Meow's AWS - Cloud Practitioner Exam Practice Q&A

Posted May 24, 2026

By Grace L

78 min read

AWS Cloud Practitioner - Exam Practice Q&A

Overview

This note collects practice Q&A for the AWS Certified Cloud Practitioner exam. Questions are grouped by topic. Correct answers are highlighted in red. Key terms and explanations appear in blue. Yellow-highlighted questions are marked as exam-critical.

Cloud Concepts and Architecture

Q: What are the 6 advantages of cloud computing?

1. Trade Capital Expenses For Variable Expenses 2. Benefit from massive economies of scale 3. Stop guessing about capacity 4. Increase speed and agility 5. Stop spending money running and maintaining data centers 6. Go global in minutes

Q: What are the three types of cloud computing service models?

1. Infrastructure As A Service (IaaS) - e.g., EC2 2. Platform As A Service (PaaS) - e.g., Elastic Beanstalk 3. Software As A Service (SaaS) - e.g., Gmail

Q: What are the three types of cloud computing deployment models?

1. Public Cloud - AWS, Azure, GCP 2. Hybrid - mix of private and public 3. Private/On-Premises Cloud - managed in own datacenter (OpenStack or VMware)

Q: Which descriptions are correct regarding cloud deployment models? (choose 2)

With public cloud

, the consumer organization typically incurs OPEX costs as they do not own the infrastructure and just pay usage costs.

With the private cloud

, the consumer organization typically owns and manages the infrastructure.

Q: What type of cloud is used by traditional on-premises methods?

Private Cloud

Q: VMware Cloud on AWS allows companies to migrate and extend their on-premises VMware vSphere-based environments to AWS Cloud using Amazon EC2. Which of the following choices accurately classifies this deployment model?

Hybrid

Q: Which cloud computing model gives the IT department the highest level of flexibility and management control?

IaaS On-premises cloud is a cloud deployment model, not a cloud computing model. Other cloud deployment models are Private, Public and Hybrid.

Q: Which of the following is an example of a SaaS?

All of the infrastructure, operating system and software are provided by a third party.

Q: What type of cloud computing service type do AWS Elastic Beanstalk and Amazon RDS correspond to?

PaaS

Q: What is fault-tolerance?

The ability to maintain operations during and/or after failure.

Q: How does Elasticity differ from Scalability?

Elasticity differs in its ability to not only scale-out but to shrink back down resources based on demand as well.

Q: The ability to horizontally scale Amazon EC2 instances based on demand is an example of which concept?

Elasticity

Q: Which of the following was NOT a business challenge before the cloud?

Cost Control of an on-premises datacenter.
Slow Provisioning of on-premises data centers.
Differing security protocols for a distributed workforce.
Fully-customizable infrastructure with on-premises data centers
(This is NOT a challenge - it is a benefit of on-premises)

Q: How can an application achieve high availability and fault-tolerance?

Utilizing multiple Availability Zones

Q: Which of these is an example of the hierarchy in the AWS global infrastructure from largest to smallest?

AWS Global Infrastructure, AWS Regions, Availability Zones, and Data Centers

Q: Which of these is descriptive of an Availability Zone?

An Availability Zone is an area containing datacenters in which AWS resources are available. An Availability Zone is one or more discrete data centers housed in separate facilities, each with redundant power, networking, and connectivity.

Q: What is a region?

A physical location in the world that has two or more availability zones.

Q: What things go into choosing the right AWS Region?

Data Sovereignty Laws - do you have to have your data in a certain area by law
Latency to end users - where are your users; put resources where they can quickly access them
AWS Services - some regions get certain services before others

Q: Which of the following are components of the AWS Global Infrastructure? One or more discrete data centers interconnected through low latency links?

Availability Zone

Q: Which statements about the AWS global infrastructure are true regarding data stored within an AWS Region?

Data stored within an AWS region is not replicated outside of that region automatically.

It is up to customers of AWS to determine whether they want to replicate their data to other regions. Compliance and network latency must always be considered.

Q: What should users do if they want to install an application in geographically isolated locations?

Deploy the app to multiple AWS Regions

Q: A solution that is able to support growth in users, traffic, or data size with no drop in performance aligns with which cloud architecture principle?

Elasticity

Q: Which of the following is an AWS Cloud architecture design principle?

Implement loose coupling

Q: A company’s web application currently has tight dependencies on underlying components, so when one component fails the entire web application fails. Applying which AWS Cloud design principle will address this?

Focus on decoupling components by isolating them and ensuring individual components can function when other components fail.

Q: What is a benefit of loose coupling as a principle of cloud architecture design?

Prevents cascading failures between different components

Q: When architecting cloud applications, which is a key design principle?

Implement elasticity

Q: Which architectural best practice aims to reduce the interdependencies between services?

Break into smaller, loosely coupled components

— reduce interdependencies in a system by enabling interaction only through specific, technology-agnostic interfaces (e.g., RESTful APIs).

Q: What are two best practices for designing your cloud environment?

Assume and practice failures. Build loosely coupled components

(so if one fails, it does not all fail.)

Q: Which is a recommended pattern for designing a highly available architecture on AWS?

Ensure that the application is designed to accommodate failure of any single component.

Q: A new service using AWS must be highly available. Yet, due to regulatory requirements, all of its Amazon EC2 instances must be located in a single geographic area. According to best practices, to meet these requirements, the EC2 instances must be placed in at least two:

Availability Zones Subnets Each Availability Zone is associated with a subnet. So 2 Availability Zones = 2 Subnets.

Q: Which of the following features can be configured through the Amazon Virtual Private Cloud (Amazon VPC) Dashboard?

Subnet

Q: What is an example of agility in the AWS Cloud?

Decreased acquisition time for new compute resources.

Q: How does AWS shorten the time to provision IT resources?

Provide the ability to programmatically provision existing resources

Q: How can the AWS Cloud increase user workforce productivity after migration from an on-premises data center?

Users do not have to wait for infrastructure provisioning

Q: What approach to transcoding a large number of individual video files adheres to AWS architecture principles?

Use many instances in parallel

Q: Which of the following deployment models enables customers to fully trade their capital IT expenses for operational expenses?

Cloud

Q: How can a company reduce its Total Cost of Ownership (TCO) using AWS?

By minimizing large capital expenditures

Q: Traditional vs. Cloud Computing - key differences?

IT Assets as Provisioned Resources
Global, Available, and Scalable Capacity
Higher Level Managed Services
Built-In Security
Architecting For Cost
Operating on AWS

IAM (Identity and Access Management)

Q: What does IAM stand for? When you create a user or group, is it created regionally or globally?

Identity Access Management; Globally

Q: Which of the following can IAM be used to manage?

Users, MFA, Roles, Groups

IAM Key Concepts

Q: What access privileges does a new IAM user have by default?

AWS Console login access

Q: Any new IAM Users created are granted _.

No access to AWS services.

Q: Which AWS managed policy could be attached to an IAM User to grant all access permissions?

AdministratorAccess

Q: Which of the following will grant permissions when directly attached to an IAM User?

IAM Policy

Q: Three developers need access to S3. What is the most appropriate and efficient way to give all developers (IAM users) access to S3?

Add the developers to an IAM Group and attach an IAM policy to that group.

Q: In this scenario, we have an IAM User with an AWS DenyAll policy, but this user is also in an IAM Group with access to various AWS services including S3, EC2, VPC, and IAM. Which resources can this user access?

The IAM user cannot access any of the AWS services. An explicit deny always overrides an explicit allow.

Q: Which IAM entity can be used for assigning permissions to AWS services?

IAM role

Q: Which of the following IAM options allows an application to write data to S3 for backups?

Role

Q: What is an AWS Identity and Access Management (IAM) role?

An entity that defines a set of permissions for use with an AWS resource

Q: Are roles regional or universal?

Universal

they can be used in any place around the world.

Q: Roles are a better alternative to…

Using Access Key IDs and secret access keys

Q: What is a root account? What access does it have? How do you secure the root account?

The email address you used to set up your AWS account; it has full administrator access; you should secure it with multi-factor authentication.

Q: What does MFA stand for?

Multi-Factor Authentication

Q: Which of the following is NOT a method of getting or using MFA codes?

Virtual MFA Device
Hardware key fob
API keys
(not an MFA method)
Single sign-on
(not an MFA method)

Q: What are the ways you can interact with AWS?

Console
Command Line Interface (CLI)
Software Development Kits (SDKs)

Q: Which AWS IAM feature allows developers to access AWS services through the AWS CLI?

Access keys

Q: To use the AWS CLI, users are required to generate:

An access/secret key

Q: Access keys in AWS Identity and Access Management (IAM) are used to:

Make programmatic calls to AWS from AWS APIs

Q: Which of the following can limit Amazon S3 bucket access to specific users?

IAM policy

Q: Which actions represent best practices for using AWS IAM? (Choose two.)

Configure a strong password policy Rotate access keys on a regular basis

Q: You are using your corporate directory to grant your users access to AWS services. What is this called?

Federated Access When you use an external directory, such as a corporate one, to grant users in that directory access to AWS resources.

Q: Which of the following can a customer use to enable single sign-on (SSO) to the AWS Console?

AWS Directory Service

Q: What do group policies consist of?

Policies consist of JavaScript Object Notation (JSON). You also have a key value pair, e.g., "name": "AcloudGuru"

Q: How do you set permissions in a group?

Apply policies to the group

Q: Which of the following are AWS Security, Identity, and Compliance services?

KMS

makes it easy to create and manage cryptographic keys.

Secrets Manager

protects the secrets you use for access to applications and services.

Security Hub

consolidates your view of security and compliance status in the cloud.

EC2 (Elastic Compute Cloud)

Q: What is Amazon EC2?

