AWS Certified Cloud
Practitioner braindumps
QUESTION: 1
What is the term used to describe giving an AWS user only access to the exact
services he/she
needs to do the required job and nothing more?
A. The Least Privilege User Principal
B. The Principal of Least Privilege
C. The Only Access Principal.
D. None of the above
Answer(s): B
QUESTION: 2
What you create and S3 bucket, what rules must be followed regarding the bucket
name?
(Choose two)
A. Bucket names must be unique across all of AWS.
B. Bucket names must be between 3-63 characters in length.
C. Bucket names must contain at least one uppercase letter
D. Bucket names can be formatted as IP addresses
Answer(s): A, B
Explanation:
Although certain regions do allow for uppercase letters in the bucket name,
uppercase letters
are NOT required. Also, a bucket name cannot be formatted as an IP address.
QUESTION: 3
What are the main benefits of On-Demand EC2 instances? (Choose two)
A. They are the cheapest buying option.
B. They are the most filexible buying option.
C. They require 1-2 days for setup and configuration.
D. Create, start, stop, and terminate at any time.
Answer(s): B, D
Explanation:
On-demand EC2 instances are widely used due to their filexibility. You can
create, start, stop,
and terminate at any time (with no startup or termination fees). Although due
to this filexibility,
they are the most expensive buying option.
QUESTION: 4
What AWS service must you use if you want to configure an AWS bil ing alarm?
A. CloudWatch
B. CloudMonitor
C. Consolidated bil ing
D. CloudTrail
Answer(s): A
Explanation:
CloudWatch is the AWS service that allows you to collect metrics, and create
alarms based on
those metrics. Bil ing metrics can be tracked in CloudWatch, therefore bil ing
alarms can be
created.
QUESTION: 5
What are some common uses of AWS? (Choose four)
A. Networking
B. Analytics
C. Storage
D. Virtualization
Answer(s): A, B, C, D
Explanation:
Al of the answers are common uses of AWS. AWS has thousands of different uses.
In this
course we discussed some of the major categories, including: Storage Compute
Power
Databases Networking Analytics Developer Tools Virtualization Security
QUESTION: 6
How much data can you store in S3?
A. Storage capacity is virtual y unlimited.
B. You can store up to 1 petabyte of data.
C. Each account is given 50 gigabytes of storage capacity and no more can be
used.
D. You can store up to 1 petabyte of data, then you are required to pay an
additional fee.
Answer(s): A
Explanation:
Although there is theoretically a capacity limit, as an S3 user, there is no
limited on the amount
of data you can store in S3.
QUESTION: 7
You have just set up a brand new AWS account. You want to keep monthly bil ing
under $100,
but you are worried about going over that limit. What can you set up in order
to be notified when
the monthly bil approaches $100?
A. A CloudTrail bil ing alarm that triggers an SNS notification to your
email address.
B. A SNS bil ing alarm that triggers a CloudWatch notification to your email
address.
C. A CloudWatch bil ing alarm that triggers an SNS notification to your email
address.
D. A CloudWatch bil ing alarm that triggers a CloudTrail notification to your
email address.
Answer(s): C
Explanation:
In CloudWatch, you can set up a bil ing alarm that will trigger when your
monthly bil hit the set
threshold. That alarm can then be set up to trigger an SNS topic that wil send
you a notification
that the alarm threshold as been met.
QUESTION: 8
What best describes the purpose of having many Availability Zones in each AWS
region?
A. Multiple Availability Zones allow for fault tolerance but not high
availability.
B. Multiple Availability Zones allow for cheaper prices due to competition
between them.
C. Multiple Availability Zones allow for duplicate and redundant compute, and
data backups.
D. None of the above.
Answer(s): C
Explanation:
Availability Zones work together within a region to provide users with the
ability to easily setup
and configure redundant architecture and backup solutions
QUESTION: 9
What TWO services/features are required to have highly available and fault
tolerant architecture
in AWS? (Choose two)
A. Elastic Load Balancer
B. CloudFront
C. ElastiCache
D. Auto Scaling
Answer(s): A, D
QUESTION: 10
Which S3 storage class has lowest object availability rating?
A. Standard
B. Reduced Redundancy
C. Infrequent Access
D. Al of them have the same availability rating
Answer(s): C
Explanation:
Infrequent access has the lowest availability rating (99.90%). Standard and
Reduced
Redundancy have an availability rating of 99.99%
QUESTION: 11
Your company's upper management is getting very nervous about managing
governance,
compliance, and risk auditing in AWS. What service should you enable and inform
upper
management about?
