AWS Cloud Practitioner Practice Exam QuestionBy itexambyte.com / 9 February 2024 AWS Cloud Practitioner Exam Dumps Total Questions – 65Passing Score is 70%DomainWeigthage%Cloud Concept24%Security & Compliance30%Cloud Technology & Service34%Billing, Support & Pricing8% 1 / 65 1. An organization deploys its IT infrastructure in a combination of its on-premises data center along with AWS Cloud. How would you categorize this deployment model? Cloud deployment Hybrid deployment Private deployment Mixed deployment 2 / 65 2. Which AWS service publishes up-to-the-minute information on the general status and availability of all AWS services in all the Regions of AWS Cloud? AWS CloudFormation AWS Health - Your Account Health Dashboard AWS Health - Service Health Dashboard Amazon CloudWatch 3 / 65 3. Which characteristic of Cloud Computing imparts the ability to acquire resources as you need and release when you no longer need them? Elasticity Reliability Durability Resiliency 4 / 65 4. Which feature of AWS Cloud offers the ability to innovate faster and rapidly develop, test and launch software applications? Elasticity Ability to deploy globally in minutes Cost savings Agility 5 / 65 5. An IT company is on a cost-optimization spree and wants to identify all EC2 instances that are under-utilized. Which AWS services can be used off-the-shelf to address this use-case without needing any manual configurations? (Select two) AWS Cost and Usage Reports AWS Trusted Advisor Amazon CloudWatch AWS Cost Explorer AWS Budgets 6 / 65 6. The development team seeks a forum housing the most common inquiries and demands from AWS clientele, complete with solutions provided by AWS. Where should one initiate troubleshooting or solution-seeking inquiries within AWS forums or services? AWS Marketplace AWS Support Center AWS Knowledge Center AWS Service Health Dashboard 7 / 65 7. The AWS Well-Architected Framework provides guidance on building cloud based applications using AWS best practices. Which of the following options are the pillars mentioned in the AWS Well-Architected Framework? (Select two) Reliability Elasticity Availability Scalability Cost Optimization 8 / 65 8. In the past, IT departments often over-provisioned resources to accommodate peak demand, a practice that might persist when building cloud infrastructure, resulting in unnecessary costs. Properly sizing resources is essential for cost optimization while maximizing cloud functionality.Which AWS Cloud feature pertains to accurately sizing resources? Reliability Resiliency Horizontal scaling Elasticity 9 / 65 9. As Per the AWS Shared Responsibility Model, management of which of the following AWS services is the responsibility of the customer? Amazon DynamoDB Amazon Simple Storage Service (Amazon S3) Amazon Elastic Compute Cloud (Amazon EC2) AWS Elastic Beanstalk 10 / 65 10. Which aspect of the AWS Well-Architected Framework emphasizes optimizing the utilization of IT and computing resources by selecting appropriate resource types and sizes tailored to workload demands? Performance Efficiency Pillar Operational Excellence Pillar Cost Optimization Pillar Reliability Pillar 11 / 65 11. A company provides you with a completed product that is run and managed by the company itself. As a customer, you only use the product without worrying about maintaining or managing the product.Which cloud computing model does this kind of product belong to? Infrastructure as a Service Platform as a Service Software as a Service On Premise 12 / 65 12. Which of the following best describes the act of increasing the CPU/RAM allocation for an Amazon EC2 instance? Horizontal scaling Vertical scaling Managing increasing volumes of data Loose coupling 13 / 65 13. Which of the following are advantages of using the AWS Cloud? (Select TWO) Limited scaling Increase speed and agility Trade operational expense for capital expense Stop guessing about capacity AWS is responsible for security in the cloud 14 / 65 14. A company needs to keep sensitive data in its own data center due to compliance but would still like to deploy resources using AWS. Which Cloud deployment model does this refer to? Public Cloud Private Cloud Community Cloud Hybrid Cloud 15 / 65 15. This new startup aims to eliminate the burden of managing its infrastructure and instead concentrate on deploying and overseeing its applications. Which category of Cloud Computing does this describe? Platform as a Service (PaaS) Software as a Service (SaaS) Infrastructure as a Service (IaaS) On-Premise 16 / 65 16. Which of the following entities can be used to connect to an EC2 server from a Mac OS, Windows or Linux based computer via a browser-based client? EC2 Instance Connect AWS Direct Connect SSH Putty 17 / 65 17. The company has established a baseline specifying the allocated number of AWS resources for various stages of application testing. However, it has observed that employees are not complying with the guidelines and are provisioning additional resources through API calls, leading to increased testing expenses.Which AWS service can assist the company in triggering alerts whenever the baseline resource thresholds are exceeded? AWS CloudTrail Insights AWS X-Ray Amazon Detective AWS Config 18 / 65 18. What is the simplest method to encrypt data exclusively for AWS services within your AWS account using AWS Key Management Service (KMS)? Create your own