Amazon Elastic Compute Cloud; a web service that provides resizable compute capacity in the cloud. It reduces the time required to obtain and boot new server instances to minutes, allowing you to quickly scale capacity, both up and down, as your computing requirements change.

Q: What benefits does Amazon EC2 provide over using non-cloud servers? (choose 2)

Elastic Web-Scale computing - increase or decrease capacity within minutes not hours and commission one to thousands of instances simultaneously.
Inexpensive - Amazon passes on the financial benefits of scale by charging very low rates and on a capacity consumed basis.

AWS provides an SLA for EC2 of at least 99.99%.

Q: Which AWS service provides elastic web-scale cloud computing allowing you to deploy operating system instances?

EC2

Q: Which of the following are the four types of EC2 instances?

On Demand
Reserved
Spot
Dedicated Hosts

Q: What is an On Demand EC2?

Allows you to pay a fixed rate by the hour (or by the second) with no commitment.

Q: What is a Reserved EC2?

Provides you with a capacity reservation and offers a significant discount on the hourly charge for an instance. Contract Terms are 1 year or 3 years.

Q: What is a Spot EC2?

Enables you to bid whatever price you want for instance capacity, providing for even greater savings if your applications have flexible start and end times.

Q: What is a Dedicated Host EC2?

Physical EC2 server dedicated for your use. Dedicated Hosts can help you reduce costs by allowing you to use your existing server-bound software licenses.

EC2 Pricing Models

Q: Which Amazon EC2 billing option gives you low cost, maximum flexibility, no upfront costs or commitment, and you only pay for what you use?

On-Demand instances

With On-Demand instances you pay for hours used with no commitment. There are no upfront costs so you have maximum flexibility.

INCORRECT: “Spot Instances” is incorrect. Spot instances are used for getting a very low price which you bid on. You lose some flexibility as you are constrained by market prices and your workloads can be terminated if the market price exceeds your bid price.

Q: What is the main benefit of why someone might choose an On-Demand EC2 instance?

Create, start, stop at any time. Charged on second or hour rate, no termination fee.

Q: Which Amazon EC2 instance pricing model can provide discounts of up to 90%?

Spot instances

Q: Which Amazon EC2 pricing model adjusts based on supply and demand of EC2 instances?

Spot instances

Q: Which Amazon EC2 pricing model is the MOST cost-efficient for an uninterruptible workload that runs once a year for 24 hours?

On-demand instances

Q: You need to run a production process that will use several EC2 instances and run constantly on an ongoing basis. The process cannot be interrupted or restarted without issue. What EC2 pricing model would be best for this workload?

Reserved Instances (RIs)

Q: What are the benefits of using reserved instances? (choose 2)

With reserved instances you commit to a 1- or 3-year term and get a significant discount from the on-demand rate. You can also reserve capacity in an availability zone with reserved instances.

CORRECT: "Reduced cost" is a correct answer. CORRECT: "Reserve capacity" is also a correct answer.

Q: Which Amazon EC2 Reserved Instance type enables you to match your capacity reservation to predictable recurring dates and times?

Scheduled RI

Q: You have a new requirement for your application that needs a set of servers for a short period of time of up to four months. While the instances are needed for a short period, the instances must be always available for the full duration. What instance type would be the best choice?

A. Reserved instances (at least a year) - INCORRECT B. Partial up front reserved instances - INCORRECT C. On-demand instances - CORRECT D. Spot instances - INCORRECT

Q: Which of the Reserved Instance (RI) pricing models provides the highest average savings compared to On-Demand pricing?

3 year, all upfront, standard RI pricing

Q: Which of the Reserved Instance (RI) pricing models can change the attributes of the RI as long as the exchange results in the creation of RIs of equal or greater value?

Convertible RIs

Q: Medium Corp is planning to purchase Reserved Instances. Which option is the MOST expensive?

Reservation for 1 year with no upfront

Q: Andrew is a software developer and wants to run few instances for a batch processing job for duration of three days. The job metadata is stored in S3 and if the job gets interrupted, it can be started again without any impact. Considering cost is a major factor, which instance pricing model should he choose?

Spot instance

Q: Which Amazon EC2 pricing model automatically adjusts charges as your usage changes?

Savings Plans

is the only Amazon EC2 pricing model that provides the flexibility of adjusting charges depending on the amount of usage, thereby saving money in the process.

Q: You have EC2 instances running at 90% utilization and you expect this to continue for at least a year. What type of EC2 instance would you choose to ensure your costs stay at a minimum and avoid interruption?

Reserved instances

Q: In this scenario, we have an increase in traffic on a holiday sale. What EC2 purchasing option should we use to acquire the resources to handle the traffic?

On-Demand

Q: You have a dedicated web server and database that remains largely idle but sometimes has huge spikes in activity. What can you architect to improve your cost-efficiency?

Configure serverless architecture leveraging Lambda.

Q: Which of the following is not an available EC2 Instance Type?

General Purpose
Memory Optimized
Compute Optimized
Accelerated Computing
Storage Optimized
Database Optimized
(this is NOT a valid EC2 instance type)

Q: Which of the following types of EC2 instances is ideal for workloads that process large data sets in memory?

Memory Optimized

Q: Which service allows an organization to bring their own licensing on host hardware that is physically isolated from other AWS accounts?

CORRECT: "EC2 Dedicated Hosts" is the correct answer.

INCORRECT: “EC2 Dedicated Instances” is incorrect.

Q: Where can resources be launched when configuring EC2 Auto Scaling?

Amazon EC2 Auto Scaling is configured within the EC2 console and can launch instances within a VPC across multiple AZs. It cannot launch resources into another AWS Region.

CORRECT: "Multiple AZs within a region" is the correct answer.

Q: An Auto Scaling Group is a _.

Logical grouping of EC2 instances for the purpose of scaling

Q: In this scenario, we have an ELB balancing traffic between two instances, but the instances are reaching capacity. What could we do to automate a solution for handling the traffic?

Create an Auto Scaling Group

Q: Which of these important Cloud concepts will an ELB improve?

Fault Tolerance High Availability

Q: Which AWS service can be used to manually launch instances based on resource requirements?

EC2

Q: Which AWS service can be used to automatically scale an application up and down without making capacity planning decisions?

Auto Scaling

Q: John is running a web application and seeing very changing traffic workloads - few hours a day traffic is very high however for rest of the day traffic is less. Which AWS feature can john utilize to add and remove server capacity based on traffic workload?

Auto-scaling

Q: Which of the following services will automatically scale with an expected increase in web traffic?

ELB (Elastic Load Balancing)

Q: By default, a root EBS volume is set to be _ when an instance is _.

deleted, terminated

Q: By default, Security Groups __.

allow all outbound traffic and deny all inbound traffic

Q: Which of these types of operating systems will we see in AWS?

Windows Linux

Q: What should the permissions of a key pair (.pem file) be before connecting to an EC2 instance?

400

Q: What does AMI stand for?

Amazon Machine Image

Q: Community AMIs are _.

free to use

Q: A Security Group is used to _ traffic on the _.

explicitly allow, instance level

Q: Which of these components does a security group represent for an EC2 instance?

Firewall

Q: A security group is a _ on the _ level.

Firewall, instance

Q: What acts as a virtual firewall that controls traffic to your EC2 instances?

Security group

Bold: “AWS WAF” is incorrect - WAF protects your web applications. AWS security groups (SGs) are associated with EC2 instances and provide security at the protocol and port access level.

Q: Which tools can best assist with identifying common security vulnerabilities within your EC2 Instances?

AWS Config (configuration)
AWS Trusted Advisor
AWS Inspector
~~AWS Guard Duty~~ (Guard Duty is a threat detection service)

AWS Inspector

can check your EC2 instances for common security vulnerabilities.

Q: What type of placement group should you use to spread Amazon EC2 instances across logical partitions so that they don’t share the same underlying hardware?

Partition With a partition placement group, EC2 instances are placed into logical segments called partitions, each of which has its own set of racks to supply its network and power source. This level of isolation is designed to prevent the impact of hardware failure within your application.

Q: Which of the following are advantages of using Amazon Machine Images (AMIs) backed by Amazon Elastic Block Storage (EBS), rather than by EC2 instance storage?

Unlike EC2 instance store, EBS uses persistent storage EBS launches faster than EC2 instance storage

Q: Which type of AWS storage is ephemeral and is deleted when an instance is stopped or terminated?

EC2 instance store

Q: Your company needs to host a database in their AWS environment but needs to have control over patching. Which is the best choice?

EC2 instance

Q: What is AWS Lightsail?

One of AWS's VPS Services

Q: Which service can you use to provision a preconfigured server with little to no AWS experience?

Amazon LightSail

VPC, Networking, and Load Balancers

Q: What does VPC stand for?

Virtual Private Cloud

Q: What is a VPC?

A logically isolated section of the AWS Cloud

Amazon Virtual Private Cloud (Amazon VPC) lets you provision a logically isolated section of the AWS cloud where you can launch AWS resources in a virtual network you define. You have complete control over your virtual networking environment, including selection of your own IP address range, creation of subnets, and configuration of route tables and network gateways.

Q: What is the scope of a VPC within a region?

An Amazon Virtual Private Cloud (VPC) spans all availability zones within a region.

Q: How many VPCs are created by default in a region?

Q: How many VPCs can an EC2 instance be attached to at a time?

Q: How many Internet Gateways can an EC2 instance be attached to at a time?

1

Q: VPCs span all of these except for _.

AWS Regions

Q: Which choice below allows you to carve out a portion of the AWS Cloud?

VPC

Subnet (creates subsections of the VPC)

Q: What is a NACL?

