AWS Certified Cloud Practitioner Practice Exam Test Set - 8.pdf

Answer Sheet Q1) An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products?  Network Access Control Lists  Amazon RDS  AWS Identity and Access Management Explanation:-AWS Identity and...

Answer Sheet Q1) An organization runs many systems and uses many AWS products. Which of the following services enables them to control how each developer interacts with these products?  Network Access Control Lists  Amazon RDS  AWS Identity and Access Management Explanation:-AWS Identity and Access Management (IAM) is a web service for securely controlling access to AWS services. With IAM, you can centrally manage users, security credentials such as access keys, and permissions that control which AWS resources users and applications can access.  Amazon EMR Q2) Which of the following is one of the benefits of AWS security?  Starts automatically once you upload your data  Increases Capital expenditure (CapEx)  Free for AWS premium members  Scales quickly with your AWS usage Explanation:-Security scales with your AWS Cloud usage. No matter the size of your business, the AWS infrastructure is designed to keep your data safe. Q3) Which of the following helps a customer delve deep into the Amazon EC2 billing activity for the past month?  AWS TCO  AWS Budgets  AWS Cost & Usage Reports Explanation:-The AWS Cost & Usage Report is your one-stop shop for accessing the most detailed information available about your AWS costs and usage.The AWS Cost & Usage Report lists AWS usage for each service category used by an account and its IAM users in hourly or daily line items, as well as any tags that you have activated for cost allocation purposes.  AWS Systems Manager Q4) You have set up consolidated billing for several AWS accounts. One of the accounts has purchased a number of reserved instances for 3 years. Which of the following is true regarding this scenario?  The Reserved Instance discounts can only be shared with the master account  All accounts can receive the hourly cost benefit of the Reserved Instances Explanation:-For billing purposes, the consolidated billing feature of AWS Organizations treats all the accounts in the organization as one account. This means that all accounts in the organization can receive the hourly cost benefit of Reserved Instances that are purchased by any other account. For example, Suppose that Fiona and John each have an account in an organization. Fiona has five Reserved Instances of the same type, and John has none. During one particular hour, Fiona uses three instances and John uses six, for a total of nine instances on the organization's consolidated bill. AWS bills five instances as Reserved Instances, and the remaining four instances as On-demand instances.  There are no cost benefits from using Consolidated billing; It is for informational purposes only  The purchased instances will have better performance than On-demand instances Q5) How can you view the distribution of AWS spending in one of your AWS accounts?  By contacting the AWS Finance team  By using Amazon VPC console  By using AWS Cost Explorer Explanation:-AWS Cost Explorer is a free tool that you can use to view your costs and usage. You can view data up to the last 13 months, forecast how much you are likely to spend for the next three months, and get recommendations for what Reserved Instances to purchase. You can use AWS Cost Explorer to see patterns in how much you spend on AWS resources over time, identify areas that need further inquiry, and see trends that you can use to understand your costs. You can also specify time ranges for the data, and view time data by day or by month.  By contacting the AWS Support team Q6) A company is trying to analyze the costs applied to their AWS account recently. Which of the following provides them the most granular data about their AWS costs and usage?  Amazon CloudWatch  AWS Cost & Usage Report Explanation:-The AWS Cost & Usage Report contains the most comprehensive set of AWS cost and usage data available, including additional metadata about AWS services, pricing, and reservations (e.g., Amazon EC2 Reserved Instances (RIs)). The AWS Cost and Usage Report tracks your AWS usage and provides information about your use of AWS resources and estimated costs for that usage. You can configure this report to present the data hourly or daily. It is updated at least once a day until it is finalized at the end of the billing period. The AWS Cost and Usage Report gives you the most granular insight possible into your costs and usage, and it is the source of truth for the billing pipeline. It can be used to develop advanced custom metrics using business intelligence, data analytics, and third-party cost optimization tools. "Amazon CloudWatch" is incorrect. Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, set alarms, and automatically react to changes in your AWS resources. Amazon CloudWatch can monitor AWS resources such as Amazon EC2 instances, Amazon DynamoDB tables, and Amazon RDS DB instances, as well as custom metrics generated by your applications and services, and any log files your applications generate. You can use Amazon CloudWatch to gain system-wide visibility into resource utilization, application performance, and operational health. You can use these insights to react and keep your application running smoothly. "Amazon Machine Image" is incorrect. An Amazon Machine Image is used to launch Amazon EC2 instances. "AWS Cost Explorer" is incorrect. AWS Cost Explorer helps you visualize, understand, and manage your AWS costs and usage over time. This is done via an intuitive interface that enables you to quickly create custom reports that include charts and tabular data. You can analyze your cost and usage data in aggregate (such as total costs and usage across all accounts) down to granular details (for example, m2.2xlarge costs within the Dev account tagged “project: Blackthorn”). This option is incorrect because the AWS Cost & Usage Report provides more granular data about your AWS costs and usage than what the AWS Cost Explorer provides. The AWS Cost & Usage Report is your one-stop shop for accessing the most detailed information available about your AWS costs and usage.  Amazon Machine Image  AWS Cost Explorer Q7) What is the AWS tool that can help a company visualize their AWS spending in the last few months?  AWS Consolidated Billing  AWS Budgets  AWS Simple Monthly Calculator  AWS Cost Explorer Explanation:-The AWS Billing and Cost Management console includes the Cost Explorer tool for viewing AWS cost data as a graph. The user can filter the graphs using the resource tags. If the company is using Consolidated Billing, it generates a report based on the linked accounts which can help to identify areas that require further inquiry. Using the Cost Explorer, the company can view trends and use them to understand their spending and to predict future costs. Q8) Why do many startup companies prefer AWS over traditional on-premises solutions? (Choose TWO)  AWS can build complete data centers faster than any other Cloud provider  Using AWS, they can reduce time-to-market by focusing on business activities rather than on building and managing data centers Explanation:-Instead of building and managing data centers, AWS provides startups, enterprises, and government agencies all the services they need to quickly build their business and grow faster. AWS has significantly more services, and more features within those services, than any other cloud provider – from infrastructure technologies like compute, storage, and databases –to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. This makes it faster, easier, and more cost effective to build nearly anything they can imagine. Capital expenditures (CapEx) are a company's major, long-term expenses. Examples of CAPEX include physical assets such as buildings, equipment, and machinery. Instead of having to invest heavily in these Capital expenditures (e.g. physical data centers and servers) before it is known they will be used, companies can pay only when consuming AWS resources, and pay only for how much they consume. In brief, AWS replaces their investments in large capital expenditures (CAPEX) with low variable "pay-as-you-go" costs.  