A company is hosting a web application in a Docker container on Amazon EC2. AWS is responsible for which of the following tasks?

Performing hardware maintenance in the AWS facilities that run the AWS Cloud

Scaling the web application and services developed with Docker

Provisioning or scheduling containers to run on clusters and maintain their availability

Performing hardware maintenance in the AWS facilities that run the AWS Cloud

Managing the guest operating system, including updates and security patches

Which actions represent best practices for using AWS IAM? (Choose two.)

Configure a strong password policy

Share the security credentials among users of AWS accounts who are in the same Region

Use access keys to log in to the AWS Management Console

Rotate access keys on a regular basis

Avoid using IAM roles to delegate permissions

According to the AWS Well-Architected Framework, what change management steps should be taken to achieve reliability in the AWS Cloud? (Choose two.)

Use AWS Config to generate an inventory of AWS resources

Use service limits to prevent users from creating or making changes to AWS resources

Use AWS CloudTrail to record AWS API calls into an auditable log file

Use AWS Certificate Manager to whitelist approved AWS resources and services

Use Amazon GuardDuty to validate configuration changes made to AWS resources

Which design principle should be considered when architecting in the AWS Cloud?

Design loosely coupled components

Think of servers as non-disposable resources

Use synchronous integration of services

Design loosely coupled components

Implement the least permissive rules for security groups

Which AWS services can be used to move data from on-premises data centers to AWS? (Choose two.)

AWS Database Migration Service (AWS DMS)

A batch workload takes 5 hours to finish on an Amazon EC2 instance. The amount of data to be processed doubles monthly and the processing time is proportional. What is the best cloud architecture to address this consistently growing demand?

Distribute the application across multiple EC2 instances and run the workload in parallel.

Run the application on a bigger EC2 instance size.

Switch to an EC2 instance family that better matches batch requirements.

Distribute the application across multiple EC2 instances and run the workload in parallel.

Run the application on a bare metal EC2 instance.

Each department within a company has its own independent AWS account and its own payment method. New company leadership wants to centralize departmental governance and consolidate payments. How can this be achieved using AWS services or features?

Create a new AWS account. Then configure AWS Organizations and invite all existing accounts to join.

Forward monthly invoices for each account. Then create IAM roles to allow cross-account access.

Create a new AWS account. Then configure AWS Organizations and invite all existing accounts to join.

Configure AWS Organizations in each of the existing accounts. Then link all accounts together.

Use Cost Explorer to combine costs from all accounts. Then replicate IAM policies across accounts.

A company is running an ecommerce application hosted in Europe. To decrease latency for users who access the website from other parts of the world, the company would like to cache frequently accessed static content closer to the users. Which AWS service will support these requirements?

Amazon Elastic File System (Amazon EFS)

Amazon Elastic Block Store (Amazon EBS)

Why is it beneficial to use Elastic Load Balancers with applications?

They are capable of handling constant changes in network traffic patterns.

They allow for the conversion from Application Load Balancers to Classic Load Balancers.

They are capable of handling constant changes in network traffic patterns.

They automatically adjust capacity.

They are provided at no charge to users.

Which tasks are the customer's responsibility in the AWS shared responsibility model? (Choose two.)

Infrastructure facilities access management

Cloud infrastructure hardware lifecycle management

Configuration management of user's applications

Networking infrastructure protection

A web application is hosted on AWS using an Elastic Load Balancer, multiple Amazon EC2 instances, and Amazon RDS. Which security measures fall under the responsibility of AWS? (Choose two.)

Running a virus scan on EC2 instances

Protecting against IP spoofing and packet sniffing

Installing the latest security patches on the RDS instance

Encrypting communication between the EC2 instances and the Elastic Load Balancer

Configuring a security group and a network access control list (NACL) for EC2

What is the benefit of elasticity in the AWS Cloud?

Automatically adjust the required compute capacity to maintain consistent performance.

Ensure web traffic is automatically spread across multiple AWS Regions.

Minimize storage costs by automatically archiving log data.

Enable AWS to automatically select the most cost-effective services.

Automatically adjust the required compute capacity to maintain consistent performance.

A company needs an Amazon S3 bucket that cannot have any public objects due to compliance requirements. How can this be accomplished?

Enable S3 Block Public Access from the AWS Management Console.

Hold a team meeting to discuss the importance if only uploading private S3 objects.

Require all S3 objects to be manually approved before uploading.

Create a service to monitor all S3 uploads and remove any public uploads.

A Cloud Practitioner identifies a billing issue after examining the AWS Cost and Usage report in the AWS Management Console. Which action can be taken to resolve this?

Open a detailed case related to billing and submit it to AWS Support for help.

Upload data describing the issue to a new object in a private Amazon S3 bucket.

Create a pricing application and deploy it to a right-sized Amazon EC2 instance for more information.

Proceed with creating a new dashboard in Amazon QuickSight.

What does the AWS Simple Monthly Calculator do?

Estimates monthly billing based on projected usage

Compares on-premises costs to colocation environments

Estimates monthly billing based on projected usage

Estimates power consumption at existing data centers

Who is responsible for patching the guest operating system for Amazon RDS?

The customer Database Administrator

Which of the following are benefits of AWS Global Accelerator? (Choose two.)

Reduced cost to run services on AWS

Improved availability of applications deployed on AWS

Higher durability of data stored on AWS

Decreased latency to reach applications deployed on AWS

Higher security of data stored on AWS

Which AWS Cloud best practice uses the elasticity and agility of cloud computing?

Dynamically and predictively scale to meet usage demands

Provision capacity based on past usage and theoretical peaks

Dynamically and predictively scale to meet usage demands

Build the application and infrastructure in a data center that grants physical access

Break apart the application into loosely coupled components

Which method helps to optimize costs of users moving to the AWS Cloud?

Purchasing hardware before it is needed

Manually provisioning cloud resources

Purchasing for the maximum possible load

Under the AWS shared responsibility model, which of the following is a customer responsibility?

Installing operating system security patches for Amazon EC2 database instances

Installing security patches for the Xen and KVM hypervisors

Installing operating system patches for Amazon DynamoDB

Installing operating system security patches for Amazon EC2 database instances

Installing operating system security patches for Amazon RDS database instances

The AWS Cost Management tools give users the ability to do which of the following? (Choose two.)

Terminate all AWS resources automatically if budget thresholds are exceeded.

Break down AWS costs by day, service, and linked AWS account.

Create budgets and receive notifications if current of forecasted usage exceeds the budgets.

Switch automatically to Reserved Instances or Spot Instances, whichever is most cost-effective.

Move data stored in Amazon S3 to a more cost-effective storage class.

Which AWS service makes it easy to create and manage AWS users and groups, and provide them with secure access to AWS resources at no charge?

AWS Identity and Access Management (IAM)

What is one of the core principles to follow when designing a highly available application in the AWS Cloud?

Assume that all components within an application can fail

Design using a serverless architecture

Assume that all components within an application can fail

Design AWS Auto Scaling into every application

Design all components using open-source code

Practice Exam 20

Guided practice session

Auto-saves progress locally

0 / 50 answered0% complete

Time left: 60:00Spent: 00:00

Back to catalog

Question 1 of 50Single choice

Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?

Quick navigator

Tap to jump between questions. Answered questions are blue.