NEW QUESTION 1
What best describes what AWS is?
Choose the Correct Answer

• A. AWS is an online retailer
• B. AWS is the cloud.
• C. AWS is a cloud services provider.
• D. None of the abov

Answer: C

NEW QUESTION 2
What is AWS's serverless compute service?
Choose the Correct Answer

• A. S3
• B. Lambda
• C. EC2
• D. None of the above

Answer: B

Explanation:
AWS has two main compute services, EC2 (server-based) and Lambda (serverless).

NEW QUESTION 3
If you want to monitor the average CPU usage of your EC2 instances, which AWS service should you use?
Choose the Correct Answer

• A. CloudMonitor
• B. CloudTrail
• C. CloudWatch
• D. None of the above

Answer: C

Explanation:
CloudWatch is used to collect, view, and track metrics for resources (such as EC2 instances) in your AWS account.

NEW QUESTION 4
What MUST you do before you do any penetration testing on your account?
Choose the Correct Answer

• A. Penetration testing is now allowed.
• B. Contact AWS and let them know first.
• C. Nothing, you are free to do penetration testing whenever you like.
• D. None of the above

Answer: B

Explanation:
You must contact AWS before doing any penetration testing on your account. If you do not notify AWS first, they may shut down your account.

NEW QUESTION 5
What is one benefit AND one drawback of buying a reserved EC2 instance? (Select two) Choose the 2 Correct answers:

• A. You can terminate the instance at any time without any further pricing commitment.
• B. Reserved instances can be purchased as a significant discount over on-demand instances.
• C. You can potentially save a lot of money by placing a lower "bid" price.
• D. You are locked in to either a one- or three-year pricing commitmen

Answer: BD

Explanation:
Reserved instances require a one- or three-year purchase term, so you are committing to paying for that much compute capacity for that full time period. However, in exchange for the long-term commitment, you will receive a discount (of up to 75%) over using an on-demand instance (for that same time period).

NEW QUESTION 6
What does TCO stand for?
Choose the Correct Answer

• A. Tally of Cost Ownership
• B. Total Continual Ownership
• C. The Cost of Ownership
• D. None of the above

Answer: D

Explanation:
TCO stand for Total Cost of Ownership.

NEW QUESTION 7
What best describes an AWS region?
Choose the Correct Answer

• A. A specific location where an AWS data center is located.
• B. An isolated collection of AWS Availability Zones, of which there are many placed all around the world.
• C. The physical networking connections between Availability Zones.
• D. A collection of DNS server

Answer: B

Explanation:
An AWS region is an isolated geographical area that is is comprised of three or more AWS Availability Zones.

NEW QUESTION 8
Which of the following will effect price you pay for an EC2 instance? (Select all that apply) Choose the 3 Correct answers:

• A. Instance Type.
• B. Selected Storage Class
• C. How long you use the instance for.
• D. Amazon Machine Image (AMI).

Answer: ACD

Explanation:
EC2 instance pricing various depending on many variables. 1) The type of buying option 2) Selected Ami 3) Selected instance type 4) Region 5) Data in/out 6) Storage capacity

NEW QUESTION 9
Kim is managing a web application running on the AWS cloud. The application is currently utilizing eight EC2 servers for its compute platform. Earlier today, two of those web servers crashed; however, none of her customer were effected. What has Kim done correctly in this scenario?
Choose the Correct Answer

• A. Properly built an elastic system.
• B. Properly built a scalable system
• C. Properly build a fault tolerant system.
• D. None of the abov

Answer: C

Explanation:
A fault tolerant system is one that can sustain a certain amount of failure while still remaining operational.

NEW QUESTION 10
What AWS database service is used for data warehousing of petabytes of data?
Choose the Correct Answer

• A. RDS
• B. Elasticache
• C. Redshift
• D. DynamoDB

Answer: C

Explanation:
Redshift is a fully-managed data warehouse that is perfect for storing petabytes worth of data.

NEW QUESTION 11
John, member of your company's development team, needs access to company's AWS account. What AWS service is used to manage such access?
Choose the Correct Answer

• A. S3
• B. Route 53
• C. IAM
• D. EC2

Answer: C

Explanation:
Identity & Access Management (IAM) is the AWS service where user accounts, credentials, and service access is managed.