customer master keys (CMKs) in AWS KMS Use AWS KMS APIs to encrypt data within your own application by using the AWS Encryption SDK Use AWS owned CMK in the service you wish to use encryption Use AWS managed master keys that are automatically created in your account for each service 19 / 65 19. Which AWS service can be utilized for ongoing monitoring of both malicious activities and unauthorized behavior to safeguard your AWS accounts and workloads? Amazon Detective AWS Security Hub Amazon GuardDuty Amazon Inspector 20 / 65 20. Which of the following are security best practices suggested by AWS for Identity and Access Management (IAM)? (Select two) Share your AWS account root user credentials only if absolutely necessary for performing an important billing operation Enable AWS multi-factor authentication (MFA) on your AWS root user account. MFA helps give root access to multiple users without actually sharing the root user login credentials Do not change passwords and access keys once created. This results in failure of connectivity in the application logic Don't share security credentials between accounts, use IAM roles instead When you create IAM policies, grant the least privileges required to perform a task 21 / 65 21. Because of regulatory requirements, a company must encrypt data as it traverses through the different tiers of its AWS architecture. The company is evaluating the features of different AWS services and their encryption choices.Which of the services listed below are automatically encrypted and do not require user intervention to enable encryption? CloudWatch logs, Application Load Balancer (ALB), S3 Glacier CloudTrail Logs, S3 Glacier, AWS Storage Gateway AWS Organizations, Amazon EC2, CloudTrail Logs AWS Storage Gateway, Application Load Balancer (ALB), Amazon CloudFront 22 / 65 22. In order to comply with regulations, a consulting firm must retain its data for a period of three years. The company requires a tamper-proof technology or feature to safeguard the data, ensuring protection against any alterations or manipulation throughout the entire three-year duration.As a Cloud Practitioner, which service/functionality will you suggest to keep the data safe? Amazon S3 Object Lock Amazon S3 Storage Lens Amazon Macie Amazon S3 Glacier Vault Lock 23 / 65 23. A multinational corporation has recently transitioned its infrastructure to the AWS Cloud and has employees traveling to various offices worldwide. How should the company configure its AWS accounts? Create an IAM user for each user in each region There are no actions required; IAM operates as a global service. Create 'global' permissions so users can access resources from all around the world As employees travel, they can use other employees' accounts 24 / 65 24. In accordance with the Shared Responsibility Model, which of the following tasks are the responsibilities of AWS? (Select two) Data center security Network operability Installing security patches of the guest operating system (OS) Encrypting application data Configuring IAM Roles 25 / 65 25. For security and compliance purposes, a research lab requires notification of any configuration changes. Which AWS service can aid in fulfilling this requirement? Amazon Inspector AWS Trusted Advisor AWS Config AWS Secrets Manager 26 / 65 26. As a Cloud Practitioner, which option would you suggest for a company seeking to establish a private, high-bandwidth network connection between its on-premises data centers and AWS Cloud? Site-to-Site VPN VPC Endpoints VPC Peering Direct Connect 27 / 65 27. Which of the following security best practices are recommended for the AWS account root user? (Select two) Enable MFA for the AWS account root user Disable MFA for the AWS account root user as it can lock the entire AWS account if the MFA device is lost Establish an IAM user with administrator permissions and refrain from using the AWS account root user for administrative tasks. Keep your AWS account root user access keys in an encrypted file on S3 Share AWS account root user access keys with other administrators 28 / 65 28. Which of the following AWS authentication mechanisms enables the use of a Multi-Factor Authentication (MFA) device that can be connected to a USB port on your computer? Virtual MFA device Hardware MFA device SMS text message-based MFA U2F security key 29 / 65 29. What is the MOST efficient solution for a financial services company to ensure that all customer data uploaded to its Amazon S3 data lake remains private and compliant? Use CloudWatch to ensure that all S3 resources stay private Use Amazon S3 Block Public Access to ensure that all S3 resources stay private Set up a high-level advisory committee to review the privacy settings of each object uploaded into S3 Trigger a lambda function every time an object is uploaded on S3. The lambda function should change the object settings to make sure it stays private 30 / 65 30. What is the MOST effective solution for an IT company with a hybrid cloud architecture that aims to centralize server logs for both its EC2 instances and on-premises servers? Use CloudWatch Logs for both the EC2 instance and the on-premises servers Use AWS Lambda to send log data from EC2 instance as well as on-premises servers to CloudWatch Logs Use CloudTrail for the EC2 instance and CloudWatch Logs for the on-premises servers Use CloudWatch Logs for the EC2 instance and