A. CloudAudit
B. CloudTrail
C. CloudCompliance
D. CloudWatch
Answer(s): B
Explanation:
AWS CloudTrail is designed to log all actions taken in your AWS account. This
provides a great
resource for governance, compliance, and risk auditing.
QUESTION: 12
The concept of elasticity is most closely associated with which of the
following?
A. Auto Scaling
B. Network Security
C. Serverless Computing
D. Elastic Load Balancing
Answer(s): A
Explanation:
Elasticity is the concept that a system can easily (and cost-effectively) both
increase in capacity
based on-demand and also shrink in capacity based on-demand. Auto Scaling on
AWS is
specifically designed to (automatically) increase and decrease server capacity
based on-
demand.
QUESTION: 13
Which of the following wil effect how much you are charged for storing objects
in S3? (Choose
two)
A. The storage class used for the objects stored.
B. Encrypting data (objects) stored in S3.
C. Creating and deleting S3 buckets
D. The total size in gigabytes of all objects stored.
Answer(s): A, D
QUESTION: 14
What endpoints are possible to send messages to with Simple Notification
Service? (Choose
three)
A. SMS
B. FTP
C. SQS
D. Lambda
Answer(s): A, C, D
QUESTION: 15
What does S3 stand for?
A. Simple Storage Service
B. Simplified Storage Service
C. Simple Store Service
D. Service for Simple Storage
Answer(s): A
QUESTION: 16
Big Cloud Jumbo Corp is beginning to explore migrating their entire on-premises
data center to
AWS. They are very concerned about how much it will cost once their entire I.T.
infrastructure is
running on AWS. What tool can you recommend so that they can estimate what the
cost of
using AWS may be?
A. AWS Estimate Calculator
B. AWS TCO Calculator
C. AWS Cost Explorer
D. AWS Migration Cost Calculator
Answer(s): B
Explanation:
The AWS TCO (Total Cost of Ownership) Calculator is a free tool provided by
AWS. It allows
you to compare your current on-premises cost vs. estimated AWS cost.
QUESTION: 17
Kunal is managing an application running on an on-premises data center. What
best describes
the challenges he faces that someone using the AWS cloud does not?
A. Kunal must research what size (compute capacity) servers he needs to run
his application.
B. Kunal must know how to properly configure network level security.
C. Kunal must predict future growth, and scaling can be costly and time
consuming.
D. None of the above.
Answer(s): C
Explanation:
Scaling is much faster and cost-effecting on the AWS cloud. With on-demand
instances and
autoscaling, future growth does not have to be predicted. More compute capacity
can be added
gradual y as demand increases.
QUESTION: 18
What AWS storage class should be used for long-term, archival storage?
A. Glacier
B. Long-Term
C. Standard
D. Infrequent Access
Answer(s): A
Explanation:
Glacier should be used for (and is specifically designed for) long-term,
archival storage.
QUESTION: 19
Kim is managing a web application running on the AWS cloud. The application is
currently
utilizing eight EC2 servers for its compute platform. Earlier today, two of
those web servers
crashed; however, none of her customer were effected. What has Kim done
correctly in this
scenario?
A. Properly built an elastic system.
B. Properly built a scalable system
C. Properly build a fault tolerant system.
D. None of the above.
Answer(s): C
Explanation:
A fault tolerant system is one that can sustain a certain amount of failure
while stil remaining
operational.
QUESTION: 20
What are the benefits of DynamoDB? (Choose three)
A. Supports multiple known NoSQL database engines like MariaDB and Oracle
NoSQL.
B. Automatic scaling of throughput capacity.
C. Single-digit mil isecond latency.
D. Supports both document and key-value store data models.
Answer(s): B, C, D
Explanation:
DynamoDB does not use/support other NoSQL database engines. You only have access
to use
DynamoDB's built-in engine.
QUESTION: 21
What best describes penetration testing?
A. Testing your applications ability to penetrate other applications.
B. Testing your IAM users access to AWS services.
C. Testing your own network/application for vulnerabilities.
D. None of the above.
Answer(s): C
QUESTION: 22
Why would a company decide to use AWS over an on-premises data center? (Choose
four)
A. Highly available infrastructure
B. Elastic resources based on demand
C. No upfront cost
D. Cost-effective
Answer(s): A, B, C, D
Explanation:
Al four answers listed are reasons why a company may decide to use AWS over an
on-
premises data center.
