Question 1 (1 point)  How can an organization compare the cost of...

Question 1 (1 point) 

How can an organization compare the cost of running applications in an on-premise or colocation environment against the AWS cloud?

Question 1 options:

AWS Cost Explorer

AWS Simple Monthly Calculator

AWS Budgets

TCO Calculator

Question 2 (1 point) 

A company wants to use an AWS service to check application endpoints, with the ability to move traffic to healthy regional endpoints to improve application availability. Which service will support these requirements?

Question 2 options:

Amazon Inspector

Amazon CloudWatch

AWS Global Accelerator

Amazon CloudFront

Question 3 (1 point) 

Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

Question 3 options:

Multiple Availability Zones

Performance efficiency

Security

Encryption usage

High availability

Question 4 (1 point) 

Under the AWS shared responsibility model, the customer manages which of the following? (choose two)

Question 4 options:

decommissioning of physical storage devices

security group and ACL configuration

patch management of an Amazon RDS instance operating system

controlling physical access to data centers

patch management of an Amazon EC2 instance operating system

Question 5 (1 point) 

How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (choose two)

Question 5 options:

by the time it takes for the Lambda function to execute

by the number of versions of a specific Lambda function

by the number of requests made for a given Lambda function.

by the programming language that is used for the Lambda function

by the total number of Lambda functions in an AWS account

Question 6 (1 point) 

Which AWS service allows you to connect to storage from on-premise servers using standard file protocols?

Question 6 options:

Amazon EFS

Amazon Glacier

Amazon EBS

Amazon S3

Question 7 (1 point) 

Which AWS service enables multifactor authentication?

Question 7 options:

AWS IAM

AWS KMS

Amazon STS

Amazon EC2

Question 8 (1 point) 

Which AWS service should be used to do a billing alarm?

Question 8 options:

AWS Trusted Advisor

AWS CloudTrail

Amazon CloudWatch

Amazon QuickSight

Which of the following is a prime number?

Question 9 options:

2

3

4

5

6

7

Question 10 (1 point) 

Victor is an information security professional investigating an incident. Which service can he use to identify the user that made the API call when an Amazon EC2 instance is terminated?

Question 10 options:

AWS Trusted Advisor

AWS CloudTrail

AWS X-Ray

AWS Identity and Access Management (AWS IAM) Pro

Question 11 (1 point) 

Which service supports the resolution of public domain names to IP addresses or AWS resources?

Question 11 options:

Amazon Route 53

Amazon CloudFront

Amazon SNS

Hosted Zones

Question 12 (1 point) 

What does an organization need to do to move to another AWS region?

Question 12 options:

Do a separate IAM account for that region.

Apply for another AWS account in that region.

Submit an application to extend their account to the additional region.

Just start deploying resources in the additional region.

Question 13 (1 point) 

What is the term for describing the action of automatically running scripts on Amazon EC2 instances when launched to install software?

Question 13 options:

golden images

containerization

bootstrapping

workflow automation

Question 14 (1 point) 

What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Choose two.)

Question 14 options:

AWS automatically distributes the data globally for higher durability

AWS will take care of operating the application

AWS makes it easy to architect for high availability

AWS can easily accommodate application demand changes

AWS takes care of application security patching.

Question 15 (1 point) 

What are the advantages of the AWS Cloud? (Choose two.)

Question 15 options:

Fixed-rate monthly cost

No need to guess capacity requirements

Increased speed to market

Increased upfront capital expenditure

Physical access to cloud data centers

Question 16 (1 point) 

Which AWS service can be used to easily create multiple accounts?

Question 16 options:

Amazon IAM

Amazon Connect

AWS CloudFormation

AWS Organizations

Question 17 (1 point) 

When designing a typical three-tier web application, which AWS services and/or features improve availability and reduce the impact failures? (Choose two.)

Question 17 options:

AWS Auto Scaling for Amazon EC2 instances

Amazon VPC subnet ACLs to check the health of a service

Distributed resources across multiple Availability Zones

AWS Server Migration Service (AWS SMS) to move Amazon EC2 instances into a different Region

Distributed resources across multiple AWS points of presence

Question 18 (1 point) 

Which feature can you use to grant read/write to an Amazon S3 bucket?

Question 18 options:

IAM User

IAM Group

IAM Role

IAM Policy

Question 19 (1 point) 

Which of the following are components of Amazon VPC? (Choose two.)

