AWS Services Quiz

Exam A - Topic 1

• A company plans to use an Amazon Snowball Edge device to transfer files to the AWS Cloud. The correct answer is transferring data from the Snowball Edge appliance into Amazon S3.

Exam A - Topic 1 (Question 2)

• A company has deployed applications on Amazon EC2 instances. The company needs to assess application vulnerabilities and must identify infrastructure deployments that do not meet best practices. The correct answer is Amazon Inspector.

Exam A - Topic 1 (Question 3)

• A company has a centralized group of users with large file storage requirements that exceed on-premises space. The company wants to extend file storage, keeping the shared performance benefit. The correct answer is configuring and deploying an AWS Storage Gateway file gateway, connecting each user's workstation to the file gateway.

Exam A - Other Questions (Page 2)

• According to security best practices, an Amazon EC2 instance should NOT have IAM user secret keys and access keys hard-coded directly into the application. Instead, use a role to obtain the necessary privileges for upload.

• Customer responsibility when using Amazon DynamoDB under AWS shared responsibility model, is access to DynamoDB tables.

Exam A - Other Questions (Page 3)

• A perspective which includes foundational capabilities of the AWS Cloud Adoption Framework (CAF) is Governance.

• A company that runs and manages its own Docker environment on Amazon EC2 instances, needs an alternative to manage cluster size, scheduling, etc. is AWS services.

• A company wants to run a NoSQL database on Amazon EC2 instances. The correct answer is to update the guest operating system of the EC2 instances.

Exam A - Other Questions (Page 4)

• AWS services or tools to identify rightsizing opportunities for Amazon EC2 instances include AWS Cost Explorer.

Exam A - Other Questions (Page 5)

• A company wants to manage deployed IT services and govern its infrastructure as code (IaC) templates. The correct answer is AWS Service Catalog.

• An AWS service or tool that helps visualize, understand and manage spending is AWS Cost Explorer.

• A company uses a central data platform to manage multiple data types for customers. To discover, transform, and visualize data, the correct answer is AWS Glue, Amazon Redshift and Amazon QuickSight.

Exam A - Other Questions (Page 6)

• A global company wants to migrate third-party applications to AWS Cloud. The correct answer for assistance is AWS Professional Services.

• An e-learning platform needs to run an application for two months yearly on Amazon EC2 instances. To avoid downtime during this period, use Reserved Instances.

• A developer wants to quickly deploy an application on AWS without manual resource creation. Use AWS Elastic Beanstalk.

Exam A - Other Questions (Page 7)

• A company stores sensitive customer data in an Amazon S3 bucket. To protect from accidental deletion or overwriting, use S3 Versioning.

• An AWS service that manages infrastructure is AWS CodeDeploy.

• An online gaming company needs to choose a purchasing option for Amazon EC2 instances for one year. The correct answer is Reserved Instances.

Exam A - Other Questions (Page 8)

• An AWS service or feature to connect a company's on-premises data center to the AWS cloud is AWS Direct Connect.

• A physical location of AWS global infrastructure is AWS Region.

• A company wants to protect its AWS Cloud information, systems, and assets. The answer is Security.

Exam A - Other Questions (Page 9)

• The purpose of an internet gateway is to allow VPC communication with the internet.

• A company running a monolithic application wants to migrate to AWS and use microservices. The correct answer is to deploy the application to multiple locations.

• A company wants to audit its password and access key rotation details for compliance purposes. The correct answer is IAM credential report.

Exam A - Other Questions (Page 10)

• A company wants to receive a notification when a specific AWS cost threshold is reached. Use AWS Budgets or Cost Explorer.
• An AWS service that answers security-related questions is AWS Artifact.
• Tasks related to customer responsibility in the AWS shared responsibility model include configuring AWS security groups and classifying company assets, but not patching or upgrading Amazon DynamoDB.

Exam A - Other Questions (Page 11)

• Pillars in the AWS Well-Architected Framework are Availability, Reliability, Scalability and design.

• An AWS service for sending text and email messages is Amazon Simple Notification Service (SNS).

• A user needs programmatic access to resources through the AWS CLI or API. The correct answer is Access keys.

Exam A - Other Questions (Page 12)

• A company running simulations on AWS Batch needs to handle thousands of stateless and fault-tolerant simulations that run up to 3 hours each. Use Spot Instances.

• Agility in AWS Cloud computing is about speed of resource implementation, experiment speed, and eliminating waste.

• A company needs to block SQL injection attacks. Use AWS WAF.

Exam A - Other Questions (Page 13)

• A cloud practitioner needs compliance reports before migrating to AWS. The answer is contacting the AWS compliance team, or downloading reports from AWS Artifact, or opening a case with AWS Support.

• An ecommerce company migrates its IT infrastructure to the AWS Cloud. The main cost consideration will be application software license costs.

Exam A - Other Questions (Page 14)

• Setting up AWS IAM on an AWS account involves enabling multi-factor authentication (MFA) for security during login, not directly using account root user access keys for administrative tasks or granting broad access permissions to all employees.

• Elasticity in AWS Cloud is about quickly resizing resources based on changing demands and the pay-as-you-go billing model.

• A service to audit API calls is AWS CloudTrail.

Exam A - Other Questions (Page 15)

• Customer responsibility when using AWS Lambda is managing the code within the function, and not patching operating systems or confirming hardware status.

• A company with 5 TB of data stored in Amazon S3 wants to query occasionally. Use Amazon Athena.

• AWS service used for no cost is AWS Organizations.

Exam A - Other Questions (Page 16)

• An AWS capability for people in cloud adoption is Cloud.

• A company wants to make an upfront commitment for continued use of Amazon EC2 instances. Use Reserved Instances.

• A relational database migration to AWS Cloud should use AWS Wavelength for current geographical proximity.

Exam A - Other Questions (Page 17)

• A company exploring AWS needs to create a cost estimate before infrastructure provision. Use the AWS Pricing Calculator.

• To deliver images and videos globally with minimal latency, the answer is to use Amazon CloudFront.

• Benefits of cloud economics include trading variable costs for fixed costs, increased speed and agility, and lower variable costs versus fixed costs.

Exam A - Other Questions (Page 18)

• A software development framework for defining cloud resources as code is AWS Cloud Development Kit.

• A company needs temporary, limited-privilege credentials for multiple AWS APIs. Use the AWS Security Token Service.

• An AWS service for cloud security posture management is AWS Security Hub.

Exam A - Other Questions (Page 19)

• An AWS service always provided free is IAM.

• A firm migrates a NoSQL database to AWS; they need scaling automatically. The answer is Amazon Aurora or Amazon RDS.

• A company uses DynamoDB. If the goal is related to managing database access permissions, that's the company’s responsibility under shared responsibility.

Exam A - Other Questions (Page 20)

• A company has a test environment and testing doesn't require continuous operation. The best choice is Spot Instances.

• The AWS service to identify and protect sensitive data is Amazon Macie.

• Blocking network traffic to an instance in AWS can be accomplished using security groups or Network ACLs.