Practice Test 2: AWS Certified Cloud Practitioner
AWS Certified Cloud Practitioner
Question 1 Correct
Which service can be used to assign a policy to a group?
AWS Shield
AWS STS
Amazon Cognito
Your answer is correct
AWS IAM
Overall explanation
IAM is used to securely control individual and group access to AWS resources. Groups are collections of users and have policies attached to them.
You can use IAM to attach a policy to a group
CORRECT: "AWS IAM" is the correct answer.
INCORRECT: "Amazon Cognito" is incorrect. Amazon Cognito is used for authentication using mobile apps
INCORRECT: "AWS STS" is incorrect. The AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-
privilege credentials for IAM users or for users that you authenticate (federated users)
INCORRECT: "AWS Shield" is incorrect. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards
applications running on AWS.
References:
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-identity-and-access-management/
Domain
AWS Security, Identity, & Compliance
Question 2Correct
When a company moves an on-premises, internet-facing website to the AWS Cloud, what benefits does it obtain? (Select TWO.)
The website shows up with higher priority in internet search engines.
AWS automatically provides the company with the lowest-cost pricing model.
Your selection is correct
,Website capacity can expand or contract as website traffic changes.
Your selection is correct
The company can take advantage of the pay-as-you-go pricing model.
Data that is stored in the AWS Cloud is automatically encrypted.
Overall explanation
Website capacity expanding and contracting is a sign of elasticity, and this is one of the most popular benefits of moving to the cloud. This is
defined as the ability to acquire resources as you need them and release resources when you no longer need them.
Also, when you move to the cloud you do not pay upfront for your resources as standard and move to a OPEX model (operational expenditure.)
CORRECT: "Website capacity can expand or contract as website traffic changes” is the correct answer (as explained above.)
CORRECT: "The company can take advantage of the pay-as-you-go pricing model" is also a correct answer (as explained above.)
INCORRECT: "Data that is stored in the AWS Cloud is automatically encrypted” is incorrect as this sits on the customer side of the AWS Shared
responsibility model and is therefore not enabled automatically.
INCORRECT: "AWS automatically provides the company with the lowest-cost pricing model” is incorrect. This is simply not true, as the price
varies widely depending on many different features.
INCORRECT: "The website shows up with higher priority in internet search engines” is incorrect. Search Engine Optimization (SEO) sits entirely
outside of the realm of AWS, and you do not gain any SEO benefits from moving to the cloud.
References:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-cloud-computing-concepts/
Domain
AWS Cloud Benefits
Question 3Correct
Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceed a certain threshold?
Your answer is correct
AWS Budgets
AWS Cost and Usage report
AWS Cost Explorer
AWS CloudTrail
Overall explanation
AWS Budgets gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your
budgeted amount.
,You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold
you define. Reservation alerts are supported for Amazon EC2, Amazon RDS, Amazon Redshift, Amazon ElastiCache, and Amazon Elasticsearch
reservations.
CORRECT: "AWS Budgets" is the correct answer.
INCORRECT: "AWS Cost Explorer" is incorrect. Cost Explorer lets you visualize and understand your costs but AWS Budgets should be used for
alerting based on forecast or actual usage.
INCORRECT: "AWS Cost and Usage report" is incorrect. This is another tool that can be used to view usage for AWS services by category but AWS
Budgets should be used for alerting based on forecast or actual usage.
INCORRECT: "AWS CloudTrail" is incorrect. CloudTrail is used for logging API activity, it will not alert you based on usage of AWS services.
References:
https://aws.amazon.com/aws-cost-management/aws-budgets/
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-billing-and-pricing/
Domain
AWS Cost Management
Question 4Correct
Which of the following is an architectural best practice recommended by AWS?
Think servers, not services
Design for success
Your answer is correct
Design for failure
Use manual operational processes
Overall explanation
It is recommended that you design for failure. This means always considering what would happen if a component of an application fails and
ensuring there is resilience in the architecture.
CORRECT: "Design for failure" is the correct answer.