NEW QUESTION 12
Before moving and/or storing object in AWS Glacier, what considerations should you make regarding the data you want to store.
Choose the Correct Answer

• A. Make sure the data is properly formatted for storage Glacier.
• B. Make sure the total amount of data you want to store in under 1 terabyte in size.
• C. Make sure you are ok with it taking at minimum a few minutes to retrieve the data once stored in Glacier.
• D. None of the abov

Answer: C

Explanation:
Objects stored in Glacier take time to retrieve. You can pay for expedited retrieval, which will take several minutes - OR wait several hours (for normal retrieval).

NEW QUESTION 13
What best describes Amazon Web Services (AWS)?
Choose the Correct Answer

• A. AWS only provides compute and storage services.
• B. AWS is the cloud.
• C. AWS is a cloud services provider.
• D. None of the abov

Answer: C

Explanation:
AWS is defined as a cloud services provider. They provide hundreds of services of which compute and storage are included (not limited to).

NEW QUESTION 14
What best describes penetration testing?
Choose the Correct Answer

• A. Testing your applications ability to penetrate other applications.
• B. Testing your IAM users access to AWS services.
• C. Testing your own network/application for vulnerabilities.
• D. None of the abov

Answer: C

NEW QUESTION 15
Karen is building a website that is expected to have a minimum of 1000 users continually over the course of 24 hours. For 8 hours each day, traffic is expected to be at about 1800 users. What EC2 buying options should she use to handle all the traffic and be most cost-effective?
Choose the Correct Answer

• A. Karen should rely solely on spot instances since that will be the cheapest option.
• B. Karen should buy enough reserved instance capacity to handle all 1800 users and probably buy a little more capacity just in case it is needed.
• C. Karen should buy reserved instances with enough capacity to cover the baseline of 1000 users, then rely on on-demand instances for the 8 hour period of increased traffic each day.
• D. Karen should buy reserved instances with enough capacity to cover the baseline of 1000 users, then rely on spot instances for the 8 hour period of increased traffic each day.

Answer: C

Explanation:
Reserved instances should used use to handle the expected baseline traffic to the website. Reserved instances (in 1/3 year term) can be purchased as a significant discount over on-demand instances. Any varying traffic above the baseline should be handled with on-demand instance (since they can be added/removed at any time, based on current demand). Spot instances should not be used in this scenario.

NEW QUESTION 16
If you want in-depth details on how to create, manage, and attach IAM access policies to IAM users, in what AWS resource should you look?
Choose the Correct Answer

• A. AWS How-To-Help Section
• B. AWS Service Documentation
• C. AWS Whitepapers
• D. None of the above

Answer: B

Explanation:
AWS Service documentation is a collection of documents specific to each AWS service. They contain detailed how-to's, as well as technical walkthroughs and specifications.

NEW QUESTION 17
What are the TWO main security layers (firewalls) used inside a VPC? Choose the 2 Correct answers:

• A. NetProtect
• B. Network Access Control List
• C. Security Group
• D. Security Lists

Answer: BC

Explanation:
Network Access Control Lists (NACL) act as a firewall on the subnet level, and Security Groups act as a firewall on the instance level.

NEW QUESTION 18
Kunal is logged into his company's AWS account. He tries to access EC2 but is getting an error. What is the most likely reason why he cannot access EC2?
Choose the Correct Answer

• A. There is not an IAM access policy attached to his IAM user.
• B. He is not part of an IAM Group.
• C. He does not have multi-factor authentication (MFA) enabled.
• D. There is not an IAM access policy attached to his IAM rol

Answer: A

Explanation:
When an IAM user is created, that user has NO access to any AWS services. To gain access to an AWS server, an IAM user must have permission granted to them. This is done by attached an IAM access policy to their IAM user (or through an attached group). However, just being in a group does not
grant access. A proper policy would need to be attached to that group.

NEW QUESTION 19
Derek is running a web application and is noticing that he is paying for way more server capacity then is required. What AWS feature should Derek set up and configure to ensure that his application is automatically adding/removing server capacity to keep in line with the required demand?
Choose the Correct Answer

• A. Auto Scaling
• B. Elastic Server Scaling
• C. Elastic Load Balancing
• D. Auto Sizing

Answer: A

Explanation:
Auto scaling is the feature that automated the process of adding/removing server capacity from a system (based on usage demand). Auto scaling creates a very cost effective system by never having too much or too little server capacity.

NEW QUESTION 20
What AWS storage class should be used for long-term, archival storage?
Choose the Correct Answer

• A. Glacier
• B. Long-Term
• C. Standard
• D. Infrequent Access

Answer: A

Explanation:
Glacier should be used for (and is specifically designed for) long-term , archival storage.

NEW QUESTION 21
......