QUESTION: 23
You are trying to organize and import (to AWS) gigabytes of data that are currently
structured in
JSON-like, name-value documents. What AWS service would best fit your needs?
A. Lambda
B. Aurora
C. RDS
D. DynamoDB
Answer(s): D
Explanation:
DynamoDB is AWS's NoSQL database offering. NoSQL databases are for
non-structured data
that are typically stored in JSON-like, name-value documents.
QUESTION: 24
What best describes what AWS is?
A. AWS is an online retailer
B. AWS is the cloud.
C. AWS is a cloud services provider.
D. None of the above.
Answer(s): C
QUESTION: 25
What is one benefit AND one drawback of buying a reserved EC2 instance? (Select
two)
A. You can terminate the instance at any time without any further pricing
commitment.
B. Reserved instances can be purchased as a significant discount over on-demand
instances.
C. You can potentially save a lot of money by placing a lower "bid"
price.
D. You are locked in to either a one- or three-year pricing commitment.
Answer(s): B, D
Explanation:
Reserved instances require a one- or three-year purchase term, so you are
committing to
paying for that much compute capacity for that full time period. However, in
exchange for the
long-term commitment, you will receive a discount (of up to 75%) over using an
on-demand
instance (for that same time period).
QUESTION: 26
Before moving and/or storing object in AWS Glacier, what considerations should
you make
regarding the data you want to store.
A. Make sure the data is properly formatted for storage Glacier.
B. Make sure the total amount of data you want to store in under 1 terabyte in
size.
C. Make sure you are ok with it taking at minimum a few minutes to retrieve the
data once
stored in Glacier.
D. None of the above.
Answer(s): C
Explanation:
Objects stored in Glacier take time to retrieve. You can pay for expedited
retrieval, which will
take several minutes - OR wait several hours (for normal retrieval).
QUESTION: 27
John is working with a large data set, and he needs to import it into a
relational database
service. What AWS service will meet his needs?
A. RDS
B. Redshift
C. NoSQL
D. DynamoDB
Answer(s): A
Explanation:
RDS is AWS's relational database service.
QUESTION: 28
Jeff is building a web application on AWS. He wants to make sure his
application is highly
available to his customers. What infrastructure components of the AWS cloud
allow Jeff to
accomplish this goal? (Choose two)
A. Availability Zones
B. Regional Zones
C. Regions
D. Data Locations
Answer(s): A, C
Explanation:
As part of AWS' global infrastructure, Regions and Availability Zones allow for
backups and
duplicate components to be placed in separate (isolated) areas of the globe. If
one
region/Availability Zone were to fail, duplicates in other regions/Availability
Zones can be used.
QUESTION: 29
What is AWS's serverless compute service?
A. S3
B. Lambda
C. EC2
D. None of the above
Answer(s): B
Explanation:
AWS has two main compute services, EC2 (server-based) and Lambda (serverless).
QUESTION: 30
Stephen is having issues tracking how much compute capacity his application is
using. Ideal y,
he wants to track and have alarms for when CPU utilization goes over 70%. What
should
Stephen do to accomplish this?
A. Configure an SNS topic with an alarm threshold set to trigger when CPU
utilization is greater
than 70%.
B. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU
utilization is
greater than 70%.
C. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU
utilization is
greater than or equal to 70%.
D. None of the above.
Answer(s): B
Explanation:
The answer is to configure a CloudWatch alarm with an alarm threshold set to
trigger when
CPU utilization is greater than 70%. This will display the alarm in
"alarm" state when CPU
utilization is greater than 70%. This question has been worded very
specifically with the works
"goes above 70%". This disqualifies the answer that stated
"great than or equal to 70%". The
AWS exam wil have very tricky questions like this.
QUESTION: 31
What is the availability and durability rating of S3 Standard Storage Class?
A. 99.999999999% Durability and 99.99% Availability
B. 99.999999999% Availability and 99.90% Durability
C. 99.999999999% Availability and 99.99% Durability
D. 99.999999999% Durability and 99.00% Availability
Answer(s): A
Explanation:
S3 Standard Storage class has a rating of 99.999999999% durability (referred to
as 11 nines)
and 99.99% availability.
QUESTION: 32
If you want to easily share a file with a friend, family or coworker, what AWS
solution should you
use?
