AWS Certified Cloud Practitioner Exam Study Questions UPDATED VERSION GUARANTEED A+ For managed services like Amazon DynamoDB, which of the below is AWS responsible for? (Choose two) - Ans Patching the database software AND Operating system maintenance - AWS has increased responsibilities for its managed services. Examples of managed services include Amazon DynamoDB, Amazon RDS, Amazon Redshift, Amazon Elastic MapReduce, and Amazon WorkSpaces. These services provide the scalability and flexibility of cloud-based resources with less operational overhead because AWS handle basic security tasks like guest operating system (OS) and database patching, installing antivirus software, backup, and disaster recovery. For most managed services, you only configure logical access controls and protect account credentials, while maintaining control and responsibility of any personal data.
What are AWS shared controls? - Ans Controls that apply to both the infrastructure layer and customer layers - Shared Controls are controls which apply to both the infrastructure layer and customer layers, but in completely separate contexts or perspectives. In a shared control, AWS provides the requirements for the infrastructure and the customer must provide their own control implementation within their use of
AWS services. Examples include:
** Patch Management - AWS is responsible for patching the underlying hosts and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.** Configuration Management - AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.** Awareness & Training - AWS trains AWS employees, but a customer must train their own employees.
What is the AWS service that performs automated network assessments of Amazon EC2 instances to check for vulnerabilities? - Ans Amazon Inspector - Explanation Amazon Inspector is an automated security assessment service that helps you test the network accessibility of your Amazon EC2 instances and the security state of your applications running on the instances. Amazon Inspector allows you to create assessment templates to automate security vulnerability assessments throughout your development and deployment pipelines or for static production systems.
What is the benefit of using an API to access AWS Services? - Ans It allows for programmatic management of AWS resources - The AWS Application Programming Interface (API) allows customers to work with various AWS services programmatically.
When running a workload in AWS, the customer is NOT responsible for: (Select two) - Ans Infrastructure security AND Data center operations - AWS is responsible for the infrastructure security and all data center operations such as racking, stacking, and 1 / 4
powering servers, so customers can focus on revenue generating activities rather than on IT infrastructure.
Which AWS Service can be used to register a new domain name? - Ans Amazon Route 53 - Route53 allows for registration of new domain names in AWS. Amazon Route 53 is a global service that provides a highly available and scalable Domain Name System (DNS) in the Cloud. It is designed to give developers and businesses an extremely reliable and cost effective way to route end users to Internet applications by translating names like www.example.com into the numeric IP addresses like 192.0.2.1 that computers use to connect to each other. Amazon Route 53 is fully compliant with IPv6 as well.Route 53 also simplifies the hybrid cloud by providing recursive DNS for your Amazon VPC and on-premises networks over AWS Direct Connect or AWS VPN.
Which AWS Service can perform health checks on Amazon EC2 instances? - Ans Amazon Route 53 - Amazon Route 53 provides highly available and scalable Domain Name System (DNS), domain name registration, and health-checking web services. It is designed to give developers and businesses an extremely reliable and cost effective way to route end users to Internet applications by translating names like example.com into the numeric IP addresses, such as 192.0.2.1, that computers use to connect to each other. Route 53 also offers health checks to monitor the health and performance of your application as well as your web servers and other resources. Route 53 can be configured to route traffic only to the healthy endpoints to achieve greater levels of fault tolerance in your applications.
Which AWS Service creates a virtual network in AWS? - Ans Amazon VPC - Amazon Virtual Private Cloud (Amazon VPC) is the service that allows a customer to create a virtual network for their resources in an isolated section of the AWS cloud.
Which design principles relate to performance efficiency in AWS? (Choose TWO) - Ans Build multi-region architectures to better serve global customers AND Use serverless architectures - There are five design principles for performance efficiency in
the cloud:
1- Democratize advanced technologies 2- Go global in minutes 3- Use serverless architectures 4- Experiment more often 5- Mechanical sympathy
Which features are included in the AWS Business Support Plan? (Choose TWO) - Ans Access to the Infrastructure Event Management (IEM) feature for additional fee AND 24x7 access to customer service - All AWS customers - including Business support plan subscribers - have 24x7 access to customer service. The Business support plan also provides access to Infrastructure Event Management for additional fee. AWS Infrastructure Event Management is a structured program available to Enterprise Support customers (and Business Support customers for an additional fee) that helps 2 / 4
customers plan for large-scale events such as product or application launches, infrastructure migrations, and marketing events.
