AWS Cloud Certification exam 2022/2023 with 100% correct answers

AWS Cloud Certification exam 2022/2023 with 100% correct answersAmazon S3 Amazon CloudFront automation built-in distributed denial-of-service (DDoS) attack protection AWS Cloud Certification exam 2022/2023 with 100% correct answers Identify the services that have a global (rather than regional) scope? (choose two) Question 100 options: Amazon EC2 AWS Lambda Amazon Route 53 Saved What architectural best practice aims to reduce the interdependencies between services? Question 99 options: removing single points of failure loose coupling services, not servers What benefits are provided by Amazon CloudFront? (choose two) Question 98 options: used to enable private subnet instances to access the internet content is cached at edge Locations for fast distribution to customers Which feature of AWS allows you to deploy a new application for which the requirements may change over time? Question 97 options: allows you to register domain names provides a worldwide distributed DNS service disposable resources Amazon S3 AWS Organizations Distributed resources across multiple AWS points of presence fault tolerance elasticity Which storage service allows you to connect multiple EC2 instances concurrently using file-level protocols? Question 96 options: Amazon Glacier Amazon EFS Joe's company is looking to make a number of improvements. The firm would like to maximize potential volume and reserved instance (RI) discounts across multiple accounts and also apply service control policies on member accounts. Which service or tool can be used to gain these benefits? Question 95 options: AWS Budgets AWS IAM When designing a typical three-tier web application, which AWS services and/or features improve availability and reduce the impact failures? (Choose two.) Question 94 options: Distributed resources across multiple Availability Zones AWS Server Migration Service (AWS SMS) to move Amazon EC2 instances into a different Region AWS Auto Scaling for Amazon EC2 instances Amazon VPC subnet ACLs to check the health of a service AWS Cost Explorer Amazon EBS high availability enterprise AWS automatically distributes the data globally for higher durability AWS will take care of operating the application What is the most cost-effective support plan that should be selected to provide at least a one-hour response time for a production system failure? Question 93 options: basic business Your CTO wants to move to cloud. What cost advantages are there to moving to cloud? Question 92 options: You don't need to pay for application licensing. You get free data transfer into and out of the cloud. You provision only what you need and adjust to peak load. What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Choose two.) Question 91 options: AWS makes it easy to architect for high availability AWS can easily accommodate application demand changes AWS takes care of application security patching. A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goal? (choose two) Question 90 options: Use Amazon Athena to query data from the on-premises database servers. Use the AWS Service Catalog to identify a list of on-premises resources that can be migrated. Build a VPN connection between an on-premises device and a virtual private gateway in the new VP. You can reduce marketing costs. developer uses dedicated hardware Leverage Amazon CloudFront to restrict access to static web content provided through the company's on-premises web servers. Connect the company's on-premises data center to AWS using AWS Direct Connect. What are the benefits of using reserved instances? (choose two) Question 89 options: reserve capacity high availability Which of the following will enhance the security of access to the AWS Management Console? (choose two) Question 88 options: AWS Multifactor Authentication (AWS MFA) Security groups Password policies Which items can be configured from within the Amazon VPC management console? (choose two) Question 87 options: load balancing auto scaling subnets What does an organization need to do to move to another AWS region? Question 86 options: Apply for another AWS account in that region. Submit an application to extend their account to the additional region. Create a separate IAM account for that region. regions security groups AWS Secrets Manager AWS Certificate Manager reduced cost more flexibility Route Table deploy into a single availability zone Just start deploying resources in the additional region. Which of the following are architectural best practices for the AWS cloud? (choose 2) Question 85 options: design for fault tolerance deploy into multiple availability zones Which AWS service allows you to connect to storage from onpremise servers using standard file protocols? Question 84 options: Amazon Glacier Amazon EBS Amazon S3 James is an IT professional and is looking into using AWS for the first time. Which of the following is an AWS responsibility under the AWS shared responsibility model? Question 83 options: maintaining physical hardware securing application access and data deploying EC2 instances What can you use to quickly connect an office securely to Amazon VPC? Question 82 options: AWS managed VPN Direct Connect Which service can be used to track the CPU usage of an EC2 instance? Internet Gateway configuring third-party applications Amazon EFS close coupling create monolithic architectures Amazon CloudTrail Amazon Route 53 AWS Route53 Question 81 options: Amazon CloudFormation Amazon CloudFront The Security Department wants to send alerts based on CloudWatch alarms. Which service would be used to send these alerts? Question 80 options: AWS Security Hub AWS Lambda A company is planning to launch an e-commerce site in a single AWS region to a worldwide user base. Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (choose two) Question 79 options: AWS Direct Connect Amazon CloudFront AWS Lambda Amy, a solutions architect, needs to create a virtual network within his AWS environment. Which AWS networking service would allow her to do this? Question 78 options: Amazon Route 53 AWS EC2t Amazon Virtual Private Cloud (Amazon VPC) Which feature can you use to grant read/write access to an Amazon S3 bucket? Question 77 options: Application Load Balancer AWS Global Accelerator Amazon Simple Notification Service (Amazon SNS) Amazon CloudWatch IAM Policy reduced latency disable multifactor authentication (MF for IAM users) Dedicated Instance IAM Group IAM Role Which pricing model should you use for EC2 instances that will be used in a lab environment for several hours on a weekend and must run uninterrupted? Question 76 options: Spot Reserved What advantages does deploying Amazon CloudFront provide? (choose two) Question 75 options: a private network link to the AWS cloud improved performance for end users Which of the following are recommended practices for managing IAM users? (choose two) Question 74 options: recommend that the same password be used on AWS and other sites require IAM users to store their passwords in raw text Which feature of Amazon Rekognition can assist with saving time? Question 73 options: provides on-demand access to compliance-related information require IAM users to change their passwords after a specified period of time prevent IAM users from reusing previous passwords provides serverless compute services automated deployment of resources On-Demand IAM User roles identification of objects in images and videos Amazon EBS AWS CloudTrail identification of the language of text in a document adds automatic speech recognitions (ASR) to applications Which services are integrated with KMS encryption? (choose two) Question 72 options: Amazon RDS AWS CloudFormation Amazon SWF The IAM service can be used to manage which objects? (choose two) Question 71 options: key pairs security groups Which AWS feature or service can be used to capture information about incoming and outgoing traffic in an AWS VPC infrastructure? Question 70 options: VPC Flow Logs AWS Trusted Advisor Which tool enables you to see use patterns and identify cost drivers? Question 69 options: AWS Budgets AWS Simple Monthly Calculator AWS Config access policies network ACLs Amazon EC2 AWS Cost Explorer availability zones There are more Availability Zones than AWS Regions Access key Total Cost of Ownership (TCO) Calculator Which of the following is a method of backup available in the AWS cloud? Question 68 options: EFS file systems Route 53 alias record Which of the following describes the relationships among AWS Regions, Availability Zones, and edge locations? (Choose two.) Question 67 options: An edge location is an Availability Zone. There are more AWS Regions than edge locations Which of the following are components of Amazon VPC? (Choose two.) Question 66 options: Buckets Internet gateways The CIO of Acme Inc. is comparing the costs of standing up a data center or using a cloud provider such as AWS for an application with varying compute workloads. What is a reason the cloud provider, AWS, might be more economical? Question 65 options: Users retain full administrative access to their Amazon EC2 instances. Amazon RDS costs are billed on a monthly basis. Objects Subnets There are more AWS Regions than Availability Zones There are more edge locations than AWS Regions. EBS snapshots Users can permanently run enough instances to handle peak workloads. Amazon CloudFront Amazon EC2 instances can be launched on demand when needed. What method can you use to take a backup of an Amazon EC2 instance using AWS tools? Question 64 options: Take application-consistent backups using the EC2 API. Take full and incremental file-level backups using the backup console. Take a snapshot to capture the point-in-time state of the instance. A company wants to use an AWS service to check application endpoints, with the ability to move traffic to healthy regional endpoints to improve application availability. Which service will support these requirements? Question 63 options: Amazon CloudWatch AWS Global Accelerator Which service can be used to help you to migrate databases to AWS quickly and securely? Question 62 options: AWS KMS AWS DMS AWS Migration Hub How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (choose two) Question 61 options: It detects potential security vulnerabilities caused by permissions settings on account resources. It automatically corrects potential security issues caused by permissions settings on account resources. It identifies software vulnerabilities in applications running on AWS. It provides a list of cost optimization recommendations based on current AWS usage. AWS SMS Amazon Inspector Use Cross Region Replication (CRR) to copy the instance to another region. IT manager salary Developer AWS Security Hub Which types of pricing policies does AWS offer? (choose two) Question 60 options: Enterprise license agreement (EL) nonpeak hour discounts global usage discounts Acme Corp. Is looking to buy software and start using it right away in the cloud. Which AWS offering enables users to do this? Question 59 options: AWS OpsWorks AWSSDK AWS Marketplace Which of the following need to be included in a total cost of ownership (TCO) analysis? (choose two) Question 58 options: company-wide marketing application development Which AWS support plan should you use if you need a response time of less than 15 minutes for a business-critical system failure? Question 57 options: Enterprise Business Basic facility equipment installation data center security costs pay-as-you-go save when you reserve It provides proactive alerting whenever an Amazon EC2 instance has been compromised. Hosted Zones Use Amazon Connect to create a new request for proposal (RFP) for expert assistance in migrating to the AWS cloud. S3 Cross-Region Replication (CRR) A company is migrating from on-premises data centers to the AWS cloud and is looking for hands-on help with the