AWS Cloud Practitioner questions; solved latest fall 2022.

AWS Cloud Practitioner questions/answers 2022. Which statement best describes Amazon DynamoDB? -A service that allows customers to run relational databases in the AWS Cloud -A serverless key-value database service ...

AWS Cloud Practitioner questions/answers 2022. Which statement best describes Amazon DynamoDB? -A service that allows customers to run relational databases in the AWS Cloud -A serverless key-value database service -A service that customers can use to migrate relational databases, nonrelational databases, and other types of data stores -An enterprise-class relational database - A serverless key-value database service Which statement describes an IAM policy? -An authentication process that provides an extra layer of protection for your AWS account. -A document that grants or denies permissions to AWS services and resources. -An identity that you can assume to gain temporary access to permissions. -The identity that is established when you first create an AWS account. - A document that grants or denies permissions to AWS services and resources. Which of the following descriptions best describes the concept of least privilege? -Adding an IAM user into at least one IAM group. -Granting only the permissions that are needed to perform specific job tasks. -Checking a packet's permissions against an access control list. -Performing a denial of service attack that originates from at least one device. - Granting only the permissions that are needed to perform specific job tasks An employee requires temporary access to create several Amazon S3 buckets. Which option should be used for this task? -AWS account root user. -IAM group. -IAM role. -Service control policy (SCP). - IAM role Which service helps protect your applications against distributed denial of service (DDoS) attacks? -Amazon GuardDuty -Amazon Inspector -AWS Artifact -AWS Shield - AWS Shield Which task can AWS Key Management Service (AWS KMS) perform? -Configure multi-factor authentication (MFA). -Update the AWS account root user password. -Create cryptographic keys. -Assign permissions to users and groups. - Create cryptographic keys What is the difference between instance stores and EBS (Elastic Block Store) volumes? - -Instance stores ideal for temporary data not kept long term -Amazon EBS volumes are ideal for data that requires retention You want to store data that is infrequently access but must be immediately available when needed. What S3 do you use? - S3 Standard IA Why is AWS more economical than traditional data centers for applications with varying compute workloads? -Amazon EC2 costs are billed on a monthly basis. -Users retain full administrative access to their Amazon EC2 instances. -Amazon EC2 instances can be launched on demand when needed. -Users can permanently run enough instances to handle peak workloads. - Amazon EC2 instances can be launched on demand when needed. Which AWS service would simplify the migration of a database to AWS? -AWS Storage Gateway -AWS Database Migration Service (AWS DMS) -Amazon EC2 -Amazon AppStream 2.0 - AWS Database Migration Service (AWS DMS) Which AWS offering enables users to find, buy, and immediately start using software solutions in their AWS environment? -AWS Config -AWS OpsWorks -AWS SDK -AWS Marketplace - AWS Marketplace Which AWS networking service enables a company to create a virtual network within AWS? -AWS Config -Amazon Route 53 -AWS Direct Connect -Amazon Virtual Private Cloud (Amazon VPC) - Amazon Virtual Private Cloud (Amazon VPC) Which of the following is an AWS responsibility under the AWS shared responsibility model? -Configuring third-party applications -Maintaining physical hardware -Securing application access and data -Managing guest operating systems - Maintaining physical hardware Which component of the AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery? -AWS Regions -Edge locations -Availability Zones -Virtual Private Cloud (VPC) - Edge locations How would a system administrator add an additional layer of login security to a user's AWS Management Console? -Use Amazon Cloud Directory -Audit AWS Identity and Access Management (IAM) roles -Enable multi-factor authentication -Enable AWS CloudTrail - Enable multi-factor authentication Which service can identify the user that made the API call when an Amazon EC2 instance is terminated? -AWS Trusted Advisor -AWS CloudTrail -AWS X-Ray -AWS Identity and Access Management (AWS IAM) - AWS CloudTrail Which service would be used to send alerts based on Amazon CloudWatch alarms? -Amazon Simple Notification Service (Amazon SNS) -AWS CloudTrail -AWS Trusted Advisor -Amazon Route 53 - Amazon Simple Notification Service (Amazon SNS) Where can a user find information about prohibited actions on the AWS infrastructure? -AWS Trusted