AWS removes the need to invest in operational expenditure  Using AWS allows companies to replace large capital expenditure with low variable costs Explanation:-Instead of building and managing data centers, AWS provides startups, enterprises, and government agencies all the services they need to quickly build their business and grow faster. AWS has significantly more services, and more features within those services, than any other cloud provider – from infrastructure technologies like compute, storage, and databases –to emerging technologies, such as machine learning and artificial intelligence, data lakes and analytics, and Internet of Things. This makes it faster, easier, and more cost effective to build nearly anything they can imagine. Capital expenditures (CapEx) are a company's major, long-term expenses. Examples of CAPEX include physical assets such as buildings, equipment, and machinery. Instead of having to invest heavily in these Capital expenditures (e.g. physical data centers and servers) before it is known they will be used, companies can pay only when consuming AWS resources, and pay only for how much they consume. In brief, AWS replaces their investments in large capital expenditures (CAPEX) with low variable "pay-as-you-go" costs.  AWS allows them to pay later when their business succeed Q9) TYMO Cloud Corp is looking forward to migrating their entire on-premises data center to AWS. What tool can they use to perform a cost-benefit analysis of moving to the AWS Cloud?  AWS Budgets  AWS Cost Explorer  AWS Simple Monthly Calculator  AWS TCO Calculator Explanation:-The AWS TCO (Total Cost of Ownership) Calculator is a free tool that provides directional guidance on possible realized savings when deploying AWS. This tool is built on an underlying calculation model, that generates a fair assessment of value that a customer may achieve given the data provided by the user which includes the number of servers migrated to AWS, the server type, the number of processors and so on. Q10) What are the benefits of implementing a tagging strategy for AWS resources? (Choose two)  Track API calls in your AWS account  Quickly identify deleted resources and their metadata  Track AWS spending across multiple resources Explanation:-Amazon Web Services (AWS) allows customers to assign metadata to their AWS resources in the form of tags. Each tag is a simple label consisting of a customer-defined key and an optional value that can make it easier to manage, search for, and filter resources. Although there are no inherent types of tags, they enable customers to categorize resources by purpose, owner, environment, or other criteria. An effective tagging strategy will give you improved visibility and monitoring, help you create accurate chargeback/showback models, and get more granular and precise insights into usage and spend by applications and teams.  Quickly identify software solutions on AWS  Quickly identify resources that belong to a specific project Explanation:-Amazon Web Services (AWS) allows customers to assign metadata to their AWS resources in the form of tags. Each tag is a simple label consisting of a customer-defined key and an optional value that can make it easier to manage, search for, and filter resources. Although there are no inherent types of tags, they enable customers to categorize resources by purpose, owner, environment, or other criteria. An effective tagging strategy will give you improved visibility and monitoring, help you create accurate chargeback/showback models, and get more granular and precise insights into usage and spend by applications and teams.  Q11) A company is introducing a new product to their customers, and is expecting a surge in traffic to their web application. As part of their Enterprise Support plan, which of the following provides the company with architectural and scaling guidance?  AWS Support API  AWS Support Concierge Service  Infrastructure Event Management Explanation:-AWS Infrastructure Event Management is a short-term engagement with AWS Support, included in the Enterprise-level Support product offering, and available for additional purchase for Business-level Support subscribers. AWS Infrastructure Event Management partners with your technical and project resources to gain a deep understanding of your use case and provide architectural and scaling guidance for an event. Common use-case examples for AWS Event Management include advertising launches, new product launches, and infrastructure migrations to AWS.  AWS Personal Health Dashboard Q12) As part of the Enterprise support plan, who is the primary point of contact for ongoing support needs?  EFS  IEM  TAM Explanation:-For Enterprise-level customers, a TAM (Technical Account Manager) provides technical expertise for the full range of AWS services and obtains a detailed understanding of your use case and technology architecture. TAMs work with AWS Solution Architects to help you launch new projects and give best practices recommendations throughout the implementation life cycle. Your TAM is the primary point of contact for ongoing support needs, and you have a direct telephone line to your TAM.  IAM Q13) A company has an Enterprise Support subscription. They want quick and efficient guidance with their billing and account inquiries. Which of the following should the company use?  AWS Personal Health Dashboard  AWS Support API  AWS Operations Support  AWS Support Concierge Explanation:-Included as part of the Enterprise Support plan, the Support Concierge Team are AWS billing and account experts that specialize in working with enterprise accounts. The Concierge team will quickly and efficiently assist you with your billing and account inquiries, and work with you to help implement billing and account best practices so that you can focus on running your business. Support Concierge service includes: ** 24 x7 access to AWS billing and account inquires. ** Guidance and best practices for billing allocation, reporting, consolidation of accounts, and root-level account security. ** Access to Enterprise account specialists for payment inquiries, training on specific cost reporting, assistance with service limits, and facilitating bulk purchases. Q14) You have discovered that some AWS resources are being used in malicious activities that could compromise your data. What should you do?  