Cloud Concepts
Which of the following procedures can reduce latency when your end users are retrieving data? (Choose TWO)
a. Store media assets in the region closest to your end users
b. Store media assets in S3 and use CloudFront to distribute these assets
c. Replicate media assets to at least two availability zones
d. Reduce the size of media assets using the Amazon Elastic Transcoder
e. Store media assets on an additional EBS volume and increase the capacity of your server
a. Store media assets in the region closest to your end users
b. Store media assets in S3 and use CloudFront to distribute these assets
Amazon CloudFront is a fast Content Delivery Network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency and high transfer speeds.
CloudFront is the best solution to reduce latency if you have users from different places around the world.
Storing media assets in a region closer to the end-users can help reduce latency for those users. This is because these assets will travel a shorter distance over the network.
Which of the following resources can an AWS customer use to learn more about prohibited uses of the services offered by AWS?
a. AWS Budgets
b. AWS Service Control Policies (SCPs)
c. AWS Artifact
d. AWS Acceptable Use Policy
d. AWS Acceptable Use Policy
The AWS Acceptable Use Policy describes prohibited uses of the web services offered by AWS. For example, any activities that are illegal, that violate the rights of others, or that may be harmful to others are prohibited.
What should you consider when storing data in Amazon Glacier?
a. Glacier can only be used to store frequently accessed data and data archives
b. Amazon Glacier only accepts data in a compressed format
c. Pick the right Glacier class based on your retrieval needs
d. Attach Glacier to an EC2 Instance to be able to store data
c. Pick the right Glacier class based on your retrieval needs
Choosing between S3 Glacier Instant Retrieval, S3 Glacier Flexible Retrieval, or S3 Glacier Deep Archive depends on how quickly you must retrieve your data. S3 Glacier Instant Retrieval delivers the fastest access to archive storage, with the same throughput and milliseconds access as the S3 Standard and S3 Standard-IA storage classes. With S3 Glacier Flexible Retrieval, you can retrieve your data within a few minutes to several hours (1-5 minutes to 12 hours), whereas with S3 Glacier Deep Archive, the minimum retrieval period is 12 hours.
What does the AWS "Business" support plan provide? (Choose TWO)
a. Less than 15 minutes response-time support if your business critical system goes down
b. Access to the full set of Trusted Advisor checks
c. Consultative review and guidance based on your applications
d. AWS Health API
e. Proactive Technical Account Management
b. Access to the full set of Trusted Advisor checks
d. AWS Health API
Which of the following makes it easier for you to categorize, manage and filter your resources?
a. AWS Directory Service
b. AWS Tagging
c. AWS Service Catalog
d. Amazon CloudWatch
b. AWS Tagging
Amazon Web Services (AWS) allows customers to assign metadata to their AWS resources in the form of tags. Each tag is a simple label consisting of a customer-defined key and an optional value that can make it easier to manage, search for, and filter resources.
Which of the following Cloud Computing deployment models eliminates the need to run and maintain physical data centers?
a. On-premises
b. PaaS
c. Cloud
d. IaaS
c. Cloud
Which virtual private cloud (VPC) component controls inbound and outbound traffic for Amazon EC2 instances?
A. Subnet
B. Internet gateway
C. Network access control list
D. Security group
D. Security group
A security group is a virtual firewall that controls inbound and outbound traffic for an Amazon EC2 instance. By default, a security group denies all inbound traffic and allows all outbound traffic. Businesses can add custom rules to configure which traffic should be allowed or denied.
What factors determine how you are charged when using AWS Lambda? (Choose TWO)
a. Number of requests to your functions
b. Storage consumed
c. Placement groups
d. Number of volumes
e. Compute time consumed
a. Number of requests to your functions
e. Compute time consumed
With AWS Lambda, you pay only for what you use. You are charged based on the number of requests for your functions and the time it takes for your code to execute.
