You have multiple standalone AWS accounts and you want to decrease your AWS monthly charges. What should you do?

Add the accounts to an AWS Organization and use Consolidated Billing.

Try to remove unnecessary AWS accounts.

Add the accounts to an AWS Organization and use Consolidated Billing.

Track the AWS charges that are incurred by the member accounts.

Enable AWS tiered-pricing before provisioning resources.

You have been tasked with auditing the security of your VPC. As part of this process, you need to start by analyzing what inbound and outbound traffic is allowed on your EC2 instances. What two parts of the VPC do you need to check to accomplish this task?

Security Groups and Network ACLs.

Network ACLs and Traffic Manager.

Security Groups and Internet Gateways.

Security Groups and Network ACLs.

What does the AWS "Business" support plan provide? (Choose TWO)

Access to the full set of Trusted Advisor checks.

Less than 15 minutes response-time support if your business critical system goes down.

Proactive Technical Account Management.

Which statement is true in relation to security in AWS?

AWS customers are responsible for patching any database software running on Amazon EC2.

AWS manages everything related to EC2 operating systems.

AWS customers are responsible for patching any database software running on Amazon EC2.

Server side encryption is the responsibility of AWS.

AWS is responsible for the security of your application.

Amazon EC2 instances are conceptually very similar to traditional servers. However, using Amazon EC2 server instances in the same manner as traditional hardware server instances is only a starting point. What are the main benefits of using the AWS EC2 instances instead of traditional servers? (Choose TWO)

Can be scaled manually in a shorter period of time.

Provides your business with a seamless remote accessibility.

Prevents unauthorized users from getting into your network.

Provides automatic data backups.

Can be scaled manually in a shorter period of time.

Which statement is true regarding AWS pricing? (Choose TWO)

With the AWS pay-as-you-go pricing model, you don't have to pay any upfront fee.

You only pay for the individual services that you need with no long-term contracts.

With the AWS pay-as-you-go pricing model, you don't have to pay any upfront fee.

You have no responsibility for third-party software license costs.

You only pay for the individual services that you need with no long-term contracts.

For some services, you have to pay a startup fee in order to get the service running.

There are no reservations on AWS, you only pay for what you use.

Which AWS service provides the EASIEST way to set up and manage a secure, well-architected, multi-account AWS environment?

AWS Systems Manager Patch Manager.

A company is running a large web application that needs to always be available. The application tends to slow down when CPU usage is greater than 60%. How can they track when CPU usage goes above 60% for any of the EC2 Instances in their account?

Use CloudWatch Alarms to monitor the CPU and alert when the CPU usage is >= 60%.

Use CloudFront to monitor the CPU usage.

Set the AWS Config CPU threshold to 60% to receive a notification when EC2 usage exceeds that value.

Use CloudWatch Alarms to monitor the CPU and alert when the CPU usage is >= 60%.

Use SNS to monitor the utilization of the server.

What is the recommended storage option when hosting an often-changing database on an Amazon EC2 instance?

You can't run a database inside an Amazon EC2 instance.

What factors determine how you are charged when using AWS Lambda? (Choose TWO)

Number of requests to your functions.

What are the main differences between an IAM user and an IAM role in AWS? (Choose TWO)

An IAM user is uniquely associated with only one person, however a role is intended to be assumable by anyone who needs it.

An IAM user has permanent credentials associated with it, however a role has temporary credentials associated with it.

An IAM user is uniquely associated with only one person, however a role is intended to be assumable by anyone who needs it.

An IAM user has permanent credentials associated with it, however a role has temporary credentials associated with it.

IAM users are more cost effective than IAM roles.

A role is uniquely associated with only one person, however an IAM user is intended to be assumable by anyone who needs it.

An IAM user has temporary credentials associated with it, however a role has permanent credentials associated with it.

Which of the following actions may reduce Amazon EBS costs? (Choose TWO)

Deleting unnecessary snapshots.

Changing the type of the volume.

Deleting unnecessary snapshots.

Changing the type of the volume.

Distributing requests to multiple volumes.

What does Amazon GuardDuty do to protect AWS accounts and workloads?

Continuously monitors AWS infrastructure and helps detect threats such as attacker reconnaissance or account compromise.

Notifies AWS customers about abuse events once they are reported.

Continuously monitors AWS infrastructure and helps detect threats such as attacker reconnaissance or account compromise.

Helps AWS customers identify the root cause of potential security issues.

Checks security groups for rules that allow unrestricted access to AWS. resources.

What should you consider when storing data in Amazon Glacier?

Amazon Glacier does not provide immediate retrieval of data.

Amazon Glacier only accepts data in a compressed format.

Glacier can only be used to store frequently accessed data and data archives.

Amazon Glacier does not provide immediate retrieval of data.

Attach Glacier to an EC2 Instance to be able to store data.

How can you increase your application’s fault-tolerance while it is being hosted in AWS?

