What credential components are required to gain programmatic access to an AWS account? (Choose two.)

An access key ID, A secret access key

What is AWS Wavelength?

Enables developers to build apps with millisecond latencies to mobile users

Which of the following AWS services provide compute resources? (Choose two.)

AWS Lambda, Amazon Elastic Cloud Compute Service

Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.)

Setting up server-side encryption on an Amazon S3 bucket, Network and firewall configurations

What is the AWS Landing zone for?

quickly setting up a secure, multi-account AWS environment

What is amazon athena?

Serverless SQL data querying service where you only pay for queries you run

A company is migrating from on-premises to cloud & is looking for hands-on help. How can the company get this support?

Select a partner from the AWS Partner Network to assist with the migration, Use AWS Professional Services to set up an AWS Landing Zone

What is amazon Macie?

A security service using ML to discover, classify & protect sensitive data

Serverless pay-as-you-go ETL service

Serverless launch-type compute engine for containers with auto-provisioning

Which options does AWS offer for customers who want to learn about security in the cloud in an instructor-led setting?

AWS Classroom training, AWS Online Tech Talks

What is an Amazon Machine Image (AMI)?

A type of virtual appliance used to create a virtual machine within EC2

Amazon neptune is used when

Relationships between objects are of high value

What is Amazon Lightsail?

provides users pre-configured resources for fast websites/apps deployment

What does CloudHSM do?

Hardware module that allows generation of encryption keys for security

Define Elastic Beanstalk

Service for deploying and scaling web apps based on imputted code

config management service providing managed instances of Chef & Puppet

How does the AWS Enterprise Support Concierge team help users?

Answering billing and account inquires

What does Route 53 do?

Directs users to internet apps hosted in the cloud

What does AWS Service Catalog do?

Allows organizations to create/manage catalogs of approved IT services

What does amazon EMR do?

web service for processing vast amounts of data using Hadoop framework

What does a Virtual Private Network do?

