AWS Certified Cloud Practitioner braindumps

 

AWS Certified Cloud Practitioner braindumps 

QUESTION: 1
What is the term used to describe giving an AWS user only access to the exact services he/she
needs to do the required job and nothing more?

A. The Least Privilege User Principal
B. The Principal of Least Privilege
C. The Only Access Principal.
D. None of the above

Answer(s): B

QUESTION: 2
What you create and S3 bucket, what rules must be followed regarding the bucket name?
(Choose two)

A. Bucket names must be unique across all of AWS.
B. Bucket names must be between 3-63 characters in length.
C. Bucket names must contain at least one uppercase letter
D. Bucket names can be formatted as IP addresses

Answer(s): A, B
Explanation:
Although certain regions do allow for uppercase letters in the bucket name, uppercase letters
are NOT required. Also, a bucket name cannot be formatted as an IP address.

QUESTION: 3
What are the main benefits of On-Demand EC2 instances? (Choose two)

A. They are the cheapest buying option.
B. They are the most filexible buying option.
C. They require 1-2 days for setup and configuration.
D. Create, start, stop, and terminate at any time.

Answer(s): B, D
Explanation:
On-demand EC2 instances are widely used due to their filexibility. You can create, start, stop,
and terminate at any time (with no startup or termination fees). Although due to this filexibility,
they are the most expensive buying option.

QUESTION: 4
What AWS service must you use if you want to configure an AWS bil ing alarm?

A. CloudWatch
B. CloudMonitor
C. Consolidated bil ing
D. CloudTrail

Answer(s): A

Explanation:
CloudWatch is the AWS service that allows you to collect metrics, and create alarms based on
those metrics. Bil ing metrics can be tracked in CloudWatch, therefore bil ing alarms can be
created.

QUESTION: 5
What are some common uses of AWS? (Choose four)

A. Networking
B. Analytics
C. Storage
D. Virtualization

Answer(s): A, B, C, D
Explanation:
Al of the answers are common uses of AWS. AWS has thousands of different uses. In this
course we discussed some of the major categories, including: Storage Compute Power
Databases Networking Analytics Developer Tools Virtualization Security

QUESTION: 6
How much data can you store in S3?

A. Storage capacity is virtual y unlimited.
B. You can store up to 1 petabyte of data.
C. Each account is given 50 gigabytes of storage capacity and no more can be used.
D. You can store up to 1 petabyte of data, then you are required to pay an additional fee.

Answer(s): A
Explanation:
Although there is theoretically a capacity limit, as an S3 user, there is no limited on the amount
of data you can store in S3.

QUESTION: 7
You have just set up a brand new AWS account. You want to keep monthly bil ing under $100,
but you are worried about going over that limit. What can you set up in order to be notified when
the monthly bil approaches $100?

A. A CloudTrail bil ing alarm that triggers an SNS notification to your email address.
B. A SNS bil ing alarm that triggers a CloudWatch notification to your email address.
C. A CloudWatch bil ing alarm that triggers an SNS notification to your email address.
D. A CloudWatch bil ing alarm that triggers a CloudTrail notification to your email address.

Answer(s): C
Explanation:
In CloudWatch, you can set up a bil ing alarm that will trigger when your monthly bil hit the set
threshold. That alarm can then be set up to trigger an SNS topic that wil send you a notification
that the alarm threshold as been met.

QUESTION: 8
What best describes the purpose of having many Availability Zones in each AWS region?

A. Multiple Availability Zones allow for fault tolerance but not high availability.
B. Multiple Availability Zones allow for cheaper prices due to competition between them.
C. Multiple Availability Zones allow for duplicate and redundant compute, and data backups.
D. None of the above.

Answer(s): C
Explanation:
Availability Zones work together within a region to provide users with the ability to easily setup
and configure redundant architecture and backup solutions

QUESTION: 9
What TWO services/features are required to have highly available and fault tolerant architecture
in AWS? (Choose two)

A. Elastic Load Balancer
B. CloudFront
C. ElastiCache
D. Auto Scaling

Answer(s): A, D

QUESTION: 10
Which S3 storage class has lowest object availability rating?

A. Standard
B. Reduced Redundancy
C. Infrequent Access
D. Al of them have the same availability rating

Answer(s): C
Explanation:
Infrequent access has the lowest availability rating (99.90%). Standard and Reduced
Redundancy have an availability rating of 99.99%

QUESTION: 11
Your company's upper management is getting very nervous about managing governance,
compliance, and risk auditing in AWS. What service should you enable and inform upper
management about?