A firewall on the subnet level A stateless firewall for inbound/outbound traffic (NACL)

Q: Which of the following is true about public subnets and private subnets?

A public subnet has a route table pointing to an Internet Gateway A private subnet does not have a route table pointed to an Internet Gateway

Q: A subnet is a _.

Subsection of a network

Q: Which of these statements is true of subnets?

The default VPC already has subnets created for each AZ by default.

Subnets cannot span AZs.

We can add one or more subnets in each AZ.

Q: How many subnets are created by default in each region when an AWS account is created?

1 subnet per Availability Zone

Q: Which of the following will create subsections of a VPC?

Subnet

Q: What does a route table do?

Directs traffic within a network

Q: Which of the following is descriptive of an Internet Gateway?

A route to and from the internet

Q: In this scenario, we have a NACL with the following rules:

Rules	Traffic
Rule#1	Allow SSH
Rule#2	Allow HTTP
Rule#3	Deny All
Rule#4	Allow All

Which is true based on the rules within this NACL?

All traffic except SSH and HTTP will be denied

Q: Which feature allows you to associate security features with a subnet inside your VPC to protect your environment from incoming traffic requests?

NACLs

Q: Which items can be configured from within the VPC management console? (choose 2)

Subnets

and Security groups can be configured from within the VPC console.

“Regions” is incorrect.

Q: Which AWS network element allows you to assign a static IPv4 address to an EC2 instance?

Elastic IP

Q: What are two ways of connecting to an Amazon VPC from an on-premises data center? (choose 2)

You can connect from your on-premises data center to a VPC via Direct Connect or VPN CloudHub.

AWS Direct Connect is a network service that provides an alternative to using the Internet to connect a customer’s on-premises sites to AWS.
If you have multiple VPN connections, you can provide secure communication between sites using the AWS VPN CloudHub.

Q: What can you use to quickly connect your office securely to your Amazon VPC?

AWS managed VPN

Q: Which AWS services can be used to connect the AWS Cloud and on-premises resources? (Select TWO.)

AWS Managed VPN

a virtual private network connection over the public Internet. This creates an encrypted link between the on-premises network and your AWS VPC.

AWS Direct Connection

connects on-premises networks to AWS using private network links.

Q: Which AWS service allows companies to connect an Amazon VPC to an on-premises data center?

Amazon Direct Connect

Q: Which services below provide a connection from your on-premises environment infrastructure and resources to your resources hosted in AWS?

AWS VPC
VPC peering (peers two VPCs together, not on-premises)
AWS Direct Connect
AWS Virtual Private Network

Q: Which service would provide network connectivity in a hybrid architecture that includes the AWS Cloud?

AWS Direct Connect

Q: What are the types of load balancers?

Application Load Balancers, Network Load Balancers, Classic Load Balancers

Q: What is an Application Load Balancer?

Load balancer that is application aware - can see layer 7 (i.e., code) and make intelligent decisions.

Q: What is a Network Load Balancer?

Load balancer that is used when you need extreme performance and have a static IP address.

Q: What is a Classic Load Balancer?

Load balancer that should be used for test and development. Keeps cost low (being phased out).

Q: Have an application composed of individual services and you need to route a request to a service based on the content of the request. What type of load balancer should you use?

Application load balancer

Q: Which service is used to introduce fault tolerance into an application architecture?

ELB (fault tolerance)

Amazon CloudFront (cache)

Q: Which AWS services should be used for read/write of constantly changing data?

RDS

or AWS EFS

Q: Which AWS service allows you to connect to storage from on-premises servers using standard file protocols?

Amazon EFS EFS is a fully-managed service that makes it easy to set up and scale file storage in the Amazon Cloud. EFS filesystems are mounted using the NFS protocol. Access to EFS file systems from on-premises servers can be enabled via Direct Connect or AWS VPN.

Q: A company is planning to launch an ecommerce site in a single AWS Region to a worldwide user base. Which AWS services will allow the company to reach users and provide low latency and high transfer speeds? (Choose two.)

AWS Global Accelerator Amazon CloudFront

Q: A cloud practitioner needs to decrease application latency and increase performance for globally distributed users. Which services can assist? (Select TWO.)

Amazon S3 and CloudFront ElastiCache caches data from a database in-memory. AppStream 2.0 is an application streaming service for streaming applications to computers.

Q: Company wants to use an AWS service to monitor the health of application endpoints, with the ability to route traffic to healthy regional endpoints to improve application availability. Which service will support these requirements?

AWS Global Accelerator

Q: Which services can be used across hybrid AWS Cloud architectures?

Route 53

“Virtual Private Gateway” can also be used for such architectures.

Q: Which service provides a hybrid storage service that enables on-premises applications to seamlessly use cloud storage?

AWS Storage Gateway

Q: Which AWS hybrid storage service enables on-premises applications to seamlessly use AWS Cloud storage through standard file-storage protocols?

AWS Storage Gateway

Q: What is the purpose of the AWS Storage Gateway?

Connect on-premises data storage to the AWS Cloud

Q: A company is considering using AWS for a self-hosted database that requires a nightly shutdown for maintenance and cost-saving purposes. Which service should the company use?

EC2 with EBS

S3 and Storage

Q: What is S3?

Storage Service

S3 is:

Object-Based (allows you to upload files)
Storage is unlimited
Files are stored in buckets
S3 is a universal namespace so names must be unique globally

Q: What S3 term is used in place of “file”?

Object

Q: What is the root level folder you create in S3 called?

Bucket

Q: Amazon S3 bucket names must be unique across _.

AWS

Amazon S3 bucket names must be unique across AWS.

Q: S3 is an example of _.

Elastic Block Store (INCORRECT)
Storage array (INCORRECT)
Block storage (INCORRECT)
Bulk storage

Q: Which of the following are examples of cloud bulk storage?

Google Drive, Amazon S3, Dropbox

Q: Which of the following is an example of block storage?

Amazon EBS

~~AWS Storage Gateway~~ (incorrect - Storage Gateway is hybrid storage)

Q: What type of websites can be hosted on S3? What type of websites CANNOT be hosted on S3?

S3 can host static websites (HTML); S3 CANNOT host websites that require database connections (e.g., WordPress).

Q: Which storage service can be used as a low-cost option for hosting static websites?

Q: What is the lowest-cost, durable storage option for retaining database backups for immediate retrieval?

Q: Which statements are correct regarding Amazon S3 buckets? (choose 2)

Bucket names must be unique globally Buckets are region-specific

and the data never leaves that region unless explicitly configured to do so through cross-region replication (CRR).

Q: Do you view buckets globally or regionally? Can you have buckets in individual regions?

Globally

; yes, you can have buckets in individual regions.

Q: What does cross region replication do?

Allows you to replicate the contents of one bucket to another bucket automatically

Q: What is a characteristic of Amazon S3 cross-region replication?

S3 buckets configured can be owned by a single AWS account or different accounts

Q: What is the availability and durability of S3 Standard Storage Class?

11 nines (9x11) durability and 99.99% availability.

Q: What is S3 Standard?

Almost 100% availability and durability, stored redundantly across multiple devices.

Q: What are the 6 types of S3?

S3 Standard
S3 - IA (Infrequently Accessed)
S3 One Zone-IA
S3 - Intelligent Tiering
S3 Glacier
S3 Glacier Deep Archive

Q: What S3 storage class is the most expensive?

Standard

Q: What is S3-IA?

(Infrequently Accessed) - for data that is accessed less frequently, but requires rapid access when needed. Lower fee than S3, but charged a retrieval fee.

Q: What is S3 One Zone-IA?

When you want a low cost option for infrequently accessed data and don't require the multiple AZ data resilience.

Q: What is S3 - Intelligent Tiering?

Built to optimize costs by automatically moving data to the most cost-effective access tier, without performance impact or operational overhead.

Q: What is S3 Glacier?

A secure, durable, and low-cost storage class for data archiving. Retrieval times can range from minutes to hours.

Q: What is S3 Glacier Deep Archive?

Amazon S3's lowest-cost storage class where retrieval time of 12 hours is acceptable.

Q: A hospital organization wants to store patient health information as cheap as possible for archive purposes and is not worried about retrieval periods. What would be the most appropriate storage class?

Glacier Deep Archive

Q: Upon sign-up of an AWS account, how much Amazon S3 Standard storage will you get for no cost?

5 GB

Q: Which of the following are key components of Amazon Glacier?

Data is organized in S3 into Archives, and Vaults are used to group Archives together. Access policies control who can access the data in Archives and Vaults.

Buckets are a part of S3, but not Glacier. Volumes are often associated with hard disks and therefore EBS. Tables are database constructs.

Q: You have been asked to archive some data into Glacier that needs to be encrypted. What is the easiest way to achieve this?

Send the data to Glacier and do nothing more - all data in Glacier is encrypted by default.

Data stored in Glacier is encrypted by default so nothing else needs to be done.

Q: Which AWS Glacier data access option retrieves data from an archive in 1-5 minutes?

Expedited

Expedited retrievals allow you to quickly access your data when occasional urgent requests for a subset of archives are required. For all but the largest archives (250 MB+), data accessed using Expedited retrievals are typically made available within 1-5 minutes.

Q: What is S3 transfer acceleration?

Instead of uploading to S3 you upload to an edge location (goes on Amazon's internal network and then it's uploaded to the bucket - makes things faster).

Q: What is the AWS storage gateway?

Hybrid Storage Service

Q: What are the names of two types of AWS Storage Gateway? (choose 2)

File Gateway:
data is uploaded to S3 for use with object based workloads.
Volume Gateway.
- stored volumes:
  keep the customer data on the customer premises location.
- cached volumes:
  store data in AWS Cloud
Virtual Tape Library Gateway:
for long term, off-site data archiving. A virtual tape library (VTL) interfaces with the customer’s backup software.