Lets you establish a protected private tunnel from network to AWS

studbud

AWS Certified Cloud Practitioner Preparation

95 termsStudBud Administration60 plays

Imported from external platform

Flashcards95 cardsFPractice quizPHost liveL

Questions 95

Answers

1
The default NACL denies all inbound and outbound traffic
True
False
2
Which services use AWS edge locations? (Choose two.)
AWS Shield
Wavelength
Amazon CloudFront
E. Amazon ElastiCache
3
What data stores are supported by elasticache?
MySQL
Memcached
Redis
PostGres
4
What credential components are required to gain programmatic access to an AWS account? (Choose two.)
An access key ID
A secret access key
A user ID
A secondary key
5
What is AWS Wavelength?
Allows users to cache on top of databases to increase durability
Enables developers to build apps with millisecond latencies to mobile users
Enables users to deploy apps with minimal provisioning and configuration
A serverless framework allowing users to provision AWS mobile solutions
6
Which of the following AWS services provide compute resources? (Choose two.)
AWS Lambda
AWS WAF
AWS Code deploy
Amazon Elastic Cloud Compute Service
7
Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?
Spot Instances
On-Demand Instances
Dedicated hosts
Reserved Instances
8
What is the most efficient way to establish network connectivity from on-prem to multiple VPCs in different AWS Regions?
AWS VPN
AWS Transit Gateway
AWS Client VPN
Direct Connect
9
Under the AWS shared responsibility model, which of the following are customer responsibilities? (Choose two.)
Amazon RDS instance patching
Setting up server-side encryption on an Amazon S3 bucket
Network and firewall configurations
Compute capacity availability
10
What data storage type describes where data is lost when a system is stopped? (eg. EC2 instance store, Memcached)
Evanescent
Persistent
Transient
Ephemeral
11
What best describes how s3 stores data?
SQL database
Using RDS
data lake
Unlimited object storage
12
Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?
AWS Directory Service
Amazon Pinpoint
Amazon Rekognition
Amazon Connect
13
Elastic Beanstalk is an example of
IaaS
PaaS
SaaS
14
What AWS team assists customers with accelerating cloud adoption through paid engagements in several specialty areas?
AWS Account managers
AWS Solutions Architects
A. AWS Enterprise Support
AWS Professional Services
15
What is the AWS Landing zone for?
Opening queries for migrating to AWS
quickly setting up a secure, multi-account AWS environment
Initial migration from on-prem to cloud
Fast deployment of new custom apps
16
What is amazon athena?
Serverless SQL data querying service where you only pay for queries you run
big data specific analytics service where you pay per request
Storage system that holds up to 50PB of data
Serverless key management service allowing for dynamic data analytics
17
A company is migrating from on-premises to cloud & is looking for hands-on help. How can the company get this support?
Contact AWS Support and open a case for assistance
Use Amazon Connect to make a new request for expert assistance in migration
Select a partner from the AWS Partner Network to assist with the migration
Use AWS Professional Services to set up an AWS Landing Zone
18
Which AWS service provides a secure, fast, & cost-effective way to migrate or transport exabyte-scale datasets into AWS?
AWS Batch
Snowmobile
Snowball
Migration Hub
19
Which service is best for storing common database query results, which helps to alleviate database access loads
Amazon Machine Learning
Redshift
Amazon Elasticache
EC2 Instance Store
20
What is amazon Macie?
A security service using ML to discover, classify & protect sensitive data
A serverless platform allowing for simple code configuration and deployment
An alert system that scans for DDoS attacks
A MySQL compatible database allowing for big data analytics
21
AWS CloudFormation allows you to build an environment by treating infrastructure as code
True
False
22
Which AWS service provides the ability to manage infrastructure as code?
CodeCommit
EBS
CloudFormation
CloudFront
23
Which EBS volume type is built for frequently accessed data
Cold HDD
General purpose SDD
Throughput Optimised HDD
Provisioned IPOS SSD
24
What is AWS Glue?
Connectivity service allowing for high availability across region
Serverless pay-as-you-go ETL service
Service for deploying apps based on code imput
ML solution that sorts data automatically into custom s3 buckets
25
What is AWS Fargate?
Serverless launch-type compute engine for containers with auto-provisioning
Memory optimised database service used for dynamic & often large workloads
Additional EC2 security service (an alternative to the Internet Gateway)
Caching service providing database backup cross-regionally
26
RDS is a
OLAP database
OLTP database
27
Which options does AWS offer for customers who want to learn about security in the cloud in an instructor-led setting?
AWS Blog
AWS Classroom training
AWS Online Tech Talks
Trsusted Advisor
28
Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs?
Basic
Developer
Enterprise
Business
29
What is an Amazon Machine Image (AMI)?
A hosted-service allowing access to AWS through a custom virtual machine
A type of virtual appliance used to create a virtual machine within EC2
A machine learning virtualization tool offered by AWS
A machine learning solution used to identify and categorise sensitive data
30
Which AWS service enables users to securely connect to AWS resources over the public internet?
AWS VPN
AWS Direct Connect
Amazon Pinpoint
Amazon VPC peering
31
Amazon neptune is used when
Relationships between objects are NOT of high value
Relationships between objects are of high value
32
What is Amazon Lightsail?
provides low latency to users globally by using VPC peering
caching service working alongside ElastiCache to provide content globally
provides users pre-configured resources for fast websites/apps deployment
is a migration service for those who want to quickly set up on the cloud
33
which EC2 pricing model is ideal for short-term, irregular workloads that cannot be interrupted
reserved
dedicated
on-demand
spot
34
Which storage type describes when data is temporarily stored and passed along to another process or persistant store?