A. CloudAudit
B. CloudTrail
C. CloudCompliance
D. CloudWatch

Answer(s): B
Explanation:
AWS CloudTrail is designed to log all actions taken in your AWS account. This provides a great
resource for governance, compliance, and risk auditing.

QUESTION: 12
The concept of elasticity is most closely associated with which of the following?

A. Auto Scaling
B. Network Security
C. Serverless Computing
D. Elastic Load Balancing

Answer(s): A
Explanation:
Elasticity is the concept that a system can easily (and cost-effectively) both increase in capacity
based on-demand and also shrink in capacity based on-demand. Auto Scaling on AWS is
specifically designed to (automatically) increase and decrease server capacity based on-
demand.

QUESTION: 13
Which of the following wil effect how much you are charged for storing objects in S3? (Choose
two)

A. The storage class used for the objects stored.
B. Encrypting data (objects) stored in S3.
C. Creating and deleting S3 buckets
D. The total size in gigabytes of all objects stored.

Answer(s): A, D

QUESTION: 14
What endpoints are possible to send messages to with Simple Notification Service? (Choose
three)

A. SMS
B. FTP
C. SQS
D. Lambda

Answer(s): A, C, D

QUESTION: 15
What does S3 stand for?

A. Simple Storage Service
B. Simplified Storage Service

C. Simple Store Service
D. Service for Simple Storage

Answer(s): A

QUESTION: 16
Big Cloud Jumbo Corp is beginning to explore migrating their entire on-premises data center to
AWS. They are very concerned about how much it will cost once their entire I.T. infrastructure is
running on AWS. What tool can you recommend so that they can estimate what the cost of
using AWS may be?

A. AWS Estimate Calculator
B. AWS TCO Calculator
C. AWS Cost Explorer
D. AWS Migration Cost Calculator

Answer(s): B
Explanation:
The AWS TCO (Total Cost of Ownership) Calculator is a free tool provided by AWS. It allows
you to compare your current on-premises cost vs. estimated AWS cost.

QUESTION: 17
Kunal is managing an application running on an on-premises data center. What best describes
the challenges he faces that someone using the AWS cloud does not?

A. Kunal must research what size (compute capacity) servers he needs to run his application.
B. Kunal must know how to properly configure network level security.
C. Kunal must predict future growth, and scaling can be costly and time consuming.
D. None of the above.

Answer(s): C
Explanation:
Scaling is much faster and cost-effecting on the AWS cloud. With on-demand instances and
autoscaling, future growth does not have to be predicted. More compute capacity can be added
gradual y as demand increases.

QUESTION: 18
What AWS storage class should be used for long-term, archival storage?

A. Glacier
B. Long-Term
C. Standard
D. Infrequent Access

Answer(s): A
Explanation:
Glacier should be used for (and is specifically designed for) long-term, archival storage.

QUESTION: 19
Kim is managing a web application running on the AWS cloud. The application is currently
utilizing eight EC2 servers for its compute platform. Earlier today, two of those web servers
crashed; however, none of her customer were effected. What has Kim done correctly in this
scenario?

A. Properly built an elastic system.
B. Properly built a scalable system
C. Properly build a fault tolerant system.
D. None of the above.

Answer(s): C
Explanation:
A fault tolerant system is one that can sustain a certain amount of failure while stil remaining
operational.

QUESTION: 20
What are the benefits of DynamoDB? (Choose three)

A. Supports multiple known NoSQL database engines like MariaDB and Oracle NoSQL.
B. Automatic scaling of throughput capacity.
C. Single-digit mil isecond latency.
D. Supports both document and key-value store data models.

Answer(s): B, C, D
Explanation:
DynamoDB does not use/support other NoSQL database engines. You only have access to use
DynamoDB's built-in engine.

QUESTION: 21
What best describes penetration testing?

A. Testing your applications ability to penetrate other applications.
B. Testing your IAM users access to AWS services.
C. Testing your own network/application for vulnerabilities.
D. None of the above.

Answer(s): C

QUESTION: 22
Why would a company decide to use AWS over an on-premises data center? (Choose four)

A. Highly available infrastructure
B. Elastic resources based on demand
C. No upfront cost
D. Cost-effective

Answer(s): A, B, C, D
Explanation:
Al four answers listed are reasons why a company may decide to use AWS over an on-
premises data center.

