AWS CLOUD PRACTITIONER EXAM QUESTIONS AND VERIFIED ANSWERS

AWS CLOUD PRACTITIONER EXAM QUESTIONS AND VERIFIED ANSWERS


Which are benefits of using Amazon RDS over Amazon EC2 when running
relational databases on AWS? (Select TWO )
A. Automated backups
B. Schema management
C. Indexing of tables
D. Software patching
E. Extract, transform, and load (ETL) management
A&D
Which AWS service or feature can be used to prevent SQL injection attacks?
A. Security groups
B. Network ACLs
C. AWS WAF
D. IAM policy
C
Which of the following can be used to identify a specific user who stopped an
amazon EC2 instance? '
A. AWS CloudTrail
B. Amazon Inspector
C. Amazon CloudWatch
D. VPC Flow Logs
a
What credential components are required to gain programmatic access to an
AWS account? (Select TWO )
A. An access key ID
B. A primary key
C. A secret access key
D. A user ID
E. A secondary key
A&C

,Which AWS service acts as a data extract transform and load (ETL) tool to make it
easy to prepare data for analytics?
A. Amazon QuickSight
B. Amazon Athena
C. AWS Glue
D. AWS Elastic Beanstalk
C
Which AWS feature enables users to categorize and track their AWS costs?
A. Cost Allocation Tags
B. AWS Trusted Advisor
C. AWS Price List API
D. AWS Organizations
B
What can users access from AWS Artifact?
A. AWS security and compliance documents
B. A download of configuration management details for all AWS resources
C. Training materials for AWS services
D. A security assessment of the applications deployed in the AWS Cloud
A
Which duty is a responsibility of AWS under the AWS shared responsibility
model?
A. Identity and access management
B. Server-side encryption (SSE)
C. Firewall configuration
D. Maintaining physical hardware
A
What is an AWS Identity and Access Management (IAM) role?
A. A user associated with an AWS resource
B. A group associated with an AWS resource
C. An entity that defines a set of permissions for use with an AWS resource

,D. An authentication credential associated with a multi-factor authentication
(MFA) token
A
Which of the following allows an application running on an Amazon EC2 instance
to securely write data to an Amazon S3 bucket without using long term
credentials?
A. Amazon Cognito
B. AWS Shield
C. AWS IAM role
D. AWS IAM user access key
C
Which AWS service will allow a user to set custom cost and usage limits, and will
alert when the thresholds are exceeded?
A. AWS Organizations
B. AWS Budgets
C. Cost Explorer
D. AWS Trusted Advisor
B
Which AWS services can be used to gather information about AWS account
activity? (Select TWO.)
A. Amazon CloudFront
B. AWS Cloud9
C. AWS CloudTrail
D. AWS CloudHSM
E. Amazon CloudWatch
A&E
What AWS billing support resource is available to all support levels? A. AWS
Support concierge
B. AWS Customer Service
C. AWS technical account manager
D. AWS Business Support

, B
Which AWS service enables risk auditing of an AWS account by tracking and
recording user actions and source IP addresses?'
A. AWS X-Ray
B. AWS Shield
C. AWS Trusted Advisor
D. AWS CloudTrail
D
Using AWS Identity and Access Management (1AM) what can be attached to an
Amazon EC2 instance to make service requests?
A. Group
B. Role
C. Policy
D. Access key
B
A company has an application that needs to invoke AWS services, including
Amazon Kinesis Data Firehose, AWS Lambda, and AWS CodePipeline. Which
AWS service should the company use to meet this requirement?
A. Amazon Simple Email Service (Amazon SES)
B. Amazon EventBridge (Amazon CloudWatch Events)
C. Amazon Kinesis Data Streams
D. AWS Database Migration Service (AWS DMS)
C
A user has underutilized on-premises resources. Which AWS Cloud concept can
BEST address this Issue?
A. High availability
B. Elasticity
C. Security
D. Loose coupling
B