INCORRECT: "Design for success" is incorrect. Design for success sounds good, but this is not an architectural best practice. As much as we want
our applications to be successful, we should always be cognizant of the potential failures that might occur and ensure we are prepared for them.
INCORRECT: "Think servers, not services" is incorrect. AWS do not recommend that you “think servers, not services”. What they do recommend is
that you “think services, not servers”. This means that you should consider using managed services and serverless services rather than just using
Amazon EC2.
, INCORRECT: "Use manual operational processes" is incorrect. You should not use manual operational processes; this is not an architectural best
practice. You should automate as much as possible in the cloud.
References:
https://aws.amazon.com/architecture/well-architected/
Save time with our AWS cheat sheets:
https://digitalcloud.training/architecting-for-the-cloud/
Domain
AWS Cloud Architecture & Design
Question 5Incorrect
Which team is available to support AWS customers on an Enterprise support plan with account issues?
AWS Billing and Accounts
AWS Technical Support
Your answer is incorrect
AWS Technical Account Manager
Correct answer
AWS Concierge
Overall explanation
Included as part of the Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize in working with
enterprise accounts.
CORRECT: "AWS Concierge" is the correct answer.
INCORRECT: "AWS Technical Support" is incorrect as this is not the name of the team.
INCORRECT: "AWS Billing and Accounts" is incorrect as the Support Concierge Team fulfil this role.
INCORRECT: "AWS Technical Account Manager" is incorrect. The Technical Account Manager provides expert monitoring and optimization for
your environment and coordinates access to other programs and experts.
References:
https://aws.amazon.com/premiumsupport/features/
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-billing-and-pricing/
Domain
AWS Support
Question 6Correct
As part of its cloud architecture, a company wants its workloads to be resilient, perform correctly, consistently, and recover from errors in a
timely manner.
AWS Certified Cloud Practitioner
Question 1 Correct
Which service can be used to assign a policy to a group?
AWS Shield
AWS STS
Amazon Cognito
Your answer is correct
AWS IAM
Overall explanation
IAM is used to securely control individual and group access to AWS resources. Groups are collections of users and have policies attached to them.
You can use IAM to attach a policy to a group
CORRECT: "AWS IAM" is the correct answer.
INCORRECT: "Amazon Cognito" is incorrect. Amazon Cognito is used for authentication using mobile apps
INCORRECT: "AWS STS" is incorrect. The AWS Security Token Service (STS) is a web service that enables you to request temporary, limited-
privilege credentials for IAM users or for users that you authenticate (federated users)
INCORRECT: "AWS Shield" is incorrect. AWS Shield is a managed Distributed Denial of Service (DDoS) protection service that safeguards
applications running on AWS.
References:
https://docs.aws.amazon.com/IAM/latest/UserGuide/introduction.html
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-identity-and-access-management/
Domain
AWS Security, Identity, & Compliance
Question 2Correct
When a company moves an on-premises, internet-facing website to the AWS Cloud, what benefits does it obtain? (Select TWO.)
The website shows up with higher priority in internet search engines.
AWS automatically provides the company with the lowest-cost pricing model.
Your selection is correct
,Website capacity can expand or contract as website traffic changes.
Your selection is correct
The company can take advantage of the pay-as-you-go pricing model.
Data that is stored in the AWS Cloud is automatically encrypted.
Overall explanation
Website capacity expanding and contracting is a sign of elasticity, and this is one of the most popular benefits of moving to the cloud. This is
defined as the ability to acquire resources as you need them and release resources when you no longer need them.
Also, when you move to the cloud you do not pay upfront for your resources as standard and move to a OPEX model (operational expenditure.)
CORRECT: "Website capacity can expand or contract as website traffic changes” is the correct answer (as explained above.)
CORRECT: "The company can take advantage of the pay-as-you-go pricing model" is also a correct answer (as explained above.)
INCORRECT: "Data that is stored in the AWS Cloud is automatically encrypted” is incorrect as this sits on the customer side of the AWS Shared
responsibility model and is therefore not enabled automatically.
INCORRECT: "AWS automatically provides the company with the lowest-cost pricing model” is incorrect. This is simply not true, as the price
varies widely depending on many different features.