CloudTrail for the on-premises servers 31 / 65 31. AWS Trusted Advisor analyzes your AWS environment and provides best practice recommendations for which of the following categories? (Select two)? Elasticity Documentation Cost Optimization Service Limits Change Management 32 / 65 32. Which of the following AWS services can be used to prevent Distributed Denial-of-Service (DDoS) attack? (Select two) AWS Shield AWS CloudHSM AWS Trusted Advisor AWS WAF Amazon Inspector 33 / 65 33. Which AWS service can facilitate the assessment of applications deployed on EC2 instances for vulnerabilities and deviations from AWS best practices for an e-commerce company? AWS Secrets Manager AWS CloudHSM AWS Trusted Advisor Amazon Inspector 34 / 65 34. Due to regulatory and compliance reasons, an organization is supposed to use a hardware device for any data encryption operations in the cloud. Which AWS service can be used to meet this compliance requirement? AWS CloudHSM AWS Key Management Service (KMS) AWS Secrets Manager AWS Trusted Advisor 35 / 65 35. Which AWS service can the social media company utilize to safeguard its web application from common web exploits like SQL injection and cross-site scripting? Amazon GuardDuty AWS Cloudwatch AWS Web Application Firewall (WAF) Amazon Inspector 36 / 65 36. As a Cloud Practitioner, which AWS service would you suggest to address the performance issues of the serverless application built using a microservices architecture that the DevOps team at an e-commerce company is attempting to debug? AWS Trusted Advisor Amazon Pinpoint AWS X-Ray AWS CloudFormation 37 / 65 37. As a Cloud Practitioner, which solution would you recommend for the given use-case of a unicorn startup building an analytics application with support for a speech-based interface, where the application accepts speech-based input from users and conveys results via speech? Use Amazon Transcribe to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech Use Amazon Polly to convert speech to text for downstream analysis. Then use Amazon Transcribe to convey the text results via speech Use Amazon Translate to convert speech to text for downstream analysis. Then use Amazon Polly to convey the text results via speech Use Amazon Polly to convert speech to text for downstream analysis. Then use Amazon Translate to convey the text results via speech 38 / 65 38. Which AWS service should one utilize to automatically distribute incoming traffic across multiple targets? Elastic Beanstalk Elasticsearch Auto Scaling Elastic Load Balancing 39 / 65 39. Which S3 storage class offers the most cost-effective solution for a company requiring a storage solution for a project where data is accessed less frequently but requires rapid access when necessary? Amazon S3 Standard Amazon S3 Standard-Infrequent Access (S3 Standard-IA) Amazon S3 Intelligent-Tiering (S3 Intelligent-Tiering) Amazon S3 Glacier (S3 Glacier) 40 / 65 40. A data analytics company is running a proprietary batch analytics application on AWS and wants to use a storage service which would be accessed by hundreds of EC2 instances simultaneously to append data to existing files. As a Cloud Practitioner, which AWS service would you suggest for this use-case? EBS S3 EFS Instance Store 41 / 65 41. As a Cloud Practitioner, which EC2 instance type would you recommend to the big data analytics company that is transitioning its IT infrastructure from an on-premises data center to the AWS Cloud and seeks to utilize server-bound software licenses? Dedicated instance Reserved Instance On-Demand Instance Dedicated host 42 / 65 42. Which of the following AWS services are global in scope? (Select two) Identity and Access Management (IAM) CloudFront Amazon RDS Amazon EC2 S3 43 / 65 43. As a Cloud Practitioner, which AWS services would you recommend to build a serverless solution for this use-case, An IT company wants to run a log backup process every Sunday at 3 AM. The usual runtime of the process is 6 minutes. Systems Manager EC2 Instance Step Function CloudWatch Lambda 44 / 65 44. Which AWS Route 53 routing policy would you use to improve the performance for your customers by routing the requests to the AWS endpoint that provides the fastest experience? Failover routing policy Latency routing policy Weighted routing policy Simple routing policy 45 / 65 45. Which AWS technology or service can deliver consistent low-latency gameplay, ensuring a superior user experience for end-users across different locations? AWS Edge Locations AWS Wavelength AWS Local Zones AWS Direct Connect 46 / 65 46. A company wants a fully managed, flexible, and scalable file storage system, with low latency access, for its Windows-based applications. Which AWS service is the right choice for the company? Amazon FSx for Windows File Server Amazon FSx for Lustre Amazon Elastic File System (Amazon EFS) Amazon Elastic Block Storage (Amazon EBS) 47 / 65 47. Which of the following statements are true about AWS Lambda Function? (Select two) Allows you to install databases on the underlying serverless Operating System AWS Lambda is a Serverless Allows you to orchestrate and manage Docker containers AWS Lambda provides access to the underlying operating system to control its behavior through code You pay for the compute time you consume 48 / 65 48. As a Cloud Practitioner, which AWS service would you recommend for the use-case where a