A. Mail them a flash drive with the file on it.
B. Create an EC2 instance and give provide login credentials so others can
access the file.
C. Upload the object to S3 and share it via its object's S3 public object URL.
D. None of the above.
Answer(s): C
Explanation:
You can easily share objects uploaded into S3 by provided others with the
object's URL.
QUESTION: 33
S3 storage classes are rated by what two metric categories? (Select two)
A. Objectivity
B. Durability
C. Availability
D. Fault tolerance
Answer(s): B, C
Explanation:
Each S3 storage class is rated on its availability and durability.
QUESTION: 34
If an object is stored in the Standard S3 storage class and you want to move it
to Glacier, what
must you do in order to properly migrate it?
A. Delete the object and reupload it, selecting Glacier as the storage
class.
B. Create a lifecycle policy that wil migrate it after a minimum of 30 days.
C. Change the storage class directly on the object.
D. None of the above.
Answer(s): B
Explanation:
Any object uploaded to S3 must first be placed into either the Standard,
Reduced Redundancy,
or Infrequent Access storage class. Once in S3 the only way to move the object
to glacier is
through a lifecycle policy.
QUESTION: 35
What is the most common type of storage used for EC2 instances?
A. Elastic File System (EFS)
B. EC2 Hard Drives
C. Elastic Block Store (EBS)
D. Magnetic Drive (MD)
Answer(s): C
Explanation:
EC2 instance have several different hard drive options. However, Elastic Block
Store (EBS),
which is a type of Network Attached Storage, is the most popular and widely
used.
QUESTION: 36
What AWS service has built-in DDoS mitigation?
A. CloudFront
B. CloudTrail
C. CloudWatch
D. EC2
Answer(s): A
Explanation:
With CloudFront, you cache content at Edge Locations, which shield your
underlining
application infrastructure from DDoS attacks.
QUESTION: 37
You have been tasked by your department head to upload a batch of files to an
S3 bucket;
however, when you select S3 on the AWS console, you see a notification stating
that you do not
have permission to access S3. What is the most probable cause of this error?
A. It takes 24 hours go get access to S3.
B. The S3 service is currently down for maintenance.
C. You do not have an S3 access policy attached to your IAM user.
D. Your boss has not enabled proper bucket permissions.
Answer(s): C
Explanation:
If you get an error stating that you do not have proper permissions to
access/use and AWS
service, then most likely your IAM user does not have the proper permission
policy attached.
QUESTION: 38
What are the benefits of AWS's Relational Database Service (RDS)? (Choose
three)
A. Resizable capacity
B. Automated patches and backups
C. Cost-efficient
D. None of the above
Answer(s): A, B, C
QUESTION: 39
Thomas is managing the access rights and credentials for all the employees that
have access to
his company's AWS account. This morning, his was notified that some of these
accounts may
have been compromised, and he now needs to change the password policy and
re-generate a
new password for all users. What AWS service does Thomas need to use in order
to
accomplish this?
A. Policy and Access Management
B. Elastic Cloud Compute
C. Access Management
D. None of the above.
Answer(s): D
Explanation:
Identity and Access Management (IAM) is the AWS service where password policies
and user
credentials are managed. (Policy and Access Management as a service does not
exist).
QUESTION: 40
What are the primary benefits of using Lambda? (Choose two)
A. Pay for only the compute time you consume.
B. Wide variety of operating systems to select from.
C. Actively select and manage instance type and capacity.
D. Run code without provisioning servers.
Answer(s): A, D
Explanation:
Lambda, being AWS's serverless compute platform, means there are no servers,
instance
types, or capacity to select. That is all managed for you. With Lambda, you
only for the when
your code is actual y being executed.
QUESTION: 41
If you have a set of frequently accessed files that are used on a daily basis,
what S3 storage
class should you store them in?
A. Infrequent Access
B. Reduced Redundancy
C. Standard
D. Fast Access
Answer(s): C
Explanation:
The Standard storage class should be used for files that you access on a daily
or very frequent
basis.
QUESTION: 42
Which of the following wil effect price you pay for an EC2 instance? (Choose
three)
A. Instance Type.
B. Selected Storage Class
C. How long you use the instance for.
D. Amazon Machine Image (AMI).
Answer(s): A, C, D
Explanation:
EC2 instance pricing various depending on many variables. 1) The type of buying
option 2)
Selected Ami 3) Selected instance type 4) Region 5) Data in/out 6) Storage
capacity
QUESTION: 43
If you want in-depth details on how to create, manage, and attach IAM access
policies to IAM
users, in what AWS resource should you look?