Contact the AWS Customer Service team  Contact the AWS Abuse team Explanation:-The AWS Abuse team can assist you when AWS resources are being used to engage in the following types of abusive behavior: I. Spam: You are receiving unwanted emails from an AWS-owned IP address, or AWS resources are being used to spam websites or forums. II. Port scanning: Your logs show that one or more AWS-owned IP addresses are sending packets to multiple ports on your server, and you believe this is an attempt to discover unsecured ports. III. Denial of service attacks (DOS): Your logs show that one or more AWS-owned IP addresses are being used to flood ports on your resources with packets, and you believe this is an attempt to overwhelm or crash your server or software running on your server. IV. Intrusion attempts: Your logs show that one or more AWS-owned IP addresses are being used to attempt to log in to your resources. V. Hosting objectionable or copyrighted content: You have evidence that AWS resources are being used to host or distribute illegal content or distribute copyrighted content without the consent of the copyright holder. VI. Distributing malware: You have evidence that AWS resources are being used to distribute software that was knowingly created to compromise or cause harm to computers or machines on which it is installed.  Contact the AWS Security team  Contact the AWS Concierge team Q15) A company has created a solution that helps AWS customers improve their architectures on AWS. Which AWS program may support this company?  AWS Professional Services  AWS TAM  APN Consulting Partners Explanation:-APN Consulting Partners are professional services firms that help customers design, architect, build, migrate, and manage their workloads and applications on AWS. Consulting Partners include System Integrators, Strategic Consultancies, Agencies, Managed Service Providers, and Value-Added Resellers. AWS supports the APN Consulting Partners by providing a wide range of resources and training to support their customers.  APN Technology Partners Q16) What is the minimum level of AWS support that provides 24x7 access to technical support engineers via phone and chat?  Basic Support  Developer Support  Enterprise Support  Business Support Explanation:-Each of the Business and Enterprise support plans provide 24x7 access to technical support engineers via phone, email, and chat. The Business Support Plan is less expensive than the Enterprise Support Plan. Therefore, the correct answer is Business. Q17) Which support plan includes AWS Support Concierge Service?  Business Support  Enterprise Support Explanation:-The AWS Support Concierge Service is available only for the Enterprise plan subscribers.  Standard Support  Premium Support Q18) What is the framework created by AWS Professional Services that helps organizations design a road map to successful cloud adoption?  AWS WAF  AWS CAF Explanation:-AWS Professional Services created the AWS Cloud Adoption Framework (AWS CAF) to help organizations design and travel an accelerated path to successful cloud adoption. The guidance and best practices provided by the framework help you build a comprehensive approach to cloud computing across your organization, and throughout your IT lifecycle. Using the AWS CAF helps you realize measurable business benefits from cloud adoption faster and with less risk.  Amazon SWF  Amazon EFS Q19) Which AWS Support Plan gives customers access to a “Well-Architected Review” for business critical workloads?  Basic Support  Enterprise Support Explanation:-The only AWS Support plan that gives customers access to a “Well-Architected Review” delivered by AWS Solution Architects is the Enterprise support plan. This review provides guidance and best practices to help customers design reliable, secure, efficient, and cost-effective systems in the cloud.  Business Support  Developer Support Q20) Your company requires a response time of less than 15 minutes from support interactions about their business-critical systems that are hosted on AWS if those systems go down. Which AWS Support Plan should this company use?  AWS Developer Support  AWS Enterprise Support Explanation:-AWS support plans provide different response times based on the case’s severity. For example, the Enterprise plan provides General Guidance within 24 hours. However, if the case involves a business-critical system being down, the company will get a response within 15 minutes.  AWS Business Support  AWS Basic Support Q21) Which features are included in the AWS Business Support Plan? (Choose TWO)  Access to Cloud Support Engineers via email only during business hours  24x7 access to the TAM feature  Partial access to the core Trusted Advisor checks  24x7 access to customer service Explanation:-All AWS customers - including Business support plan subscribers - have 24x7 access to customer service. The Business support plan also provides access to Infrastructure Event Management for additional fee. AWS Infrastructure Event Management is a structured program available to Enterprise Support customers (and Business Support customers for an additional fee) that helps customers plan for large-scale events such as product or application launches, infrastructure migrations, and marketing events.  Access to the Infrastructure Event Management (IEM) feature for additional fee Explanation:-All AWS customers - including Business support plan subscribers - have 24x7 access to customer service. The Business support plan also provides access to Infrastructure Event Management for additional fee. AWS Infrastructure Event Management is a structured program available to Enterprise Support customers (and Business Support customers for an additional fee) that helps customers plan for large-scale events such as product or application launches, infrastructure migrations, and marketing events. Q22) What is the AWS Support feature that allows customers to manage support cases programmatically?  AWS Operations Support  AWS Support API Explanation:-The AWS Support API provides programmatic access to AWS Support Center features to create, manage, and close support cases, and operationally manage Trusted Advisor check requests and status. AWS provides access to AWS Support API for AWS Support customers who have a Business or Enterprise support plan. The service currently provides two different groups of operations: 1- Support Case Management operations to manage the entire life cycle of AWS support cases, from creating a case to resolving it. 2- Trusted Advisor operations to access the checks provided by AWS Trusted Advisor.  AWS Personal Health Dashboard  AWS Trusted Advisor  Q23) Which AWS Group assists customers in achieving their desired business outcomes?  AWS Professional Services Explanation:-Moving to AWS provides customers with sustainable business advantages. Choosing to supplement teams with specialized skills and experience can help customers achieve those results. The AWS Professional Services organization is a global team of experts that helps customers realize their desired business outcomes when using AWS.  AWS Trusted Advisor  AWS Concierge Support Team  AWS Security Team Q24) What is the AWS tool that enables you to use scripts to manage all AWS services and resources?  AWS Service Catalog  AWS Console  AWS OpsWorks  AWS CLI Explanation:-The AWS Command Line Interface (CLI) is a unified tool to manage your AWS services. With just one tool to download and configure, you can control multiple AWS services from the command line and automate them through scripts. Q25) AWS allows users to manage their resources using a web based user interface. What is the name of this interface?  