CMIT 326 CLOUD TECH 2025 FINAL EXAM 1 WITH ALL
CORRECT & 100% VERIFIED ANSWERS|ACTUAL
COMPLETE EXAM|LATEST UPDATE|ALREADY GRADED
A+
Which of the following is a best practice for adding an additional layer of security when logging into
the AWS Management Console?
a. Root access permissions
b. Multi-factor authentication (MFA)
c. Secondary password
d. Secondary user name ✔Correct answer-b. Multi-factor authentication (MFA)
Which of the following tasks is the customer's responsibility when creating Amazon VPC security
groups?
a. Adding rules regarding inbound traffic to the security group
b. Choosing the level of physical security for the network
c. Ensuring that the security groups are linked to Amazon EC2
d. Selecting an appropriate load balancing strategy for the network routers ✔Correct answer-a.
Adding rules regarding inbound traffic to the security group
Which of the following examples best demonstrates the agility that cloud computing offers?
a. Protect your data by centralizing your applications in one Availability Zone
b. Quickly deploy multi-factor authentication (MFA) to multiple data centers
c. Spin up servers in minutes, and shut down servers when you don't need them.
d. Increase network throughout with AWS Direct Connect (DX) nodes. ✔Correct answer-c. Spin up
servers in minutes, and shut down servers when you don't need them.
Which service provides persistent block storage volumes for use with Amazon EC2 instances?
a. Amazon S3
b. Amazon EFS
c. Amazon DynamoDB
d. Amazon EBS ✔Correct answer-d. Amazon EBS
What is Amazon Route 53
a. A highly available and scalable Domain Name System (DNS) web service
b. A monitoring and management service that collects and tracks metrics
c. A fast and flexible nonrelational database service for all applications that need consistent, single-
digit millisecond latency at any scale.
d. A cloud service solution that establishes private connectivity between AWS and your data center,
office, or colocation environment. ✔Correct answer-a. A highly available and scalable Domain
Name System (DNS) web service
Users of your services are reporting latency. With on-premises architecture you would notify your
Administrator to launch another server to balance the load. How can this be automated using AWS?
a. Create six Amazon EC2 instances in different Availability Zones.
b. Create a new template using AWS CloudFormation.
c. Enable AWS CloudTrail to monitor latency issues.
,d. Enable an Amazon CloudWatch alarm to trigger a scaling policy. ✔Correct answer-d. Enable an
Amazon CloudWatch alarm to trigger a scaling policy.
Which of the following defines the AWS Command Line Interface (AWS CLI)?
a. A systematic approach to evaluating and implementing architectures
b. Packages that enable access to AWS in a variety of programming languages.
c. A suite of utilities that can be launched from a command program in Linux, macOS, or Windows.
d. A rich graphical interface to majority of the features offered by AWS. ✔Correct answer-c. A suite
of utilities that can be launched from a command program in Linux, macOS, or Windows.
Which service sends notifications or automatically makes changes to the resources being monitored
based on rules you established?
a. Amazon EC2
b. Amazon CloudWatch
c. Elastic Load Balancing
d. Amazon Aurora ✔Correct answer-b. Amazon CloudWatch
Which of the following components is included in the value proposition of the AWS Cloud?
a. Fully independent development without parameters
b. Informal security restrictions
c. Physical relocation of your servers
d. Massive economies of scale ✔Correct answer-d. Massive economies of scale
Which of the pillars of the well-Architected Framework is defined as the ability to run and monitor
systems to deliver business value and to continually improve supporting processes and procedures?
a. Performance efficiency
b. Security
c. Reliability
d. Operational excellence ✔Correct answer-d. Operational excellence
Which of the following services provides you with data and actionable insights to monitor your
applications, understand and respond to system-wide performance changes, optimize resource
utilization, and get a unified view of operational health?
a. AWS Cloud9
b. Amazon CloudWatch
c. AWS CloudFormation
d. AWS CloudTrail ✔Correct answer-b. Amazon CloudWatch
Who is responsible for security of the cloud according to the shared responsibility model?
a. AWS
b. Customer
c. AWS Support
d. IAM roles ✔Correct answer-a. AWS
Which of the following AWS services has no additional charge associated with its use? (The resources
provisioned within the service may incur costs.)
