AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
1. A company needs Explanation
to keep sensi- Correct option:
tive data in its Hybrid Cloud
own data center A hybrid deployment is a way to connect infrastructure and applications between
due to compli- cloud-based resources and existing resources that are not located in the cloud. The
ance but would most common method of hybrid deployment is between the cloud and existing
still like to de- on-premises infrastructure to extend, and grow, an organization's infrastructure
ploy resources into the cloud while connecting cloud resources to the internal system.
using AWS. Which Overview of Cloud Computing Deployment Models: via - https://aws.ama-
Cloud deploy- zon.com/types-of-cloud-computing/
ment model does Incorrect options:
this refer to? Public Cloud - A public cloud-based application is fully deployed in the cloud and
all parts of the application run in the cloud. Applications in the cloud have either
Public Cloud been created in the cloud or have been migrated from an existing infrastructure
On-premises to take advantage of the benefits of cloud computing.
Hybrid Cloud Private Cloud - Unlike a Public cloud, a Private cloud enables businesses to avail
Private Cloud IT services that are provisioned and customized according to their precise needs.
The business can further avail the IT services securely and reliably over a private IT
infrastructure.
On-premises - This is not a cloud deployment model. When an enterprise opts
for on-premises,it needs to create, upgrade, and scale the on-premise IT infra-
structure by investing in sophisticated hardware, compatible software, and robust
services. Also, the business needs to deploy dedicated IT staff to upkeep, scale,
and manage the on-premise infrastructure continuously.
Reference:
https://aws.amazon.com/what-is-cloud-computing/
2. Which ser- Explanation
vice/tool will you Correct option:
use to create and AWS Security Token Service (AWS STS) - AWS Security Token Service (AWS STS) is a
provide trusted web service that enables you to request temporary, limited-privilege credentials
users with tem- for AWS Identity and Access Management (IAM) users or for users that you
, AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
porary security authenticate (federated users).
credentials that You can use the AWS Security Token Service (AWS STS) to create and provide trusted
can control ac- users with temporary security credentials that can control access to your AWS
cess to your AWS resources. Temporary security credentials work almost identically to the long-term
resources? access key credentials that your IAM users can use, with the following differences:
AWS Web Ap- Temporary security credentials are short-term, as the name implies. They can be
plication Firewall configured to last for anywhere from a few minutes to several hours. After the
(AWS WAF) credentials expire, AWS no longer recognizes them or allows any kind of access
Amazon Cognito from API requests made with them.
AWS Single Temporary security credentials are not stored with the user but are generated
Sign-On (SSO) dynamically and provided to the user when requested. When (or even before)
AWS Security To- the temporary security credentials expire, the user can request new credentials, as
ken Service (AWS long as the user requesting them still has permissions to do so.
STS) Temporary security credentials are generated by AWS STS. By default, AWS STS is a
global service with a single endpoint at https://sts.amazonaws.com. However, you
can also choose to make AWS STS API calls to endpoints in any other supported
Region.
Incorrect options:
Amazon Cognito - Amazon Cognito is a higher level of abstraction than STS. Amazon
Cognito supports the same identity providers as AWS STS, and also supports
unauthenticated (guest) access, and lets you migrate user data when a user signs
in. Amazon Cognito also provides API operations for synchronizing user data so
that it is preserved as users move between devices. Cognito helps create the user
database, which is not possible with STS.
AWS Single Sign-On (SSO) - AWS Single Sign-On (SSO) makes it easy to centrally
manage access to multiple AWS accounts and business applications and provide
users with single sign-on access to all their assigned accounts and applications
from one place. With AWS SSO, you can easily manage access and user permis-
sions to all of your accounts in AWS Organizations centrally. AWS SSO configures
and maintains all the necessary permissions for your accounts automatically, with-
out requiring any additional setup in the individual accounts.
AWS Web Application Firewall (AWS WAF) - AWS WAF is a web application firewall
, AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
that helps protect your web applications or APIs against common web exploits
and bots that may affect availability, compromise security, or consume excessive
resources. AWS WAF gives you control over how traffic reaches your applications
by enabling you to create security rules that control bot traffic and block common
attack patterns, such as SQL injection or cross-site scripting.
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html
3. A production Explanation
company with Correct option:
predictable us- 1 year
age would like to 3 years
reduce the cost Reserved Instances provide you with a significant discount (up to 75%) compared
of its Amazon EC2 to On-Demand instance pricing. Besides, when Reserved Instances are assigned to
instances by us- a specific Availability Zone, they provide a capacity reservation, giving you additional
ing reserved in- confidence in your ability to launch instances when you need them.
stances. Which Standard and Convertible reserved instances can be purchased for a 1-year or
of the follow- 3-year term.
ing length terms EC2 Pricing Options Overview: via - https://aws.amazon.com/ec2/pricing/
are available for Incorrect options:
Amazon EC2 re- 6 months - It is not possible to reserve instances for 6 months.
served instances? 5 years - It is not possible to reserve instances for 5 years.