QUESTION: 23
You are trying to organize and import (to AWS) gigabytes of data that are currently structured in
JSON-like, name-value documents. What AWS service would best fit your needs?

A. Lambda
B. Aurora
C. RDS
D. DynamoDB

Answer(s): D
Explanation:
DynamoDB is AWS's NoSQL database offering. NoSQL databases are for non-structured data
that are typically stored in JSON-like, name-value documents.

QUESTION: 24
What best describes what AWS is?

A. AWS is an online retailer
B. AWS is the cloud.
C. AWS is a cloud services provider.
D. None of the above.

Answer(s): C

QUESTION: 25
What is one benefit AND one drawback of buying a reserved EC2 instance? (Select two)

A. You can terminate the instance at any time without any further pricing commitment.
B. Reserved instances can be purchased as a significant discount over on-demand instances.
C. You can potentially save a lot of money by placing a lower "bid" price.
D. You are locked in to either a one- or three-year pricing commitment.

Answer(s): B, D
Explanation:
Reserved instances require a one- or three-year purchase term, so you are committing to
paying for that much compute capacity for that full time period. However, in exchange for the
long-term commitment, you will receive a discount (of up to 75%) over using an on-demand
instance (for that same time period).

QUESTION: 26
Before moving and/or storing object in AWS Glacier, what considerations should you make
regarding the data you want to store.

A. Make sure the data is properly formatted for storage Glacier.
B. Make sure the total amount of data you want to store in under 1 terabyte in size.
C. Make sure you are ok with it taking at minimum a few minutes to retrieve the data once
stored in Glacier.
D. None of the above.

Answer(s): C
Explanation:
Objects stored in Glacier take time to retrieve. You can pay for expedited retrieval, which will
take several minutes - OR wait several hours (for normal retrieval).

QUESTION: 27
John is working with a large data set, and he needs to import it into a relational database
service. What AWS service will meet his needs?

A. RDS
B. Redshift
C. NoSQL
D. DynamoDB

Answer(s): A
Explanation:
RDS is AWS's relational database service.

QUESTION: 28
Jeff is building a web application on AWS. He wants to make sure his application is highly
available to his customers. What infrastructure components of the AWS cloud allow Jeff to
accomplish this goal? (Choose two)

A. Availability Zones
B. Regional Zones
C. Regions
D. Data Locations

Answer(s): A, C
Explanation:
As part of AWS' global infrastructure, Regions and Availability Zones allow for backups and
duplicate components to be placed in separate (isolated) areas of the globe. If one
region/Availability Zone were to fail, duplicates in other regions/Availability Zones can be used.

QUESTION: 29
What is AWS's serverless compute service?

A. S3
B. Lambda
C. EC2
D. None of the above

Answer(s): B
Explanation:
AWS has two main compute services, EC2 (server-based) and Lambda (serverless).

QUESTION: 30
Stephen is having issues tracking how much compute capacity his application is using. Ideal y,
he wants to track and have alarms for when CPU utilization goes over 70%. What should
Stephen do to accomplish this?

A. Configure an SNS topic with an alarm threshold set to trigger when CPU utilization is greater
than 70%.
B. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU utilization is
greater than 70%.
C. Configure a CloudWatch alarm with an alarm threshold set to trigger when CPU utilization is
greater than or equal to 70%.
D. None of the above.

Answer(s): B
Explanation:
The answer is to configure a CloudWatch alarm with an alarm threshold set to trigger when
CPU utilization is greater than 70%. This will display the alarm in "alarm" state when CPU
utilization is greater than 70%. This question has been worded very specifically with the works
"goes above 70%". This disqualifies the answer that stated "great than or equal to 70%". The
AWS exam wil have very tricky questions like this.

QUESTION: 31
What is the availability and durability rating of S3 Standard Storage Class?

A. 99.999999999% Durability and 99.99% Availability
B. 99.999999999% Availability and 99.90% Durability
C. 99.999999999% Availability and 99.99% Durability
D. 99.999999999% Durability and 99.00% Availability

Answer(s): A
Explanation:
S3 Standard Storage class has a rating of 99.999999999% durability (referred to as 11 nines)
and 99.99% availability.