Q: Which of these will allow an organization to cache their environment locally and store the data within the AWS cloud?

Cached volumes

Q: Which type of storage stores objects comprised of key, value pairs?

Amazon S3

DynamoDB (not objects, but items)

Q: For cost optimization in AWS, what are two options you must consider for S3?

Whether you need to use encryption (Encryption is not an added expense) The number of S3 buckets you need. (not an added expense.)

The total size in gigabytes of all objects being stored

Storage class being used or picked to store objects

Q: S3 Pricing Reference:

S3 Standard Storage: First 50 TB $0.023/GB, Next 450 TB $0.022/GB, Over 500 TB $0.021/GB
S3-IA: $0.0125/GB
S3 One Zone-IA: $0.01/GB
S3 Glacier: $0.004/GB
S3 Glacier Deep Archive: $0.00099/GB

Q: An EBS volume is a _.

highly available and reliable storage volume storage volume that can be attached to any instance in the same AZ (Availability Zone)

Q: Which of the following AWS services uses EBS as a detachable storage?

Amazon EC2

Q: Which of the following is a benefit of using the AWS Cloud? What is the lowest-cost, durable storage option?

Q: How do you know an S3 upload has been successful?

You get an HTTP 200 status code

Q: How can you make entire S3 buckets public?

Use bucket policies

Q: How does S3 scale?

S3 scales automatically to meet your demand.

Good for when static websites are going to have a large number of requests coming in.

Q: Read after write consistency is for…

PUTS of new Objects

Q: Eventual Consistency is for…

overwrite PUTS and DELETES (can take some time to propagate)

Q: What are the Key Fundamentals for S3?

Key (the name of the object)
Value (the data, made up of a sequence of bytes)

Q: You are building an online cloud storage platform. Users will be uploading their files for backup to your applications. You are unsure about the capacity requirements. Which AWS service can help you here?

Databases

Q: What are the types of databases?

RDS

and DynamoDB (NoSQL)

Q: What are the 6 types of RDS available on Amazon?

SQL, MySQL, PostgreSQL, Oracle, Aurora, and MariaDB

Q: Which of these are relational database engines supported by Amazon RDS?

Amazon Aurora, PostgreSQL, MySQL

Q: Which of the below AWS services supports automated backups as a default configuration?

RDS

Q: When using Amazon RDS databases, which items are you charged for? (choose 2)

CORRECT: "Multi AZ" is a correct answer. CORRECT: "Outbound data transfer" is also a correct answer. INCORRECT: “Backup up to the DB size” is incorrect - you do not pay for backup storage up to the size of the database. You only pay for backup storage in excess of the database size.

Q: What are the key features of Relational Databases?

Multiple Availability Zones (can be put in multiple AZs in case a disaster ruins one)
Read Replicas (there is a copy of the real database sent to an EC2 and data is read from the copy of the database rather than the actual. Information is written to the real database though. This avoids traffic.)

Q: Which option allows failover to a second database in case the primary database fails?

Multi-AZ Deployment

Q: What are the differences between RDS and DynamoDB?

RDS does not support JSON document store models DynamoDB does support JSON document store models DynamoDB is a NoSQL database and RDS is a SQL database RDS provides other database software options

DynamoDB does not provide alternative database software options

Q: Which of the benefits are of Amazon RDS?

Cost-Efficient, Scalable, Fully-managed, Resizeable Database

Q: How is a RDS different from a Non-Relational DB?

The columns in the table can vary and this won't affect other rows in the database (example, one row can have a home phone and a cell # while the next just has a cell #)

Q: What is Amazon’s non-relational DB?

DynamoDB

Q: Which of the following NoSQL databases does Amazon DynamoDB replace?

Oracle NoSQL, Cassandra DB, MongoDB

Q: Which AWS database service is schema-less and can be scaled dynamically without incurring downtime?

DynamoDB

Q: Which DynamoDB feature provides in-memory acceleration to tables that result in significant performance improvements?

Amazon DynamoDB Accelerator (DAX) A fully managed, highly available, in-memory cache for DynamoDB that delivers up to a 10x performance improvement - from milliseconds to microseconds - even at millions of requests per second. DAX does all the heavy lifting required to add in-memory acceleration to your DynamoDB tables, without requiring developers to manage cache invalidation, data population, or cluster management.

“Amazon ElastiCache” is incorrect. This service is also an in-memory cache but it is not a feature of DynamoDB.

Q: What is Elasticache?

A data caching database service

Web server that caches the most common DB queries and returns it faster than a database (takes a big load off the PRODUCTION DB / speeds up performance of existing DBs).

Q: What in-memory database engines does ElastiCache support?

Redis Memcached

Q: What type of queries should be made to ElastiCache?

Common Queries

Q: What type of queries should be made in the production DB?

Unique queries

Q: Which service is best for storing common database query results, which helps to alleviate database access load?

Amazon ElastiCache

Q: What is Amazon’s Data Warehouse called?

RedShift

Q: What is Redshift?

A data warehouse database service

Q: What is a Data Warehouse?

Built from ground up for complicated queries

Q: What is Red Shift OLAP used for?

Complex queries (its infrastructure is built for it)

Q: What is a con of OLAP (Online Analytics Processing)?

There is a performance lag

Q: What is Online Transaction Processing (OLTP)?

When you run a simple query and only return one row, OR when you simply add a row.

Q: What is Online Analytics Processing (OLAP)?

When you run a complex query and get several rows back. But there's a performance lag - people use data warehouses instead.

Q: Which AWS services are best suited for analyzing data using standard SQL and Business Intelligence (BI) tools?

Amazon Redshift

Q: What is Amazon’s Graph Database called?

Amazon Neptune

Q: Which of the following database migrations are classified as heterogeneous?

Microsoft SQL Server to Amazon Aurora Oracle to Amazon Aurora

Q: What feature of Amazon RDS helps to create globally redundant databases?

Cross-region read replicas

Q: Which of the following are benefits of Amazon RDS read replicas?

Increased availability Enhanced performance Designed for security

Automated backups are a feature of multi-AZ deployments, not a benefit of read replicas.

Q: Which AWS managed database provides processing power that is up to five times faster than a traditional MySQL database?

Aurora

Q: Your company needs an application with a .NET layer that connects to a MySQL database. They want this application to be in AWS and use benefits such as five-times throughput, high availability, and automated backups. What database would be the ideal choice?

Aurora

Aurora is a fully managed MySQL- and PostgreSQL-compatible relational database engine. It delivers up to five times the throughput of MySQL and up to three times the throughput of PostgreSQL.

Q: How can a database administrator reduce operational overhead for a MySQL database?

Migrate the database onto an Amazon RDS instance

Q: Which AWS would you use to migrate an existing database to AWS?

AWS Snowball (for large data transport, not migration) AWS DMS

AWS DMS (Database Migration Service) supports homogeneous migrations such as Oracle to Oracle, as well as heterogeneous migrations between different database platforms, such as Oracle or Microsoft SQL Server to Amazon Aurora. The source database remains fully operational during the migration, minimizing downtime.

Q: Which AWS service can be used to prepare and load data for analytics using an extract, transform and load (ETL) process?

AWS Glue

Q: Which services can be used to analyze data?

Amazon Kinesis

is used to analyze data and video streams in real time.

QuickSight

is used to analyze visualizations of customer data.

Compute Services

Q: What is AWS Lambda?

Compute service

Q: Which of the following is not a use case for AWS Lambda?

Data processing
Real-time stream processing
Real-time file processing
Data warehousing
(this is NOT a Lambda use case)

Q: Which of the following languages does AWS Lambda currently support?

Node.js, Ruby, Java (and also Python, Go, C#, PowerShell)

Q: Which of the following are true statements about AWS Lambda?

AWS Lambda integrates with most AWS services AWS Lambda is scalable. AWS Lambda does not require server management. AWS Lambda only charges when code is executed and running.

Q: Which of the following are options for creating Lambda functions?

Author from scratch, using a blueprint, and browsing the serverless app repository

Q: Which of the following services are considered by AWS to be a serverless platform?

Amazon Aurora, Amazon Athena, AWS Lambda

Q: Which services are parts of the AWS serverless platform?

AWS Step Functions, DynamoDB, SNS, Lambda

Q: Which AWS services form the app-facing services of the AWS serverless infrastructure? (choose 2)

AWS Lambda and Amazon API Gateway

are both app-facing components of the AWS Serverless infrastructure.

AWS Step Functions is an orchestration service.

Q: What is Amazon Athena?

An interactive query service that allows you to query data located in S3 using standard SQL. It's serverless and commonly used to analyze log data in S3.

Q: What are a few Athena use cases?

Query log files in S3 (ELB logs, S3 access logs)
Generate business reports on the data stored in S3
Analyze AWS cost and usage reports
Run queries on click-stream data

Q: Which of the following services is a serverless interactive query service for analytics?

AWS Lambda
Amazon Athena

Q: Which AWS service can assist with coordinating tasks across distributed application components for business process workflows?

SWF (Simple Workflow Service)

Q: What AWS service helps process a large amount of data sets?

EMR (Elastic Map Reduce)

Analyzes and processes vast amounts of data by distributing the compute work across a cluster of servers. The cluster is managed using the open-source framework Hadoop.

Q: Which AWS service can be used to process a large amount of data using the Hadoop framework?

Amazon Elastic Map Reduce (EMR)

Q: Which of the following AWS services can scale automatically without intervention? (choose 2)

Both S3 and DynamoDB

automatically scale as demand dictates.

EBS and RDS do not scale automatically. You must intervene to adjust volume sizes and database instance types to scale these resources.