project. How can the company get this support? (choose two) Question 56 options: Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company's AWS account. Select a partner from the AWS Partner Network (APN) to assist with the migration. Which service supports the resolution of public domain names to IP addresses or AWS resources? Question 55 options: Amazon CloudFront Amazon SNS Which cost-effective service can be used to move exabytes of data into AWS? Question 54 options: AWS Snowball S3 Transfer Acceleration How can an organization compare the cost of running applications in an on-premise or colocation environment against the AWS cloud? Which type of Amazon Elastic Load Balancer operates at layer 7 of the OSI model? Question 51 options: F5 Load Balancer Classic Load Balancer Network Load Balancer AWS Snowmobile Amazon Route 53 Ask for a quote from the AWS Marketplace team to perform a migration into the company's AWS account. Contact AWS Support and open a case for assistance. TCO Calculator AWS Organizations Application Load Balancer Question 53 options: AWS Simple Monthly Calculator AWS Budgets Which AWS service can be used to easily create multiple accounts? Question 52 options: Amazon Connect AWS CloudFormation Which type of Amazon Elastic Load Balancer operates at layer 7 of the OSI model? Question 51 options: F5 Load Balancer Classic Load Balancer What factor can contribute to a network bottleneck in a cloud deployment? Question 50 options: the maximum transmission unit (MTU) has been exceeded malformed data packets Network Load Balancer Amazon IAM AWS Cost Explorer Application Load Balancer ACL IT, finance, and production when the ACL is maliciously misconfigured It does not need to be checked for security vulnerabilities. errors in the routing tables of the firewall not enough security between the endpoints Which groups should be involved in a cloud change management process? Question 49 options: IT, finance, and production IT, HR, finance, and production Which of the following correctly describes an external attack? Question 48 options: when an employee intentionally deletes files when somebody from inside the company tries to launch an attack Which of the following can be used as a logging server? (choose two) Question 47 options: OpenStack CACL Which statement is true about a rolling update? Question 46 options: Only the network administrator can apply it. It is typically used in a Linux-based environment. Which of the following is an example of data privacy law? Question 45 options: ISO 27001 and FIPS 140-2 It is deployed at random. SLA AmazonS3 when a hacker penetrates the cloud from the outside environment IT, HR, marketing, finance California SB-327 using two-factor authentication (2FA) ARP It is a tool to find unhidden trends in the data sets. It alerts you when you are over resource limits. Sarbanes-Oxley GDPR How can a VPN be made more secure? Question 44 options: further encapsulating the data packet into more data packets layering it in IPsec What is the function of cloud alerting? Question 43 options: It uses SMTP. It compiles system events into a central log. Which of the following protocols has the capability of retransferring lost packets? Question 42 options: UDP TCP What is metadata? Question 41 options: It is a data warehousing application. It refers to big data. What is the cloud application life cycle? Question 40 options: the period of utility of the cloud resource the establishment of software functionalities It is data about the data. IP It alerts the user when an event needs to be monitored. implementing a firewall at the endpoints installing a certificate authority It is a mesh-based network topology. the time when software patches and other upgrades are applied the time when a cloud application is deleted after its useful life What is a cluster? Question 39 options: It interlinks the LAN to the WAN. It is a series of servers connected to one another in a LAN. What is encryption? Question 38 options: implementing hashing algorithms converting plaintext into ciphertext What is the purpose of a tcpdump? Question 37 options: to monitor network traffic and is also called "sniffing" to stores log files onto the virtual machine to discard malicious data packets Which kind of application makes use of a PKI? Question 36 options: endpoint security transferring data to a server video and audio conferencing Prior to a cloud application launch, what parameters show a successful test? (choose two) Question 35 options: adequate amounts of sizing gaining access to shared resources to release data packets in a TCP/IP protocol deploying public and private keys It is a series of computers networked together in tandem. maintenance of data integrity GRE It is a patch that can be deployed almost instantaneously. app engine has been properly disabled development servers have been disengaged Which are types of tunneling protocols? (choose two) Question 34 options: PTP PPTP What is a hotfix? Question 33 options: It is a patch that provides an instant snapshot of the system. It is used to check for backdoors in source code. What is a template? Question 32 options: It is part of a public key infrastructure. It is used in hashing algorithms. It is a prototype of a cloud system. Which is an example of an automation tool? Question 31 options: routers endpoint detection technologies scripting It is a representation of your fingerprint for an SSO. It is a tool used for rollbacks. IPsec TCP/IP absence of partitioning to give the user access to the same resources among different cloud providers SSL/TLS HTTP It is a process of running checks of cloud apps in a sandbox. What is the purpose of federation? Question 30 options: to grant access to network services to the user to assign access as defined by user roles What is change management? Question 29 options: It is the process of shifting cloud resources. It is a time when the client and the cloud provider meet directly. Which of the