(Select TWO) 2 years - It is not possible to reserve instances for 2 years.
Reference:
1 year https://aws.amazon.com/ec2/pricing/
2 years
5 years
6 months
3 years
4. Which of the fol- Explanation
lowing services Correct option:
, AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
are provided by Domain registration
Amazon Route Health checks and monitoring
53? (Select TWO) Amazon Route 53 is a highly available and scalable cloud Domain Name System
Health checks (DNS) web service. It is designed to give developers and businesses an extremely
and monitoring reliable and cost-effective way to route end users to Internet applications by trans-
Transfer acceler- lating names like www.example.com into the numeric IP addresses like 192.0.2.1
ation that computers use to connect to each other.
Load balancing Amazon Route 53 offers domain name registration services, where you can search
IP routing for and register available domain names or transfer in existing domain names to
Domain registra- be managed by Route 53.
tion Amazon Route 53 can monitor the health and performance of your application as
well as your web servers and other resources.
Incorrect options:
IP routing - Despite its name, Amazon Route 53 does not offer IP routing. However,
it can route traffic based on multiple criteria, such as endpoint health, geographic
location, and latency, using routing policies.
Load balancing - It is a feature of Elastic Load Balancing (ELB) and not Amazon
Route 53. Elastic Load Balancing automatically distributes incoming application
traffic across multiple targets, such as Amazon EC2 instances, containers, IP ad-
dresses, and Lambda functions. It can handle the varying load of your application
traffic in a single Availability Zone or across multiple Availability Zones.
Transfer acceleration - Transfer acceleration is a feature of Amazon S3. Amazon S3
Transfer Acceleration can speed up content transfers to and from Amazon S3 by as
much as 50-500% for long-distance transfer of larger objects.
Reference:
https://aws.amazon.com/route53/
5. Which of the fol- Explanation
lowing options is Correct option:
NOT a feature of Track configuration changes
Amazon Inspec- Tracking configuration changes is a feature of AWS Config.
tor? AWS Config is a service that enables you to assess, audit, and evaluate the configu-
Study online at https://quizlet.com/_cdpy6s
1. A company needs Explanation
to keep sensi- Correct option:
tive data in its Hybrid Cloud
own data center A hybrid deployment is a way to connect infrastructure and applications between
due to compli- cloud-based resources and existing resources that are not located in the cloud. The
ance but would most common method of hybrid deployment is between the cloud and existing
still like to de- on-premises infrastructure to extend, and grow, an organization's infrastructure
ploy resources into the cloud while connecting cloud resources to the internal system.
using AWS. Which Overview of Cloud Computing Deployment Models: via - https://aws.ama-
Cloud deploy- zon.com/types-of-cloud-computing/
ment model does Incorrect options:
this refer to? Public Cloud - A public cloud-based application is fully deployed in the cloud and
all parts of the application run in the cloud. Applications in the cloud have either
Public Cloud been created in the cloud or have been migrated from an existing infrastructure
On-premises to take advantage of the benefits of cloud computing.
Hybrid Cloud Private Cloud - Unlike a Public cloud, a Private cloud enables businesses to avail
Private Cloud IT services that are provisioned and customized according to their precise needs.
The business can further avail the IT services securely and reliably over a private IT
infrastructure.
On-premises - This is not a cloud deployment model. When an enterprise opts
for on-premises,it needs to create, upgrade, and scale the on-premise IT infra-
structure by investing in sophisticated hardware, compatible software, and robust
services. Also, the business needs to deploy dedicated IT staff to upkeep, scale,
and manage the on-premise infrastructure continuously.
Reference:
https://aws.amazon.com/what-is-cloud-computing/
2. Which ser- Explanation
vice/tool will you Correct option:
use to create and AWS Security Token Service (AWS STS) - AWS Security Token Service (AWS STS) is a
provide trusted web service that enables you to request temporary, limited-privilege credentials
users with tem- for AWS Identity and Access Management (IAM) users or for users that you
, AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
porary security authenticate (federated users).
credentials that You can use the AWS Security Token Service (AWS STS) to create and provide trusted
can control ac- users with temporary security credentials that can control access to your AWS
cess to your AWS resources. Temporary security credentials work almost identically to the long-term
resources? access key credentials that your IAM users can use, with the following differences:
AWS Web Ap- Temporary security credentials are short-term, as the name implies. They can be
plication Firewall configured to last for anywhere from a few minutes to several hours. After the
(AWS WAF) credentials expire, AWS no longer recognizes them or allows any kind of access
Amazon Cognito from API requests made with them.