CloudFront and CDN

Q: What is CloudFront?

Content Delivery Network

Q: CloudFront and edge locations - how does caching work?

The first time the user requests a file you download it from a bucket. Next time someone wants to download the same file, they will download it from the edge location rather than the actual bucket.

Q: What is an Edge Location?

A location where content will be cached

Endpoints for AWS which are used for caching content.

Q: What is a Distribution?

The name given to CDN which consists of a collection of edge locations

Q: What is an Origin?

The origin of all the files that the CDN will distribute. Can be either an S3 Bucket, an EC2 instance, an elastic load balancer, or Route53.

Q: Do you read or write to Edge Locations?

You can read and write (write = put an object in them) to them.

Q: Do you get charged for clearing cached objects?

Yes

Q: How long are objects cached?

For the life of the TTL (time to live)

Q: What is RTMP distribution used for?

Media Streaming

Q: What is web distribution used for?

Used for websites

Q: Which AWS services are associated with Edge Locations? (choose 2)

AWS CloudFront AWS Shield

Q: Use cases for Amazon CloudFront?

Security and encryption Static asset caching Live on-demand video streaming

Route 53

Q: What is Route 53?

DNS service

Q: What is a DNS?

(Domain Name System) phone book for computers (search domain name in book and get the IP address)

Q: What are the three main functions of Route 53?

Health Checks, DNS (Domain Name System) service, Domain Registration

Q: Is Route53 global or regional?

Global

Q: What AWS service is used to manage DNS?

Route 53

Q: What service would be most useful in a disaster recovery situation?

Route 53

Q: What two services in combination aid in DDoS mitigation?

CloudFront and Route 53

CloudWatch, CloudTrail, and Monitoring

Q: By default, which timeframe does CloudWatch provide free analysis metrics?

5 minutes

Q: You would like to collect custom metrics from a production application every 1 minute. What type of monitoring should you use?

CloudWatch with detailed monitoring

Q: Which of the following are features of Amazon CloudWatch? (choose 2)

It is used to gain system-wide visibility into resource utilization It can be accessed via API, command-line interface, AWS SDKs, and the AWS Management Console

“It records account activity and service events from most AWS services” is incorrect - that is CloudTrail.

CloudWatch is for performance monitoring whereas CloudTrail is for auditing. CloudWatch is used to collect and track metrics, collect and monitor log files, and set alarms.

Q: What can CloudWatch Monitor?

Compute (EC2 instances, autoscaling groups, elastic load balancers, Route53 health checks), Storage, and Content Delivery (EBS Volumes, Storage Gateways, CloudFront)

Q: How often does CloudWatch with EC2 monitor events?

Every 5 minutes by default

(you can make it 1 minute intervals by turning on detailed monitoring)

Q: What are the types of Alarms and Events for AWS?

Amazon CloudWatch Alarms (e.g., billing alarms)
Amazon CloudWatch Events (have the environment proactively respond to a change - e.g., upload a pic to S3 and auto add a watermark)
AWS Lambda Scheduled Events (setting things to happen at a certain time)
AWS Web Application Firewall (WAF) (security automations)

Q: What AWS service is triggered to send a message by a CloudWatch Alarm?

SNS

Q: Which of the following services can Amazon CloudWatch use as a target to deliver near real-time streams of system events that describe changes in AWS resources?

EC2 instances, AWS Lambda functions, and Amazon SQS queues

are a few of the AWS services that can be configured as targets for CloudWatch events.

Q: What AWS service could you use to see errors encountered when running scripts in Lambda?

AWS Inspector (INCORRECT - Inspector checks EC2)

CloudWatch metrics and logs to watch for errors

AWS Config
CloudTrail to monitor for errors

Q: Which service allows you to monitor and troubleshoot systems using system and application log files generated by those systems?

CloudWatch Logs

Q: What is AWS CloudTrail?

A service that records AWS management console actions and APIs (IDs which users/accounts called AWS).

CLOUD TRAIL IS ON A PER ACCOUNT AND PER REGION BASIS, BUT THE RESULTS FROM SEVERAL ACCOUNTS CAN BE PUT INTO A BUCKET IN THE PAYING ACCOUNT.

Q: AWS CloudTrail is a service that enables which of the following?

Governance, Operational auditing, Compliance, Risk auditing

“Resource metrics” is CloudWatch, not CloudTrail.

Q: Which service stores log events for CloudTrail?

Q: Which service helps in governance, compliance, and risk auditing?

CloudTrail

AWS CloudTrail is a service that enables governance, compliance, operational auditing, and risk auditing of your AWS account.

Q: How do you encrypt CloudTrail logs?

No action is needed since they are automatically encrypted.

Enable encryption. (INCORRECT)
Enable KMS encryption. (INCORRECT)
Send all logs to S3, and enable server-side encryption. (INCORRECT)

Q: There was an incident in your company’s AWS environment. You have been asked to review the API activity to determine the cause. What service captures AWS API calls and activity?

CloudTrail

Q: How do you consolidate several AWS account’s CloudTrail logs into an S3 bucket?

Turn on CloudTrail in paying account
Create a bucket policy that allows cross-account access
Turn on CloudTrail in the other accounts and use the bucket in the paying account

Q: As an IT support center team member, you begin receiving calls about problems with your company’s AWS-based point-of-sale system. You want to check with AWS for any service alerts they may be communicating. Which AWS tool will give you the information you seek?

The AWS Personal Health Dashboard

Publishes alerts and remediation guidance when issues with AWS services arise. Notifications are also provided for scheduled events that may impact AWS customers.

Trusted Advisor provides valuable guidance for architecting your AWS environment and workloads, but doesn’t include AWS service health information.

Q: Which AWS service provides alerts when an AWS event may impact a company’s AWS resources?

AWS Personal Health Dashboard

Q: Which service provides alerts and remediation guidance when AWS is experiencing events that may impact you?

AWS Personal Health Dashboard

provides alerts and remediation guidance when AWS is experiencing events that may impact you.

“AWS Inspector” is incorrect. Inspector is an automated security assessment service that helps improve the security and compliance of applications deployed on AWS.

“AWS Trusted Advisor” is incorrect. Trusted Advisor is an online resource that helps to reduce cost, increase performance and improve security by optimizing your AWS environment.

Security Services

Q: Which AWS service can be used to generate encryption keys that can be used to encrypt data? (Select TWO.)

AWS KMS AWS CloudHSM

You use Customer Master Keys (CMKs) to create data encryption keys. The data encryption keys can then be used to actually encrypt the data.

Q: In regards to AWS KMS, which of these statements are true?

AWS KMS is integrated with S3 for the purpose of logging AWS KMS key usage.

Keys may be generated in KMS, CloudHSM cluster, or imported from other encryption key services.

~~AWS KMS does not integrate with any other AWS services.~~ (INCORRECT)

Q: What service does AWS KMS integrate with for logging of key events?

CloudTrail

Q: In this scenario, we want to enable notifications for KMS activity. What AWS service could be used with AWS KMS to send these notifications?

SNS

Q: Which AWS service helps customers meet corporate, contractual, and regulatory compliance requirements for data security by using dedicated hardware appliances within the AWS Cloud?

AWS CloudHSM

Q: Which AWS service protects against common exploits that could compromise application availability, compromise security or consume excessive resources?

AWS WAF

Q: What is AWS WAF?

A web application firewall that inspects web traffic and looks for people doing malicious things (designed to stop hackers - SQL injections, etc.)

Q: Which service provides protection for web applications behind an ELB?

AWS Shield (DDoS)
Amazon Inspector (analyze VPC)
AWS GuardDuty (detect)
AWS WAF

Q: In regards to security and compliance on AWS, what AWS service is a threat detection service that monitors for threats to AWS accounts and workloads?

AWS Shield (against DDoS)
AWS WAF
AWS GuardDuty
(Detection service)
Amazon Inspector (VPC)

Q: Which AWS service helps identify malicious or unauthorized activities in AWS accounts and workloads?

Amazon GuardDuty

Q: What is AWS Shield?

A Distributed Denial of Service (DDoS) mitigation service designed to protect web applications on AWS.

Q: Which of the following can be used to protect your environment from DDoS attacks?

AWS CloudFront AWS Shield and AWS Shield Advanced AWS ELB

Q: Which of the following penetration testing activities are prohibited on AWS?

DDoS attacks Port flooding DNS Zone walking via Amazon Route 53 hosted zones

Penetration testing of EC2 instances and AWS CloudFront (allowed without prior approval)

Q: In regards to penetration testing on AWS, which statement is true?

No penetration testing is allowed on AWS.
All penetration testing on AWS requires permission.
Limited penetration testing is allowed, but some require permission from AWS.
All penetration testing is allowed on AWS.

Q: Which of these are allowed penetration testing WITHOUT prior approval from AWS?

Amazon Route 53 (NOT allowed without approval)
Amazon CloudFront (listed as allowed in notes)
Amazon EC2 instances
Amazon RDS
Amazon S3 (NOT allowed without approval per notes)

Q: Which of the following services is NOT allowed penetration testing without prior approval?

Amazon RDS
Amazon EC2
Amazon Lightsail
Amazon S3

Q: What is Amazon Inspector?

Automatically assesses EC2s for vulnerabilities or deviations from best practices. Results come in the form of detailed list of security findings prioritized by level of severity. (ONLY FOR EC2 INSTANCES!!!)

Q: In this scenario, an AWS datacenter was breached by unauthorized personnel. In terms of the AWS Shared Responsibility Model, who is responsible for this?

AWS

Q: What is Macie?

Uses AI to analyze data in S3 and helps identify Personally Identifiable Information (PII - drivers license id, home address, info that can be used and stolen by criminals). Also used to analyze CloudTrail logs for suspicious API activity.

