AWS Certified Cloud Practitioner
Free trial
Verified
Question 1
A company is planning to run a global marketing application in the AWS Cloud. The application will feature videos that can be viewed by users. The company must ensure that all users can view these videos with low latency.
Which AWS service should the company use to meet this requirement?
- A: AWS Auto Scaling
- B: Amazon Kinesis Video Streams
- C: Elastic Load Balancing
- D: Amazon CloudFront
Question 2
A user is comparing purchase options for an application that runs on Amazon EC2 and Amazon RDS. The application cannot sustain any interruption. The application experiences a predictable amount of usage, including some seasonal spikes that last only a few weeks at a time. It is not possible to modify the application.
Which purchase option meets these requirements MOST cost-effectively?
- A: Review the AWS Marketplace and buy Partial Upfront Reserved Instances to cover the predicted and seasonal load.
- B: Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run on Spot Instances.
- C: Buy Reserved Instances for the predicted amount of usage throughout the year. Allow any seasonal usage to run at an On-Demand rate.
- D: Buy Reserved Instances to cover all potential usage that results from the seasonal usage.
Question 3
Which AWS tool or feature acts as a VPC firewall at the subnet level?
- A: Security group
- B: Network ACL
- C: Traffic Mirroring
- D: Internet gateway
Question 4
Which AWS service can be used to decouple applications?
- A: AWS Config
- B: Amazon Simple Queue Service (Amazon SQS)
- C: AWS Batch
- D: Amazon Simple Email Service (Amazon SES)
Question 5
Which disaster recovery option is the LEAST expensive?
- A: Warm standby
- B: Multisite
- C: Backup and restore
- D: Pilot light
Question 6
Which type of AWS storage is ephemeral and is deleted when an Amazon EC2 instance is stopped or terminated?
- A: Amazon Elastic Block Store (Amazon EBS)
- B: Amazon EC2 instance store
- C: Amazon Elastic File System (Amazon EFS)
- D: Amazon S3
Question 7
Which of the following is a characteristic of the AWS account root user?
- A: The root user is the only user that can be configured with multi-factor authentication (MFA).
- B: The root user is the only user that can access the AWS Management Console.
- C: The root user is the first sign-in identity that is available when an AWS account is created.
- D: The root user has a password that cannot be changed.
Question 8
A company hosts an application on an Amazon EC2 instance. The EC2 instance needs to access several AWS resources, including Amazon S3 and Amazon
DynamoDB.
What is the MOST operationally efficient solution to delegate permissions?
- A: Create an IAM role with the required permissions. Attach the role to the EC2 instance.
- B: Create an IAM user and use its access key and secret access key in the application.
- C: Create an IAM user and use its access key and secret access key to create a CLI profile in the EC2 instance
- D: Create an IAM role with the required permissions. Attach the role to the administrative IAM user.
Question 9
Which of the following is a component of the AWS Global Infrastructure?
- A: Amazon Alexa
- B: AWS Regions
- C: Amazon Lightsail
- D: AWS Organizations
Question 10
What is the purpose of having an internet gateway within a VPC?
- A: To create a VPN connection to the VPC
- B: To allow communication between the VPC and the internet
- C: To impose bandwidth constraints on internet traffic
- D: To load balance traffic from the internet across Amazon EC2 instances
Question 11
Which AWS service allows users to download security and compliance reports about the AWS infrastructure on demand?
- A: Amazon GuardDuty
- B: AWS Security Hub
- C: AWS Artifact
- D: AWS Shield
Question 12
A pharmaceutical company operates its infrastructure in a single AWS Region. The company has thousands of VPCs in a various AWS accounts that it wants to interconnect.
Which AWS service or feature should the company use to help simplify management and reduce operational costs?
- A: VPC endpoint
- B: AWS Direct Connect
- C: AWS Transit Gateway
- D: VPC peering
Question 13
A company wants to review its monthly costs of using Amazon EC2 and Amazon RDS for the past year.
Which AWS service or tool provides this information?