A. AWS How-To-Help Section
B. AWS Service Documentation
C. AWS Whitepapers
D. None of the above
Answer(s): B
Explanation:
AWS Service documentation is a collection of documents specific to each AWS
service. They
contain detailed how-to's, as well as technical walkthroughs and
specifications.
QUESTION: 44
You notice that five of your 10 S3 buckets are no longer available in your
account, and you
assume that they have been deleted. You are unsure who may have deleted them,
and no one
is taking responsibility. What should you do to investigate and find out who
deleted the S3
buckets?
A. Look at the S3 logs.
B. Look at the CloudTrail logs.
C. Look at the CloudWatch Logs.
D. Look at the SNS logs.
Answer(s): B
Explanation:
CloudTrail is logging service that logs actions taken by AWS users in your AWS
account, such
as creating/deleting S3 buckets, starting/stopping EC2 stances, etc.
QUESTION: 45
What acts as an address (like a mailing address) for a web server located on a
network?
A. DNS Server
B. IP Address
C. Common language domain name
D. None of the above
Answer(s): B
Explanation:
An IP address is a severs address on a network. It is how traffic/request get
routed to it (much
like a piece of mail gets routed to your home).
QUESTION: 46
What services has built-in DDoS mitigation and/or protection?
A. EC2
B. RDS
C. SNS
D. None of the above
Answer(s): D
Explanation:
AWS services with built-in DDoS migigation/protection include: 1) Route 53 2)
CloudFront 3)
WAF (web application firewal ) 4) Elastic Load Balancing 5) VPCs and Security
Groups
QUESTION: 47
What should you do if you believe your AWS account has been compromised?
(Choose four)
A. Delete any resources in your account that you did not create.
B. Respond to any notifications you received from AWS through the AWS Support
Center.
C. Change all IAM user's passwords.
D. Delete or rotate all programatic (API) access keys.
Answer(s): A, B, C, D
Explanation:
Al these answers are actions you should take if you believe you account has
been
compromised.
QUESTION: 48
Under what circumstances would someone want to use ElastiCache? (Choose two)
A. They need a NoSQL database option
B. They need to use Edge Locations to cache content
C. The need improved improve the performance of their web application.
D. They need in-memory data store service.
Answer(s): C, D
Explanation:
ElastiCache is used as an in-memory data store or cache in the cloud. Benefits
include
improved performance for web applications (that rely on information stored in a
database). Edge
Locations are used for caching content with the CloudFront service, so that is
not a answer
here.
QUESTION: 49
Derek is running a web application and is noticing that he is paying for way
more server
capacity then is required. What AWS feature should Derek set up and configure
to ensure that
his application is automatically adding/removing server capacity to keep in
line with the required
demand?
A. Auto Scaling
B. Elastic Server Scaling
C. Elastic Load Balancing
D. Auto Sizing
Answer(s): A
Explanation:
Auto scaling is the feature that automated the process of adding/removing
server capacity from
a system (based on usage demand). Auto scaling creates a very cost effective
system by never
having too much or too little server capacity.
QUESTION: 50
What AWS service uses Edge Locations for content caching?
A. ElastiCache
B. Route 53
C. CloudFront
D. CloudCache
Answer(s): C
Explanation:
CloudFront is a content caching service provided by AWS that utilizes
"Edge Locations," which
are AWS data centers located all around the world.
QUESTION: 51
What is the purpose of AWS's Route 53 service? (Choose two)
A. Content Caching
B. Database Management
C. Domain Registration
D. Domain Name System (DNS) service
Answer(s): C, D
Explanation:
Route 53 is AWS's domain and DNS management service. You can use it to register
new
domain names, as well as manage DNS record sets.
QUESTION: 52
What are the benefits of AWS Organizations?
(Choose two)
A. Analyze cost across al multiple AWS accounts.
B. Automate AWS account creation and management.
C. Centrally manage access polices across multiple AWS accounts.
D. None of the above.
Answer(s): B, C
Explanation:
AWS Organizations has four main benefits: 1) Centrally manage access polices
across multiple
AWS accounts. 2) Automate AWS account creation and management. 3) Control
access to
AWS services 4) Enable consolidated bil ing across multiple AWS accounts
Analyzing cost is
done through the Cost Explorer (or TCO calculator), which is not part of AWS
Organizations.