INCORRECT: "The website shows up with higher priority in internet search engines” is incorrect. Search Engine Optimization (SEO) sits entirely
outside of the realm of AWS, and you do not gain any SEO benefits from moving to the cloud.
References:
https://docs.aws.amazon.com/whitepapers/latest/aws-overview/six-advantages-of-cloud-computing.html
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-cloud-computing-concepts/
Domain
AWS Cloud Benefits
Question 3Correct
Which tool can be used to create alerts when the actual or forecasted cost of AWS services exceed a certain threshold?
Your answer is correct
AWS Budgets
AWS Cost and Usage report
AWS Cost Explorer
AWS CloudTrail
Overall explanation
AWS Budgets gives you the ability to set custom budgets that alert you when your costs or usage exceed (or are forecasted to exceed) your
budgeted amount.
,You can also use AWS Budgets to set reservation utilization or coverage targets and receive alerts when your utilization drops below the threshold
you define. Reservation alerts are supported for Amazon EC2, Amazon RDS, Amazon Redshift, Amazon ElastiCache, and Amazon Elasticsearch
reservations.
CORRECT: "AWS Budgets" is the correct answer.
INCORRECT: "AWS Cost Explorer" is incorrect. Cost Explorer lets you visualize and understand your costs but AWS Budgets should be used for
alerting based on forecast or actual usage.
INCORRECT: "AWS Cost and Usage report" is incorrect. This is another tool that can be used to view usage for AWS services by category but AWS
Budgets should be used for alerting based on forecast or actual usage.
INCORRECT: "AWS CloudTrail" is incorrect. CloudTrail is used for logging API activity, it will not alert you based on usage of AWS services.
References:
https://aws.amazon.com/aws-cost-management/aws-budgets/
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-billing-and-pricing/
Domain
AWS Cost Management
Question 4Correct
Which of the following is an architectural best practice recommended by AWS?
Think servers, not services
Design for success
Your answer is correct
Design for failure
Use manual operational processes
Overall explanation
It is recommended that you design for failure. This means always considering what would happen if a component of an application fails and
ensuring there is resilience in the architecture.
CORRECT: "Design for failure" is the correct answer.
INCORRECT: "Design for success" is incorrect. Design for success sounds good, but this is not an architectural best practice. As much as we want
our applications to be successful, we should always be cognizant of the potential failures that might occur and ensure we are prepared for them.
INCORRECT: "Think servers, not services" is incorrect. AWS do not recommend that you “think servers, not services”. What they do recommend is
that you “think services, not servers”. This means that you should consider using managed services and serverless services rather than just using
Amazon EC2.
, INCORRECT: "Use manual operational processes" is incorrect. You should not use manual operational processes; this is not an architectural best
practice. You should automate as much as possible in the cloud.
References:
https://aws.amazon.com/architecture/well-architected/
Save time with our AWS cheat sheets:
https://digitalcloud.training/architecting-for-the-cloud/
Domain
AWS Cloud Architecture & Design
Question 5Incorrect
Which team is available to support AWS customers on an Enterprise support plan with account issues?
AWS Billing and Accounts
AWS Technical Support
Your answer is incorrect
AWS Technical Account Manager
Correct answer
AWS Concierge
Overall explanation
Included as part of the Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize in working with
enterprise accounts.
CORRECT: "AWS Concierge" is the correct answer.
INCORRECT: "AWS Technical Support" is incorrect as this is not the name of the team.
INCORRECT: "AWS Billing and Accounts" is incorrect as the Support Concierge Team fulfil this role.
INCORRECT: "AWS Technical Account Manager" is incorrect. The Technical Account Manager provides expert monitoring and optimization for
your environment and coordinates access to other programs and experts.
References:
https://aws.amazon.com/premiumsupport/features/
Save time with our AWS cheat sheets:
https://digitalcloud.training/aws-billing-and-pricing/
Domain
AWS Support
Question 6Correct
As part of its cloud architecture, a company wants its workloads to be resilient, perform correctly, consistently, and recover from errors in a
timely manner.
