Which AWS networking service enables a company to create a virtual network within AWS?

Amazon Virtual Private Cloud (Amazon VPC.

Which of the following is AWS's responsibility under the AWS shared responsibility model?

Configuring third-party applications

Securing application access and data

Managing custom Amazon Machine Images (AMIs)

Which component of AWS global infrastructure does Amazon CloudFront use to ensure low-latency delivery?

Amazon Virtual Private Cloud (Amazon VPC.

How would a system administrator add an additional layer of login security to a user's AWS Management Console?

Enable Multi-Factor Authentication

Audit AWS Identity and Access Management (IAM) roles

Enable Multi-Factor Authentication

Which service can identify the user that made the API call when an Amazon Elastic Compute Cloud (Amazon EC2) instance is terminated?

AWS Identity and Access Management (AWS IAM)

Which service would you use to send alerts based on Amazon CloudWatch alarms?

Amazon Simple Notification Service (Amazon SNS)

Where can a customer find information about prohibited actions on AWS infrastructure?

AWS Identity and Access Management (IAM)

Which of the following is an example of how moving to the AWS Cloud reduces upfront cost?

By replacing large capital investments with lower variable costs

By replacing large variable costs with lower capital investments

By replacing large capital investments with lower variable costs

By allowing the provisioning of compute and storage at a fixed level to meet peak demand

By replacing the repeated scaling of virtual servers with a simpler fixed-scale model

When designing a typical three-tier web application, which AWS services and/or features improve availability and reduce the impact failures? (Choose two.)

AWS Auto Scaling for Amazon EC2 instances

Amazon VPC subnet ACLs to check the health of a service

Distributed resources across multiple Availability Zones

AWS Server Migration Service (AWS SMS) to move Amazon EC2 instances into a different Region

Distributed resources across multiple AWS points of presence

Which cloud design principle aligns with AWS Cloud best practices?

Distribute the compute load across multiple resources

Create fixed dependencies among application components

Aggregate services on a single instance

Deploy applications in a single Availability Zone

Distribute the compute load across multiple resources

Which of the following are recommended practices for managing IAM users? (Choose two.)

Require IAM users to change their passwords after a specified period of time

Prevent IAM users from reusing previous passwords

Recommend that the same password be used on AWS and other sites

Require IAM users to store their passwords in raw text

Disable multi-factor authentication (MFA) for IAM users

A company is migrating from on-premises data centers to the AWS Cloud and is looking for hands-on help with the project. How can the company get this support? (Choose two.)

Ask for a quote from the AWS Marketplace team to perform a migration into the company's AWS account.

Contact AWS Support and open a case for assistance

Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company's AWS account

Select a partner from the AWS Partner Network (APN) to assist with the migration

Use Amazon Connect to create a new request for proposal (RFP) for expert assistance in migrating to the AWS Cloud.

How does the AWS Enterprise Support Concierge team help users?

Answering billing and account inquires

Supporting application development

Providing architecture guidance

Answering billing and account inquires

Answering questions regarding technical support cases

A company has multiple AWS accounts within AWS Organizations and wants to apply the Amazon EC2 Reserved Instances benefit to a single account only. Which action should be taken?

Purchase the Reserved Instances from master payer account and turn off Reserved Instance sharing.

Enable billing alerts in the AWS Billing and Cost Management console.

Purchase the Reserved Instances in individual linked accounts and turn off Reserved Instance sharing from the payer level.

Enable Reserved Instance sharing in the AWS Billing and Cost Management console.

Which situation should be reported to the AWS Abuse team?

An intrusion attempt is made from an AWS IP address

In Availability Zone has a service disruption

An intrusion attempt is made from an AWS IP address

A user has trouble accessing an Amazon S3 bucket from an AWS IP address

A user needs to change payment methods due to a compromise

AWS Budgets can be used to:

set resource limits in AWS accounts to prevent overspending

prevent a given user from creating a resource

send an alert when the utilization of Reserved Instances drops below a certain percentage

set resource limits in AWS accounts to prevent overspending

split an AWS bill across multiple forms of payment

Which of the following will enhance the security of access to the AWS Management Console? (Choose two.)

AWS Multi-Factor Authentication (AWS MFA)

The AWS Trusted Advisor checks include recommendations regarding which of the following? (Choose two.)

Information on Amazon S3 bucket permissions

Multi-factor authentication enabled on the AWS account root user

Which functions can users perform using AWS KMS?

Create and manage keys for encryption and decryption of data

Create and manage AWS access keys for the AWS account root user

Create and manage AWS access keys for an AWS account IAM user

Create and manage keys for encryption and decryption of data

Create and manage keys for multi-factor authentication

How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.)

It identifies software vulnerabilities in applications running on AWS

It provides a list of cost optimization recommendations based on current AWS usage

It detects potential security vulnerabilities caused by permissions settings on account resources

It automatically corrects potential security issues caused by permissions settings on account resources

It provides proactive alerting whenever an Amazon EC2 instance has been compromised

Which of the following are advantages of the AWS Cloud? (Choose two.)

AWS manages the maintenance of the cloud infrastructure

AWS manages the security of applications built on AWS

AWS manages capacity planning for physical servers

AWS manages the development of applications on AWS

AWS manages cost planning for virtual servers

Which AWS service is used to pay AWS bills, and monitor usage and budget costs?

AWS Billing and Cost Management

A company wants to expand from one AWS Region into a second AWS Region. What does the company need to do to start supporting the new Region?

Begin deploying resources in the second Region

Contact an AWS Account Manager to sign a new contract

Move an Availability Zone to the new Region

Begin deploying resources in the second Region

Download the AWS Management Console for the new Region

Which AWS service will provide a way to generate encryption keys that can be used to encrypt data? (Choose two.)

AWS Key Management Service (AWS KMS)

A company is planning to migrate from on-premises to the AWS Cloud. Which AWS tool or service provides detailed reports on estimated cost savings after migration?

AWS Total Cost of Ownership (TCO) Calculator

Which AWS service helps users meet contractual and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?

AWS Key Management Service (AWS KMS)

Under the AWS shared responsibility model, the customer manages which of the following? (Choose two.)

Decommissioning of physical storage devices

Security group and ACL configuration

Patch management of an Amazon RDS instance operating system

Controlling physical access to data centers

Patch management of an Amazon EC2 instance operating system

What is a value proposition of the AWS Cloud?

No long-term contract is required

AWS is responsible for security in the AWS Cloud

No long-term contract is required

AWS manages user applications in the AWS Cloud

What is a characteristic of Amazon S3 cross-region replication?

S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts

Both source and destination S3 buckets must have versioning disabled

The source and destination S3 buckets cannot be in different AWS Regions

S3 buckets configured for cross-region replication can be owned by a single AWS account or by different accounts

The source S3 bucket owner must have the source and destination AWS Regions disabled for their account

What is a user responsible for when running an application in the AWS Cloud? - A. Managing physical hardware

Managing application software updates

Updating the underlying hypervisor

Providing a list of users approved for data center access

Managing application software updates

Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.)

Billing alerts and Amazon CloudWatch alarms

Amazon Route 53 enables users to:

generate and manage SSL certificates

establish a dedicated network connection to AWS

Practice Exam 19

Guided practice session

Auto-saves progress locally

0 / 50 answered0% complete

Time left: 60:00Spent: 00:00

Back to catalog

Question 1 of 50Single choice

Which AWS offering enables customers to find, buy, and immediately start using software solutions in their AWS environment?

Quick navigator

Tap to jump between questions. Answered questions are blue.