QUESTION: 53
What AWS service allows you to have your own private network in the AWS
cloud?
A. Virtual Private Network (VPN)
B. Virtual Private Cloud (VPC)
C. Virtual Cloud Network (VCN)
D. None of the above.
Answer(s): B
Explanation:
A Virtual Private Cloud (VPC) is a private sub-section of AWS that is your own
private network.
You control what resources you place inside the VPC and the security features
around it.
QUESTION: 54
If you are using an on-demand EC2 instance, how are you being charged for it?
A. You are charged per second, based on an hourly rate, and there are no termination
fees.
B. You are charged by the hour and must pay a partial upfront fee.
C. You must commit to a one or three year term and pay upfront.
D. You are charged per second, based on an hourly rate, and there is a
termination fee.
Answer(s): A
Explanation:
On-demand EC2 instances are exactly that, on-demand. There are no upfront or
termination
fees, and you are charged for each second of usage (based on an hourly rate).
QUESTION: 55
Matt is working on a projects that involves converting an images format from
.png to .jpg.
Thousands of images have to be converted; however, time is not real y an issue
and continual
processing is not required. What type of EC2 buying option would be most
cost-effective for
Matt to use?
A. Spot
B. On-demand
C. Reserved
D. None of the above
Answer(s): A
Explanation:
Spot instances offer the cheapest option of all EC2's buying options. However,
spot instances
should only be used when there can be interruptions in the processing jobs
being conducted.
This is due to the fluctuation in spot pricing. If the spot price goes above
your bid price, then you
wil lose access to the spot instance (thus causing a stoppage in processing).
QUESTION: 56
David is managing a web application running on dozens of EC2 servers. He is
worried that if
something goes wrong with one of the servers he wil not know about it in a
timely manner.
What solution could you offer to help him keep updated on the status of his
servers?
A. Configure each EC2 instance with a custom script to email David when any
issues occur.
B. Configure RDS notifications based on CloudWatch EC2 metric alarms.
C. Enable CloudTrail to log and report any issues that occur with the EC2
instances.
D. Configure SNS notifications based on CloudWatch EC2 metric alarms.
Answer(s): D
Explanation:
CloudWatch is used to track metrics on all EC2 instances. Metric alarms can be
configured to
trigger SNS messages if something goes wrong.
QUESTION: 57
What AWS database is primarily used to analyze data using standard SQL
formatting with
compatibility for your existing business intelligence tools?
A. ElastiCache
B. DynamoDB
C. Redshift
D. RDS
Answer(s): C
Explanation:
Redshift is a database offering that is fully-managed and used for data
warehousing and
analytics, including compatibility with existing business intelligence tools.
QUESTION: 58
Tracy has created a web application, placing it's underlining infrastructure in
the N. Virginia (US-
East-1) region. After several months, Tracy notices that much of the traffic
coming to her
website is coming from Japan. What can Tracy do to (best) help reduce latency
for her users in
Japan?
A. Copy the current VPC and located in US-East-1 and ask AWS to move it to a
region closest
to Japan
B. Create a and manage a complete duplicate copy of the web application and its
infrastructure
in a region closest to Japan.
C. Create a CDN using CloudFront, making sure the proper content is cached at
Edge
Locations closest to Japan.
D. Create a CDN using CloudCache, making sure the proper content is cached at
Edge
Locations closest to Japan.
Answer(s): C
Explanation:
CloudFront is AWS's content delivery network (CDN) service. You can use it to
cache web
content at edge locations what are closest to you customers. This will decrease
latency for the
customer and improve overall performance.
QUESTION: 59
What AWS service help you estimate the cost of using AWS vs. an on-premises
data center?
A. Cost Explorer
B. Consolidated Bil ing
C. TCO Calculator
D. None of the above
Answer(s): C
Explanation:
The TCO (total cost of ownership) calculator helps you estimate the cost of
using AWS vs. an
onpremises data center.
QUESTION: 60
What AWS feature acts as a traffic distribution regulator, making sure each EC2
instance in a
system get the same amount of traffic?
A. Availability Zone
B. ELB
C. NACL
D. Auto Scaling
Answer(s): B
Explanation:
An Elastic Load Balancer is responsible for evenly distributing incoming web
traffic between all
the EC2 instances associated with it. This help prevent one server from
becoming overloaded
with traffic, while another server remains underutilized.