developer wants to upload their Node.js web application code to the AWS Cloud, enabling automatic deployment while retaining access to the underlying operating system for further enhancements? Elastic Beanstalk CloudFormation Amazon EC2 Elastic Container Service (ECS) 49 / 65 49. As a Cloud Practitioner, which AWS service would you suggest for the use case where a data analytics company aims to perform SQL-based analysis on data stored on Amazon S3 with minimal effort? Redshift Amazon Aurora DynamoDB Amazon Athena 50 / 65 50. What is the primary benefit of deploying an RDS database in a Multi-AZ configuration? Multi-AZ improves database performance for read-heavy workloads Multi-AZ protects the database from a regional failure Multi-AZ enhances database availability Multi-AZ reduces database usage costs 51 / 65 51. Which of the following statement is correct for a Security Group and a Network Access Control List? Security Group acts as a firewall at the subnet level whereas Network Access Control List acts as a firewall at the instance level Security Group acts as a firewall at the VPC level whereas Network Access Control List acts as a firewall at the AZ level Security Group acts as a firewall at the AZ level whereas Network Access Control List acts as a firewall at the VPC level Security Group acts as a firewall at the instance level whereas Network Access Control List acts as a firewall at the subnet level 52 / 65 52. Which AWS service would you choose for a data processing project that needs a schemaless database? DynamoDB RedShift Aurora RDS 53 / 65 53. Which of the following is best-suited for load-balancing HTTP and HTTPS traffic? Auto Scaling Classic Load Balancer Network Load Balancer Application Load Balancer 54 / 65 54. Which AWS service will you use to provision the same AWS infrastructure across multiple AWS accounts and regions? CodeDeploy OpsWorks CloudFormation Systems Manager 55 / 65 55. Which AWS service enables the creation of a logically isolated section within the AWS Cloud, allowing the launch of AWS resources within your virtual network? Virtual Private Network (VPN) Virtual Private Cloud (VPC) Subnet Network Access Control List (NACL) 56 / 65 56. Which of the following is a serverless container service of AWS? Simple Notification Service Elastic Beanstalk AWS Fargate SageMaker 57 / 65 57. Which AWS tool or service is the most suitable option for a company seeking a secure online data transfer tool that can automate ongoing transfers from on-premises systems into AWS, while also providing support for incremental data backups? AWS DataSync AWS Snowmobile AWS Snowcone Storage Gateway 58 / 65 58. Which AWS service will help you receive alerts when the reservation utilization falls below the defined threshold? AWS Pricing Calculator AWS Budgets AWS CloudTrail AWS Trusted Advisor 59 / 65 59. Which of the following is the MOST cost-effective option to purchase an EC2 Reserved Instance? No upfront payment option with standard 1-year term No upfront payment option with standard 1-year term No upfront payment option with standard 3-years term Partial upfront payment option with standard 3-years term 60 / 65 60. Which of the following AWS Support plans provide access to guidance, configuration, and troubleshooting of AWS interoperability with third-party software? (Select two) Basic Developer Enterprise Corporate Business 61 / 65 61. As a Cloud Practitioner, which AWS service would you recommend for the use case where a startup aims to estimate its monthly AWS bill based on the AWS services it intends to use? AWS Cost & Usage Report AWS Pricing Calculator AWS Cost Explorer AWS Budgets 62 / 65 62. Which scenario accurately represents the charges for the transfer of 300 GB of data from an EC2 instance to an S3 bucket within the same region for the Security team at an MNC company? The company would only be charged for the outbound data transfer from EC2 instance The company would only be charged for the inbound data transfer into the S3 bucket The company would be charged for both the outbound data transfer from EC2 instance as well as the inbound data transfer into the S3 bucket The company would not be charged for this data transfer 63 / 65 63. Compared to the On-demand prices, what is the highest possible discount offered for reserved instances? 50 Percentage 80 Percentage 72 Percentage 65 Percentage 64 / 65 64. As a Cloud Practitioner, which solution would you recommend for the use case where an e-commerce company utilizing AWS Cloud desires separate invoices for its development and production environments? Use AWS Organizations to create separate invoices for development and production environments Create separate AWS accounts for development and production environments to receive separate invoices Tag all resources in the AWS account as either "development" or "production". Then use the tags to create separate invoices Use AWS Cost Explorer to create separate invoices for development and production environments 65 / 65 65. As part of a flexible pricing model, AWS offers two types of Savings Plans. Which of the following are the Savings Plans from AWS? Compute Savings Plans, Storage Savings Plans Reserved Instances Savings Plans, EC2 Instance Savings Plans Compute Savings Plans, EC2 Instance Savings Plans Instance Savings Plans, Storage Savings Plans Your score is LinkedIn Facebook Twitter 0% Restart quiz