HSMs that are designed and validated to government standards for secure key management.
|
||||
- CloudHSM allows you to securely generate, store, and manage cryptographic keys used for data encryption in a way that keys are accessible only by you.
|
||||
|
||||
Reference: <https://aws.amazon.com/cloudhsm/faqs/>
|
||||
|
||||
</details>
|
||||
|
||||
43. Under the AWS shared responsibility model, the customer manages which of the following? (Choose two.)
|
||||
- A. Decommissioning of physical storage devices
|
||||
- B. Security group and ACL configuration
|
||||
- C. Patch management of an Amazon RDS instance operating system
|
||||
- D. Controlling physical access to data centers
|
||||
- E. Patch management of an Amazon EC2 instance operating system
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: BE
|
||||
|
||||
Explanation: <https://www.whizlabs.com/blog/aws-security-shared-responsibility/>
|
||||
|
||||
</details>
|
||||
|
||||
44. Which AWS service is suitable for an event-driven workload?
|
||||
- A. Amazon EC2
|
||||
- B. AWS Elastic Beanstalk
|
||||
- C. AWS Lambda
|
||||
- D. Amazon Lumberyard
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation:
|
||||
- An easy-to-use service for deploying and scaling web applications and web services developed in a number of programming languages.
|
||||
- You can configure event notifications for your Elastic Beanstalk environment so that notable events can be automatically published to an SNS topic, then pushed to topic subscribers.
|
||||
- As an example, you may use this event-driven architecture to coordinate your continuous integration pipeline (such as Jenkins CI).
|
||||
- That way, whenever an environment is created, Elastic Beanstalk publishes this event to an SNS topic, which triggers a subscribing Lambda function, which then kicks off a CI job against your newly created Elastic Beanstalk environment.
|
||||
|
||||
Reference: <https://aws.amazon.com/blogs/compute/event-driven-computing-with-amazon-sns-compute-storage-database-and-networking-services/>
|
||||
|
||||
</details>
|
||||
|
||||
45. What is a value proposition of the AWS Cloud?
|
||||
- A. AWS is responsible for security in the AWS Cloud
|
||||
- B. No long-term contract is required
|
||||
- C. Provision new servers in days
|
||||
- D. AWS manages user applications in the AWS Cloud
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://d1.awsstatic.com/whitepapers/aws-whitepaper-business-value-of-aws.pdf>
|
||||
|
||||
</details>
|
||||
|
||||
46. What is a characteristic of Amazon S3 cross-region replication?
|
||||
- A. Both source and destination S3 buckets must have versioning disabled
|
||||
- B. The source and destination S3 buckets cannot be in different AWS Regions
|
||||
- C. S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts
|
||||
- D. The source S3 bucket owner must have the source and destination AWS Regions disabled for their account
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/AmazonS3/latest/dev/replication.html>
|
||||
|
||||
</details>
|
||||
|
||||
47. What is a user responsible for when running an application in the AWS Cloud? - A. Managing physical hardware
|
||||
- B. Updating the underlying hypervisor
|
||||
- C. Providing a list of users approved for data center access
|
||||
- D. Managing application software updates
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: D
|
||||
|
||||
Explanation: <https://aws.amazon.com/compliance/shared-responsibility-model/>
|
||||
|
||||
</details>
|
||||
|
||||
48. A company that does business online needs to quickly deliver new functionality in an iterative manner, minimizing the time to market. <br/> Which AWS Cloud feature can provide this?
|
||||
- A. Elasticity
|
||||
- B. High availability
|
||||
- C. Agility
|
||||
- D. Reliability
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: C
|
||||
|
||||
Explanation: <https://aws.amazon.com/devops/partner-solutions/>
|
||||
|
||||
</details>
|
||||
|
||||
49. Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.)
|
||||
- A. AWS Cost and Usage report
|
||||
- B. AWS product pages
|
||||
- C. AWS Simple Monthly Calculator
|
||||
- D. Billing alerts and Amazon CloudWatch alarms
|
||||
- E. AWS Price List API
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: AD
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/monitor_estimated_charges_with_cloudwatch.html>
|
||||
|
||||
</details>
|
||||
|
||||
50. Amazon Route 53 enables users to:
|
||||
- A. encrypt data in transit
|
||||
- B. register DNS domain names
|
||||
- C. generate and manage SSL certificates
|
||||
- D. establish a dedicated network connection to AWS
|
||||
|
||||
<details markdown=1><summary markdown="span">Answer</summary>
|
||||
|
||||
Correct Answer: B
|
||||
|
||||
Explanation: <https://docs.aws.amazon.com/Route53/latest/DeveloperGuide/Welcome.html>
|
||||
|
||||
</details>
|
||||
|
||||
Please feel free to comment below if any information is inaccurate or if any answers need correction.
|
||||
|
||||
[<img align="center" src="../images/list.png" height="30" width="30"/> Exam List](../practice-exam/exams.md)
|
||||
12
sitemap.xml
12
sitemap.xml
@@ -106,7 +106,7 @@
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://kananinirav.com/practice-exam/exams.html</loc>
|
||||
<lastmod>2022-12-11T05:38:55+00:00</lastmod>
|
||||
<lastmod>2022-12-20T05:38:55+00:00</lastmod>
|
||||
<priority>1.00</priority>
|
||||
</url>
|
||||
<url>
|
||||
@@ -139,4 +139,14 @@
|
||||
<lastmod>2022-12-14T10:38:55+00:00</lastmod>
|
||||
<priority>0.80</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://kananinirav.com/practice-exam/practice-exam-6.html</loc>
|
||||
<lastmod>2022-12-20T10:38:55+00:00</lastmod>
|
||||
<priority>0.80</priority>
|
||||
</url>
|
||||
<url>
|
||||
<loc>https://kananinirav.com/practice-exam/practice-exam-7.html</loc>
|
||||
<lastmod>2022-12-20T10:38:55+00:00</lastmod>
|
||||
<priority>0.80</priority>
|
||||
</url>
|
||||
</urlset>
|
||||
Reference in New Issue
Block a user