QUESTION: 32
If you want to easily share a file with a friend, family or coworker, what AWS solution should you
use?

A. Mail them a flash drive with the file on it.
B. Create an EC2 instance and give provide login credentials so others can access the file.
C. Upload the object to S3 and share it via its object's S3 public object URL.
D. None of the above.

Answer(s): C
Explanation:
You can easily share objects uploaded into S3 by provided others with the object's URL.

QUESTION: 33
S3 storage classes are rated by what two metric categories? (Select two)

A. Objectivity
B. Durability
C. Availability
D. Fault tolerance

Answer(s): B, C
Explanation:
Each S3 storage class is rated on its availability and durability.

QUESTION: 34
If an object is stored in the Standard S3 storage class and you want to move it to Glacier, what
must you do in order to properly migrate it?

A. Delete the object and reupload it, selecting Glacier as the storage class.
B. Create a lifecycle policy that wil migrate it after a minimum of 30 days.
C. Change the storage class directly on the object.
D. None of the above.

Answer(s): B
Explanation:
Any object uploaded to S3 must first be placed into either the Standard, Reduced Redundancy,
or Infrequent Access storage class. Once in S3 the only way to move the object to glacier is
through a lifecycle policy.

QUESTION: 35
What is the most common type of storage used for EC2 instances?

A. Elastic File System (EFS)
B. EC2 Hard Drives
C. Elastic Block Store (EBS)
D. Magnetic Drive (MD)

Answer(s): C
Explanation:
EC2 instance have several different hard drive options. However, Elastic Block Store (EBS),
which is a type of Network Attached Storage, is the most popular and widely used.

QUESTION: 36
What AWS service has built-in DDoS mitigation?

A. CloudFront
B. CloudTrail
C. CloudWatch
D. EC2

Answer(s): A
Explanation:
With CloudFront, you cache content at Edge Locations, which shield your underlining
application infrastructure from DDoS attacks.

QUESTION: 37
You have been tasked by your department head to upload a batch of files to an S3 bucket;
however, when you select S3 on the AWS console, you see a notification stating that you do not
have permission to access S3. What is the most probable cause of this error?

A. It takes 24 hours go get access to S3.
B. The S3 service is currently down for maintenance.
C. You do not have an S3 access policy attached to your IAM user.
D. Your boss has not enabled proper bucket permissions.

Answer(s): C
Explanation:
If you get an error stating that you do not have proper permissions to access/use and AWS
service, then most likely your IAM user does not have the proper permission policy attached.

QUESTION: 38
What are the benefits of AWS's Relational Database Service (RDS)? (Choose three)

A. Resizable capacity
B. Automated patches and backups
C. Cost-efficient
D. None of the above

Answer(s): A, B, C

QUESTION: 39
Thomas is managing the access rights and credentials for all the employees that have access to
his company's AWS account. This morning, his was notified that some of these accounts may
have been compromised, and he now needs to change the password policy and re-generate a
new password for all users. What AWS service does Thomas need to use in order to
accomplish this?

A. Policy and Access Management
B. Elastic Cloud Compute
C. Access Management
D. None of the above.

Answer(s): D

Explanation:
Identity and Access Management (IAM) is the AWS service where password policies and user
credentials are managed. (Policy and Access Management as a service does not exist).

QUESTION: 40
What are the primary benefits of using Lambda? (Choose two)

A. Pay for only the compute time you consume.
B. Wide variety of operating systems to select from.
C. Actively select and manage instance type and capacity.
D. Run code without provisioning servers.

Answer(s): A, D
Explanation:
Lambda, being AWS's serverless compute platform, means there are no servers, instance
types, or capacity to select. That is all managed for you. With Lambda, you only for the when
your code is actual y being executed.

QUESTION: 41
If you have a set of frequently accessed files that are used on a daily basis, what S3 storage
class should you store them in?

A. Infrequent Access
B. Reduced Redundancy
C. Standard
D. Fast Access

Answer(s): C
Explanation:
The Standard storage class should be used for files that you access on a daily or very frequent
basis.

QUESTION: 42
Which of the following wil effect price you pay for an EC2 instance? (Choose three)

A. Instance Type.
B. Selected Storage Class
C. How long you use the instance for.
D. Amazon Machine Image (AMI).

Answer(s): A, C, D
Explanation:
EC2 instance pricing various depending on many variables. 1) The type of buying option 2)
Selected Ami 3) Selected instance type 4) Region 5) Data in/out 6) Storage capacity

QUESTION: 43

If you want in-depth details on how to create, manage, and attach IAM access policies to IAM
users, in what AWS resource should you look?