a. Amazon Elastic Computer Cloud (Amazon EC2)
b. Amazon Elastic Block Store (Amazon EBS)
c. Amazon Simple Storage Service (Amazon S3)
d. AWS Identity and Access Management (IAM) ✔Correct answer-d. AWS Identity and Access
Management (IAM)
,Your company is developing a critical application, and the security of the application is one of the top
priorities. Which of the following AWS service will provide recommendations for security
optimization for your infrastructure?
a. AWS Trusted Advisor
b. Amazon CloudWatch
c. Amazon Inspector
d. Amazon Aurora ✔Correct answer-a. AWS Trusted Advisor
Which of the following use cases is appropriate for Amazon CloudFront (Select Three)
a. Schema Generation
b. Database Backups
c. Auto Scaling
d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption ✔Correct answer-d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption
Which parts of the AWS infrastructure support increased resilience?
a. Multiple Regions distributed globally
b. Multiple Availability Zones within a Region
c. Multiple edge locations with a Region
d. Multiple AWS Direct Connet (DX) gateways within a data center ✔Correct answer-b. Multiple
Availability Zones within a Region
Which category of services includes Amazon S3?
a. Security
b. Migration
c. Storage
d. Computing ✔Correct answer-c. Storage
What is Elastic Load Balancing?
a. Automatically stopping traffic when targets get overloaded
b. Automatically distributing traffic across multiple targets
c. Automatically slowing traffic to decrease latency
d. Automatically monitoring traffic to ensure that cost are kept beneath a specified threshold
✔Correct answer-b. Automatically distributing traffic across multiple targets
Which of the following is a responsibility of the customer according to the shared responsibility
model?
a. Physical security of the facilities in which the services operate
b. AWS identify and Access management (IAM)
c. Protection of the global infrastructure
d. Availability of third-party audit reports ✔Correct answer-b. AWS identify and Access
management (IAM)
Which component of the AWS global infrastructure supports the caching of content for faster access?
a. AWS Direct Connect locations
b. Edge locations
c. Availability Zones
, d. Regions ✔Correct answer-b. Edge locations
Which of the following instance types provides you with a significant discount compared to On-
Demand Instance pricing?
a. Amazon EC2 Instant Instance
b. Amazon EC2 Reserved Instance
c. Amazon EC2 Dedicated Hosts
d. Amazon EC2 Dedicated Instances ✔Correct answer-b. Amazon EC2 Reserved Instance
Which AWS service enable you to repeatedly and predictably provision resources to power your
applications?
a. AWS CloudFormation
b. AWS Cloud Map
c. AWS CloudTrail
d. Amazon CloudFront ✔Correct answer-a. AWS CloudFormation
Which method would you used to access AWS services through an easy-to-use graphical interface?
a. Software Development Kits (AWS SDK)
b. AWS EasyLauch
c. AWS Command Line Interface (AWS CLI)
d. AWS Management Console ✔Correct answer-d. AWS Management Console
Which AWS sevice is a managed DDos protection service that safeguards applications running on
AWS?
a. Amazon Inspector
b. Amazon CloudWatch
c. AWS Identity and Access Management
d. AWS Shield ✔Correct answer-d. AWS Shield
A company has 70 employees divided into 10 departments. The IT admin wants to customize each
departments access to AWS. Which of the following options is most appropriate?
a. Make each employee an AWS account root user.
b. Create an IAM role for each department, and assign IAM users to the roles.
c. Create a temporary role for each employee, and revise their access as needed.
d. Create an IAM Group for ach department and assign IAM users to the groups ✔Correct answer-
d. Create an IAM Group for ach department and assign IAM users to the groups
How is storage typically priced on AWS Cloud?
a. Charged per GB
b. Charged by speed of transfer
c. Charged by instance type
d. Charged per hour or second ✔Correct answer-a. Charged per GB
Which of the following AWS concepts refers to "Established best practices developed through lessons
learned by working with customers"?