Q: In this scenario, we want a video/image analysis service for facial recognition purposes. Which of the following services can serve this purpose?

AWS Rekognition

Q: Which of the following techniques can be used to prevent unauthorized access to AWS?

MFA multi-factor authentication

Q: A Cloud Practitioner must determine if any security groups in an AWS account have been provisioned to allow unrestricted access for specific ports. What is the SIMPLEST way to do this?

Trusted Advisor

has a check that can review the ports which have unrestricted access (0.0.0.0/0)

Q: What is AWS Config?

A service that provides a detailed view of the configuration (settings) on AWS resources (this includes how resources are related to each other and how they were configured in the past).

Q: If a customer needs to audit the change management of AWS resources, which of the following AWS services should the customer use?

AWS Config

Q: What are AWS Artifacts?

Used to retrieve compliance reports

Q: Where can AWS compliance and certification reports be downloaded?

AWS Artifact

Q: Medium Corp is going through an audit as part of the HIPAA compliance. Auditor wants to see the reports that the AWS services which are being used by Medium Corp are compliant against HIPAA. What can Medium Corp do to get those reports?

Get reports via AWS Artifact

Q: Where are AWS compliance documents, such as an SOC 1 report, located?

AWS Artifact

Q: Which of the following are components of the AWS Assurance Program?

Following industry best practices
Compliance with Laws and Regulations
Certifications/Attestations

Q: Which of the following are components of the AWS Risk and Compliance Program?

Control Environment, Risk Management, Information Security

Shared Responsibility Model

Q: In regards to the AWS Shared Responsibility Model, AWS maintains responsibility __.

of the cloud

Q: In regards to the Shared Responsibility Model, for which of these is AWS Responsible?

CPU on physical hardware Host virtualization hardware Availability Zones

Q: What things will Amazon be responsible for securing on AWS?

Management of Data Centers
Security Cameras
Cabling
Patching RDS Operating Systems

Q: What things will you be responsible for securing on AWS?

Things you can do yourself on the AWS console or in EC2:

Security groups
IAM users
Patching EC2 operating systems
Patching databases running on EC2

Q: Under the shared responsibility model, what are examples of shared controls? (choose 2)

Patch Management - AWS is responsible for patching and fixing flaws within the infrastructure, but customers are responsible for patching their guest OS and applications.
Configuration Management - AWS maintains the configuration of its infrastructure devices, but a customer is responsible for configuring their own guest operating systems, databases, and applications.

Q: Which of the following is a shared control between the customer and AWS?

AWS is responsible for creating awareness and providing training of their employees. Client is responsible to do the same for their employees.

Q: Under the shared responsibility model, which of the following is a shared control between a customer and AWS?

Patch management

Q: In an AWS Shared Responsibility model, which of the following is NOT the responsibility of AWS?

Data of the customer

Q: According to the AWS Shared Responsibility Model, what is AWS responsible for when you create a security group?

Making sure the security groups are linked to the Elastic Network Interface (ENI) of the EC2 instance

~~Defining the outbound rules~~ (INCORRECT)

Making sure the security group rules are applied immediately

Defining the inbound rules (INCORRECT - this is the customer’s responsibility)

Q: Which task is AWS responsible for in the shared responsibility model for security and compliance?

Updating Amazon EC2 host firmware

Q: Who is responsible for encryption?

Both you and Amazon

Q: Which of the following is true about data security in AWS?

AWS is responsible for the security of the software that manages the data

Messaging and Application Services

Q: Which service can be used for building and integrating loosely-coupled, distributed applications?

Amazon SNS

AWS messaging services SQS and SNS can be applied at architectural level to build loosely coupled systems that facilitate multiple business use cases.

Q: The components of SNS are _.

Subscribers, Publishers, SNS Topics

Q: Which of the following are examples of endpoints for an SNS topic?

Webserver, email address, Amazon SQS queue, SMS, and AWS Lambda function

Q: Which of the following is NOT a way SNS can send a notification?

HTTP
SMS
Email
Phone call
(SNS does NOT support phone calls)

Q: If you want to use decoupled resources, which of the following AWS services can assist you?

Amazon Simple Queue Service (SQS)

A fully managed message queuing service that enables you to decouple and scale microservices, distributed systems, and serverless applications.

Q: One of the main requirements given by your director is to host an environment that reduces inter-dependencies so failures do not impact other components. Which concept is correct?

Separation (INCORRECT)
Integration (INCORRECT)

Decoupling

Tight coupling (INCORRECT)

In microservice architectures, applications are built and deployed as highly decoupled, focused services. A decoupled application architecture allows each component to perform its tasks independently.

Q: Which services are parts of the AWS serverless platform?

AWS Step Functions, DynamoDB, SNS, Lambda

Q: What AWS service lets connected devices easily and securely interact with cloud applications and other devices?

Amazon IoT Core

Deployment and Automation Services

Q: What is Elastic Beanstalk?

A way to quickly deploy and manage applications in the AWS Cloud without worrying about the infrastructure that runs those applications.

Q: A user has limited knowledge of AWS services, but wants to quickly deploy a scalable Node.js application in an Amazon VPC. Which service should be used to deploy the application?

AWS Elastic Beanstalk

is an easy-to-use service for deploying and scaling web applications and services developed with Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker.

You can simply upload your code and Elastic Beanstalk automatically handles the deployment, from capacity provisioning, load balancing, auto-scaling to application health monitoring.

Q: Which service provides the ability to simply upload applications and have AWS handle the deployment details of capacity provisioning, load balancing, auto-scaling, and application health monitoring?

AWS Elastic Beanstalk

“AWS OpsWorks” is incorrect. AWS OpsWorks provides a managed service for Chef and Puppet. This service is involved with automation and configuration management.

Q: AWS Elastic Beanstalk handles deployment of which application types?

Java, .NET, PHP, Node.js, Python, Ruby, Go, and Docker

Q: Are Elastic Beanstalk and CloudFormation free?

Yes, but the resources they provision are not (EC2 instances and others).

Q: Can Cloud Formation provision everything? Is it programmable?

Yes, it can provision almost any AWS service and it is programmable.

Q: Can Elastic Beanstalk provision everything? Is it programmable?

No, it is limited in what it can provision and it is not programmable.

Q: What is the difference between CloudFormation and Elastic Beanstalk?

CloudFormation can provision almost any AWS service and is programmable. Elastic Beanstalk is limited in what it can provision and is not programmable.

Q: What AWS service provides infrastructure as code?

OpsWorks (INCORRECT - OpsWorks is for Chef/Puppet)

AWS CloudFormation provides infrastructure as code. You make a template of what you want in AWS and then CloudFormation creates it for you.

Q: Which AWS tools can be used for automation? (choose 2)

AWS Elastic Beanstalk

and AWS CloudFormation are both examples of automation. Beanstalk is a platform service that leverages the automation capabilities of CloudFormation to build out application architectures.

Q: What is the term for describing the action of automatically running scripts on Amazon EC2 instances when launched to install software?

A. Bootstrapping - the execution of automated actions to services such as EC2 and RDS. This is typically in the form of scripts that run when the instances are launched. B. Golden Images - snapshots of pre-configured EBS volumes that can be used to launch new instances via Amazon Machine Images (AMIs). C. Containers - packaged software that runs in a Docker image. Services such as Amazon ECS and Fargate can run Docker containers. D. Workflow automation - a process of orchestrating automated actions. Associated with services such as Chef and Puppet or AWS OpsWorks.

Q: When instantiating compute resources, what are two techniques for using automated, repeatable processes that are fast and avoid human error? (choose 2)

With infrastructure as code AWS assets are programmable; apply techniques, practices, and tools from software development to make your whole infrastructure reusable, maintainable, extensible, and testable.
With bootstrapping, execute automated actions to modify default configurations. This includes scripts that install software or copy data to bring that resource to a particular state.

Q: A mobile shopping list app needs to be able to add, delete, and update items on specific lists anytime a user desires. The backend for the app will run on Amazon EC2 instances with Auto Scaling. What design characteristic must be incorporated into the app?

Make sure the app doesn't store previous transaction or session information on specific EC2 instances.

That way, any EC2 instance provisioned by Auto Scaling can process the request. For horizontal scaling to be effective, make sure the app doesn’t store previous transaction or session information on specific EC2 instances.

Leveraging load balancing is a good practice, but doesn’t address the need for a stateless app. Session affinity directs a load balancer to route transactions to a specific instance each time. Bootstrapping runs scripts each time an EC2 instance is provisioned.

Q: What is the name of the AWS managed Docker registry service used by the Amazon Elastic Container Service (ECS)?

Amazon Elastic Container Registry (ECR)

Q: Which AWS service is primarily used for software version control?

AWS CodeCommit

a fully-managed source control service that hosts secure Git-based repositories.

Q: Which service’s PRIMARY purpose is software version control?

AWS CodeCommit

Q: What AWS services can be used on premises?

Snowball
(large disc Amazon sends you, you upload data and send it back, they upload to S3)
Snowball Edge
(Snowball with CPU, basically a computer with storage)
Storage Gateway
(way of caching your files and replicating to S3 - must stay on-premises the whole time)
CodeDeploy
(way to deploy code to EC2 instances/applications or on-premises web servers)
Opsworks
(used to deploy EC2 or on-premises web servers)
IoT Greengrass
(IoT and connects your devices to cloud)

Q: What is Amazon Mechanical Turk used for?

Crowdsourcing marketplace where you can outsource tasks.

Q: Treating infrastructure as code in the AWS Cloud allows users to:

Automate the infrastructure provisioning process.

AWS Organizations and Multi-Account

Q: What is AWS Organizations?