AWS API  AWS Management Console Explanation:-The AWS Management Console allows you to access and manage Amazon Web Services through a simple and intuitive web-based user interface. You can also use the AWS Console mobile app to quickly view resources on the go.  AWS CLI  AWS SDK Q26) There are performance issues with your under-development application, which of the following AWS services would help you analyze these issues?  Amazon Inspector  AWS X-Ray Explanation:-AWS X-Ray helps developers analyze and debug distributed applications in production or under development, such as those built using microservice architecture. With X-Ray, you can understand how your application and its underlying services are performing so you can identify and troubleshoot the root cause of performance issues and errors. X-Ray provides an end-to-end view of requests as they travel through your application, and shows a map of your application’s underlying components. You can use X-Ray to analyze both applications in development and in production, from simple three-tier applications to complex microservices applications consisting of thousands of services.  AWS CodePipeline  AWS CloudTrail Q27) What AWS tools can be used to call AWS Services from different programming languages?  AWS CodeDeploy  AWS Software Development Kit Explanation:-The AWS Software Development Kit (AWS SDK) can simplify using AWS services in your applications with an API tailored to your programming language or platform. Programming languages supported include Java,.NET, Node.js, PHP, Python, Ruby, Go, and C++.  AWS Command Line Interface  AWS Management Console Q28) What is the benefit of using an API to access AWS Services?  It allows for programmatic management of AWS resources Explanation:-The AWS Application Programming Interface (API) allows customers to work with various AWS services programmatically.  ​ It reduces the number of developers necessary  It reduces the time needed to provision AWS resources  It improves the performance of AWS resources Q29) What are the capabilities of AWS X-Ray? (Choose TWO)  Automatically decouples application components  Deploys applications to on-premises servers  Deploys applications to Amazon EC2 instances  Helps improve application performance Explanation:-Benefits of AWS X-Ray include: 1- Review request behavior: AWS X-Ray traces user requests as they travel through your entire application. It aggregates the data generated by the individual services and resources that make up your application, providing you an end-to-end view of how your application is performing. 2- Discover application issues: With AWS X-Ray, you can glean insights into how your application is performing and discover root causes. With X-Ray’s tracing features, you can follow request paths to pinpoint where in your application and what is causing performance issues. 3- Improve application performance AWS X-Ray helps you identify performance bottlenecks. X-Ray’s service maps let you see relationships between services and resources in your application in real time. You can easily detect where high latencies are occurring, visualize node and edge latency distribution for services, and then drill down into the specific services and paths impacting application performance.  Facilitates tracking of user requests to identify application issues Explanation:-Benefits of AWS X-Ray include: 1- Review request behavior: AWS X-Ray traces user requests as they travel through your entire application. It aggregates the data generated by the individual services and resources that make up your application, providing you an end-to-end view of how your application is performing. 2- Discover application issues: With AWS X-Ray, you can glean insights into how your application is performing and discover root causes. With X-Ray’s tracing features, you can follow request paths to pinpoint where in your application and what is causing performance issues. 3- Improve application performance AWS X-Ray helps you identify performance bottlenecks. X-Ray’s service maps let you see relationships between services and resources in your application in real time. You can easily detect where high latencies are occurring, visualize node and edge latency distribution for services, and then drill down into the specific services and paths impacting application performance. Q30) A company needs to track resource changes using the API call history. Which AWS service can help the company achieve this goal?  Amazon CloudWatch  AWS Config  AWS CloudTrail Explanation:-AWS CloudTrail is a web service that records AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller, the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the AWS service. With CloudTrail, you can get a history of AWS API calls for your account, including API calls made using the AWS Management Console, AWS SDKs, command line tools, and higher-level AWS services (such as AWS CloudFormation). The AWS API call history produced by CloudTrail enables security analysis, resource change tracking, and compliance auditing.  AWS CloudFormation Q31) What is the AWS service that enables AWS architects to manage infrastructure as code?  Amazon SES  AWS Config  AWS CloudFormation Explanation:-AWS CloudFormation allows you to use programming languages or a simple text file to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts. You create a template that describes all the AWS resources that you want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CloudFormation takes care of provisioning and configuring those resources for you. You don't need to individually create and configure AWS resources and figure out what's dependent on what; AWS CloudFormation handles all that for you.  Amazon EMR Q32) A startup company is operating on limited funds and is extremely concerned about cost overruns. Which of the below options can be used to notify the company when their monthly AWS bill exceeds $2000?  Configure the Amazon Connect Service to send an SNS billing notification to their email address  Setup a CloudTrail billing alarm that triggers an SNS notification to their email address  Setup a CloudWatch billing alarm that triggers an SNS notification to their email address Explanation:-In CloudWatch, you can set up a billing alarm that triggers if your costs exceed a threshold that you set. This CloudWatch alarm can also be configured to trigger an SNS notification to your email address.  Configure the Amazon Simple Email Service to send an SNS billing notification to their email address Q33) Your company is developing a critical web application in AWS and the security of the application is one of the top priorities. Which of the following AWS services will provide infrastructure security optimization recommendations?  AWS Shield  AWS Trusted Advisor Explanation:-AWS Trusted Advisor is an online tool that provides you real time guidance to help you provision your resources following AWS best practices. AWS Trusted Advisor offers a rich set of best practice checks and recommendations across five categories: cost optimization; security; fault tolerance; performance; and service limits. AWS Trusted Advisor improves the security of your application by closing gaps, enabling various AWS security features, and examining your permissions.  Amazon Aurora  AWS Management Console Q34) You have deployed your application on multiple Amazon EC2 instances. Your customers complain that sometimes they can’t reach your application. Which AWS service allows you to monitor the performance of your EC2 instances to assist in troubleshooting these issues?  