Which of the following AWS offerings are serverless services? (Choose TWO) - Ans Amazon DynamoDB & AWS Lambda - AWS Lambda is a compute service that lets customers run code without provisioning or managing servers. AWS Lambda executes code only when needed and scales automatically, from a few requests per day to thousands per second.With DynamoDB, there are no servers to provision, patch, or manage and no software to install, maintain, or operate. DynamoDB automatically scales tables up and down to adjust for capacity and maintain performance.
A company complains that they are wasting a lot of money on underutilized compute resources in AWS. Which AWS feature should they use to ensure that their applications are automatically adding/removing compute capacity to closely match the required demand? - Ans AWS Auto Scaling - Auto scaling is the feature that automates the process of adding/removing the server capacity (based on demand). Autoscaling allows you to reduce your costs by automatically turning off resources that aren't in use. On the other hand, Autoscaling ensures that your application runs effectively by provisioning more server capacity if required.
A company has a large amount of data to be archived. What is the most cost-effective AWS storage service to use? - Ans Amazon Glacier - Amazon Glacier is a secure, durable, and extremely low-cost cloud storage service for data archiving and long-term backup. It is designed to deliver 99.999999999% durability, and provides comprehensive security and compliance capabilities that can help meet even the most stringent regulatory requirements.
A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly? - Ans AWS Application Load Balancer (ALB) - AWS Application Load Balancer (ALB) is part of the AWS Elastic Load Balancing family that is specifically designed to handle HTTP and HTTPS traffic. An ALB automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, and IP addresses. Once you register the Amazon EC2 instances with the ALB, it automatically distributes the incoming traffic across those instances. The Load Balancer also performs health checks on the instances and routes traffic only to the healthy ones.
A company has an Enterprise Support subscription. They want quick and efficient guidance with their billing and account inquiries. Which of the following should the company use? - Ans AWS Support Concierge - Included as part of the Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize in working with enterprise accounts. The Concierge team will quickly and 3 / 4
efficiently assist you with your billing and account inquiries, and work with you to help implement billing and account best practices so that you can focus on running your business.
Support Concierge service includes:
** 24 x7 access to AWS billing and account inquires.** Guidance and best practices for billing allocation, reporting, consolidation of accounts, and root-level account security.** Access to Enterprise account specialists for payment inquiries, training on specific cost reporting, assistance with service limits, and facilitating bulk purchases.
A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company? - Ans APN Consulting Partners - APN Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. Consulting Partners include System Integrators, Strategic Consultancies, Agencies, Managed Service Providers, and Value-Added Resellers.AWS supports the APN Consulting Partners by providing a wide range of resources and training to support their customers.
A company has decided to migrate its Oracle database to AWS. Which AWS service can help achieve this without negatively impacting the functionality of the source database? - Ans AWS Database Migration Service - AWS Database Migration Service (DMS) helps you migrate databases to AWS easily and securely. The source database remains fully operational during the migration, minimizing downtime to applications that rely on the database. The AWS Database Migration Service can migrate your data to and from most widely used commercial and open-source databases. The service supports homogeneous migrations such as Oracle to Oracle, as well as heterogeneous migrations between different database platforms, such as Oracle to Amazon Aurora or Microsoft SQL Server to MySQL. It also allows you to stream data to Amazon Redshift from any of the supported sources including Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle, SAP ASE, and SQL Server, enabling consolidation and easy analysis of data in the petabyte-scale data warehouse. AWS Database Migration Service can also be used for continuous data replication with high availability.
A company has deployed a new web application on multiple Amazon EC2 instances.Which of the following should they use to ensure that the incoming HTTP traffic is distributed evenly across the instances? - Ans AWS Application Load Balancer - Elastic Load Balancing automatically distributes incoming application traffic across multiple targets, such as Amazon EC2 instances, containers, IP addresses, and Lambda functions. Elastic Load Balancing offers three types of load balancers: 1- Application Load Balancer. 2- Network Load Balancer. 3- Classic Load Balancer. Application Load Balancer is best suited for load balancing of HTTP and HTTPS traffic. In our case, the application receives HTTP traffic. Hence, the Application Load Balancer is the correct answer here.
- / 4