An account management service that enables you to consolidate multiple AWS accounts into an organization that you create and centrally manage - 2 main features are: consolidated billing and all features.

Q: Which service can be used to easily create multiple accounts?

AWS Organizations

can be used for automating AWS account creation via the Organizations API.

Q: In regards to AWS Organizations, which of the following is true?

AWS Organizations provides policy-based management for multiple AWS accounts.

Q: Which of these is NOT a feature of AWS Organizations?

It provides the ability to centrally manage multiple AWS accounts.
It provides the ability to centrally manage the billing of multiple AWS accounts.
It provides the ability to centrally manage service usage.
It provides the ability to centrally manage all AWS accounts from ANY account within the organization.
(INCORRECT - only allows one account to be the master account)
It provides the ability to automate account creation and management.

Q: In this scenario, we want to control service usage across multiple AWS accounts using AWS Organizations. Which of the following would be used?

Service Control Policies

Using AWS Organizations allows for the creation of SCPs (Service Control Policies) to manage service usage across multiple AWS accounts.

Q: Which of the following statements is correct in relation to consolidated billing? (choose 2)

Paying accounts are independent and cannot access resources of other accounts One bill is provided per AWS organization

Consolidated billing is available to all customers. Volume pricing discounts can be applied to resources and this is a key advantage.

Q: How can consolidated billing within AWS Organizations help lower overall monthly expenses?

By pooling usage across multiple accounts to achieve a pricing tier discount

Q: With consolidated billing, can a paying account make changes to any of the resources owned by the linked accounts?

Q: How should the paying account be used?

It should be used for billing purposes only. IT SHOULD NOT BE USED TO DEPLOY RESOURCES INTO THE AWS ENVIRONMENT.

Q: What is the maximum number of linked accounts per paying account under consolidated billing?

20 linked accounts

Q: How can a company separate costs for storage, Amazon EC2, Amazon S3, and other AWS services by department?

Add department-specific tags to each resource

Q: What strategy can assist with allocating metadata to AWS resources for cost tracking and visibility?

Tagging

AWS allows customers to assign metadata to their AWS resources in the form of tags. Each tag is a simple label consisting of a customer-defined key and an optional value that can make it easier to manage, search for, and filter resources. AWS Cost Explorer and detailed billing reports support the ability to break down AWS costs by tag.

Q: The use of what AWS feature or service allows companies to track and categorize spending on a detailed level?

Cost allocation tags

Q: What is a resource group?

A collection of resources that share one or more tags (or portions of tags)

Q: What is the tag editor?

A global service that allows us to discover resources and to add additional tags to them as well

Q: Which AWS feature allows a company to take advantage of usage tiers for services across multiple member accounts?

Consolidated billing

Q: Which AWS service provides a quick and automated way to create and manage AWS accounts?

AWS Organizations

Cost Management and Billing

AWS Cost Management Tools Summary:

AWS Organizations:
consolidate billing between multiple AWS accounts.
AWS Pricing Calculator:
replacing the AWS Simple Calculator
AWS TCO Calculator:
an estimation of the cost savings to be had by migrating to the AWS Cloud from an on-premises datacenter.
AWS Cost Explorer:
free tool that allows for viewing charts and a history of AWS costs. 13 months
AWS Simple Calculator:
calculate anticipated bill for resources we are about to create. 3 months

Q: Which accurately describes the function of the AWS Cost Explorer?

~~The AWS Cost Explorer is used to estimate the anticipated AWS bill.~~ (INCORRECT)
The AWS Cost Explorer is a free, easy to use tool that allows for viewing charts and usage history in order to manage AWS costs over time.

Q: AWS Cost Explorer will forecast _ months of billing.

~~13 months~~ (INCORRECT)
3 months

Q: What is the difference between Budget and Cost Explorer?

BUDGET is used to predict costs BEFORE they are incurred COST EXPLORER is used to explore costs AFTER they have been incurred

Q: You have just set up a new environment in AWS and want to see what costs are being incurred for the resources you are using. What would you use?

Cost Explorer

View your costs and view data for the last 13 months. You can also forecast how much you might spend for the next three months and get recommendations for which instances to purchase.

Q: Which service is used to pay AWS bills, and monitor usage and budget costs?

AWS Billing and Cost Management

Q: Which AWS Cost Management tool allows you to view the most granular data about your AWS bill?

AWS Cost and Usage Report

Q: Which features or services can be used to monitor costs and expenses for an AWS account? (Choose two.)

AWS Cost and Usage Report Billing alerts and Amazon CloudWatch alarms

Q: What are the billing alarms/alerts?

Alert you when a certain level of AWS spend has been reached

Q: Which AWS services can be used to create billing alarms?

Cost Explorer CloudWatch

Q: Which AWS service can a customer use to set up an alert notification when the account is approaching a particular dollar amount?

AWS Budgets

Q: AWS Budgets can be used to:

Set resource limits in account to prevent overspending

Q: A user wants guidance on possible savings when migrating from on-premises to AWS. Which tool is suitable for this scenario?

TCO Calculator

Q: What is the AWS Total Cost of Ownership/TCO calculator?

A calculator used to compare the cost of running your infrastructure on-premises vs. the cloud. Generates nice reports to show the C-level executives.

Q: What is the AWS Simple Monthly Calculator?

Tool used to calculate your running costs on AWS on a per month basis. NOT A COMPARISON TOOL.

Q: A Cloud Practitioner is asked how to estimate the cost of using a new application on AWS. What is the MOST appropriate response?

AWS Simple Monthly Calculator for estimates.

Q: How can a company isolate the costs of production and non-production workloads on AWS?

Use different accounts

Q: What two AWS services receive bulk discounted pricing for agreeing to pay for a term?

RDS EC2

Q: Which of the following is TRUE about the AWS Pricing Model?

AWS does not charge a termination fee.

Q: Which of the following statements is TRUE?

AWS Organizations is a service available to all AWS customers at no additional costs.

Q: Which types of pricing policies does AWS offer? (choose 2)

pay-as-you-go save when you reserve pay less by using more.

Q: How is storage typically priced on AWS cloud?

Charged per GB

Q: Which of the following is NOT a pricing factor for EC2?

Reserved purchasing
AMI
Request pricing
(this is NOT a factor)
Region
Instance type

Q: Which of the following are advantages of the AWS Cloud? (Choose two.)

Fixed-rate monthly cost (INCORRECT)
No need to guess capacity requirements
Increased speed to market
Increased upfront capital expenditure (INCORRECT)
Physical access to cloud data centers (INCORRECT)

AWS Support Plans

Support Plan Summary:

Plan	Cost	Support
Basic	Free	No tech support
Developer	$29/month (scales on usage)	Business hours via email, 1 person, unlimited cases
Business	$100/month (scales on usage)	24x7 via email, chat, phone - unlimited people/cases
Enterprise	$15,000/month (scales on usage)	Has TAM - 24x7, email, chat, phone - unlimited people/cases

Q: Which support plan is the lowest cost option that allows unlimited cases to be open?

Developer

Q: Which type of account receives only email access to Cloud Support Associates during business hours?

Developer

~~Basic accounts have no access to Cloud Support representative access.~~

Q: Which of the following AWS accounts do NOT have 24/7 access to Cloud Support Engineers?

Basic and Developer

Q: What support do you get with the Basic plan?

None!

Q: Which of the following types of AWS accounts have access to AWS Personal Health Dashboard?

Basic, Developer, Business, and Enterprise

Q: Which of the following types of AWS accounts have access to AWS Trusted Advisor?

Basic, Developer, Business, and Enterprise

Q: Which of the following type of account receives the highest priority access to customer service and technical support?

Enterprise

Q: Which of the following type of AWS account will receive support in less than 15 minutes when the support case is related to business-critical systems down?

Enterprise

Q: For a developer account, how long will it take for someone to get back to you when you have a question about general guidance and system impairments?

Less than 24 hours for general guidance Less than 12 hours for system impairments

Q: For a business account, how long will it take for someone to get back to you when you have a question about general guidance, system impairments, production system impairments, and production system down?

Less than 24 hours for general Less than 12 hours for system impairments Less than 4 hours for production system impaired Less than 1 hour for production system down

Q: For an enterprise account, how long will it take for someone to get back to you?

Less than 24 hours for general Less than 12 hours for system impairments Less than 4 hours for production system impaired Less than 1 hour for production system down Less than 15 minutes for business-critical

Q: Why is the business support plan better than the developer?

You also get support on production system impaired AND production system down issues (response within an hour)

Q: Why is the enterprise support plan better than the business?

You get support on business-critical system down issues (response within 15 minutes)

Q: You need an AWS support plan for your production workloads, but want to keep costs to a minimum. Which of the following plans should you choose?

Developer (if just need support, lowest cost production plan)

The Business Support plan is specifically designed for production workloads in AWS.

Q: Which is the MINIMUM AWS Support plan that allows for one-hour target response time for support cases?

Business

Q: Which AWS support plans provide 24x7 access to customer service?

All plans

Q: Which AWS support plan includes a dedicated Technical Account Manager?

Enterprise

Q: Which among them is a unique feature in AWS Enterprise Support Plan?

TAM - dedicated technical account manager

Q: Which among these is an important feature of AWS Business Support plan?

24/7 cloud support engineers

Q: Which among these is one of the features of the AWS Developer Support Plan?

Business hours by cloud support associates.

Q: Which is the minimum AWS Support plan that includes Infrastructure Event Management without additional costs?

Enterprise

Q: How does the AWS Enterprise Support Concierge team help users?

Provide architecture guidance

AWS Enterprise Support provides concierge-like service where the main focus is helping you achieve your outcomes and find success in the cloud.