AWS Lambda  Amazon CloudWatch Explanation:-Amazon CloudWatch is a service that monitors AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, set alarms, and automatically react to changes in your AWS resources. Amazon CloudWatch can monitor AWS resources such as Amazon EC2 instances, Amazon DynamoDB tables, and Amazon RDS DB instances, as well as custom metrics generated by your applications and services, and any log files your applications generate. You can use CloudWatch to detect anomalous behavior in your environments, take automated actions, troubleshoot issues, and discover insights to keep your applications running smoothly.  AWS Config  AWS CloudTrail Q35) What do you gain from setting up consolidated billing for five different AWS accounts under another master account?  AWS services’ costs will be reduced to half the original price  The consolidated billing feature is just for organizational purposes  Each AWS account gets six times the free-tier services capacity  Each AWS account gets volume discounts Explanation:-AWS consolidated billing enables an organization to consolidate payments for multiple Amazon Web Services (AWS) accounts within a single organization by making a single paying account. For billing purposes, AWS treats all the accounts on the consolidated bill as one account. Some services, such as Amazon EC2 and Amazon S3 have volume pricing tiers across certain usage dimensions that give the user lower prices when they use the service more. For example if you use 50 TB in each account you would normally be charged $23 *50*3 (because they are 3 different accounts), But with consolidated billing you would be charged $23*50+$22*50*2 (because they are treated as one account) which means that you would save $100. Q36) A company complains that they are wasting a lot of money on underutilized compute resources in AWS. Which AWS feature should they use to ensure that their applications are automatically adding/removing compute capacity to closely match the required demand?  AWS Elastic Load Balancer  AWS Auto Scaling Explanation:-Auto scaling is the feature that automates the process of adding/removing the server capacity (based on demand). Autoscaling allows you to reduce your costs by automatically turning off resources that aren’t in use. On the other hand, Autoscaling ensures that your application runs effectively by provisioning more server capacity if required.  AWS Cost Explorer  AWS Budgets Q37) What does AWS provide to deploy popular technologies - such as IBM MQ - on AWS with the least amount of effort and time?  Amazon CloudWatch  AWS Quick Start reference deployments Explanation:-AWS Quick Start Reference Deployments outline the architectures for popular enterprise solutions on AWS and provide AWS CloudFormation templates to automate their deployment. Each Quick Start launches, configures, and runs the AWS compute, network, storage, and other services required to deploy a specific workload on AWS, using AWS best practices for security and availability. Quick Starts are built by AWS solutions architects and partners to help you deploy popular technologies on AWS, based on AWS best practices. These accelerators reduce hundreds of manual installation and configuration procedures into just a few steps, so you can build your production environment quickly and start using it immediately.  Amazon Aurora  AWS OpsWorks Q38) You have noticed that several critical Amazon EC2 instances have been terminated. Which of the following AWS services would help you determine who took this action?  AWS Trusted Advisor  Amazon Inspector  AWS CloudTrail Explanation:-AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account. With CloudTrail, you can log, continuously monitor, and retain account activity related to actions across your AWS infrastructure. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.  Amazon EC2 Usage report Q39) What does the AWS Personal Health Dashboard provide? (Choose two)  Recommendations for Cost Optimization  A dashboard detailing vulnerabilities in your applications  Published information about the current status and availability of all AWS services  Detailed troubleshooting guidance to address AWS events impacting your resources Explanation:-AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. While the Service Health Dashboard displays the general status of AWS services, Personal Health Dashboard gives you a personalized view into the performance and availability of the AWS services underlying your AWS resources. The benefits of the AWS personal health dashboard include: **A personalized View of Service Health: Personal Health Dashboard gives you a personalized view of the status of the AWS services that power your applications, enabling you to quickly see when AWS is experiencing issues that may impact you. For example, in the event of a lost EBS volume associated with one of your EC2 instances, you would gain quick visibility into the status of the specific service you are using, helping save precious time troubleshooting to determine root cause. **Proactive Notifications: The dashboard also provides forward looking notifications, and you can set up alerts across multiple channels, including email and mobile notifications, so you receive timely and relevant information to help plan for scheduled changes that may affect you. In the event of AWS hardware maintenance activities that may impact one of your EC2 instances, for example, you would receive an alert with information to help you plan for, and proactively address any issues associated with the upcoming change. **Detailed Troubleshooting Guidance: When you get an alert, it includes remediation details and specific guidance to enable you to take immediate action to address AWS events impacting your resources. For example, in the event of an AWS hardware failure impacting one of your EBS volumes, your alert would include a list of your affected resources, a recommendation to restore your volume, and links to the steps to help you restore it from a snapshot. This targeted and actionable information reduces the time needed to resolve issues.  Personalized view of AWS service health Explanation:-AWS Personal Health Dashboard provides alerts and remediation guidance when AWS is experiencing events that may impact you. While the Service Health Dashboard displays the general status of AWS services, Personal Health Dashboard gives you a personalized view into the performance and availability of the AWS services underlying your AWS resources. The benefits of the AWS personal health dashboard include: **A personalized View of Service Health: Personal Health Dashboard gives you a personalized view of the status of the AWS services that power your applications, enabling you to quickly see when AWS is experiencing issues that may impact you. For example, in the event of a lost EBS volume associated with one of your EC2 instances, you would gain quick visibility into the status of the specific service you are using, helping save precious time troubleshooting to determine root cause. **Proactive Notifications: The dashboard also provides forward looking notifications, and you can set up alerts across multiple channels, including email and mobile notifications, so you receive timely and relevant information to help plan for scheduled changes that may affect you. In the event of AWS hardware maintenance