Question 19 options:

Objects

Subnets

Buckets

Internet gateways

Access key

Question 20 (1 point) 

When comparing the total cost of ownership (TCO) of on-premises infrastructure to a cloud architecture, what costs should be considered? (choose two)

Question 20 options:

the credit card processing fees for application transactions in the cloud

the cost of purchasing and installing server hardware in the on-premises data

the cost of administering the infrastructure, including an operating system and software installations, patches, backups, and recovering from failures.

the costs of third-party penetration testing

the advertising costs associated with an ongoing enterprise-wide campaign

Question 21 (1 point) 

What are two ways that moving to an AWS cloud can benefit an organization? (choose 2)

Question 21 options:

Stop guessing about capacity

Increase speed and agility

Switch to a CAPEX model

Depreciate assets over a longer timeframe

Gain greater control of data center security

Question 22 (1 point) 

What benefits are provided by Amazon CloudFront? (choose two)

Question 22 options:

allows you to register domain names

provides a worldwide distributed DNS service

used to enable private subnet instances to access the internet

content is cached at edge Locations for fast distribution to customers

built-in distributed denial-of-service (DDoS) attack protection

Question 23 (1 point) 

Which of the following is a method of backup available in the AWS cloud?

Question 23 options:

EBS snapshots

EFS file systems

Route 53 alias record

availability zones

Question 24 (1 point) 

Maria is a system administrator. How would she add an additional layer of log-in security to a user's AWS Management Console?

Question 24 options:

use Amazon Cloud Directory

audit AWS Identity and Access Management (IAM) roles

enable multifactor authentication

enable AWS CloudTrail

Question 25 (1 point) 

Which of the statements below is accurate regarding Amazon S3 buckets? (choose two)

Question 25 options:

Buckets are replicated globally.

Bucket names must be unique regionally.

Buckets are region-specific.

Bucket names must be unique globally.

Buckets can contain other buckets.

Question 26 (1 point) 

Which AWS database service supports complex queries on joins and is suitable for a transactional database deployment?

Question 26 options:

Amazon RDS

Amazon RedShift

Amazon EMR

Amazon DynamoDB

Question 27 (1 point) 

Amy, a solutions architect, needs to do a virtual network within his AWS environment. Which AWS networking service would allow her to do that?

Question 27 options:

AWS Route53

Amazon Route 53

AWS EC2t

Amazon Virtual Private Cloud (Amazon VPC)

Question 28 (1 point) 

Which IAM entity is associated with an access key ID and secret access key?

Question 28 options:

IAM Policy

IAM User

IAM Group

IAM Role

Question 29 (1 point) 

What is the most cost-effective support plan that should be selected to provide at least a one-hour response time for a production system failure?

Question 29 options:

developer

basic

business

enterprise

Question 30 (1 point) 

What can you use to quickly connect an office securely to Amazon VPC?

Question 30 options:

Internet Gateway

AWS managed VPN

Direct Connect

Route Table

Question 31 (1 point) 

What are the benefits of using reserved instances? (choose two)

Question 31 options:

reduced cost

more flexibility

reserve capacity

high availability

uses dedicated hardware

Question 32 (1 point) 

Which items can be configured from within the Amazon VPC management console? (choose two)

Question 32 options:

regions

security groups

load balancing

auto scaling

subnets

Question 33 (1 point) 

The information security department is looking to protect the organization's AWS environment from common web-based exploits. Which AWS capability should they use?

Question 33 options:

AWS Shield

AWS Web Application Firewall (WAF)

Amazon Route 53

AWS CloudHSM

Question 34 (1 point) 

A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goal? (choose two)

Question 34 options:

Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated.

Build a VPN connection between an on-premises device and a virtual private gateway in the new VP.

Use Amazon Athena to query data from the on-premises database servers.

Connect the company's on-premises data center to AWS using AWS Direct Connect.

Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers.

Question 35 (1 point) 

What strategy can assist with allocating metadata to AWS resources for cost tracking and visibility?

Question 35 options:

labeling

categorizing

access control

tagging

Question 36 (1 point) 

Which AWS service records API activity on your account and delivers log files to an Amazon S3 bucket?

Question 36 options:

Amazon CloudTrail

Amazon S3 Event Notifications

Amazon CloudWatch Logs

Amazon CloudWatch

Question 37 (1 point) 

Which feature of Amazon Rekognition can assist with saving time?

Question 37 options:

provides on-demand access to compliance-related information

identification of the language of text in a document

adds automatic speech recognitions (ASR) to applications

identification of objects in images and videos

Question 38 (1 point) 

The Security Department wants to send alerts based on CloudWatch alarms. Which service would be used to send these alerts?