QUESTION: 61
What best describes the concept of fault tolerance?
A. The ability for a system to withstand a certain amount of failure and
stil remain functional.
B. The ability for a system to grow and shrink based on demand.
C. The ability for a system to grow in size, capacity, and/or scope.
D. The ability for a system be accessible when you attempt to access it.
Answer(s): A
Explanation:
Fault tolerance describes the concept of a system (in our case a web
application) to have failure
in some of its components and stil remain accessible (highly available). Fault
tolerant web
applications wil have at least two web servers (in case one fails).
QUESTION: 62
What best describes Amazon Web Services (AWS)?
A. AWS only provides compute and storage services.
B. AWS is the cloud.
C. AWS is a cloud services provider.
D. None of the above.
Answer(s): C
Explanation:
AWS is defined as a cloud services provider. They provide hundreds of services
of which
compute and storage are included (not limited to).
QUESTION: 63
What are the four primary benefits of using the cloud/AWS?
A. Elasticity, scalability, easy access, limited storage.
B. Fault tolerance, scalability, elasticity, and high availability.
C. Unlimited storage, limited compute capacity, fault tolerance, and high
availability.
D. Fault tolerance, scalability, sometimes available, unlimited storage
Answer(s): B
Explanation:
Fault tolerance, scalability, elasticity, and high availability are the four
primary benefits of
AWS/the cloud.
QUESTION: 64
What best describes an AWS region?
A. A specific location where an AWS data center is located.
B. An isolated collection of AWS Availability Zones, of which there are many
placed all around
the world.
C. The physical networking connections between Availability Zones.
D. A collection of DNS servers.
Answer(s): B
Explanation:
An AWS region is an isolated geographical area that is is comprised of three or
more AWS
Availability Zones.
QUESTION: 65
What best describes a simplified definition of the "cloud"?
A. Al the computers in your local home network.
B. A computer located somewhere else that you are utilizing in some capacity.
C. An on-premises data center that your company owns.
D. Your internet service provider
Answer(s): B
Explanation:
The simplest definition of the cloud is a computer that is located somewhere
else that you are
utilizing in some capacity. AWS is a cloud services provider, as the provide
access to computers
they own (located at AWS data centers), that you use for various purposes.
QUESTION: 66
What is the purpose of a DNS server?
A. To serve web application content.
B. To convert common language domain names to IP addresses.
C. To convert IP addresses to common language domain names.
D. To act as an internet search engine.
Answer(s): B
Explanation:
Domain name system servers act as a "third party" that provides the
service of converting
common language domain names to IP addresses (which are required for a web
browser to
properly make a request for web content).
QUESTION: 67
What best describes the concept of high availability?
A. The ability for a system to grow and shrink based on demand.
B. The ability for a system to withstand a certain amount of failure and stil
remain functional.
C. The ability for a system to grow in size, capacity, and/or scope.
D. The ability for a system be accessible when you attempt to access it.
Answer(s): D
Explanation:
High availability refers to the concept that something wil be accessible when
you try to access
it. An object or web application is "highly available" when it is
accessible a vast majority of the
time.
QUESTION: 68
What best describes the concept of scalability?
A. The ability for a system to withstand a certain amount of failure and
stil remain functional.
B. The ability for a system to grow in size, capacity, and/or scope.
C. The ability for a system to grow and shrink based on demand.
D. The ability for a system be accessible when you attempt to access it.
Answer(s): B
Explanation:
Scalability refers to the concept of a system being able to easily (and
cost-effectively) scale UP.
For web applications, this means the ability to easily add server capacity when
demand
requires.
QUESTION: 69
What best describes the concept of elasticity?
A. The ability for a system to grow in size, capacity, and/or scope.
B. The ability for a system to withstand a certain amount of failure and stil
remain functional.
C. The ability for a system to grow and shrink based on demand.
D. The ability for a system be accessible when you attempt to access it.
Answer(s): C
Explanation:
Elasticity (think of a rubber band) defines a system that can easily (and
cost-effectively) grow
and shrink based on required demand.
QUESTION: 70
What is the relationship between AWS global infrastructure and the concept of
high availability?
A. AWS is centrally located in one location and is subject to widespread
outages if something
happens at that one location.
B. AWS regions and Availability Zones allow for redundant architecture to be
placed in isolated
parts of the world.
C. Each AWS region handles a different AWS services, and you must use all
regions to fully use
AWS.