Advisor -AWS Identity and Access Management (IAM) -AWS Billing Console -AWS Acceptable Use Policy - AWS Acceptable Use Policy Which action can a customer perform with consolidated billing? -Review how much cost predicted AWS usage will incur by the end of the month -Create an estimate for the cost of use cases on AWS -Combine usage across accounts to receive volume pricing discounts -Visualize and manage AWS costs and usage over time - Combine usage across accounts to receive volume pricing discounts Which pricing tool is used to visualize, understand, and manage AWS costs and usage over time? -AWS Pricing Calculator -AWS Budgets -AWS Cost Explorer -AWS Free Tier - AWS Cost Explorer Which pricing tool can a customer use to receive alerts when their service usage exceeds a customer-defined threshold? -Billing dashboard in the AWS Management Console -AWS Budgets -AWS Free Tier -AWS Cost Explorer - AWS Budgets A company wants to receive support from an AWS Technical Account Manager (TAM). Which support plan should they choose? -Developer -Basic -Enterprise -Business - -Enterprise Which service or resource is used to find third-party software that runs on AWS? -AWS Marketplace -AWS Free Tier -AWS Support -Billing dashboard in the AWS Management Console - AWS Marketplace Which Amazon S3 storage classes are optimized for archival data? (Select TWO.) -S3 Standard -S3 Glacier -S3 Intelligent-Tiering -S3 Glacier Deep Archive -S3 Standard-IA - -S3 Glacier -S3 Glacier Deep Archive Which statement or statements are TRUE about Amazon EBS volumes and Amazon EFS file systems? -EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones. -EBS volumes store data across multiple Availability Zones. Amazon EFS file systems store data within a single Availability Zone. -EBS volumes and Amazon EFS file systems both store data within a single Availability Zone. -EBS volumes and Amazon EFS file systems both store data across multiple Availability Zones. - EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones. A customer wants to store data in an object storage service. Which AWS service should the customer use for this type of storage? -Amazon Managed Blockchain -Amazon Elastic File System (Amazon EFS) -Amazon Elastic Block Store (Amazon EBS) -Amazon Simple Storage Service (Amazon S3) - Amazon Simple Storage Service (Amazon S3) Which service is used to query and analyze data across a data warehouse? -Amazon Neptune -Amazon DocumentDB -Amazon ElastiCache -Amazon Redshift - Amazon Redshift Which of the following are benefits of the AWS Cloud? (Select TWO.) -Companies need increased IT staff. -Capital expenses are replaced with variable expenses. -Customers receive the same monthly bill regardless of which --resources they use. -Companies gain increased agility. -AWS holds responsibility for security in the cloud. - -Capital expenses are replaced with variable expenses -AWS holds responsibility for security in the cloud Which of the following are advantages of the AWS Cloud? (Select TWO.) -AWS manages the maintenance of the cloud infrastructure. -AWS manages the security of applications built on AWS. -AWS manages capacity planning for physical servers. -AWS manages the development of applications on AWS. -AWS manages cost planning for virtual servers. - -AWS manages the maintenance of the cloud infrastructure. -AWS manages capacity planning for physical servers. A company requires physical isolation of its Amazon EC2 instances from the instances of other customers. Which instance purchasing option meets this requirement? -Dedicated Hosts -Reserved Instances -On-Demand Instances -Spot Instances - Dedicated Hosts Which AWS Cloud architecture principle states that systems should reduce interdependencies? -Scalability -Services, not servers -Automation -Loose coupling - Loose coupling Which AWS Cloud architecture design principle supports the distribution of workloads across multiple Availability Zones? -Implement automation. -Design for agility. -Design for failure. -Implement elasticity. - Design for failure. Which of the following is a responsibility of AWS under the AWS shared responsibility model? -Design a customer's application for disaster recovery. -Update the guest operating systems on deployed Amazon EC2 instances. -Configure new resources within an AWS account. -Secure the physical infrastructure. - Secure the physical infrastructure. Which of the following describes a security best practice that can be implemented by using AWS Identity and Access Management (IAM)? -Turn off AWS Management Console access for all users. -Generate secret keys for every IAM user. -Grant permissions to users who are required to perform a specific -task only. -Store AWS credentials within Amazon EC2 instances. - Grant permissions to users who are required to perform a specific task only. >>>>>>>>>>>>>>CONTINUED