A. AWS How-To-Help Section
B. AWS Service Documentation
C. AWS Whitepapers
D. None of the above

Answer(s): B
Explanation:
AWS Service documentation is a collection of documents specific to each AWS service. They
contain detailed how-to's, as well as technical walkthroughs and specifications.

QUESTION: 44
You notice that five of your 10 S3 buckets are no longer available in your account, and you
assume that they have been deleted. You are unsure who may have deleted them, and no one
is taking responsibility. What should you do to investigate and find out who deleted the S3
buckets?

A. Look at the S3 logs.
B. Look at the CloudTrail logs.
C. Look at the CloudWatch Logs.
D. Look at the SNS logs.

Answer(s): B
Explanation:
CloudTrail is logging service that logs actions taken by AWS users in your AWS account, such
as creating/deleting S3 buckets, starting/stopping EC2 stances, etc.

QUESTION: 45
What acts as an address (like a mailing address) for a web server located on a network?

A. DNS Server
B. IP Address
C. Common language domain name
D. None of the above

Answer(s): B
Explanation:
An IP address is a severs address on a network. It is how traffic/request get routed to it (much
like a piece of mail gets routed to your home).

QUESTION: 46
What services has built-in DDoS mitigation and/or protection?

A. EC2
B. RDS
C. SNS

D. None of the above

Answer(s): D
Explanation:
AWS services with built-in DDoS migigation/protection include: 1) Route 53 2) CloudFront 3)
WAF (web application firewal ) 4) Elastic Load Balancing 5) VPCs and Security Groups

QUESTION: 47
What should you do if you believe your AWS account has been compromised? (Choose four)

A. Delete any resources in your account that you did not create.
B. Respond to any notifications you received from AWS through the AWS Support Center.
C. Change all IAM user's passwords.
D. Delete or rotate all programatic (API) access keys.

Answer(s): A, B, C, D
Explanation:
Al these answers are actions you should take if you believe you account has been
compromised.

QUESTION: 48
Under what circumstances would someone want to use ElastiCache? (Choose two)

A. They need a NoSQL database option
B. They need to use Edge Locations to cache content
C. The need improved improve the performance of their web application.
D. They need in-memory data store service.

Answer(s): C, D
Explanation:
ElastiCache is used as an in-memory data store or cache in the cloud. Benefits include
improved performance for web applications (that rely on information stored in a database). Edge
Locations are used for caching content with the CloudFront service, so that is not a answer
here.

QUESTION: 49
Derek is running a web application and is noticing that he is paying for way more server
capacity then is required. What AWS feature should Derek set up and configure to ensure that
his application is automatically adding/removing server capacity to keep in line with the required
demand?

A. Auto Scaling
B. Elastic Server Scaling
C. Elastic Load Balancing
D. Auto Sizing

Answer(s): A
Explanation:

Auto scaling is the feature that automated the process of adding/removing server capacity from
a system (based on usage demand). Auto scaling creates a very cost effective system by never
having too much or too little server capacity.

QUESTION: 50
What AWS service uses Edge Locations for content caching?

A. ElastiCache
B. Route 53
C. CloudFront
D. CloudCache

Answer(s): C
Explanation:
CloudFront is a content caching service provided by AWS that utilizes "Edge Locations," which
are AWS data centers located all around the world.

QUESTION: 51
What is the purpose of AWS's Route 53 service? (Choose two)

A. Content Caching
B. Database Management
C. Domain Registration
D. Domain Name System (DNS) service

Answer(s): C, D
Explanation:
Route 53 is AWS's domain and DNS management service. You can use it to register new
domain names, as well as manage DNS record sets.

QUESTION: 52
What are the benefits of AWS Organizations?
(Choose two)

A. Analyze cost across al multiple AWS accounts.
B. Automate AWS account creation and management.
C. Centrally manage access polices across multiple AWS accounts.
D. None of the above.

Answer(s): B, C
Explanation:
AWS Organizations has four main benefits: 1) Centrally manage access polices across multiple
AWS accounts. 2) Automate AWS account creation and management. 3) Control access to
AWS services 4) Enable consolidated bil ing across multiple AWS accounts Analyzing cost is
done through the Cost Explorer (or TCO calculator), which is not part of AWS Organizations.

