AWS_Cloud_Practitioner_Questions_August_2022/2023

What AWS Cloud benefit eliminates the need for users to try estimating future infrastructure usage? A Easy and fast deployment of applications in multiple Regions around the world. B Security of the AWS Cloud C Elasticity of the AWS Cloud D Lower variable costs due to massive economies of scale Which service can be used to trace user activity in an AWS account? A Amazon CloudWatch B AWS Config C AWS CloudTrail D AWS IAM Which actions support the reliability pillar of the AWS Well-Architected Framework? (Select TWO). A Enforce higher security, specifically in regards to designing for failure. B Ensure that backend components include multiple Availability Zone deployments. C Avoid the use of automatic scaling to simplify the cloud architecture. D Enable object versioning within Amazon S3 and replicating data to another AWS Region. E Include an Application Load Balancer to distribute traffic to multiple Amazon EC2 instances in separate Availability zones. Which of the following acts as a virtual firewall at the Amazon EC2 instance level to control traffic for one or more instances? A Access keys. B Virtual private gateways. C Security groups, D Access Control Lists (ACL). Which AWS service used to track, record and audit configuration changes made to AWS resources? A AWS Shield B AWS Config C AWS IAM D Amazon Inspector Which of the following are AWS Cloud security resources? (Select TWO). A Real-time vulnerability scans from Amazon Kinesis. B AWS security solutions in the AWS Marketplace. C OPen-source penetration testing results available in Amazon Cognito. D AWS whitepapers related to security best practices. E Security analyses of README.md files within application repositories stores in AWS CodeCommit. A user needs to launch a new system that will be built using Docker containers. Which AWS services can be used to host the application? (Select TWO). A Amazon Elastic Container Service *Amazon ECS). B AWS Lambda C Amazon Elastic Container Registry (Amazon ECR). D AWS Fargate E Amazon Neptune Which requirement must be met for a member account to be unlinked from an AWS Organizations account? A The linked account must be activity complaint with AWS System and Organization Controls (SOC). B The payer and the linked account must both create AWS Support cases to request that the member account be unlinked from the organization. C The member account must meet the requirements of a standalone account. D The payer account must be used to remove the linked account from the organization. What is a benefit of using Amazon RDS instead of self-managed databases? A It provides key-value storage with single-digit millisecond performance. B It provides complete access to the underlying RDS instance. C It provides high availability through multi-AZ deployments. D It offers unlimited object storage. A company must store critical business data in Amazon S3 with a backup to another AWS Region. How can this be achieved? A Use an Amazon CloudFront Content Delivery Network (CDN) to cache data globally. B Set up Amazon S3 cross-region replication to another AWS Region. C Configure the AWS Backup service to back up the data to another AWS Region. D Take Amazon S3 bucket snapshots and copy that data to another AWS Region. A user is planning to migrate an application workload to the AWS Cloud. Which control becomes the responsibility of AWS once the migration is complete? A Poaching the guest operating system B Maintaining physical and environmental controls C Protching specific applications D Patching specific applications According to security best practices, which action should be performed when creating an AWS account root user? A Store the credentials for the root user using permission boundaries. B Limit the privileges of the root user permission boundaries. C Configure tagging and enforce it on all users. D Configure multi-factor authentication. Which components are required to build a successful site-to-site VPN connection on AWS? (Select TWO). A Internet gateway B NAT gateway C Customer gateway D Transit gateway E Virtual private gateway An architecture design includes Amazon EC2, an Elastic Load Balancer, and Amazon RDS. What is the BEST way to get a monthly cost estimation for this architecture? A Open an AWS Support case, provide the architecture proposal, and ask for a monthly cost estimation. B Collect the published prices of the AWS services and calculate the monthly estimate. C Use the AWS Simple Monthly Calculator to estimate the monthly cost. D Use the AWS Total cost of Ownership (TCO) Calculator to estimate the monthly cost. A user wants to transport data between AWS and an on-premises environment using a private network connection. Which AWS services or features can be used to meet these requirements? A NAT gateway B AWS Direct Connect C Amazon VPC D Internet gateway According to the AWS shared responsibility model, which of the following tasks are AWS responsibilities? (Select TWO). A The physical security of AWS facilities. B Encrypting customer data. C Patching and updating the hypervisor. D Patching operating systems on Amazon EC2 E Defining network firewalls inside the VPC. A company is building a business intelligence solution and wants to use dashboards for reporting purposes. Which AWS service can be used? A Amazon Redshift B Amazon Elasticsearch Service (Amazon ES). C Amazon QuickSight D Amazon Athena Which AWS service offers expanded distributed denial of service (DDoS) attack a protection for AWS resources? A AWS Firewall Manager B AWS Config C Amazon GuardDuty D AWS Shield Advanced How would an AWS customer easily apply common access controls to a large set of users? A Apply an IAM policy to an IAM group. B Apply an IAM to an IAM role. C Apply the same IAM policy to all IAM users with access to the same workload