Which statement is true regarding AWS pricing? (Choose TWO)
a. With the AWS pay-as-you-go pricing model, you do not have to pay any upfront fee
b. You have no responsibility for third-party software license costs
c. For some services, you have to pay a startup fee in order to get the service running
d. You only pay for the individual services that you need with no long-term contracts
e. There are no reservations on AWS, you only pay for what you use
a. With the AWS pay-as-you-go pricing model, you do not have to pay any upfront fee
d. You only pay for the individual services that you need with no long-term contracts
With the AWS pay-as-you-go model, you only pay for what you consume, you do not have to pay any money upfront and there are no long term contracts. The AWS pay-as-you-go pricing is similar to how you pay for utilities like water and electricity. You only pay for the services you consume, and once you stop using them, there are no additional costs or termination fees.
What are the benefits of the AWS Organizations service? (Choose TWO)
a. Help organizations achieve their desired business outcomes with AWS
b. Manage your organization’s payment methods
c. Control access to AWS services
d. Help organizations design and maintain an accelerated path to successful cloud adoption
e. Consolidate billing across multiple AWS accounts
c. Control access to AWS services
e. Consolidate billing across multiple AWS accounts
AWS Organizations has five main benefits:
1) Centrally manage access polices across multiple AWS accounts.
2) Automate AWS account creation and management.
3) Control access to AWS services.
4) Consolidate billing across multiple AWS accounts.
5) Configure AWS services across multiple accounts.
According to the AWS shared responsibility model, what are the controls that customers fully inherit from AWS? (Choose TWO)
a. Awareness and Training
b. Environmental controls
c. Communications controls
d. Data center security controls
e. Resource Configuration Management
b. Environmental controls
d. Data center security controls
As mentioned in the AWS Shared Responsibility Model page, Inherited Controls are controls which a customer fully inherits from AWS such as physical controls and environmental controls.
Which statement best describes Amazon GuardDuty?
A. A service that helps protect applications against distributed denial-of-service (DDoS) attacks
B. A service that provides intelligent threat detection for AWS infrastructure and resources
C. A service that monitors network requests for web applications
D. A service that checks applications for security vulnerabilities and deviations from security best practices
B. A service that provides intelligent threat detection for AWS infrastructure and resources
AWS GuardDuty identifies threats by continually monitoring the network activity and account behavior within an AWS environment.
The other response options are incorrect because:
An application developer wants to send and receive messages between distributed application components. Which service should they use?
A. Amazon ElastiCache
B. AWS Snowball
C. Amazon Route 53
D. Amazon Simple Queue Service (Amazon SQS)
D. Amazon Simple Queue Service (Amazon SQS)
Amazon SQS is a message queuing service. Using Amazon SQS, an application developer can send, store, and receive messages between software components at any volume size, without losing messages or requiring other services to be available.
Which tool provides the capability to visualize, understand, and manage AWS costs and usage over time?
A. AWS Pricing Calculator
B. AWS Artifact
C. AWS Budgets
D. AWS Cost Explorer
D. AWS Cost Explorer
With AWS Cost Explorer, businesses can quickly create custom reports to analyze their AWS cost and usage data.
The other response options are incorrect because:
Which Perspective of the AWS Cloud Adoption Framework focuses on recovering IT workloads to meet the requirements of business stakeholders?
A. Business Perspective
B. People Perspective
C. Operations Perspective
D. Governance Perspective
C. Operations Perspective
The Operations Perspective of the AWS Cloud Adoption Framework also includes principles for operating in the cloud by using agile best practices.
The other response options are incorrect because:
Which statement best describes an Availability Zone?
A. A fully isolated portion of the AWS global infrastructure
B. The server from which Amazon CloudFront gets files
C. A separate geographical location with multiple locations that are isolated from each other
D. A site that Amazon CloudFront uses to cache copies of content for faster delivery to users at any location
A. A fully isolated portion of the AWS global infrastructure
An Availability Zone is a single data center or a group of data centers within a Region. Availability Zones are located tens of miles apart from each other. This helps them to provide interconnectivity to support the services and applications that run within a Region.
After configuring your VPC and all of the resources within it, you want to add an extra layer of security at the subnet level. Which will you use to add this security?