AWS Single Temporary security credentials are not stored with the user but are generated
Sign-On (SSO) dynamically and provided to the user when requested. When (or even before)
AWS Security To- the temporary security credentials expire, the user can request new credentials, as
ken Service (AWS long as the user requesting them still has permissions to do so.
STS) Temporary security credentials are generated by AWS STS. By default, AWS STS is a
global service with a single endpoint at https://sts.amazonaws.com. However, you
can also choose to make AWS STS API calls to endpoints in any other supported
Region.
Incorrect options:
Amazon Cognito - Amazon Cognito is a higher level of abstraction than STS. Amazon
Cognito supports the same identity providers as AWS STS, and also supports
unauthenticated (guest) access, and lets you migrate user data when a user signs
in. Amazon Cognito also provides API operations for synchronizing user data so
that it is preserved as users move between devices. Cognito helps create the user
database, which is not possible with STS.
AWS Single Sign-On (SSO) - AWS Single Sign-On (SSO) makes it easy to centrally
manage access to multiple AWS accounts and business applications and provide
users with single sign-on access to all their assigned accounts and applications
from one place. With AWS SSO, you can easily manage access and user permis-
sions to all of your accounts in AWS Organizations centrally. AWS SSO configures
and maintains all the necessary permissions for your accounts automatically, with-
out requiring any additional setup in the individual accounts.
AWS Web Application Firewall (AWS WAF) - AWS WAF is a web application firewall
, AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
that helps protect your web applications or APIs against common web exploits
and bots that may affect availability, compromise security, or consume excessive
resources. AWS WAF gives you control over how traffic reaches your applications
by enabling you to create security rules that control bot traffic and block common
attack patterns, such as SQL injection or cross-site scripting.
Reference:
https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_temp.html
3. A production Explanation
company with Correct option:
predictable us- 1 year
age would like to 3 years
reduce the cost Reserved Instances provide you with a significant discount (up to 75%) compared
of its Amazon EC2 to On-Demand instance pricing. Besides, when Reserved Instances are assigned to
instances by us- a specific Availability Zone, they provide a capacity reservation, giving you additional
ing reserved in- confidence in your ability to launch instances when you need them.
stances. Which Standard and Convertible reserved instances can be purchased for a 1-year or
of the follow- 3-year term.
ing length terms EC2 Pricing Options Overview: via - https://aws.amazon.com/ec2/pricing/
are available for Incorrect options:
Amazon EC2 re- 6 months - It is not possible to reserve instances for 6 months.
served instances? 5 years - It is not possible to reserve instances for 5 years.
(Select TWO) 2 years - It is not possible to reserve instances for 2 years.
Reference:
1 year https://aws.amazon.com/ec2/pricing/
2 years
5 years
6 months
3 years
4. Which of the fol- Explanation
lowing services Correct option:
, AWS Certified Cloud Practitioner - Practice Test #5
Study online at https://quizlet.com/_cdpy6s
are provided by Domain registration
Amazon Route Health checks and monitoring
53? (Select TWO) Amazon Route 53 is a highly available and scalable cloud Domain Name System
Health checks (DNS) web service. It is designed to give developers and businesses an extremely
and monitoring reliable and cost-effective way to route end users to Internet applications by trans-
Transfer acceler- lating names like www.example.com into the numeric IP addresses like 192.0.2.1
ation that computers use to connect to each other.
Load balancing Amazon Route 53 offers domain name registration services, where you can search
IP routing for and register available domain names or transfer in existing domain names to
Domain registra- be managed by Route 53.
tion Amazon Route 53 can monitor the health and performance of your application as
well as your web servers and other resources.
Incorrect options:
IP routing - Despite its name, Amazon Route 53 does not offer IP routing. However,
it can route traffic based on multiple criteria, such as endpoint health, geographic
location, and latency, using routing policies.
Load balancing - It is a feature of Elastic Load Balancing (ELB) and not Amazon
Route 53. Elastic Load Balancing automatically distributes incoming application
traffic across multiple targets, such as Amazon EC2 instances, containers, IP ad-
dresses, and Lambda functions. It can handle the varying load of your application
traffic in a single Availability Zone or across multiple Availability Zones.
Transfer acceleration - Transfer acceleration is a feature of Amazon S3. Amazon S3
Transfer Acceleration can speed up content transfers to and from Amazon S3 by as
much as 50-500% for long-distance transfer of larger objects.
Reference:
https://aws.amazon.com/route53/
5. Which of the fol- Explanation
lowing options is Correct option:
NOT a feature of Track configuration changes
Amazon Inspec- Tracking configuration changes is a feature of AWS Config.
tor? AWS Config is a service that enables you to assess, audit, and evaluate the configu-