QUESTION: 53

What AWS service allows you to have your own private network in the AWS cloud?

A. Virtual Private Network (VPN)
B. Virtual Private Cloud (VPC)
C. Virtual Cloud Network (VCN)
D. None of the above.

Answer(s): B
Explanation:
A Virtual Private Cloud (VPC) is a private sub-section of AWS that is your own private network.
You control what resources you place inside the VPC and the security features around it.

QUESTION: 54
If you are using an on-demand EC2 instance, how are you being charged for it?

A. You are charged per second, based on an hourly rate, and there are no termination fees.
B. You are charged by the hour and must pay a partial upfront fee.
C. You must commit to a one or three year term and pay upfront.
D. You are charged per second, based on an hourly rate, and there is a termination fee.

Answer(s): A
Explanation:
On-demand EC2 instances are exactly that, on-demand. There are no upfront or termination
fees, and you are charged for each second of usage (based on an hourly rate).

QUESTION: 55
Matt is working on a projects that involves converting an images format from .png to .jpg.
Thousands of images have to be converted; however, time is not real y an issue and continual
processing is not required. What type of EC2 buying option would be most cost-effective for
Matt to use?

A. Spot
B. On-demand
C. Reserved
D. None of the above

Answer(s): A
Explanation:
Spot instances offer the cheapest option of all EC2's buying options. However, spot instances
should only be used when there can be interruptions in the processing jobs being conducted.
This is due to the fluctuation in spot pricing. If the spot price goes above your bid price, then you
wil lose access to the spot instance (thus causing a stoppage in processing).

QUESTION: 56
David is managing a web application running on dozens of EC2 servers. He is worried that if
something goes wrong with one of the servers he wil not know about it in a timely manner.
What solution could you offer to help him keep updated on the status of his servers?

A. Configure each EC2 instance with a custom script to email David when any issues occur.
B. Configure RDS notifications based on CloudWatch EC2 metric alarms.
C. Enable CloudTrail to log and report any issues that occur with the EC2 instances.
D. Configure SNS notifications based on CloudWatch EC2 metric alarms.

Answer(s): D
Explanation:
CloudWatch is used to track metrics on all EC2 instances. Metric alarms can be configured to
trigger SNS messages if something goes wrong.

QUESTION: 57
What AWS database is primarily used to analyze data using standard SQL formatting with
compatibility for your existing business intelligence tools?

A. ElastiCache
B. DynamoDB
C. Redshift
D. RDS

Answer(s): C
Explanation:
Redshift is a database offering that is fully-managed and used for data warehousing and
analytics, including compatibility with existing business intelligence tools.

QUESTION: 58
Tracy has created a web application, placing it's underlining infrastructure in the N. Virginia (US-
East-1) region. After several months, Tracy notices that much of the traffic coming to her
website is coming from Japan. What can Tracy do to (best) help reduce latency for her users in
Japan?

A. Copy the current VPC and located in US-East-1 and ask AWS to move it to a region closest
to Japan
B. Create a and manage a complete duplicate copy of the web application and its infrastructure
in a region closest to Japan.
C. Create a CDN using CloudFront, making sure the proper content is cached at Edge
Locations closest to Japan.
D. Create a CDN using CloudCache, making sure the proper content is cached at Edge
Locations closest to Japan.

Answer(s): C
Explanation:
CloudFront is AWS's content delivery network (CDN) service. You can use it to cache web
content at edge locations what are closest to you customers. This will decrease latency for the
customer and improve overall performance.

QUESTION: 59
What AWS service help you estimate the cost of using AWS vs. an on-premises data center?

A. Cost Explorer
B. Consolidated Bil ing
C. TCO Calculator
D. None of the above

Answer(s): C
Explanation:
The TCO (total cost of ownership) calculator helps you estimate the cost of using AWS vs. an
onpremises data center.

QUESTION: 60
What AWS feature acts as a traffic distribution regulator, making sure each EC2 instance in a
system get the same amount of traffic?

A. Availability Zone
B. ELB
C. NACL
D. Auto Scaling

Answer(s): B
Explanation:
An Elastic Load Balancer is responsible for evenly distributing incoming web traffic between all
the EC2 instances associated with it. This help prevent one server from becoming overloaded
with traffic, while another server remains underutilized.