Persistent
Ephemeral
Transient
Evanescent
35
When would you not use amazon RDS?
Require dynamic scaling
Need traditional relational database for OLTP
Existing applications requiring RDBMS
Your data is well-formed and structured
36
Which of the following services could be used to deploy an application to servers running on-premises? (Choose two.)
AWS Elastic Beanstalk
AWS CodeDeploy
AWS OpsWorks
AWS CodeCommit
37
What does CloudHSM do?
Automated security assessment service
Serverless machine learning service that classifies sensitive data
Lets you easily provision, manage and deploy public and private SSLS
Hardware module that allows generation of encryption keys for security
38
Which AWS service enables users to create copies of resources across AWS Regions?
Elasticache
CloudFormation
Systems Manager
CloudTrail
39
Define Elastic Beanstalk
Service that provides a scalable connection to a VPC
Can be added as a service to automatically scale up resources
Service for deploying and scaling web apps based on imputted code
DNS Web service that provides a reliable internet app route for end users
40
AWS OpsWorks is
Online tool to monitor and assess metrics of different AWS resources
publishes up-to-the-minute information on service availability
a patching software for AWS operating systems (except Linus)
config management service providing managed instances of Chef & Puppet
41
What s3 service uses edge locations?
EBS
Transfer acceleration
One Zone IA
Glacier
42
Which of the following is an AWS-managed compute (IaaS) service?
AWS Lambda
B. Amazon EC2
Amazon Aurora
A. Amazon SWF
43
What service simplifies the process of creating multi-environment accounts, setting up the governance, compliance, ect?
AWS Systems manager
AWS Control Tower
AWS Config
AWS Organisations
44
How does the AWS Enterprise Support Concierge team help users?
supporting application development
Providing architecture guidance
Answering questions regarding technical support cases
Answering billing and account inquires
45
What does Route 53 do?
Provides a secure connection from on-prem to AWS
Is an option for data transfer from a customer's own network to the cloud
Directs users to internet apps hosted in the cloud
Uses Edge locations to connect resources across regions
46
What is the MINIMUM AWS Support plan level that will provide users with access to the AWS Support API?
Enterprise
Basic
Business
Developer
47
What does AWS Service Catalog do?
Allows organizations to create/manage catalogs of approved IT services
Manages many AWS resources including Amazon EC2, Amazon S3, Amazon RDS etc
Is similar to Marketplace where users can buy and sell services/solutions
Provides a catalog of compliance reports for different services within AWS
48
Which AWS service will help users tell if an application running on an Amazon EC2 instance has sufficient CPU capacity?
Amazon CloudWatch
Amazon Inspector
AWS CloudTraill
AWS Config
49
What does amazon EMR do?
web service for processing vast amounts of data using Hadoop framework
Machine learning solution to increase elasticity
web service providing scalable data storage for dynamic datasets
storage service supporting MySQL
50
What does a Virtual Private Network do?
Provides a connection to the public internet
Connects your resources in different regions
Allows peering between VPCs
Lets you establish a protected private tunnel from network to AWS
51
Which of the following services have Distributed Denial of Service (DDoS) mitigation features?
WAF
EC2
Cloudfront
Inspector
52
Who is responsible for patching the guest operating system for Amazon RDS?
The customer Database Administrator
The AWS Product team
Managed partners
AWS Support
53
What is the maximum object size stored in an s3 bucket?
4GB
80PB
8PB
5TB
54
Which two describe AWS Global Accelerator?
provides static IP addresses that act as fixed entry point to app endpoints
improves availability and performance of apps with local/global users.
increases elasticity and durability
reroutes traffic from unhealthy to healthy endpoints
55
What is amazon batch?
Service providing multi-deployment of many apps at once
Copies & stores data from variety of storage types for increased durability
Allows code to be packaged for repetitive tasks and submitted using CLI ect
Provides batch of AWS solutions to common coding tasks
56
Define AWS Outposts
Brings services, infrastructure & operating models to nearly any datacentre
Content Delivery Network (CDN) endpoints for CloudFront.
Places compute, storage and database services closer to end-users.
Bringsservices to edge of 5G network (low latency to connect to mobile app)
57
Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?
AWS Budgets
AWS Billing dashboard
AWS Cost Explorer
AWS Cost and Usage report
58
What service would you use to deploy an application with minimal knowledge of other services?
Snowmobile
CodeCommit
Elastic Beanstalk
CodeDeploy
59
AWS Lambda scales based on demand
True
False
60
Which of the following AWS Cloud services can be used to run a customer-managed relational database?
Amazon EC2
. Amazon Route 53
Amazon DynamoDB
Amazon ElastiCache
61
What does Amazon CloudFormation do?
It is an edge location service that allows low latency content delivery
It keeps a record of API calls allowing for a monitoring of all AWS apps
It is a managed service for provisioning infrastructure based on templates
It is a serverless code configuration service
62
A customer would like to design a new workload on AWS Cloud but does not have the expertise in-house. Who can they use?
AWS Marketplace
AWS Service Catalog
AWS Partner Network Consulting Partners
AWS Partner Network Technology Partners
63
What service makes it easier to control encryption with cryptographic keys & envelope encryption (master key for keys)?
AWS KMS
AWS Dynamo-DB
AWS EFS
AWS KES
64
What two things are true for Amazon Elastic Container Service?
Provides a sandbox environment to test deployment and health of apps
Gives user control of management of cluster install, operation and scaling
Provides scalable, high performance container management supporting Docker
Removes need to install/operate/scale own cluster management infrastructure
65
What is Elastic Beanstalk?
Fast way of getting web apps up and running based on app code