Question 38 options:

Amazon Simple Notification Service (Amazon SNS)

AWS Security Hub

AWS Lambda

Amazon Route 53

Question 39 (1 point) 

What considerations are there when choosing which region to use? (choose 2)

Question 39 options:

Data sovereignty

Latency

Pricing in local currency

Available storage capacity

Available compute capacity

Question 40 (1 point) 

Which feature of AWS allows you to deploy a new application for which the requirements may change over time?

Question 40 options:

high availability

fault tolerance

elasticity

disposable resources

Question 41 (1 point) 

Acme Corp. Is looking to migrate a database to AWS. Which AWS service is designed to simplify the migration of a database to AWS?

Question 41 options:

AWS Storage Gateway

AWS Database Migration Service (AWS DMS)

RDS

edge Locations

Question 42 (1 point) 

Which AWS service can you use to install a third-party database?

Question 42 options:

Amazon RDS

Amazon EC2

Amazon EMR

Amazon DynamoDB

Question 43 (1 point) 

Which types of pricing policies does AWS offer? (choose two)

Question 43 options:

pay-as-you-go

save when you reserve

Enterprise license agreement (EL)

nonpeak hour discounts

global usage discounts

Question 44 (1 point) 

Which pricing model should you use for EC2 instances that will be used in a lab environment for several hours on a weekend and must run uninterrupted?

Question 44 options:

On-Demand

Spot

Reserved

Dedicated Instance

Question 45 (1 point) 

An organization has an on-premises cloud and accesses their AWS Cloud over the Internet. How can they do a private hybrid cloud connection?

Question 45 options:

AWS VPC Endpoint

AWS Managed VPN

AWS Direct Connect

AWS VPN CloudHub

Question 46 (1 point) 

Which type of Amazon Elastic Load Balancer operates at layer 7 of the OSI model?

Question 46 options:

Network Load Balancer

F5 Load Balancer

Classic Load Balancer

Application Load Balancer

Question 47 (1 point) 

How does AWS assist organizations with their capacity requirements?

Question 47 options:

With AWS, you don't pay for data centers.

With AWS, you only pay for what you use.

You don't need to guess your capacity needs.

You don't own the infrastructure.

Question 48 (1 point) 

Which AWS support plan should you use if you need a response time of less than 15 minutes for a business-critical system failure?

Question 48 options:

Basic

Enterprise

Business

Developer

Question 49 (1 point) 

Which service can be used to help you to migrate databases to AWS quickly and securely?

Question 49 options:

AWS SMS

AWS KMS

AWS DMS

AWS Migration Hub

A new service using AWS must be highly available. Yet, due to regulatory requirements, all of its Amazon EC2 instances must be located in a single geographic area. According to best practices, to meet these requirements, the EC2 instances must be placed in at least two:

Question 50 options:

AWS regions

availability zones

subnets

placement groups

Question 51 (1 point) 

What is the purpose of automation and orchestration?

Question 51 options:

to allow for the recording and auditing of all events

to transmit data more securely

to provide a means for data backup

to allow you to apply patches to a VM

Question 52 (1 point) 

What is a hotfix?

Question 52 options:

It is a tool used for rollbacks.

It is a patch that provides an instant snapshot of the system.

It is used to check for backdoors in source code.

It is a patch that can be deployed almost instantaneously.

Question 53 (1 point) 

What is the purpose of a firewall?

Question 53 options:

scan for anomalies on the network

check for and deny malicious data packets from entering

predict future threats

protect the server

Question 54 (1 point) 

What is the cloud application life cycle?

Question 54 options:

the establishment of software functionalities

the period of utility of the cloud resource

the time when software patches and other upgrades are applied

the time when a cloud application is deleted after its useful life

Question 55 (1 point) 

Which are types of tunneling protocols? (choose two)

Question 55 options:

IPsec

TCP/IP

PTP

PPTP

GRE

Question 56 (1 point) 

Which of the following is not a key field of cloud management referred to by FCAPS?

Question 56 options:

accounting

security

performance

feedback

Question 57 (1 point) 

What is the purpose of cloud authentication?

Question 57 options:

to validate the quality of the application that is being developed

to confirm the resources that have been assigned and are being used

to enable you to be the administrator of the cloud account

to confirm the identity of a client via a log-in procedure

Question 58 (1 point) 

Which of the following is used for storage security on SANs?