activities that may impact one of your EC2 instances, for example, you would receive an alert with information to help you plan for, and proactively address any issues associated with the upcoming change. **Detailed Troubleshooting Guidance: When you get an alert, it includes remediation details and specific guidance to enable you to take immediate action to address AWS events impacting your resources. For example, in the event of an AWS hardware failure impacting one of your EBS volumes, your alert would include a list of your affected resources, a recommendation to restore your volume, and links to the steps to help you restore it from a snapshot. This targeted and actionable information reduces the time needed to resolve issues. Q40) Which statement is correct with regards to AWS service limits? (Choose two)  Each IAM user has the same service limits  You can contact AWS support to increase the service limits  There are no service limits on AWS  You can use the AWS Trusted Advisor to monitor your service limits Explanation:-Understanding your service limits (and how close you are to them) is an important part of managing your AWS deployments – continuous monitoring allows you to request limit increases or shut down resources before the limit is reached. One of the easiest ways to do this is via AWS Trusted Advisor’s Service Limit Dashboard. AWS maintains service limits for each account to help guarantee the availability of AWS resources, as well as to minimize billing risks for new customers. Some service limits are raised automatically over time as you use AWS, though most AWS services require that you request limit increases manually. Most service limit increases can be requested through the AWS Support Center by choosing Create Case and then choosing Service Limit Increase.  The Amazon Simple Email Service is responsible for sending email notifications when usage approaches a service limit Q41) Ensuring compliance is a key priority for most businesses. Which of the following AWS services will help them achieve this?  CloudFront  CloudEndure  CloudTrail Explanation:-AWS CloudTrail is designed to log all actions taken in your AWS account. This provides a great resource for governance, compliance, and risk auditing.  CloudWatch Q42) Which of the following enables you to monitor and collect log files from your Amazon EC2 instances?  Amazon Inspector  CloudWatch Logs Explanation:-You can use Amazon CloudWatch Logs to monitor, store, and access your log files from Amazon Elastic Compute Cloud (Amazon EC2) instances, AWS CloudTrail, Route 53, and other sources. CloudWatch Logs enables you to centralize the logs from all of your systems, applications, and AWS services that you use, in a single, highly scalable service. You can then easily view them, search them for specific error codes or patterns, filter them based on specific fields, or archive them securely for future analysis. By default, logs are kept indefinitely and never expire. You can adjust the retention policy for each log group, keeping the indefinite retention, or choosing a retention periods between 10 years and one day.  AWS Storage Gateway  AWS CloudTrail Q43) What does AWS Service Catalog provide?  It allows provisioning of cloud infrastructure using code  It enables customers to explore the different catalogs of AWS services  It simplifies organizing and governing commonly deployed IT services Explanation:-AWS Service Catalog allows organizations to create and manage catalogs of IT services that are approved for use on AWS. These IT services can include everything from virtual machine images, servers, software, and databases to complete multi-tier application architectures. AWS Service Catalog allows you to centrally manage commonly deployed IT services, and helps you achieve consistent governance and meet your compliance requirements, while enabling users to quickly deploy only the approved IT services they need.  It enables customers to quickly find descriptions and use cases for AWS services Q44) Which AWS service provides cost-optimization recommendations?  AWS CloudTrail  AWS Trusted Advisor Explanation:-AWS Trusted Advisor is an application that draws upon best practices learned from AWS’ aggregated operational history of serving hundreds of thousands of AWS customers. Trusted Advisor inspects your AWS environment and makes recommendations that can potentially save you money by highlighting unused resources and opportunities to reduce your bill. AWS Trusted Advisor also provide recommendations to improve system performance, and close security gaps.  AWS X-Ray  AWS TCO Q45) A company has discovered that multiple S3 buckets were deleted, but it is unclear who deleted the buckets. Which of the following can the company use to determine the identity that deleted the buckets?  SQS logs  CloudTrail logs Explanation:-AWS CloudTrail is a web service that records all AWS API calls for your account and delivers log files to you. The recorded information includes the identity of the API caller (who deleted the buckets in our case), the time of the API call, the source IP address of the API caller, the request parameters, and the response elements returned by the AWS service. With CloudTrail, you can get a history of AWS API calls for your account, including API calls made using the AWS Management Console, AWS SDKs, command line tools, and higher-level AWS services (such as AWS CloudFormation). The AWS API call history produced by CloudTrail enables security analysis, resource change tracking, and compliance auditing.  CloudWatch Logs  SNS logs Q46) Which AWS Service enables customers to set up an AWS billing alarm to inform them when their spending exceeds a certain threshold?  Amazon Inspector  Amazon CloudWatch Explanation:-Amazon CloudWatch is the AWS service that allows you to monitor the usage of your AWS resources. CloudWatch collects metrics, and allows you to create alarms based on those metrics. You can use CloudWatch to monitor your estimated AWS charges. When you enable the monitoring of estimated charges for your AWS account, the estimated charges are calculated and sent several times daily to CloudWatch as metric data. Billing metric data includes the estimated charges for every service in AWS that you use, in addition to the estimated overall total of your AWS charges. The alarm triggers when your account billing exceeds the threshold you specify.  Consolidated Billing  AWS Cost Explorer Q47) Which AWS Service provides the current status of all AWS Services in all AWS Regions?  AWS Service Health Dashboard Explanation:-AWS uses the Service Health Dashboard to publish most up-to-the-minute information on AWS service availability. You can get information about the current status and availability of any AWS service any time using the AWS Service Health Dashboard that is available at this link: https://status.aws.amazon.com/  AWS Personal Health Dashboard  AWS Management Console  Amazon CloudWatch Q48) AWS recommends some practices to help organizations avoid unexpected charges on their bill. Which of the following is NOT one of these practices?  Deleting unused Elastic Load Balancers  Deleting unused EBS volumes after terminating an EC2 instance  Deleting unused AutoScaling launch configuration Explanation:-"Deleting unused AutoScaling launch configuration" will not help, and thus is the correct choice. The AutoScaling launch configuration does not incur any charges. Thus, it will not make any difference whether it is deleted or not. AWS will charge the user once the AWS resource is allocated (even if it is not used). Thus, it is advised that once the user's work is completed he should: 1- Delete all Elastic Load Balancers. 