QUESTION: 61
What best describes the concept of fault tolerance?

A. The ability for a system to withstand a certain amount of failure and stil remain functional.
B. The ability for a system to grow and shrink based on demand.
C. The ability for a system to grow in size, capacity, and/or scope.
D. The ability for a system be accessible when you attempt to access it.

Answer(s): A
Explanation:
Fault tolerance describes the concept of a system (in our case a web application) to have failure
in some of its components and stil remain accessible (highly available). Fault tolerant web
applications wil have at least two web servers (in case one fails).

QUESTION: 62
What best describes Amazon Web Services (AWS)?

A. AWS only provides compute and storage services.
B. AWS is the cloud.
C. AWS is a cloud services provider.
D. None of the above.

Answer(s): C

Explanation:
AWS is defined as a cloud services provider. They provide hundreds of services of which
compute and storage are included (not limited to).

QUESTION: 63
What are the four primary benefits of using the cloud/AWS?

A. Elasticity, scalability, easy access, limited storage.
B. Fault tolerance, scalability, elasticity, and high availability.
C. Unlimited storage, limited compute capacity, fault tolerance, and high availability.
D. Fault tolerance, scalability, sometimes available, unlimited storage

Answer(s): B
Explanation:
Fault tolerance, scalability, elasticity, and high availability are the four primary benefits of
AWS/the cloud.

QUESTION: 64
What best describes an AWS region?

A. A specific location where an AWS data center is located.
B. An isolated collection of AWS Availability Zones, of which there are many placed all around
the world.
C. The physical networking connections between Availability Zones.
D. A collection of DNS servers.

Answer(s): B
Explanation:
An AWS region is an isolated geographical area that is is comprised of three or more AWS
Availability Zones.

QUESTION: 65
What best describes a simplified definition of the "cloud"?

A. Al the computers in your local home network.
B. A computer located somewhere else that you are utilizing in some capacity.
C. An on-premises data center that your company owns.
D. Your internet service provider

Answer(s): B
Explanation:
The simplest definition of the cloud is a computer that is located somewhere else that you are
utilizing in some capacity. AWS is a cloud services provider, as the provide access to computers
they own (located at AWS data centers), that you use for various purposes.

QUESTION: 66
What is the purpose of a DNS server?

A. To serve web application content.
B. To convert common language domain names to IP addresses.
C. To convert IP addresses to common language domain names.
D. To act as an internet search engine.

Answer(s): B
Explanation:
Domain name system servers act as a "third party" that provides the service of converting
common language domain names to IP addresses (which are required for a web browser to
properly make a request for web content).

QUESTION: 67
What best describes the concept of high availability?

A. The ability for a system to grow and shrink based on demand.
B. The ability for a system to withstand a certain amount of failure and stil remain functional.
C. The ability for a system to grow in size, capacity, and/or scope.
D. The ability for a system be accessible when you attempt to access it.

Answer(s): D
Explanation:
High availability refers to the concept that something wil be accessible when you try to access
it. An object or web application is "highly available" when it is accessible a vast majority of the
time.

QUESTION: 68
What best describes the concept of scalability?

A. The ability for a system to withstand a certain amount of failure and stil remain functional.
B. The ability for a system to grow in size, capacity, and/or scope.
C. The ability for a system to grow and shrink based on demand.
D. The ability for a system be accessible when you attempt to access it.

Answer(s): B
Explanation:
Scalability refers to the concept of a system being able to easily (and cost-effectively) scale UP.
For web applications, this means the ability to easily add server capacity when demand
requires.

QUESTION: 69
What best describes the concept of elasticity?

A. The ability for a system to grow in size, capacity, and/or scope.
B. The ability for a system to withstand a certain amount of failure and stil remain functional.
C. The ability for a system to grow and shrink based on demand.
D. The ability for a system be accessible when you attempt to access it.

Answer(s): C
Explanation:
Elasticity (think of a rubber band) defines a system that can easily (and cost-effectively) grow
and shrink based on required demand.

QUESTION: 70
What is the relationship between AWS global infrastructure and the concept of high availability?