Deployment service for applications purchased in AWS Marketplace
Code configuration platform connected to an EC2 instance
Scalable database service used for dynamic and volatile workloads
66
What amazon service is a threat detection system that continuously monitors for malicious activity or policy violations?
Amazon guard duty
Amazon WAF
Amazon Macie
Amazon shield
67
Which AWS service runs security checks against specific EC2 instances to prove an instance is harden?
AWS WAF
AWS Config
Amazon Inspector
AWS Trusted Advisor
68
Which member of the snow family is a literal storage container with a truck to transport it on an exabyte scale?
Snowball
Snowmobile
Snowcone
69
What service allows you to monitor AWS resources and apps in real time, providing metrics, alarms and logs?
CloudWatch
CloudTrail
Inspector
CloudFormation
70
When is Elasticache used?
For highly volatile data (non-persistent)
For predictable or static workloads
For data required to be cached for a long period of time
For fast temporary storage for small amounts of data
71
What does EBS do and when is it used?
Stores data as files, used for persistent hard drives
Creates virtualhard drives, used when harddrives mustbe persistent/backedup
Scales storage automatically, used for dynamic data
create storage volumes and attach them to Amazon EC2 instances
72
What is AWS CloudTrail?
Firewall for protection at instance level
API auditing service for recording activity & delivering logs to s3 bucket
Evaluates resources against 5 pillars (auto checklist for best practices)
Allows for monitoring of all aws resources in real time
73
CloudFront provides a level of security against DDoS attacks
True
False
74
Which is true for security groups default permissions?
Denies all outbound and inbound traffic
Denies all inbound traffic and allows all outbound
Denies all outbound and allows all inbound
Allows all inbound and outbound traffic
75
What is AWS Shield?
A firewall service that protects your data at the subnet level
A managed DDos protection service that safeguards apps
A simulated cyber attack system that evaluates your system security
A monitoring app that alerts you if attacks have breached your network
76
What service provides secure, hierarchical storage for configuration data management and secrets management?
AWS Systems Manager Parameter Store
AWS KMS
AWS Cognito
AWS Secrets Manager
77
Which member of the snow family is for bulk data transfer, edge storage and edge compute on a petabyte scale?
Snowball
Snowcone
Snowmobile
78
Which EBS volume type is built for high performance, low latency applications
Throughput Optimised HDD
General purpose SDD
Cold HDD
Provisioned IPOS SSD
79
Which of the following are features of Amazon CloudWatch Logs? (Choose two.)
Near real-time monitoring
Free Amazon Elasticsearch Service analytics
Summaries by Amazon Simple Notification Service (Amazon SNS)
Adjustable retention
80
Which AWS service is suitable for an event-driven workload?
AWS Elastic Beanstalk
AWS Lambda
Amazon EC2
Amazon Lumberyard
81
What are two benefits of Marketplace?
Can pay for software by the hour/month depending on license
Can deploy third-party software without testing
can launch apps with 1 click
software is managed, patched, and encrypted by AWS
82
You would use S3 over EBS if data only requires occasional changes, rather than complex read/write functions
True
False
83
What is amazon cognito?
Version control service for privately storing and managing assets
Scalable data storage service for sensitive data
Security service for adding user sign-up/in & access control to web apps
Envelope service including amazon rekognition and upgraded MFA
84
Which service would help monitor the health of app endpoints and route traffic to healthy regional endpoints?
Cloudwatch
Global Accelerator
Cloudfront
Inspector
85
Which member of the snow family is the smallest edge computing, data transfer device with 8TB of storage?
Snowball
Snowcone
Snowmobile
86
Access keys in AWS Identity and Access Management (IAM) are used to:
authenticate AWS CodeCommit repositories
log in to the AWS Management Console.
log in to EC2 instances
make programmatic calls to AWS from AWS APIs.
87
Which service can be used to monitor and receive alerts for AWS account root user AWS Management Console sign-in events?
CloudWatch
Trusted Advisor
Config
IAM
88
Which support plan provides access to architectural/operational reviews & 24/7 access to Senior Cloud Support Engineers?
Business
Enterprise
Developer
Basic
89
Which two answers are true for s3 billing?
Pay for requests made to amazon s3 buckets and objects
pay to transfer data between buckets/to other services in SAME region
Pay for only what you use in storage
do not have to pay for storage management features enabled on buckets
90
What statement best describes Amazon ElastiCache?
Service that distributes blockchain networks by adding a caching layer
Document db service that caches on top of documents
service that adds caching on top of dbs to improve read times of requests
In-memory cache for dynamo DB that improves write time of requests
91
What is an AWS Local Zone?
A collection of one or more datacentres
Extension of a region, putting compute/db/ect services closer to end-users
A collection of multiple AZs with pairs for data durability
A geographical location designed to decrease latency for content streaming
92
What packet filtering is performed by security groups?
Stateless: Remembering nothing
Stateful: Remembering previous permission decisions
93
How does AWS charge for AWS Lambda?
Users choose a 1-, 3- or 5-year upfront payment term.
Users pay for the required permanent storage on a file system or in a db.
Users bid on the maximum price they are willing to pay per hour.
Users pay based on the number of requests & consumed compute resources.
94
What does a DNS Service do?
It is a NoSQL storage service for non-relational databases
It is a security service for NACL configuration
Delivers network content to users from edge locations
Translates domain names to IP addresses
95
What does Route53 NOT do?
Allow you to register domain names
Translate names to IP addresses
Provide security against DDoS attacks
Perform application health checks automatically

AWS Certified Cloud Practitioner Preparation Flashcards | StudBud