a. Well-Architected Framework
b. Reference architecture
c. Security of the Cloud
d. AWS Trusted Advisor ✔Correct answer-a. Well-Architected Framework
CORRECT & 100% VERIFIED ANSWERS|ACTUAL
COMPLETE EXAM|LATEST UPDATE|ALREADY GRADED
A+
Which of the following is a best practice for adding an additional layer of security when logging into
the AWS Management Console?
a. Root access permissions
b. Multi-factor authentication (MFA)
c. Secondary password
d. Secondary user name ✔Correct answer-b. Multi-factor authentication (MFA)
Which of the following tasks is the customer's responsibility when creating Amazon VPC security
groups?
a. Adding rules regarding inbound traffic to the security group
b. Choosing the level of physical security for the network
c. Ensuring that the security groups are linked to Amazon EC2
d. Selecting an appropriate load balancing strategy for the network routers ✔Correct answer-a.
Adding rules regarding inbound traffic to the security group
Which of the following examples best demonstrates the agility that cloud computing offers?
a. Protect your data by centralizing your applications in one Availability Zone
b. Quickly deploy multi-factor authentication (MFA) to multiple data centers
c. Spin up servers in minutes, and shut down servers when you don't need them.
d. Increase network throughout with AWS Direct Connect (DX) nodes. ✔Correct answer-c. Spin up
servers in minutes, and shut down servers when you don't need them.
Which service provides persistent block storage volumes for use with Amazon EC2 instances?
a. Amazon S3
b. Amazon EFS
c. Amazon DynamoDB
d. Amazon EBS ✔Correct answer-d. Amazon EBS
What is Amazon Route 53
a. A highly available and scalable Domain Name System (DNS) web service
b. A monitoring and management service that collects and tracks metrics
c. A fast and flexible nonrelational database service for all applications that need consistent, single-
digit millisecond latency at any scale.
d. A cloud service solution that establishes private connectivity between AWS and your data center,
office, or colocation environment. ✔Correct answer-a. A highly available and scalable Domain
Name System (DNS) web service
Users of your services are reporting latency. With on-premises architecture you would notify your
Administrator to launch another server to balance the load. How can this be automated using AWS?
a. Create six Amazon EC2 instances in different Availability Zones.
b. Create a new template using AWS CloudFormation.
c. Enable AWS CloudTrail to monitor latency issues.
,d. Enable an Amazon CloudWatch alarm to trigger a scaling policy. ✔Correct answer-d. Enable an
Amazon CloudWatch alarm to trigger a scaling policy.
Which of the following defines the AWS Command Line Interface (AWS CLI)?
a. A systematic approach to evaluating and implementing architectures
b. Packages that enable access to AWS in a variety of programming languages.
c. A suite of utilities that can be launched from a command program in Linux, macOS, or Windows.
d. A rich graphical interface to majority of the features offered by AWS. ✔Correct answer-c. A suite
of utilities that can be launched from a command program in Linux, macOS, or Windows.
Which service sends notifications or automatically makes changes to the resources being monitored
based on rules you established?
a. Amazon EC2
b. Amazon CloudWatch
c. Elastic Load Balancing
d. Amazon Aurora ✔Correct answer-b. Amazon CloudWatch
Which of the following components is included in the value proposition of the AWS Cloud?
a. Fully independent development without parameters
b. Informal security restrictions
c. Physical relocation of your servers
d. Massive economies of scale ✔Correct answer-d. Massive economies of scale
Which of the pillars of the well-Architected Framework is defined as the ability to run and monitor
systems to deliver business value and to continually improve supporting processes and procedures?
a. Performance efficiency
b. Security
c. Reliability
d. Operational excellence ✔Correct answer-d. Operational excellence
Which of the following services provides you with data and actionable insights to monitor your
applications, understand and respond to system-wide performance changes, optimize resource
utilization, and get a unified view of operational health?
a. AWS Cloud9
b. Amazon CloudWatch
c. AWS CloudFormation
d. AWS CloudTrail ✔Correct answer-b. Amazon CloudWatch
Who is responsible for security of the cloud according to the shared responsibility model?
a. AWS
b. Customer
c. AWS Support
d. IAM roles ✔Correct answer-a. AWS
Which of the following AWS services has no additional charge associated with its use? (The resources
provisioned within the service may incur costs.)
