Mock 2 PDF

Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) Test taker's answer a Correct r Incorrect = Partial Credit r 1) What is the Amazon ElastiCache service used for? (Choose TWO) a) Provide an in-memory data...

Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) Test taker's answer a Correct r Incorrect = Partial Credit r 1) What is the Amazon ElastiCache service used for? (Choose TWO) a) Provide an in-memory data storage service b) Reduce delivery costs using Edge Locations c) Improve web application performance d) Provide a Chef-compatible cache to speed up application response e) Distribute requests to multiple instances. r 2) Which of the following Cloud Computing deployment models eliminates the need to run and maintain physical data centers? a) IaaS b) PaaS c) Cloud d) On-premises. a 3) Which of the following AWS Support Plans gives you 24/7 access to Cloud Support Engineers via email & phone? (Choose TWO) a) Developer b) Enterprise c) Business d) Standard e) Premium. r 4) Each AWS Region is composed of multiple Availability Zones. Which of the following best describes what an Availability Zone is? a) It is a distinct location within a region that is insulated from failures in other Availability Zones b) It is a data centre designed to be completely isolated from other data centres in the same region c) It is a collection of data centres distributed in multiple countries d) It is a logically isolated network of the AWS Cloud. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 5) How can you increase your application’s fault tolerance while it is being hosted in AWS? a) Deploy the underlying application resources across multiple subnets b) Deploy your application across multiple Availability Zones c) Deploy your application across multiple EC2 instances d) Host your application on one powerful EC2 instance type instead of multiple smaller instances. a 6) Which AWS service can be used to route end users to the nearest AWS Region to reduce latency? a) Amazon Route 53 b) AWS System Manager c) Amazon Cognito d) AWS Cloud9. r 7) For some services, AWS automatically replicates data across multiple Availability Zones to provide fault tolerance in the event of a server failure or Availability Zone outage. Select TWO services that automatically replicate data across Availability Zones. a) Instance Store b) Amazon Route 53 c) DynamoDB d) S3 e) AWS VPN. a 8) You are working as a web app developer. You are currently facing issues in media playback for mobile devices because your media format is not supported. Which of the following AWS services can help you convert your media into another format? a) Amazon Rekognition b) Amazon Elastic Transcoder c) Amazon S3 d) Amazon Pinpoint. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) r 9) Which of the following actions may reduce Amazon EBS costs? (Choose TWO) a) Deleting unnecessary snapshots b) Distributing requests to multiple volumes c) Changing the type of the volume d) Deleting unused buckets e) Using reservations. a 10) How does AWS help customers achieve compliance in the cloud? a) AWS has many common assurance certifications such as ISO 9001 and HIPAA b) AWS applies the most common Cloud security standards, and is responsible for complying with customers' applicable laws and regulations c) Many AWS services are assessed regularly to comply with local laws and regulations d) It's not possible to meet regulatory compliance requirements in the Cloud. a 11) Which of the following are part of the seven design principles for security in the cloud? (Choose TWO) a) use manual monitoring techniques to protect your AWS resources b) Never store sensitive data in the cloud c) Use IAM roles to grant temporary access instead of long-term credentials d) Scale horizontally to protect from failures e) Enable real-time traceability. a 12) AWS provides disaster recovery capability by allowing customers to deploy infrastructure into multiple ___________. a) Transportation devices b) Regions c) Edge locations d) Support plans. a 13) Which pillar of the AWS Well-Architected Framework provides recommendations to help customers select the right compute resources based on workload requirements? a) Reliability b) Operational Excellence c) Performance Efficiency d) Security. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) r 14) What is the benefit of Amazon EBS volumes being automatically replicated within the same availability zone? a) Traceability b) Durability c) Elasticity d) Accessibility. a 15) What factors determine how you are charged when using AWS Lambda? (Choose TWO) a) Number of volumes b) Placement Groups c) Compute time consumed d) Storage consumed e) Number of requests to your functions. r 16) According to the AWS shared responsibility model, what are the controls that customers fully inherit from AWS? (Choose TWO) a) Resource Configuration Management b) Patch Management c) Environmental controls d) Communication controls e) Data centre security controls. a 17) You have developed a web application targeting a global audience. Which of the following will help you achieve the highest redundancy and fault tolerance from an infrastructure perspective? a) Deploy the application in multiple Availability Zones in multiple AWS regions b) Deploy the applications in multiple Availability Zones in a single region c) There is no need to architect for these capabilities in AWS, as AWS is redundant by default d) Deploy the application in a single Availability Zone. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) r 18) A company wants to reduce their overall AWS costs but are unsure what specific services and infrastructure components in the AWS account actually cost. Which options should the company implement to analyze their costs? (Choose TWO) a) Activate cost allocation tags to categorise and track their costs b) Use Amazon Aurora to estimate and plan their AWS costs c) Use the AWS Simple Monthly Calculator to analyse the costs applied to their account d) Use CloudWatch to create billing alerts that notify them when the usage of their services exceeds thresholds that they define e) Use the AWS Price List API. a 19) Which AWS service allows you to build a data warehouse in the cloud? a) Amazon Redshift b) AWS Shield c) Amazon EFS d) Amazon RDS. a 20) What is the AWS S3 storage class that has the lowest availability rating? a) Standard b) S3 One Zone-IA (Infrequent Access) c) Glacier d) S3 Standard-IA (Infrequent Access). a 21) You have multiple standalone AWS accounts and you want to decrease your AWS monthly charges. What should you do? a) Try to remove unnecessary AWS accounts b) Enable AWS tiered-pricing before provisioning resources c) Track the AWS charges that are incurred by the member accounts d) Add the accounts to an AWS Organisation and use Consolidated Billing. a 22) Who is responsible for scaling a DynamoDB database in the AWS Shared Responsibility Model? a) AWS b) Your development team c) Your internal DevOps team d) Your security team. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 23) Which of the following services enables you to easily generate and use your own encryption keys in the AWS Cloud? a) AWS CloudHSM b) AWS WAF c) AWS Certificate Manager d) AWS Shield. r 24) Which of the following is NOT a benefit of using AWS Lambda? a) AWS Lambda runs code without provisioning or managing servers b) AWS Lambda can be called directly from any mobile app c) AWS Lambda provides resizable compute capacity in the cloud d) There is no charge when your AWS Lambda code is not running. r 25) What are the benefits of the AWS Organizations service? (Choose TWO) a) Consolidate billing across multiple AWS accounts b) Help organisations achieve their desired business outcomes with AWS c) Manage your organisation's payment methods d) Help organisations design and maintain an accelerated path to successful cloud adoption e) Control access to AWS services. a 26) Which of the following services is an AWS repository management system that allows for storing, versioning, and managing your application code? a) AWS CodeCommit b) AWS X-Ray c) AWS CodePipeline d) Amazon Inspector. r 27) You are planning to launch an advertising campaign over the coming weekend to promote a new digital product. It is expected that there will be heavy spikes in load during the campaign period, and you can’t afford any downtime. You need additional compute resources to handle the additional load. What is the most cost-effective EC2 instance purchasing option for this job? a) On-Demand Instances b) Reserved Instances c) Savings Plans d) Spot instances. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 28) You have just finished writing your application code. Which service can be used to automate the deployment and scaling of your application? a) Amazon Simple Storage service b) Amazon Elastic File System c) AWS CodeCommit d) AWS Elastic Beanstalk. a 29) Which of the following resources can an AWS customer use to learn more about prohibited uses of the services offered by AWS? a) AWS Acceptable Use Policy b) AWS CloudTrail c) AWS Artifact d) AWS Budgets. a 30) Where can AWS customers find their historical billing information in the AWS console? a) Billing and Cost Management console b) AWS Simple Monthly Calculator c) AWS TCO d) AWS Budgets. a 31) Which of the following requires an access key ID and a secret access key to get long-lived programmatic access to AWS resources? (Choose TWO) a) IAM user b) TAM c) AWS account root user d) IAM role e) IAM group. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 32) What are the main differences between an IAM user and an IAM role in AWS? (Choose TWO) a) A role is uniquely associated with only one person, however an IAM user is intended to be assumable by anyone who needs it b) An IAM user is uniquely associated with only one person, however a role is intended to be assumable by anyone who needs it c) An IAM user has temporary credentials associated with it, however a role has permanent credentials associated with it d) IAM users are more cost effective than IAM roles e) An IAM user has permanent credentials associated with it, however a role has temporary credentials associated with it. r 33) Which of the following factors affect Amazon CloudFront cost? (Choose TWO) a) Number of Requests b) Number of Volumes c) Storage Class d) Instance type e) Traffic Distribution. a 34) Which of the following services is used when encrypting EBS volumes? a) AWS KMS b) AWS WAF c) Amazon Macie d) Amazon GaardDuty. a 35) You have been tasked with auditing the security of your VPC. As part of this process, you need to start by analyzing what inbound and outbound traffic is allowed on your EC2 instances. What two parts of the VPC do you need to check to accomplish this task? a) Security Groups and Internet Gateways b) NACLs and Subnets c) NACLs and Traffic Manager d) Security Groups and NACLs. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 36) Which of the following is the responsibility of AWS according to the AWS Shared Responsibility Model? a) Securing access to AWS resources b) Performing auditing tasks c) Securing regions and edge locations d) Monitoring AWS resources usage. r 37) A company is running a large web application that needs to always be available. The application tends to slow down when CPU usage is greater than 60%. How can they track when CPU usage goes above 60% for any of the EC2 Instances in their account? a) Set the AWS Config CPU threshold to 60% to receive a notification when EC2 usage exceeds that value b) Use CloudWatch Alarms to monitor the CPU and alert when the CPU usage is >= 60% c) Use SNS to monitor the utilisation of the server d) Use CloudFront to monitor the CPU usage. r 38) Amazon EC2 instances are conceptually very similar to traditional servers. However, using Amazon EC2 server instances in the same manner as traditional hardware server instances is only a starting point. What are the main benefits of using the AWS EC2 instances instead of traditional servers? (Choose TWO) a) Provides automatic data backups b) Can be scaled manually in a shorter period of time c) Prevents unauthorised users from getting into your network d) Improves Fault-Tolerance e) Provides your business with a seamless remote accessibility. a 39) Which statement is true regarding AWS pricing? (Choose TWO) a) For some services, you have to pay a startup fee in order to get the service running b) With AWS, you do not have to pay an upfront fee c) You only pay for the individual services that you need with no long term contracts d) You are responsible for buying a license for any software not developed by AWS e) There are no reservations on AWS, you only pay for what you use. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 40) What AWS service allows you to buy third-party software solutions and services that run on AWS resources? a) AWS Marketplace b) Amazon DevPay c) Resource Groups d) AWS Application Discovery service. a 41) What should you consider when storing data in Amazon Glacier? a) Amazon Glacier does not provide immediate retrieval of data b) Glacier can only be used to store frequently accessed data and data archives c) Attach Glacier to an EC2 instance to be able to store data d) Amazon Glacier only accepts data in a compressed format. a 42) What is the maximum amount of data that can be stored in S3 in a single AWS account? a) 10 Exabytes b) Virtually unlimited storage c) 100 Petabytes d) 5 Terabytes. r 43) Which statement is true in relation to security in AWS? a) Server side encryption is the responsibility of AWS b) AWS customers are responsible for patching any database software running on Amazon EC2 c) AWS manages everything related to EC2 operating systems d) AWS is responsible for the security of your application. a 44) What is the recommended storage option when hosting an often-changing database on an Amazon EC2 instance? a) Amazon EBS b) Amazon DynamoDB c) You can't run a database inside an Amazon EC2 instance d) Amazon RDS. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 45) What is the main benefit of attaching security groups to an Amazon RDS instance? a) Controls what IP address ranges can connect to your database instance b) Manages user access and encryption keys c) Distributes incoming traffic across multiple targets d) Deploys SSL/TLS certificates for use with your database instance. r 46) Which of the following makes it easier for you to categorize, manage and filter your resources? a) AWS Tagging b) Amazon CloudWatch c) AWS Service Catalogue d) AWS Directory Service. r 47) Which of the following procedures can reduce latency when your end users are retrieving data? (Choose TWO) a) Store media assets on an additional EBS volume and increase the capacity of your server b) Replicate media assets to at least two availability zones c) Store media assets in S3 and use CloudFront to distribute these assets d) Reduce the size of media assets using the Amazon Elastic Transcoder e) Store media assets in the region closest to your end users. a 48) Which of the following is a benefit of the "Loose Coupling" architecture principle? a) It allows for Cross-Region Replication b) It eliminates the need for change management c) It allows individual application components or services to be modified without affecting other components d) It helps AWS customers reduce Privileged Access to AWS resources. a 49) Engineers are wasting a lot of time and effort managing batch computing software in traditional data centers. Which of the following AWS services allows them to easily run thousands of batch computing jobs? a) Lambda@Edge b) Amazon EC2 c) AWS Batch d) AWS Fargate. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) r 50) Which database service should you use if your application and data schema require "joins" or complex transactions? a) AWS Outposts b) Amazon RDS c) Amazon DynamoDB d) Amazon DocumentDB. a 51) What can you access by visiting the URL: http://status.aws.amazon.com? a) AWS Service Health Dashboard b) AWS Billing Dashboard c) AWS Cost Dashboard d) AWS Security Dashboard. r 52) A company needs to host a big data application on AWS using EC2 instances. Which of the following AWS Storage services would they choose to automatically get high throughput to multiple compute nodes? a) S3 b) Amazon Elastic File System c) Amazon Elastic Block Store d) AWS Storage Gateway. a 53) What are some of the benefits of using On-Demand EC2 instances? (Choose TWO) a) You can increase or decrease your compute capacity depending on the demand of your application b) They provide free capacity when testing your new applications c) They remove the need to buy "safety net" capacity to handle period traffic spikes d) They only require 1-2 days for setup and configuration e) They are cheaper than all other EC2 options. a 54) Which of the following affect Amazon EBS cost? (Choose TWO) a) Number of cores b) Volume types c) Elastic IP's d) Snapshots e) RAM. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 55) Which of the following security resources are available to any user for free? (Choose TWO) a) AWS Security Blog b) AWS re:Invent Live Sessions c) AWS Bulletins d) AWS TAM e) AWS Classroom Training. a 56) Which of the following AWS support plans provides access to only the seven core AWS Trusted Advisor checks? a) Developer & Enterprise Support b) Basic & Developer Support c) Developer & Business Support d) Business & Enterprise Support. a 57) The elasticity of the AWS Cloud enables customers to save costs when compared to traditional hosting providers. What can AWS customers do to benefit from the elasticity of the AWS Cloud? (Choose TWO) a) Use Amazon EC2 Auto Scaling b) Use Serverless Computing whenever possible c) Deploy your resources across multiple Availability Zones d) Use Elastic Load Balancing e) Deploy your resources in another region. r 58) You are working as a site reliability engineer (SRE) in an AWS environment, which of the following services helps monitor your applications? a) Amazon CloudHSM b) Amazon Elastic MapReduce c) Amazon CloudWatch d) Amazon CloudSearch. a 59) Which of the following is a benefit of running an application in multiple Availability Zones? a) Allows you to exceed AWS service limits b) Increase the availability of your application c) Increase available compute capacity d) Reduces application response time between servers and global users. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 60) A key practice when designing solutions on AWS is to minimize dependencies between components so that the failure of a single component does not impact other components. What is this practice called? a) Scalable coupling b) Elastic coupling c) Loose coupling d) Scalable coupling. a 61) When running a workload in AWS, the customer is NOT responsible for: (Select TWO) a) Auditing and Regulatory compliance b) Reserving capacity c) Running penetration tests d) Infrastructure security e) Data centre operations. a 62) A company has a web application that is hosted on a single EC2 instance and is approaching 100 percent CPU Utilization during peak loads. Rather than scaling the server vertically, the company has decided to deploy three Amazon EC2 instances in parallel and to distribute traffic across the three servers. What AWS Service should the company use to distribute the traffic evenly? a) Transit VPC b) AWS Global Accelerator c) AWS application load balancer d) Amazon CloudFront. a 63) When granting permissions to applications running Amazon EC2 instances, which of the following is considered best practice? a) Generate new IAM access keys every time you delegate permissions b) Do nothing; Applications that run on Amazon EC2 instances do not need permission to interact with other AWS services or resources c) Use temporary security credentials (IAM roles) instead of long-term access keys d) Store the required AWS credentials directly within the application code. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) a 64) Which AWS Service is used to manage the keys used to encrypt customer data? a) AWS KMS b) AWS Config c) Amazon Macie d) Multi-Factor Authentication (MFA). a 65) What is the AWS IAM feature that provides an additional layer of security on top of username and password authentication? a) Access keys b) AWS Config c) SDK d) MFA. a 66) An administrator is running a large deployment of AWS resources that are spread across several AWS Regions. They would like to keep track of configuration changes on all the resources and maintain a configuration inventory. What is the best service they can use? a) AWS CloudFormation b) Stacks and Templates c) AWS Backup d) AWS Config.. a 67) Whilst working on a collaborative project, an administrator would like to record the initial configuration and several authorized changes that engineers make to the route table of a VPC. What is the best method to achieve this? a) Use of AWS Config b) Use of VPC Flow Logs c) Use of AWS CloudTrail d) Use of an AWS Lambda function that is triggered to save a log file to an S3 bucket each time configuration changes are made.. Thembelihle Ngobese JOH25 Practice Mock 2 (v1) Finished 4/11/2024 5:48 AM / Scored 48/70 (69%) r 68) Which of the following tools can be used to create an estimated cost for a new solution to be deployed on AWS Cloud infrastructure? a) AWS Cost and Usage Report b) AWS Budgets c) AWS Cost Explorer d) AWS Pricing Calculator.. r 69) Your Security Team has some security concerns about the application data stored on S3 The team requires you to introduce two improvements: (i) add “encryption at rest” and (ii) give them the possibility to monitor who has accessed the data and when the data have been accessed. Which of the following AWS solution would you adopt to satisfy the requirement a) AWS Certificate Manager with CloudTrail. b) Server-Side Encryption managed by S3 (SSE-S3) with CloudTrail. c) Server-Side Encryption managed by customer (SSE-C) with CloudTrail. d) Server-Side Encryption managed by KMS (SSE-KMS) with CloudTrail.. a 70) Which of the following services helps provide a connection from on-premises infrastructure to resources hosted in the AWS Cloud? Choose 2 answers from the options given below. a) AWS VPC b) AWS VPN c) AWS Direct Connect d) AWS Subnets..