Q: A user has an AWS account with a Business-level AWS Support plan and needs assistance with handling a production service disruption. Which action should the user take?

Open a production system down support case

AWS Trusted Advisor

Q: What is AWS Trusted Advisor?

A resource that provides real-time guidance to help you provision your resources following AWS best practices. For ALL of AWS environment. Also advises on cost optimization, performance, security, and fault tolerance.

(Unlike Amazon Inspector which is just for EC2s)

Q: AWS Trusted Advisor provides insight into which five categories of an AWS account?

Performance, fault tolerance, cost optimization, security, and service limits

Q: Which of the five best practices does AWS Trusted Advisor use to eliminate unused, underutilized, and idle resources in your environment?

Cost optimization

Q: Which is NOT one of the seven core checks performed by AWS Trusted Advisor?

IAM use
Amazon EC2 Reserved Instances Optimization
(NOT a core check)
Unassociated Elastic IP Addresses
(NOT a core check)
EBS Public Snapshots
Security Groups (port checks)
RDS Public Snapshots

Q: How does AWS Trusted Advisor provide guidance to users of the AWS Cloud? (Choose two.)

It provides a list of cost optimization recommendations based on current AWS usage It detects potential security vulnerabilities caused by permissions settings on account resources

Well-Architected Framework

Q: Which AWS concepts refer to “established best practices developed through lessons learned by working with customers”?

Well-Architected Framework

Q: Which of the pillars of the well-architected framework is defined as the ability to run and monitor systems to deliver business value and to continually improve supporting processes and procedures?

Operational excellence

Q: Which of the following are pillars of the AWS Well-Architected Framework? (Choose two.)

Multiple Availability Zones (NOT a pillar)
Performance efficiency
Security
Encryption usage (NOT a pillar)
High availability (NOT a pillar)

Q: Which of the following is an AWS Well-Architected Framework design principle related to reliability?

Ability to recover from failure

Q: What option below will increase the fault tolerance of your application in AWS?

Deploy resources to multiple AWS accounts
Deploy resources to multiple subnets
Deploy resources across multiple availability zones
Deploying resources across multiple edge locations (this reduces latency, not fault tolerance)

Miscellaneous / AWS Services Reference

Q: Which AWS services are defined as global instead of regional?

S3 Amazon CloudFront

What Amazon services are global: Route53, Roles, IAM, and S3

Other global services: IAM, Route53, CloudFront, SNS, SES

Q: Which services are managed at a regional (rather than global) level? (choose 2)

Both EC2 and S3 are managed at a regional level.

Q: Which service allows an organization to view operational data from multiple AWS services through a unified user interface and automate operational tasks?

AWS Systems Manager

“Amazon CloudWatch” is incorrect. CloudWatch is a monitoring service for AWS cloud resources and the applications you run on AWS. You use CloudWatch for performance monitoring, not automating operational tasks.

Q: How does the Systems Manager work?

A piece of software is installed on each virtual machine

Q: Where can the System Manager be housed?

Inside AWS or on-premises

Q: Systems Manager is used to:

Manage fleets of EC2 instances and virtual machines

Q: A Cloud Practitioner wants to build an application stack that will be highly elastic. What AWS services can be used that don’t require you to make any capacity decisions upfront? (choose 2)

S3 and Lambda

Q: What is the added value of being able to access your environment using cloud services through an API?

Allows you to work with AWS services and resources programmatically

Q: What is AWS Landing Zone?

Tool to help customers quickly set up a secure, multi-account (4 initially) AWS environment based on AWS best practices.

Q: What is AWS Quick Start?

A way of deploying environments quickly using CloudFormation templates built by the AWS Solution Architects (experts).

Q: What are AWS Marketplace functions? (Choose two.)

Sell solutions to other AWS users Buy third-party software that runs on AWS

~~Sell unused Amazon EC2 Spot Instances~~ (INCORRECT)

Q: A company wants to try a third-party ecommerce solution before deciding to use it long term. Which AWS service or tool will support this effort?

AWS Marketplace

Q: Where should a company go to search software listings from independent software vendors to find, test, buy and deploy software that runs on AWS?

AWS Marketplace

Q: How is asset management on AWS easier than in a physical data center?

User can gather asset metadata reliably with a few API calls

Q: Which AWS program can help an organization to design, build, and manage their workloads on AWS?

APN Consulting Partners

Q: A customer would like to design and build a new workload on AWS Cloud but does not have the AWS-related software technical expertise in-house. Which of the following AWS programs can a customer take advantage of to achieve that outcome?

AWS Partner Network Consulting Partners

Q: What AWS team assists customers with accelerating cloud adoption through paid engagements in any of several specialty practice areas?

AWS Professional Services

Q: A company is migrating from on-premises data centers to the AWS Cloud and is looking for hands-on help with the project. How can the company get this support? (Choose two.)

Ask for a quote from the AWS Marketplace team - INCORRECT
Contact AWS Support and open a case for assistance - INCORRECT
Use AWS Professional Services to provide guidance and to set up an AWS Landing Zone in the company's AWS account
Select a partner from the AWS Partner Network (APN) to assist with the migration
Use Amazon Connect - INCORRECT

Q: Which of the following guidelines should be followed if an AWS account is compromised?

Respond to AWS through the AWS Support Center. Change the AWS account root password. Rotate and delete all API access keys. Delete any resources that you do not remember creating. Change all IAM user passwords.

Q: Where should users report that AWS resources are being used for malicious purposes?

AWS Abuse Team

Q: With AWS services, you can use as many resources as you need, as well as use them when you need them. Which of the following terms can be applied to this concept?

Temporary resources Disposable resources

Q: John wants to build highly available infrastructure. He needs to make sure that even if one data-center goes down, it should not affect his application. Which component in AWS cloud can he use?

Availability Zones

Q: A company has an application with users in both Australia and Germany. All the company infrastructure is currently provisioned in the Europe (Frankfurt) Region, and Australian users are experiencing high latency. What should the company do to reduce latency?

The easiest option is to place resources closer to where the users are.

Q: Which AWS services should be used for read/write of constantly changing data?

RDS

or AWS EFS

Q: A purchasing department staff member needs access to an application running on EC2 in the company’s accounts payable AWS account to reconcile reports each month-end. Which of the following provides the most secure and operationally efficient way to give the staff member access?

Have the user request temporary security credentials for the application by assuming a role

Q: A company wants to migrate its applications to a VPC on AWS. These applications will need to access on-premises resources. What combination of actions will enable the company to accomplish this goal? (Choose two.)

Build a VPN connection between an on-premises device and a virtual private gateway in the new VPC Connect the company's on-premises data center to AWS using AWS Direct Connect

Q: What are the benefits of developing and running a new application in the AWS Cloud compared to on-premises? (Choose two.)

AWS automatically distributes the data globally for higher durability (INCORRECT)
AWS will take care of operating the application (INCORRECT)
AWS makes it easy to architect for high availability
AWS can easily accommodate application demand changes
AWS takes care of application security patching (INCORRECT)

Q: How does AWS charge for AWS Lambda usage once the free tier has been exceeded? (Choose two.)

By the time it takes for the Lambda function to execute By the number of requests made for a given Lambda function.

Q: Which disaster recovery scenario offers the lowest probability of downtime?

Multi-site active-active

Q: Which disaster recovery option below has the highest downtime?

Backup and restore

Q: Small Corp is planning to create a disaster recovery strategy for their workloads in AWS. Which among these is a good DR strategy for the worst case scenario?

AWS Regions.

Services: Free vs. Charged

Free to use:

Identity and Access Management (IAM)
Virtual Private Cloud (VPC)
Auto-Scaling
Elastic Beanstalk
CloudFormation
Consolidated Billing

Not free:

EC2, RDS, EBS, Route53, S3

Q: For which services does Amazon NOT charge? (choose 2)

Amazon VPC

and CloudFormation are free of charge. However, in the case of CloudFormation, you pay for the resources it creates.

Q: Which AWS services are truly free?

Amazon VPC, Elastic Beanstalk, Cloud Formation, IAM, Auto Scaling, Consolidated Billing

Q: Which AWS services are global?

IAM, Route53, CloudFront, SNS, SES

Q: EC2 Reserved Instances that support reserved pricing?

EC2, RDS, Redshift, and Elasticsearch

Amazon SNS is the only one that does not have reserved pricing.

Q: Which of the following are advantages of using AWS?

No guess needed

(regarding capacity)

Q: Which of the following is a benefit of using the AWS Cloud?

Focus on revenue-generating activity.

Q: How can an IT department move quickly to provision resources it needs?

Ability to programmatically provision existing resources

Q: Which disaster recovery option has the highest downtime?

Backup and restore

Q: You need an AWS support plan for your production workloads, but want to keep costs to a minimum. Which of the following plans should you choose?

Developer (lowest cost plan for production)

01Cloud, 01AWS

This post is licensed under CC BY 4.0 by the author.

AWS Cloud Practitioner - Exam Practice Q&A

Overview

Cloud Concepts and Architecture

Data stored within an AWS region is not replicated outside of that region automatically.

IAM (Identity and Access Management)

IAM Key Concepts

EC2 (Elastic Compute Cloud)

EC2 Pricing Models

VPC, Networking, and Load Balancers

S3 and Storage

Databases

Compute Services

CloudFront and CDN

Route 53

CloudWatch, CloudTrail, and Monitoring

Security Services

Shared Responsibility Model

Messaging and Application Services

Deployment and Automation Services

AWS Organizations and Multi-Account

Consolidated billing

Cost Management and Billing

AWS Support Plans

AWS Trusted Advisor

Well-Architected Framework

Miscellaneous / AWS Services Reference

Services: Free vs. Charged

Trending Tags