a. Amazon Elastic Computer Cloud (Amazon EC2)
b. Amazon Elastic Block Store (Amazon EBS)
c. Amazon Simple Storage Service (Amazon S3)
d. AWS Identity and Access Management (IAM) ✔Correct answer-d. AWS Identity and Access
Management (IAM)
,Your company is developing a critical application, and the security of the application is one of the top
priorities. Which of the following AWS service will provide recommendations for security
optimization for your infrastructure?
a. AWS Trusted Advisor
b. Amazon CloudWatch
c. Amazon Inspector
d. Amazon Aurora ✔Correct answer-a. AWS Trusted Advisor
Which of the following use cases is appropriate for Amazon CloudFront (Select Three)
a. Schema Generation
b. Database Backups
c. Auto Scaling
d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption ✔Correct answer-d. Static Asset Caching
e. Live on-demand video streaming
f. Security and encryption
Which parts of the AWS infrastructure support increased resilience?
a. Multiple Regions distributed globally
b. Multiple Availability Zones within a Region
c. Multiple edge locations with a Region
d. Multiple AWS Direct Connet (DX) gateways within a data center ✔Correct answer-b. Multiple
Availability Zones within a Region
Which category of services includes Amazon S3?
a. Security
b. Migration
c. Storage
d. Computing ✔Correct answer-c. Storage
What is Elastic Load Balancing?
a. Automatically stopping traffic when targets get overloaded
b. Automatically distributing traffic across multiple targets
c. Automatically slowing traffic to decrease latency
d. Automatically monitoring traffic to ensure that cost are kept beneath a specified threshold
✔Correct answer-b. Automatically distributing traffic across multiple targets
Which of the following is a responsibility of the customer according to the shared responsibility
model?
a. Physical security of the facilities in which the services operate
b. AWS identify and Access management (IAM)
c. Protection of the global infrastructure
d. Availability of third-party audit reports ✔Correct answer-b. AWS identify and Access
management (IAM)
Which component of the AWS global infrastructure supports the caching of content for faster access?
a. AWS Direct Connect locations
b. Edge locations
c. Availability Zones
, d. Regions ✔Correct answer-b. Edge locations
Which of the following instance types provides you with a significant discount compared to On-
Demand Instance pricing?
a. Amazon EC2 Instant Instance
b. Amazon EC2 Reserved Instance
c. Amazon EC2 Dedicated Hosts
d. Amazon EC2 Dedicated Instances ✔Correct answer-b. Amazon EC2 Reserved Instance
Which AWS service enable you to repeatedly and predictably provision resources to power your
applications?
a. AWS CloudFormation
b. AWS Cloud Map
c. AWS CloudTrail
d. Amazon CloudFront ✔Correct answer-a. AWS CloudFormation
Which method would you used to access AWS services through an easy-to-use graphical interface?
a. Software Development Kits (AWS SDK)
b. AWS EasyLauch
c. AWS Command Line Interface (AWS CLI)
d. AWS Management Console ✔Correct answer-d. AWS Management Console
Which AWS sevice is a managed DDos protection service that safeguards applications running on
AWS?
a. Amazon Inspector
b. Amazon CloudWatch
c. AWS Identity and Access Management
d. AWS Shield ✔Correct answer-d. AWS Shield
A company has 70 employees divided into 10 departments. The IT admin wants to customize each
departments access to AWS. Which of the following options is most appropriate?
a. Make each employee an AWS account root user.
b. Create an IAM role for each department, and assign IAM users to the roles.
c. Create a temporary role for each employee, and revise their access as needed.
d. Create an IAM Group for ach department and assign IAM users to the groups ✔Correct answer-
d. Create an IAM Group for ach department and assign IAM users to the groups
How is storage typically priced on AWS Cloud?
a. Charged per GB
b. Charged by speed of transfer
c. Charged by instance type
d. Charged per hour or second ✔Correct answer-a. Charged per GB
Which of the following AWS concepts refers to "Established best practices developed through lessons
learned by working with customers"?
a. Well-Architected Framework
b. Reference architecture
c. Security of the Cloud
d. AWS Trusted Advisor ✔Correct answer-a. Well-Architected Framework