following is an example of encrypted communications? Question 28 options: HTTPS TCP/IP Which of the following is affected by jitter? Question 27 options: security DNS What is the correct sequence of steps in the change management process? Question 26 options: testing documentation, planning, securing approvals, validating changes, recording changes defining instructions, performing reviews voice communications VPNs It is rolling out new procedures, processes, upgrades, reconfigurations, and repairs. to allow a user to log into multiple systems with just one credential APIs latency the amount of network bandwidth being used when connecting to the cloud object storage It contains resources that can be accessed by employees. validating changes, defining instructions, performing reviews, recording changes, planning, performing reviews, testing documentation recording changes, planning, testing documentation, securing approvals, validating changes, defining instructions, performing reviews performing reviews, recording changes, planning, testing documentation, securing approvals, defining instructions, validating changes Which of the following terms best describes "the time it takes for a data packet to move from source to destination"? Question 25 options: packet loss jitter What is CPU usage? Question 24 options: a metric that reflects how much disk space is being used up a measure of how much processing power is being used Which of the following storage types usually connects with the motherboard via SATA/ATA connection? Question 23 options: SAN DAS What is the role of the DNS Server? Question 22 options: It sends emails from the sender to the receiver. It stores data and information. It breaks down the domain name into its corresponding IP address. NAS a display of how much memory is left in RAM congestion API It is one part of an overall IP network. host authentication Which of the following are cloud automation techniques? (choose two) Question 21 options: OpenStack S3 What is a subnet? Question 20 options: It joins a LAN and a WAN. It is a component of a VPN. What is a lockout? Question 19 options: the responsibility of the CIO/CISO to establish the lockout policy creating a strong password freezing a software development cycle if errors are found in the source code Which of the following is used for storage security on SANs? Question 18 options: ACL zoning Which of the following is true of the SAS model? Question 17 options: You are responsible for software licensing. The software is managed by the cloud provider. You can manage your applications. obfuscation when an account is frozen after several failed log-in attempts It joins two LANS. Orchestrator Ansible You have to keep track of any patches and upgrades. When does the server resort to a swap file? Question 16 options: when CPU usage is full when storage usage is full when network usage is full What is thick provisioning? Question 15 options: using all of the storage allocated in an account creating more VMs using cloud storage only as needed A cloud platform consists of what individual components? Question 14 options: public keys and private keys symmetric and asymmetric cryptographic infrastructures on-demand applications, scalable storage, and automation In order to outline priorities for traffic in the event of congestion, what can be created to mitigate? Question 13 options: QOS increase bandwidth increase CPU resources What are the different levels of RAID? Question 12 options: RAID 3, RAID 5, RAID 7, RAID 9 RAID 0, RAID 1, RAID 5, RAID 6 RAID 0, RAID 1, RAID 5, RAID 7 RAID 1, RAID 2, RAID 3, RAID 4, RAID 5 jitter data packets and CRC checking algorithms operating at full capacity in an SaaS when RAM usage is full the use of artificial intelligence to further simplify tasks hot site lack of internet connectivity Which of the following technologies can be used to maintain automation in cloud? (choose two) Question 11 options: Puppet Chef Onguard What are cloud use patterns? Question 10 options: the monitoring and analysis of traffic flows scaling up resources during peak demand the transfer of data from one cloud provider to another What is the purpose of a cloud workflow application? Question 9 options: It deals with cloud integration issues. It addresses resource contention. It examines connectivity issues. Which of the following can cause a cloud synchronization issue? Question 8 options: network bottlenecks corrupt files different time zones During failure, which of the following sites provides the shortest RTO (recovery time objective)? Question 7 options: cold site It oversees the overall processes from beginning to end. DR Python It replaces the existing version of a software application. It allows for the creation of VMs. warm site hybrid site What does a version update do? Question 6 options: It keeps software code locked from accidental modification. It creates an iteration of document revisions from beginning to end. It enables the blockchain process. What is a snapshot? Question 5 options: It recreates the master image of a hard drive. It creates a second set of original data. It shows the existing state of a virtual machine. What is the purpose of a hypervisor? Question 4 options: It establishes the connection from the client to the server. It encapsulates a data packet inside another one. It provides authentication. What are two types of cloud backup methods? Question 3 options: tape and hard drive USB and Flash Azure and AWS What is cloud orchestration? Question 2 options: creating new user accounts creating new permissions granting access to certain resources snapshot and clone It shows the state of a cloud deployment at a certain time. What is the purpose of automation and orchestration? Question 1 options: to transmit data more securely to provide a means for data backup to allow you to apply patches to a VM to allow for the recording and auditing of all events using APIs to automate routine processes