AWS Certified Cloud Practitioner Practice Exam

When using Amazon Glacier's standard retrieval option, which of the following statements is correct? - correct asnwer Amazon Glacier takes 3-5 hours to retrieve data. Which AWS disaster recovery method has the lowest RTO and RPO, but the highest cost required to maintain resources? - correct asnwer Multi-site Auto Scaling provides which of the following benefits for your application? - correct asnwer Your application gains better fault tolerance. In AWS, when is Developer-level tier technical support available? - correct asnwer Monday - Friday 8am to 6pm in the customer time zone Which of the following describes AWS Budgets? - correct asnwer A service that allows you to set specific spending and usage limits for AWS services What is a benefit of the AWS design concept "decoupling"? - correct asnwer It minimizes the interdependency of applications. You have detected a billing issue within your AWS account and want to create a billing support case. Which of the following should you do? - correct asnwer Sign in to the AWS Support Center and create a billing case What AWS cloud characteristic makes a resource almost immediately available to allocate when and where you need it? - correct asnwer on-demand resourcing Amazon _____ monitors your AWS resources and applications that you run in AWS in real time, providing you the ability to collect and track metrics as well as setup alarms to send notifications based on rules you define. - correct asnwer CloudWatch When using __________, you simply upload your application code to the Platform as a Service, and the service handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring. - correct asnwer AWS Elastic Beanstalk Complete the three definitions:___________ is the process of defining an identity and the verification of that identity___________ determines what resources an identity can access within a system once it has been authenticated.___________ is the method and process of how access is granted to a secure resource. - correct asnwer Authentication; Authorization; Access Control ___________ are predefined, out-of-the-box policies that grant permissions for common use cases to eliminate the need to determine what permissions are needed. - correct asnwer AWS managed policies Which storage option is hosted by Amazon EC2 instances themselves? - correct asnwer EC2 Instance Store Volumes Which of the following best defines the AWS Key Management Service? - correct asnwer A managed service that makes it easy for you to create and control the encryption keys used to encrypt your data Important functions of your application are unavailable. You cannot work around the problem, and your business is significantly impacted. You decide that you need support from AWS. Which of the following severity levels do you think would be an appropriate choice for this issue? - correct asnwer Production system down What is a benefit of using identity federation? - correct asnwer It minimizes the amount of administration required within IAM. What AWS service could be used for assessment of security compliance and active auditing of EC2 instances on a regular basis? - correct asnwer Amazon Inspector You have been asked to perform some penetration testing on your company's AWS infrastructure. However, you are not sure who is responsible for this. Which statement describing the AWS policy regarding penetration testing is correct? - correct asnwer Penetration testing is possible without AWS approval depending on the services in use. Your manager asks you to change your company's AWS Support level to include use-case guidance (what AWS products, features, and services to use to best support your specific needs) and third-party software support. Which support plan is most cost-effective option offering this service? - correct asnwer Business-level support plan Where can a new user find out which AWS compute resources are available within the free tier? - correct asnwer AWS Services product pages Which of the following statements is true of automation in RDS? - correct asnwer Amazon RDS automatically performs backups and patches the database software that powers your DB Instance. _________ is a fast, reliable, scalable, fully managed message queuing service. - correct asnwer Amazon SQS What does Amazon CloudFormation provide? - correct asnwer Templates to deploy AWS resources What is a "rule" in the context of Amazon Inspector? - correct asnwer A security check that the AWS agent performs during an assessment run When deploying a new environment within AWS, what does "think parallel" mean? - correct asnwer Maintain the prior environment until there is confirmation of successful deployment. You have a general development question, and you decide that you need some support from AWS. Which of the following severity levels do you think would be an appropriate choice for this issue? - correct asnwer General Guidance A user is uploading a backup of data to S3 Glacier as part of a disaster recovery plan. The data stored in S3 Glacier is part of a larger data recovery plan that involves other AWS services. There is a relatively small set of data (100 MB) that needs to be restored immediately when a disaster recovery plan is executed, and the organization is planning a recovery time objective (RTO) of 1 hour. Assuming the data size meets the requirements for any of the given retrieval options below, which S3 Glacier data retrieval option would you plan in the event of a disaster? - correct asnwer Use Expedited Retrievals with Provisioned Capacity What is AWS Direct Connect? - correct asnwer AWS Direct Connect is a network service that provides an alternative to using the Internet to utilize AWS cloud services. Which choice below accurately describes the 'warm standby' disaster recovery method? - correct asnwer A duplicate version of only your business-critical systems that is always running, in case you need to divert your workloads to them in the event of a disaster. Network Access Control Lists (NACLs) are _______. - correct asnwer stateless AWS WAF requires which other AWS service to deploy a security solution? - correct asnwer Amazon CloudFront What is a security benefit of the AWS cloud? - correct asnwer AWS monitors facilities and hardware When you launch an instance using Amazon EC2, you must specify a geographic region in which to launch the instance, and a corresponding ____, which is an isolated location in that region where the physical hardware on which the instance will be launched is located. - correct asnwer availability zone Which Amazon EC2 pricing model offers a savings of up to 90%? - correct asnwer Spot Instances Are generators and cooling equipment shared across Availability Zones? - correct asnwer No Which statement best describes the AWS Snowball as a data migration service? - correct asnwer Data is transferred via a physical appliance to AWS. Which of the following tasks can AWS Config help you accomplish? - correct asnwer Manage and maintain compliance Which description of a Recovery Time Objective (RTO) is correct? - correct asnwer It is the maximum acceptable amount of time a system can be offline. When processing workloads on specific Amazon EC2 instances that require a higher level of durability, and the ability for an instance to quickly retrieve the data, the recommended option is to use ______________. - correct asnwer Amazon EBS volumes Which service provides durable storage volumes you can attach to a running instance, and which persist beyond the life of the instance? - correct asnwer Amazon Elastic Block Store (EBS) Why does AWS recommend using stateless cloud applications, when possible? - correct asnwer Stateless applications enable more scalability and resilience in each application layer. When scaling ________ you are altering the power of an instance, perhaps using one with greater CPU power to scale. - correct asnwer up and