Question 58 options:

obfuscation

ACL

zoning

host authentication

Question 59 (1 point) 

What is a cipher?

Question 59 options:

data that is unreadable

AES

3DES

digitally signing keys

Question 60 (1 point) 

What is a template?

Question 60 options:

It is a representation of your fingerprint for an SSO.

It is part of a public key infrastructure.

It is used in hashing algorithms.

It is a prototype of a cloud system.

Question 61 (1 point) 

What is the function of cloud alerting?

Question 61 options:

It alerts the user when an event needs to be monitored.

It uses SMTP.

It compiles system events into a central log.

It alerts you when you are over resource limits.

Question 62 (1 point) 

What is a cluster?

Question 62 options:

It is a series of computers networked together in tandem.

It interlinks the LAN to the WAN.

It is a series of servers connected to one another in a LAN.

It is a mesh-based network topology.

Question 63 (1 point) 

Which groups should be involved in a cloud change management process?

Question 63 options:

IT, HR, marketing, finance

IT, finance, and production

IT, HR, finance, and production

IT, finance, and production

Question 64 (1 point) 

What is the purpose of a cloud workflow application?

Question 64 options:

It oversees the overall processes from beginning to end.

It deals with cloud integration issues.

It addresses resource contention.

It examines connectivity issues.

Question 65 (1 point) 

Which statement is true about a rolling update?

Question 65 options:

It is deployed at random.

Only the network administrator can apply it.

It is typically used in a Linux-based environment.

It does not need to be checked for security vulnerabilities.

Question 66 (1 point) 

Which of the following are cloud automation techniques? (choose two)

Question 66 options:

Orchestrator

Ansible

OpenStack

S3

API

Question 67 (1 point) 

Replication is the process of ______________?

Question 67 options:

transferring files from one loud platform to another (i.e., going from the SaaS to the IaaS).

transferring data that is not in use to another storage medium.

using a third-party tool to back up data.

transferring data across multiple data centers.

Question 68 (1 point) 

Which of the following is an example of encrypted communications?

Question 68 options:

VPNs

HTTPS

TCP/IP

SSL/TLS

Question 69 (1 point) 

To enhance the server performance, what can be enabled in system BIOS?

Question 69 options:

memory ballooning

VT-x

over-commitment ratio

hyper-threaading

Question 70 (1 point) 

What factor can contribute to a network bottleneck in a cloud deployment?

Question 70 options:

malformed data packets

the maximum transmission unit (MTU) has been exceeded

errors in the routing tables of the firewall

not enough security between the endpoints

Question 71 (1 point) 

What is the purpose of federation?

Question 71 options:

to allow a user to log into multiple systems with just one credential

to grant access to network services to the user

to assign access as defined by user roles

to give the user access to the same resources among different cloud providers

Question 72 (1 point) 

During failure, which of the following sites provides the shortest RTO (recovery time objective)?

Question 72 options:

cold site

hot site

warm site

hybrid site

Question 73 (1 point) 

What happens during a full backup?

Question 73 options:

All datasets are backed up at once.

Data is backed up since the last full backup.

Data is recorded since the last incremental update.

Only exact data is copied, not any changes.

Question 74 (1 point) 

What are cloud use patterns?

Question 74 options:

the monitoring and analysis of traffic flows

scaling up resources during peak demand

the use of artificial intelligence to further simplify tasks

the transfer of data from one cloud provider to another

Question 75 (1 point) 

What are cloud metrics?

Question 75 options:

They are an indicator of how a cloud deployment is working.

They are established by the cloud provider.

They define how quickly you can access cloud resources.

It is your responsibility to monitor them.

Question 76 (1 point) 

Which of the following terms best describes "the time it takes for a data packet to move from source to destination"?

Question 76 options:

congestion

packet loss

jitter

latency

Question 77 (1 point) 

What is the purpose of a security policy?

Question 77 options:

to allow for authorization and authentication

to establish an awareness training program for employees

to mandate when to rehearse a disaster recovery (DR) drill

to know how to choose an alternate site when hit by a security breach

Question 78 (1 point) 

Which of the following is affected by jitter?

Question 78 options:

voice communications

security

DNS

HTTP

Question 79 (1 point) 

When should patches be applied to a VM?

Question 79 options:

daily

when a vulnerability is detected

as soon as they are available

one to two per week, as needed

Question 80 (1 point) 

Which of the following can cause a cloud synchronization issue?