2- Terminate all unused EC2 instances. 3- Delete the attached EBS volumes that he doesn’t need. 4- Release any unused Elastic IPs. Additional information: Some services automatically restart resources after terminating them without notifying you, and as a result, you get unexpected charges on your bill. Examples of these services: 1- Elastic Beanstalk: Elastic Beanstalk is designed to ensure that all the resources that you need are running, which means that it automatically relaunches any service that you stop. If you need to permanently delete those resources you must terminate your Elastic Beanstalk environment before you terminate resources that Elastic Beanstalk has created. 2- AWS OpsWorks: If you use the AWS OpsWorks environment to create AWS resources, you must use AWS OpsWorks to terminate those resources or AWS OpsWorks will restart them. For example, if you use AWS OpsWorks to create an Amazon EC2 instance, but then stop it by using the Amazon EC2 console, the AWS OpsWorks auto-healing feature categorizes the instance as failed and restarts it.  Releasing unused Elastic IPs after terminating an EC2 instance Q49) Which of the following allows you to create new RDS instances? (Choose two)  AWS CloudFormation Explanation:-The AWS Management Console lets you create new RDS instances through a web-based user interface. You can also use AWS CloudFormation to create new RDS instances using the CloudFormation template language.  AWS Management Console. Explanation:-The AWS Management Console lets you create new RDS instances through a web-based user interface. You can also use AWS CloudFormation to create new RDS instances using the CloudFormation template language.  AWS DMS  AWS CodeDeploy  AWS Quick Starts Q50) Which AWS Service provides integration with Chef to automate the configuration of EC2 instances?  AWS CloudFormation  AutoScaling  AWS OpsWorks Explanation:-AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers. OpsWorks lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments.  AWS Config Q51) What is the AWS serverless service that allows you to run your applications without any administrative burden?  Amazon EC2 instances  AWS Lambda Explanation:-AWS Lambda is an AWS-managed compute service. It lets you run code without provisioning or managing servers. With Lambda, you can run code for virtually any type of application or backend service - all with zero administration. Just upload your code, and Lambda takes care of everything required to run and scale your code with high availability. You pay only for the compute time you consume - there is no charge when your code is not running.  Amazon RDS instances  Amazon LightSail Q52) Each AWS Region is composed of multiple Availability Zones. Which of the following best describes what an Availability Zone is?  It is a logically isolated network of the AWS Cloud  It is a distinct location within a region that is insulated from failures in other Availability Zones Explanation:-Availability Zones are distinct locations within a region that are insulated from failures in other Availability Zones.  It is a data center designed to be completely isolated from other data centers in the same region  It is a collection of data centers distributed in multiple countries Q53) An external auditor is requesting a log of all accesses to the AWS resources in the company’s account. Which of the following services will provide the auditor with the requested information?  Amazon CloudWatch  AWS CloudFormation  AWS CloudTrail Explanation:-CloudTrail provides visibility into user activity by recording actions taken on your account. CloudTrail records important information about each action, including who made the request, the services used, the actions performed, parameters for the actions, and the response elements returned by the AWS service. This information helps you to enable governance, compliance, operational auditing, and risk auditing of your AWS account. CloudTrail provides event history of your AWS account activity, including actions taken through the AWS Management Console, AWS SDKs, command line tools, and other AWS services. This event history simplifies security analysis, resource change tracking, and troubleshooting.  Amazon CloudFront Q54) Which AWS Service allows customers to create a template that programmatically defines policies and configurations of all AWS resources as code and so that the same template can be reused among multiple projects?  AWS Auto Scaling  AWS Config  AWS CloudFormation Explanation:-AWS CloudFormation is a service that helps customers model and set up their Amazon Web Services resources so that they can spend less time managing those resources and more time focusing on their applications that run in AWS. Customers create a template that describes all the AWS resources that they want (like Amazon EC2 instances or Amazon RDS DB instances), and AWS CloudFormation takes care of provisioning those resources for them. Also, Customers can create an AWS CloudFormation script that captures their security policies, networking policies, and other aspects of configuration and reliably deploys it. Security best practices can then be reused among multiple projects and become part of a continuous integration pipeline.  AWS CloudTrail Q55) Your company experiences fluctuations in traffic patterns to their e-commerce website when running flash sales. What service can help your company dynamically match the required compute capacity to handle spikes in traffic during flash sales?  Amazon ElastiCache  Amazon Elastic Compute Cloud  Auto Scaling Explanation:-AWS Auto Scaling monitors your applications and automatically adjusts capacity to maintain steady, predictable performance at the lowest possible cost. Using AWS Auto Scaling, you maintain optimal application performance and availability, even when workloads are periodic, unpredictable, or continuously changing. When demand spikes, AWS Auto Scaling automatically increases the compute capacity, so you maintain performance. When demand subsides, AWS Auto Scaling automatically decreases the compute capacity, so you pay only for the resources you actually need.  Amazon Elastic Container Service Q56) Which service helps you by collecting important metrics from a running EC2 instance?  Amazon Inspector  Amazon CloudWatch Explanation:-Amazon CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You can use Amazon CloudWatch to collect and track metrics, collect and monitor log files, set alarms, and automatically react to changes in your AWS resources.  AWS CloudFormation  AWS CloudTrail logs Q57) Your application requirements for CPU and RAM change rapidly these days. Which service can be used to dynamically adjust those resources based on demand?  Amazon Elastic Container Service  ELB  Auto Scaling Explanation:-The AWS Auto Scaling service allows you to automatically provision new resources to meet demand and maintain performance. When demand decreases Auto Scaling shuts down unused resources to reduce costs.  Amazon Route53 Q58) Which of the following AWS services uses Puppet to automate how EC2 instances are configured?  