- A: AWS Trusted Advisor
- B: Cost Explorer
- C: Amazon Forecast
- D: Amazon CloudWatch
Question 14
A company is planning an infrastructure deployment to the AWS Cloud. Before the deployment, the company wants a cost estimate for running the infrastructure.
Which AWS service or feature can provide this information?
- A: Cost Explorer
- B: AWS Trusted Advisor
- C: AWS Cost and Usage Report
- D: AWS Pricing Calculator
Question 15
Which AWS service of tool helps to centrally manage billing and allow controlled access to resources across AWS accounts?
- A: AWS Identity and Access Management (IAM)
- B: AWS Organizations
- C: Cost Explorer
- D: AWS Budgets
Question 16
Which of the following are Amazon Virtual Private Cloud (Amazon VPC) resources?
- A: Objects; access control lists (ACLs)
- B: Subnets; internet gateways
- C: Access policies; buckets
- D: Groups; roles
Question 17
A company needs to identify the last time that a specific user accessed the AWS Management Console.
Which AWS service will provide this information?
- A: Amazon Cognito
- B: AWS CloudTrail
- C: Amazon Inspector
- D: Amazon GuardDuty
Question 18
A company launched an Amazon EC2 instance with the latest Amazon Linux 2 Amazon Machine Image (AMI).
Which actions can a system administrator take to connect to the EC2 instance? (Choose two.)
- A: Use Amazon EC2 Instance Connect.
- B: Use a Remote Desktop Protocol (RDP) connection.
- C: Use AWS Batch
- D: Use AWS Systems Manager Session Manager.
- E: Use Amazon Connect
Question 19
A company wants to perform sentiment analysis on customer service email messages that it receives. The company wants to identify whether the customer service engagement was positive or negative.
Which AWS service should the company use to perform this analysis?
- A: Amazon Textract
- B: Amazon Translate
- C: Amazon Comprehend
- D: Amazon Rekognition
Question 20
What is the total amount of storage offered by Amazon S3?
- A: 100MB
- B: 5 GB
- C: 5 TB
- D: Unlimited
Question 21
A company is migrating to Amazon S3. The company needs to transfer 60 TB of data from an on-premises data center to AWS within 10 days.
Which AWS service should the company use to accomplish this migration?
- A: Amazon S3 Glacier
- B: AWS Database Migration Service (AWS DMS)
- C: AWS Snowball
- D: AWS Direct Connect
Question 22
What type of database is Amazon DynamoDB?
- A: In-memory
- B: Relational
- C: Key-value
- D: Graph
Question 23
A large organization has a single AWS account.
What are the advantages of reconfiguring the single account into multiple AWS accounts? (Choose two.)
- A: It allows for administrative isolation between different workloads.
- B: Discounts can be applied on a quarterly basis by submitting cases in the AWS Management Console.
- C: Transitioning objects from Amazon S3 to Amazon S3 Glacier in separate AWS accounts will be less expensive.
- D: Having multiple accounts reduces the risks associated with malicious activity targeted at a single account.
- E: Amazon QuickSight offers access to a cost tool that provides application-specific recommendations for environments running in multiple accounts.
Question 24
A company wants to migrate a critical application to AWS. The application has a short runtime. The application is invoked by changes in data or by shifts in system state. The company needs a compute solution that maximizes operational efficiency and minimizes the cost of running the application.
Which AWS solution should the company use to meet these requirements?
- A: Amazon EC2 On-Demand Instances
- B: AWS Lambda
- C: Amazon EC2 Reserved Instances
- D: Amazon EC2 Spot Instances
Question 25
A retail company has recently migrated its website to AWS. The company wants to ensure that it is protected from SQL injection attacks. The website uses an
Application Load Balancer to distribute traffic to multiple Amazon EC2 instances.
Which AWS service or feature can be used to create a custom rule that blocks SQL injection attacks?
- A: Security groups
- B: AWS WAF
- C: Network ACLs
- D: AWS Shield
Free preview mode
Enjoy the free questions and consider upgrading to gain full access!