AWS Certified Cloud Practitioner Third Edition Practice Questions Part 2

You have a mission-critical application that must be globally available at all times. If this is the case, which of the below deployment mechanisms would you employ?

Which of the following can be used to protect against DDoS attacks? Choose 2 answers from the options given below.

Which of the following is a server-less compute offering from AWS?

Which of the following helps to set up a logically isolated section of the AWS cloud?

A web application co-located in two geographically distinct locations is experiencing degraded service in one of the locations. What is the most appropriate routing policy to implement in Amazon Route 53?

What is the concept of an AWS region?

In AWS, which security aspects are the customers’ responsibility? Choose 4 answers from the options given below.

Which of the following can be used to manage identities in AWS?

You are working on an e-commerce web application running on an EC2 instance. But it is experiencing a bad performance in browsing and searching use cases when heavy load use-cases are running simultaneously. The application monitors highlight a bottleneck in the web tier.
You decide to re-engineer the application code by decoupling the web tier from the order’s heavy workloads. What AWS service can support the application change?

An online streaming company is prohibited from broadcasting its content in certain countries and regions in the world. Which Amazon Route 53 routing policy would be the most suitable in guaranteeing their compliance?

Which of the following are attributes that determine the cost of On-Demand EC2 Instance? Choose 3 answers from the options given below.

A company wants to utilize AWS storage. For them, low storage cost is paramount. The data is rarely retrieved and data retrieval time of several hours is acceptable for them. What is the best storage option to use?

What are the characteristics of Amazon S3? Choose 2 answers from the options given below.

Which AWS service provides a fully managed NoSQL database service that provides fast and predictable performance with seamless scalability?

In the AWS Billing and Management service, which tool will allow the user to graphically visualize billing and usage over time, particularly monthly running costs?

A company is deploying a three-tier, highly available web application to AWS. Which service provides durable storage for static content while utilizing lower Overall CPU resources for the web tier?

In the AWS Billing and Management service, which tool can provide usage-based forecasts of estimated billing costs and usage for the coming months?

Which of the below AWS services allows you to increase the number of resources based on the demand of the application or users?

Which of the following AWS managed database service provides processing power that is up to 5X faster than a traditional MySQL database?

After having adopted AWS cloud to move some of my On-premises workloads, I am looking for technical support from AWS that will help me design my cloud solution in a better way. Which of the following options related to AWS Support are CORRECT? (Select three answers)

Which AWS service provides a POSIX compliant, fully managed, and cost-effective NFS file storage solution?

Which of the below-listed protocols are NOT supported by “AWS Transfer Family”? (Select two answers).

Which fully managed AWS database offering is suitable for analytical workloads and can utilize standard SQL queries and existing BI Tools?

Amazon Aurora is a relational database compatible with MySQL and PostGreSQL. Which of the below 2 listed are NOT the features of Amazon Aurora? (Select two answers).

Data on Amazon EBS volumes could be backed up by performing point-in-time snapshots. Snapshots are incremental backups. Only the changed blocks after the most recent snapshot are saved.

Which of the below listed is NOT a requirement for setting up (enabling) S3 replication?

A start-up organization is planning to use the AWS budget so that it can plan its instance reservations, along with service usage and costs. It is agreed that 10 budgets would be created.

Which of the below-given service could be used in the AWS cloud for the management of encryption keys?

To maximize user satisfaction, you are asked to improve the performance of the application for local and global users. As part of this initiative, you must monitor the application endpoint health and route traffic to the most appropriate application endpoint. Which service will you prefer to use?

Which of the following resources can AWS WAF integrate with to protect web applications against common web exploits? (Select two answers).

A customer has expressed his intent to opt for a support plan to get access to the below 6 security checks. Which support plans offer these security checks at a minimal price point? (Select TWO)

Security check 1: S3 Bucket Permissions
Security check 2: Security Groups – Specific Ports Unrestricted
Security check 3: IAM Use
Security check 4: MFA on Root Account
Security check 5: EBS Public Snapshots
Security check 6: RDS Public Snapshots

A growing food delivery start-up intends to implement DDoS protection for its applications on AWS. Which fully managed service offering from AWS ensures customers’ protection from DDoS attacks?

Which AWS service offering uses machine learning and graph theory capability on automatically collected log data to help you conduct faster and efficient security investigations?

A program manager wants:
1- To get an alert when the costs are forecasted to exceed.
2- Understand the usage and cost over time, preferably via visualization to identify areas wherein savings could be done.
Which AWS products should be used to cater to these requirements?

An administrator is tasked to configure privileges for the new joiners in the department. The admin is selectively granting privileges and ensuring that not all the team members can access all the resources.
Which principle is the administrator following?

A customer in Tokyo requires to transfer files (total of 1TB) to his S3 bucket in us-east-1. Which of the below AWS offerings can facilitate this in an easy, secure, and fast way?

Which below statement correctly represents the use of AWS Edge locations?

An Insurance organization must maintain a long-term archive of customer data to ensure compliance with The Health Insurance Portability and Accountability Act (HIPAA).

You are asked to suggest an appropriate Amazon S3 storage class for “data with unknown/changing access pattern”. Which one would you suggest?

Which feature of Amazon S3 could be utilized to save costs by automatically transitioning objects to appropriate low-cost storage classes at defined intervals?

To ensure compliance with its AWS infrastructure, an organization is planning to perform penetration testing.
Which option listed below is NOT prohibited as per “AWS Customer Support Policy for Penetration Testing”?

A “Member AWS account” in an AWS Organization (using consolidated billing) wants to receive a cost breakdown report (product-wise daily report) so that the analysis of cost and usage could be done.
Where can this report be configured to be delivered?

Which of the below is incorrect regarding AWS pricing?

An organization is planning to implement protection for its applications on EC2, ELB, and Route 53 resources. So it can obtain near real-time visibility into the attacks and prevent sophisticated DDoS attacks.

Compliance team has mandated strict adherence to PCI DSS standards and Center for Internet Security (CIS) AWS Foundations Benchmark best practices. To ensure compliance, it is decided that any deviations from the standards and best practices should be highlighted along with the recommended resolution steps.
Which of the AWS offerings can help automate continuous, account/resource level security-related checks and configurations using standards and best practices?