A. Security Group
B. IAM
C. Private IP Address
D. Network ACL
D. Network ACL
A network access control list (NACL) is an optional layer of security for your VPC that acts as a firewall for controlling traffic in and out of one or more subnets. You might set up network ACLs with rules similar to your security groups to add an additional layer of security to your VPC.
A cloud engineer is running an Amazon EC2 instance and wants to store data in an attached resource. Their data is temporary and will not be kept long term. Which resource should they use?
A. Amazon S3 bucket
B. Amazon Elastic Block Store (Amazon EBS) volume
C. Subnet
D. Instance store
D. Instance store
Instance stores are ideal for temporary data that does not need to be kept long term. When an Amazon EC2 instance is stopped or terminated, all the data that has been written to the attached instance store is deleted.
Which Amazon EC2 pricing option reduces costs when a business makes an hourly spend commitment to an instance family and Region for a 1-year or 3-year term?
A. Spot Instances
B. Dedicated Hosts
C. EC2 Instance Savings Plans
D. Reserved Instances
C. EC2 Instance Savings Plans
EC2 Instance Savings Plans reduces compute costs by committing to a consistent hourly spend for a 1-year or 3-year term. This results in savings of up to 72% over On-Demand Instance costs. Any EC2 usage up to the commitment is charged at the discounted Savings Plan rate (for example, $10 an hour). Any EC2 usage beyond the commitment is charged at regular On-Demand Instance rates.
You have infrequently accessed data in S3 buckets that you want to transfer to Glacier. What can you use in AWS to do this?
A. Cross Origin Resource Sharing (CORS)
B. Database Migration Service
C. Bucket Policy
D. S3 Lifecycle Policy
D. S3 Lifecycle Policy
You can add rules in an S3 Lifecycle configuration to tell Amazon S3 to transition objects to another Amazon S3 storage class. For example:
When you know that objects are infrequently accessed, you might transition them to the S3 Standard-IA storage class.
You might want to archive objects that you don't need to access in real time to the S3 Glacier storage class.
An application that experiences highly variable traffic throughout the day has been configured in AWS. The capacity configured to serve this application adjusts to demands throughout the day. Which AWS principle does this describe?
A. Durability
B. High Availability
C. Elasticity
D. Verticality
C. Elasticity
The ability to acquire resources as you need them and release resources when you no longer need them. In the cloud, you want to do this automatically.
You are storing sensitive employee information in an S3 Bucket. What can you use to give bucket access only to authorized personnel?
A. Login and Password
B. Access Keys
C. Network Access Control List
D. Bucket Policy
D. Bucket Policy
S3 bucket policies specify what actions are allowed or denied for which principals on the bucket that the bucket policy is attached to (e.g., allow user Alice to PUT but not DELETE objects in the bucket).
A gaming company is using the AWS Developer Tool Suite to develop, build, and deploy their applications. Which AWS service can be used to trace user requests from end-to-end through the application?
A. AWS X-Ray
B. CloudWatch
C. CloudTrail
D. AWS Inspector
A. AWS X-Ray
AWS X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components. You can use X-Ray to analyze from simple three-tier applications to complex microservices applications consisting of thousands of services.
You have upgraded your AWS support plan to the Business support level. What is true of the Business Support Plan?
A. < 24 hours response time support when your production system goes down.
B. < 1 hour response time support when your production system goes down.
C. < 15 minutes response time support if your business-critical system goes down.
D. < 15 minutes response time support when your production system goes down.
B. < 1 hour response time support when your production system goes down.
The Business level support plan provides one hour or less response time support for production level failures.
Which AWS service provides central governance and management across multiple AWS accounts?
A. AWS Systems Manager
B. Identity and Access Management
C. CloudFormation
D. AWS Organizations
D. AWS Organizations
AWS Organizations helps you centrally govern your environment as you grow and scale your workloads on AWS. Whether you are a growing startup or a large enterprise, AWS Organizations helps you to centrally manage billing, control access, compliance, and security, and share resources across your AWS accounts.
X - Identity and Access Management
AWS Organizations is designed specifically for multi-account management (not IAM).