Question 80 options:

network bottlenecks

corrupt files

different time zones

lack of internet connectivity

Question 81 (1 point) 

What is a target object baseline?

Question 81 options:

an event that deviates from what is normal activity

a measure of CPU utilization

a reference point of projected cloud performance

the revocation of a certificate

Question 82 (1 point) 

Which of the following are cloud migration techniques? (choose two)

Question 82 options:

on-premises to cloud

P2V

V2P

F2F

VMC

V2C

Question 83 (1 point) 

What are the modes of IPsec?

Question 83 options:

SSH and Telnet

transport and tunnel

scrambling and descrambling

authentication and encapsulation

Question 84 (1 point) 

Which of the following are types of cloud backup? (choose two)

Question 84 options:

incremental

mirror

onsite

differential

remote

Question 85 (1 point) 

What is multifactor authentication?

Question 85 options:

when only one layer of security is used

when two or more layers of security are used

when passwords are used

when PINs are used

Question 86 (1 point) 

What are two characteristics of a well-maintained cloud platform?

Question 86 options:

computerized maintenance management systems (CMMS)

reliable connectivity

24 X 7 X 365 availability

close coupling

monolithic architectures

Question 87 (1 point) 

What is the correct sequence of steps in the change management process?

Question 87 options:

testing documentation, planning, securing approvals, validating changes, recording changes defining instructions, performing reviews

recording changes, planning, testing documentation, securing approvals, validating changes, defining instructions, performing reviews

performing reviews, recording changes, planning, testing documentation, securing approvals, defining instructions, validating changes

validating changes, defining instructions, performing reviews, recording changes, planning, performing reviews, testing documentation

Question 88 (1 point) 

What is CPU usage?

Question 88 options:

a display of how much memory is left in RAM

a metric that reflects how much disk space is being used up

a measure of how much processing power is being used

the amount of network bandwidth being used when connecting to the cloud

Question 89 (1 point) 

Which of the following are examples of advanced data storage solutions? (choose two)

Question 89 options:

NAS

SAD

SAN

DAN

SAS

 

______ is a process of transferring data that is no longer in use to another storage system for storing over the long term.

Question 90 options:

Replication

Business continuity

Site mirroring

Archiving

Question 91 (1 point) 

What are the different levels of RAID?

Question 91 options:

RAID 1, RAID 2, RAID 3, RAID 4, RAID 5

RAID 3, RAID 5, RAID 7, RAID 9

RAID 0, RAID 1, RAID 5, RAID 6

RAID 0, RAID 1, RAID 5, RAID 7

Question 92 (1 point) 

Which of the following can be used as a logging server? (choose two)

Question 92 options:

SLA

AmazonS3

OpenStack

CACL

ACL

Question 93 (1 point) 

What is a rollback?

Question 93 options:

restoring a software application to an earlier state

scaling down the cloud resources

reducing the size of the network bandwidth you are using to access the cloud

using only one kind of cloud platform (IaaS, SaaS, or PaaS)

Question 94 (1 point) 

Which of the following correctly describes an external attack?

Question 94 options:

when a hacker penetrates the cloud from the outside environment

when an employee intentionally deletes files

when somebody from inside the company tries to launch an attack

when the ACL is maliciously misconfigured

Question 95 (1 point) 

What is a lockout?

Question 95 options:

when an account is frozen after several failed log-in attempts

the responsibility of the CIO/CISO to establish the lockout policy

creating a strong password

freezing a software development cycle if errors are found in the source code

Question 96 (1 point) 

What enables a single microprocessor core to function like two distinct CPUs?

Question 96 options:

hyper-threading

VT-x

hypervisor

ballooning

Question 97 (1 point) 

Which is an example of an automation tool?

Question 97 options:

scripting

routers

endpoint detection technologies

APIs

Question 98 (1 point) 

What is resource contention?

Question 98 options:

It occurs when the SaaS, the PaaS, and the IaaS are all sharing the same applications.

It can happen when a virtual server is being flooded with access requests.

It means that too many shared resources are being accessed all at once.

It is when multiple services try to access the same cloud resource.

Question 99 (1 point) 

How can a VPN be made more secure?

Question 99 options:

implementing a firewall at the endpoints

further encapsulating the data packet into more data packets

layering it in IPsec

using two-factor authentication (2FA)

Question 100 (1 point) 

Which kind of application makes use of a PKI?

Question 100 options:

gaining access to shared resources

endpoint security

transferring data to a server

video and audio conferencing