A. AWS is centrally located in one location and is subject to widespread outages if something
happens at that one location.
B. AWS regions and Availability Zones allow for redundant architecture to be placed in isolated
parts of the world.
C. Each AWS region handles a different AWS services, and you must use all regions to fully use
AWS.
D. None of the above

Answer(s): B
Explanation:
As an AWS user, you can create your applications infrastructure and duplicate it. By placing
duplicate infrastructure in multiple regions, high availability is created because if one region fails
you have a backup (in another region) to use.

QUESTION: 71
Mike is setting up the infrastructure for a web application that requires three EC2 instances to
handle the expected demand. However, when testing the application, Mike find that all traffic to
the application is being routed to only one of the servers. What AWS feature should he add to
his application in order to have traffic evenly distributed between all three servers?

A. Elastic Load Balancer
B. Auto Scaling
C. Route 53
D. CloudFront

Answer(s): A
Explanation:
An Elastic Load Balancer is designed to evenly distribute incoming web traffic between all
servers that are associated with it.

QUESTION: 72
Karen is building a website that is expected to have a minimum of 1000 users continually over
the course of 24 hours. For 8 hours each day, traffic is expected to be at about 1800 users.
What EC2 buying options should she use to handle all the traffic and be most cost-effective?

A. Karen should rely solely on spot instances since that wil be the cheapest option.
B. Karen should buy enough reserved instance capacity to handle all 1800 users and probably
buy a little more capacity just in case it is needed.
C. Karen should buy reserved instances with enough capacity to cover the baseline of 1000
users, then rely on on-demand instances for the 8 hour period of increased traffic each day.

D. Karen should buy reserved instances with enough capacity to cover the baseline of 1000
users, then rely on spot instances for the 8 hour period of increased traffic each day.

Answer(s): C
Explanation:
Reserved instances should used use to handle the expected baseline traffic to the website.
Reserved instances (in 1/3 year term) can be purchased as a significant discount over on-
demand instances. Any varying traffic above the baseline should be handled with on-demand
instance (since they can be added/removed at any time, based on current demand). Spot
instances should not be used in this scenario.

QUESTION: 73
Amit is running a web application with a capacity of 5000 users. Every few days, traffic reaches
5000 users and any additional users are being denied access. What can Amit do to efficiently
automate the process of adding and removing server capacity based on traffic demand?

A. Enable elastic load balancing on his application.
B. Automating this process cannot be done
C. Enable auto scaling on his application.
D. Write a custom script to automate the process

Answer(s): C
Explanation:
Auto scaling in AWS allows you to configure metric-based rules that (when triggered) will add
and/or remove instances (server capacity) to your application. Adding/moving instances is then
automated based on the metric rules you configure.

QUESTION: 74
What are the TWO main security layers (firewalls) used inside a VPC? (Choose two)

A. NetProtect
B. Network Access Control List
C. Security Group
D. Security Lists

Answer(s): B, C
Explanation:
Network Access Control Lists (NACL) act as a firewal on the subnet level, and Security Groups
act as a firewall on the instance level.

QUESTION: 75
John, member of your company's development team, needs access to company's AWS
account. What AWS service is used to manage such access?

A. S3
B. Route 53
C. IAM
D. EC2

Answer(s): C
Explanation:
Identity & Access Management (IAM) is the AWS service where user accounts, credentials, and
service access is managed.

QUESTION: 76
What is a main benefit of CloudFront?

A. DNS management
B. Unlimited storage
C. Serverless compute capacity
D. Built-in DDoS protection

Answer(s): D
Explanation:
CloudFront allows you to cache content at edge locations. When a request is made for that
content, the request is sent to an edge location (not your applications hardware), so the edge
locations will absorb any DDoS attack and protect your underlining hardware.

QUESTION: 77
What best describes the concept of a virtual private cloud?

A. A private section of AWS in which you control what resources are placed inside.
B. A collection of data centers.
C. A shared section of AWS between you and other AWS account holders.
D. A private section of AWS in which you control what resources are placed inside and who can
access those resources.

Answer(s): D
Explanation:
A VPC is a private section of AWS in which you control what resources are placed inside and
who can access those resources. A VPC defines your own private network that runs on AWS
infrastructure.

QUESTION: 78
If you have a large collection of reproducible objects, which S3 storage class should you use if
low cost is your priority?

A. Glacier
B. Standard
C. Reduced Redundancy
D. None of the above

Answer(s): C
Explanation:
The reduced redundancy storage class has the lowest durability of all the storage classes. This
means object stored in this storage class have the highest probability of being lost. So you