AWS Quick Starts  AWS CloudTrail  AWS OpsWorks Explanation:-AWS OpsWorks is a configuration management service that provides managed instances of Chef and Puppet. Chef and Puppet are automation platforms that allow you to use code to automate the configurations of your servers. OpsWorks lets you use Chef and Puppet to automate how servers are configured, deployed, and managed across your Amazon EC2 instances or on-premises compute environments.  AWS CloudFormation Q59) What are some key benefits of using AWS CloudFormation? (Choose two)  Applies advanced IAM security features automatically  Uses your scheme to build the application code quickly and easily  Allows you to model your entire infrastructure in a text file Explanation:-The benefits of using AWS CloudFormation include: 1- CloudFormation allows you to model your entire infrastructure in a text file. This template becomes the single source of truth for your infrastructure. This helps you to standardize infrastructure components used across your organization, enabling configuration compliance and faster troubleshooting. 2- AWS CloudFormation provisions your resources in a safe, repeatable manner, allowing you to build and rebuild your infrastructure and applications, without having to perform manual actions or write custom scripts. CloudFormation takes care of determining the right operations to perform when managing your stack, and rolls back changes automatically if errors are detected. 3- Codifying your infrastructure allows you to treat your infrastructure as just code. You can author it with any code editor, check it into a version control system, and review the files with team members before deploying into production. 4- CloudFormation allows you to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.  Automates the provisioning and updating of your infrastructure in a safe and controlled manner Explanation:-The benefits of using AWS CloudFormation include: 1- CloudFormation allows you to model your entire infrastructure in a text file. This template becomes the single source of truth for your infrastructure. This helps you to standardize infrastructure components used across your organization, enabling configuration compliance and faster troubleshooting. 2- AWS CloudFormation provisions your resources in a safe, repeatable manner, allowing you to build and rebuild your infrastructure and applications, without having to perform manual actions or write custom scripts. CloudFormation takes care of determining the right operations to perform when managing your stack, and rolls back changes automatically if errors are detected. 3- Codifying your infrastructure allows you to treat your infrastructure as just code. You can author it with any code editor, check it into a version control system, and review the files with team members before deploying into production. 4- CloudFormation allows you to model and provision, in an automated and secure manner, all the resources needed for your applications across all regions and accounts.  Helps AWS customers deploy their applications without worrying about the underlying infrastructure Q60) Which of the following services allows you to run containerized applications on a cluster of EC2 instances?  AWS Personal Health Dashboard  AWS Data Pipeline  AWS Cloud9  Amazon ECS Explanation:-Amazon Elastic Container Service (Amazon ECS) is a highly scalable, high-performance container orchestration service that supports Docker containers and allows you to easily run and scale containerized applications on AWS. Amazon ECS eliminates the need for you to install and operate your own container orchestration software, manage and scale a cluster of virtual machines, or schedule containers on those virtual machines.  Q61) Which of the following are true regarding the languages that are supported on AWS Lambda? (Choose TWO)  Lambda is AWS’ proprietary programming language for microservices  Lambda only supports Python and Node.js, but third party plugins are available to convert code in other languages to these formats  Lambda can support any programming language using an API Explanation:-AWS Lambda natively supports Java, Go, PowerShell, Node.js, C#, Python, and Ruby code, and provides a Runtime API which allows customers to use any additional programming languages to author their functions.  Lambda natively supports a number of programming languages such as N ​ ode.js, Python, and Java Explanation:-AWS Lambda natively supports Java, Go, PowerShell, Node.js, C#, Python, and Ruby code, and provides a Runtime API which allows customers to use any additional programming languages to author their functions.  Lambda doesn’t support programming languages; it is a serverless compute service Q62) A customer spent a lot of time configuring a newly deployed Amazon EC2 instance. After the workload increases, the customer decides to provision another EC2 instance with an identical configuration. How can the customer achieve this?  By creating an AMI from the old instance and launching a new instance from it Explanation:-An Amazon Machine Image (AMI) provides the information required to launch an instance, which is a virtual server in the cloud. You must specify an AMI when you launch an instance, and you can launch as many instances from the AMI as you need. You can also launch instances from as many different AMIs as you need.  By installing Aurora on EC2 and launching a new instance from it  By creating an AWS Config template from the old instance and launching a new instance from it  By creating an EBS Snapshot of the old instance Q63) What does Amazon Elastic Beanstalk provide?  A compute engine for Amazon ECS  A NoSQL database service  A scalable file storage solution for use with AWS and on-premises servers  A PaaS solution to automate application deployment Explanation:-AWS Elastic Beanstalk is an application container on top of Amazon Web Services. Elastic Beanstalk makes it easy for developers to quickly deploy and manage applications in the AWS Cloud. Developers simply upload their application code, and Elastic Beanstalk automatically handles the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring. Q64) In your on-premises environment, you can create as many virtual servers as you need from a single template. What can you use to perform the same in AWS?  EBS Snapshot  AMI Explanation:-An Amazon Machine Image (AMI) is a template that contains a software configuration (for example, an operating system, an application server, and applications). This pre-configured template save time and avoid errors when configuring settings to create new instances. You specify an AMI when you launch an instance, and you can launch as many instances from the AMI as you need. You can also launch instances from as many different AMIs as you need.  IAM  An internet gateway Q65) Which of the following AWS services can be used as a compute resource? (Choose two)  AWS Lambda Explanation:-AWS Lambda is a Serverless computing service. Serverless computing allows you to build and run applications and services without thinking about servers. With serverless computing, your application still runs on servers, but all the server management is done by AWS.  Amazon VPC  Amazon S3  Amazon EC2 Explanation:-Amazon Elastic Compute Cloud (Amazon EC2) is a web service that provides secure, and resizable compute capacity in the cloud. Unlike AWS Lambda, Amazon EC2 is a server-based computing service, the Customer is responsible for performing all server configurations and management tasks.  Amazon CloudWatch