Deploy your application across multiple Availability Zones.

Deploy your application across multiple EC2 instances.

Deploy your application across multiple Availability Zones.

Host your application on one powerful EC2 instance type instead of multiple smaller instances.

Deploy the underlying application resources across multiple subnets.

Which of the following is a benefit of the "Loose Coupling" architecture principle?

It allows individual application components or services to be modified without affecting other components.

It eliminates the need for change management.

It allows for Cross-Region Replication.

It helps AWS customers reduce Privileged Access to AWS resources.

It allows individual application components or services to be modified without affecting other components.

What are the benefits of the AWS Marketplace service? (Choose TWO)

Provides flexible pricing options that suit most customer needs.

Provides software solutions that run on AWS or any other Cloud vendor.

Protects customers by performing periodic security checks on listed products.

Provides cheaper options for purchasing Amazon EC2 on-demand instances.

Provides flexible pricing options that suit most customer needs.

Provides software solutions that run on AWS or any other Cloud vendor.

The AWS account administrator of your company has been fired. With the permissions granted to him as an administrator, he was able to create multiple IAM user accounts and access keys. Additionally, you are not sure whether he has access to the AWS root account or not. What should you do immediately to protect your AWS infrastructure? (Choose TWO)

Change the email address and password of the root user account and enable MFA.

Download all the attached policies in a safe place.

Delete all IAM accounts and recreate them.

Use the CloudWatch service to check all API calls that have been made in your account since the administrator was fired.

Change the email address and password of the root user account and enable MFA.

What is the Amazon ElastiCache service used for? (Choose TWO)

Provide an in-memory data storage service.

Improve web application performance.

Provide an in-memory data storage service.

Reduce delivery costs using Edge Locations.

Improve web application performance.

Provide a Chef-compatible cache to speed up application response.

Distribute requests to multiple instances.

The elasticity of the AWS Cloud enables customers to save costs when compared to traditional hosting providers. What can AWS customers do to benefit from the elasticity of the AWS Cloud? (Choose TWO)

Use Serverless Computing whenever possible.

Deploy your resources across multiple Availability Zones.

Deploy your resources in another region.

Use Serverless Computing whenever possible.

What are some of the benefits of using On-Demand EC2 instances? (Choose TWO)

They remove the need to buy “safety net” capacity to handle periodic traffic spikes.

You can increase or decrease your compute capacity depending on the demands of your application.

They provide free capacity when testing your new applications.

They are cheaper than all other EC2 options.

They remove the need to buy “safety net” capacity to handle periodic traffic spikes.

They only require 1-2 days for setup and configuration.

You can increase or decrease your compute capacity depending on the demands of your application.

Each AWS Region is composed of multiple Availability Zones. Which of the following best describes what an Availability Zone is?

It is a distinct location within a region that is insulated from « failures in other Availability Zones.

It is a data center designed to be completely isolated from other data centers in the same region.

It is a collection of data centers distributed in multiple countries.

It is a logically isolated network of the AWS Cloud.

It is a distinct location within a region that is insulated from « failures in other Availability Zones.

A financial services company decides to migrate one of its applications to AWS. The application deals with sensitive data, such as credit card information, and must run on a PCI-compliant environment. Which of the following is the company’s responsibility when building a PCI-compliant environment in AWS? (Choose TWO)

Ensure that AWS services are configured properly to meet all PCI DSS standards.

Restrict any access to cardholder data and create a policy that addresses information security for all personnel.

Start the migration process immediately as all AWS services are PCI compliant.

Ensure that AWS services are configured properly to meet all PCI DSS standards.

Restrict any access to cardholder data and create a policy that addresses information security for all personnel.

Configure the underlying infrastructure of AWS services to meet all PCI DSS requirements.

Ensure that all PCI DSS physical security requirements are met.

Which of the following steps should be taken by a customer when conducting penetration testing on AWS?

Request and wait for approval from AWS support, and then conduct testing.

Conduct penetration testing using Amazon Inspector, and then notify AWS support.

Request and wait for approval from the customer’s internal security team, and then conduct testing.

Notify AWS support, and then conduct testing immediately.

Request and wait for approval from AWS support, and then conduct testing.

Which is a recommended pattern for designing a highly available architecture on AWS?

Ensure that the application is designed to accommodate failure of any single component.

Ensure that components have low-latency network connectivity.

Run enough Amazon EC2 instances to operate at peak load.

Ensure that the application is designed to accommodate failure of any single component.

Use a monolithic application that handles all operations.

Practice Exam 8

Guided practice session

Auto-saves progress locally

0 / 50 answered0% complete

Time left: 60:00Spent: 00:00

Back to catalog

Question 1 of 50Single choice

What is the main benefit of attaching security groups to an Amazon RDS instance?

Quick navigator

Tap to jump between questions. Answered questions are blue.