D. None of the above
Answer(s): B
Explanation:
As an AWS user, you can create your applications infrastructure and duplicate
it. By placing
duplicate infrastructure in multiple regions, high availability is created
because if one region fails
you have a backup (in another region) to use.
QUESTION: 71
Mike is setting up the infrastructure for a web application that requires three
EC2 instances to
handle the expected demand. However, when testing the application, Mike find
that all traffic to
the application is being routed to only one of the servers. What AWS feature
should he add to
his application in order to have traffic evenly distributed between all three
servers?
A. Elastic Load Balancer
B. Auto Scaling
C. Route 53
D. CloudFront
Answer(s): A
Explanation:
An Elastic Load Balancer is designed to evenly distribute incoming web traffic
between all
servers that are associated with it.
QUESTION: 72
Karen is building a website that is expected to have a minimum of 1000 users
continually over
the course of 24 hours. For 8 hours each day, traffic is expected to be at
about 1800 users.
What EC2 buying options should she use to handle all the traffic and be most
cost-effective?
A. Karen should rely solely on spot instances since that wil be the cheapest
option.
B. Karen should buy enough reserved instance capacity to handle all 1800 users
and probably
buy a little more capacity just in case it is needed.
C. Karen should buy reserved instances with enough capacity to cover the
baseline of 1000
users, then rely on on-demand instances for the 8 hour period of increased
traffic each day.
D. Karen should buy reserved instances with enough capacity to cover the
baseline of 1000
users, then rely on spot instances for the 8 hour period of increased traffic
each day.
Answer(s): C
Explanation:
Reserved instances should used use to handle the expected baseline traffic to
the website.
Reserved instances (in 1/3 year term) can be purchased as a significant
discount over on-
demand instances. Any varying traffic above the baseline should be handled with
on-demand
instance (since they can be added/removed at any time, based on current
demand). Spot
instances should not be used in this scenario.
QUESTION: 73
Amit is running a web application with a capacity of 5000 users. Every few
days, traffic reaches
5000 users and any additional users are being denied access. What can Amit do
to efficiently
automate the process of adding and removing server capacity based on traffic
demand?
A. Enable elastic load balancing on his application.
B. Automating this process cannot be done
C. Enable auto scaling on his application.
D. Write a custom script to automate the process
Answer(s): C
Explanation:
Auto scaling in AWS allows you to configure metric-based rules that (when
triggered) will add
and/or remove instances (server capacity) to your application. Adding/moving
instances is then
automated based on the metric rules you configure.
QUESTION: 74
What are the TWO main security layers (firewalls) used inside a VPC? (Choose
two)
A. NetProtect
B. Network Access Control List
C. Security Group
D. Security Lists
Answer(s): B, C
Explanation:
Network Access Control Lists (NACL) act as a firewal on the subnet level, and
Security Groups
act as a firewall on the instance level.
QUESTION: 75
John, member of your company's development team, needs access to company's AWS
account. What AWS service is used to manage such access?
A. S3
B. Route 53
C. IAM
D. EC2
Answer(s): C
Explanation:
Identity & Access Management (IAM) is the AWS service where user accounts,
credentials, and
service access is managed.
QUESTION: 76
What is a main benefit of CloudFront?
A. DNS management
B. Unlimited storage
C. Serverless compute capacity
D. Built-in DDoS protection
Answer(s): D
Explanation:
CloudFront allows you to cache content at edge locations. When a request is
made for that
content, the request is sent to an edge location (not your applications hardware),
so the edge
locations will absorb any DDoS attack and protect your underlining hardware.
QUESTION: 77
What best describes the concept of a virtual private cloud?
A. A private section of AWS in which you control what resources are placed
inside.
B. A collection of data centers.
C. A shared section of AWS between you and other AWS account holders.
D. A private section of AWS in which you control what resources are placed
inside and who can
access those resources.
Answer(s): D
Explanation:
A VPC is a private section of AWS in which you control what resources are
placed inside and
who can access those resources. A VPC defines your own private network that
runs on AWS
infrastructure.
QUESTION: 78
If you have a large collection of reproducible objects, which S3 storage class
should you use if
low cost is your priority?
A. Glacier
B. Standard
C. Reduced Redundancy
D. None of the above
Answer(s): C
Explanation:
The reduced redundancy storage class has the lowest durability of all the storage
classes. This
means object stored in this storage class have the highest probability of being
lost. So you
