What are the advantages of cloud computing over computing on-premises?

(Select the best

answer.)

A. Avoid large capital purchases

B. Use on-demand capacity
C. Go global in minutes
D. Increase speed and agility
E. All of the above (Correct)

What is the pricing model that enables AWS customers to pay for resources on an as-
needed basis? (Select the best answer.)

A. Pay as you decommission

B. Pay as you go (Correct)
C. Pay as you buy
D. Pay as you reserve

Which of these is NOT a cloud computing model? (Select the best answer.)

A. Platform as a service
B. Infrastructure as a service
C. System administration as a service (Correct)
D. Software as a service

True or False? AWS owns and maintains the network-connected hardware required for
application services, while you provision and use what you need.

A. True (Correct)
B. False

Which of these is NOT a benefit of cloud computing over on-premises computing? (Select
the best answer.)

A. Increase speed and agility

B. Pay for racking, stacking, and powering servers (Correct)
C. Eliminate guessing on your infrastructure capacity needs
D. Trade capital expense for variable expense
E. Benefit from massive economies of scale

Which of the following are NOT benefits of AWS Cloud computing? (Choose two.)

A. Multiple procurement cycles (Correct)

B. High availability
C. High latency (Correct)
 D. Temporary and disposable resources
E. Fault-tolerant databases

Which of the following is a compute service? (Select the best answer)

A. Amazon VPC
B. Amazon S3
C. Amazon EC2 (Correct)
D. Amazon CloudFront
E. Amazon Redshift

True or False? Cloud computing provides a simple way to access servers, storage,
databases, and a broad set of application services over the internet. You own the network-
connected hardware required for these services and Amazon Web Services provisions what
you need.

A. True
B. False (Correct)

Economies of scale result from (Select the best answer.)

A. having many di erent cloud providers

B. having hundreds of thousands of customers aggregated in the cloud (Correct)
C. having hundreds of cloud services available over the internet
D. having to invest heavily in data centers and servers

Which of these are ways to access AWS core services? (Choose three.)

A. Technical support calls

B. AWS Marketplace
C. AWS Management Console (Correct) (Correct)
D. AWS Command Line Interface (AWS CLI) (Correct)
E. Software Development Kits (SDKs) (Correct)

For certain services like Amazon Elastic Compute Cloud (Amazon EC2) and Amazon
Relational Database Service (Amazon RDS), you can invest in reserved capacity. What
options are available for Reserved Instances? (Choose three.)

A. AURI (Correct)
B. MURI
C. NURI (Correct)
D. PURI (Correct)
E. DURI
Where can a customer go to get more details about Amazon Elastic Compute Cloud
(Amazon EC2) billing activity that took place 3 months ago? (Select the best answer.)

A. Amazon EC2 dashboard

B. AWS Cost Explorer (Correct)
C. AWS Trusted Advisor dashboard
D. AWS CloudTrail logs stored in Amazon Simple Storage Service (Amazon S3)

True or false? To receive the discounted rate associated with Reserved Instances, you must
make a full, upfront payment for the term of the agreement. (Select the best answer.)

A. True
B. False (Correct)

Which statement is true about the pricing model on AWS? (Select the best answer.)

A. In most cases, there is a per gigabyte charge for inbound data transfer.
B. Storage is typically charged per gigabyte. (Correct)
C. Compute is typically charged as a monthly fee based on instance type.
D. Outbound charges are free up to a per account limit.

What are the four support plans o ered by AWS Support? (Select the best answer.)

A. Basic, Developer, Business, Enterprise (Correct)

B. Basic, Startup, Business, Enterprise
C. Free, Bronze, Silver, Gold
D. All support is free

What AWS tool lets you explore AWS services and create an estimate for the cost of your use
cases on AWS? (Select the best answer.)

A. AWS Pricing Calculator (Correct)

B. AWS Budgets
C. AWS Cost and Usage Report
D. AWS Billing Dashboard

As AWS grows, the cost of doing business is reduced and savings are passed back to the
customer with lower pricing. What is this optimization called? (Select the best answer.)

A. Expenditure awareness
B. Economies of scale (Correct)
C. Matching supply and demand
D. EC2 Right Sizing
True or false? AWS o ers some services at no charge, such as, Amazon Virtual Private
Cloud, AWS Identity and Access Management, Consolidated Billing, AWS Elastic Beanstalk,
automatic scaling, AWS OpsWorks and AWS CloudFormation. However, you might be
charged for other AWS services that you use in conjunction with these services.

A. True (Correct)
B. False

What are benefits of using AWS Organizations? (Choose two.)

A. Replaces existing AWS Identity and Access Management (IAM) policies with service
control policies (SCPs), which are simpler to manage
B. Provides the ability to create groups of accounts and then attach policies to a
group (Correct)
C. Provides the ability to create an unlimited number of nested organizational units
(OUs) to support your desired structure
D. Simplifies automating account creation and management by using APIs
(Correct)
E. Prevents any restrictions from being put on the root user that is associated with the
main organization in an account

True or false? Unlimited services are available with the AWS Free Tier to new AWS
customers for 12 months following their AWS sign-up date. (Select the best answer.)

A. True
B. False (Correct)

Which component of the AWS Global Infrastructure does Amazon CloudFront use to ensure
low-latency delivery? (Select the best answer.)

A. AWS Regions
B. AWS edge locations (Correct)
C. AWS Availability Zones
D. Amazon Virtual Private Cloud (Amazon VPC)

You can run applications and workloads from a Region closer to the end users to latency.

A. increase
B. decrease (Correct)

True or False? Networking, storage, compute, and databases are examples of service
categories that AWS o ers.

A. True (Correct)
 B. False

Which of the following are geographic areas that host two or more Availability Zones?

(Select the best answer.)

A. AWS Origins
B. AWS Regions (Correct)
C. Compute zones
D. Edge locations

____ means the infrastructure has built-in component redundancy and ____ means that
resources dynamically adjust to increases or decreases in capacity requirements.

A. No human intervention, fault tolerant

B. Elastic and scalable, no human intervention
C. Fault tolerant, elastic and scalable (Correct)
D. Fault tolerant, no human intervention
E. Elastic and scalable, fault tolerant

True or False? Availability Zones within a Region are connected through low-latency links.

A. True (Correct)
B. False

Which of these statements about Availability Zones is not true? (Select the best answer.)

A. Availability Zones are designed for fault isolation.

B. Availability Zones are made up of one or more data centers.
C. A data center can be used for more than one Availability Zone. (Correct)
D. Availability Zones are connected to each other using high-speed private links.

What is true about Regions? (Choose two.)

A. A Region is a physical location that has multiple Availability Zones. (Correct)

B. They are the physical locations of your customers.
C. Each Region is located in a separate geographic area. (Correct)
D. All Regions are located in one specific geographic area.

AWS highly recommends provisioning your compute resources across ____ Availability
Zones. (Select the best answer.)

A. no
B. single
C. all
 D. multiple (Correct)

True or False? Edge locations are only located in the same general area as Regions.

A. True
B. False (Correct)

In the shared responsibility model, AWS is responsible for providing what? (Select the best
answer.)

A. Security of the cloud (Correct)

B. Security to the cloud
C. Security for the cloud
D. Security in the cloud

In the shared responsibility model, which of the following are examples of "security in the
cloud"? (Choose two.)

A. Compliance with compute security standards and regulations

B. Physical security of the facilities in which the services operate
C. Security group configurations (Correct)
D. Encryption of data at rest and data in transit (Correct)
E. Protecting the global infrastructure

Which of the following is the responsibility of AWS under the AWS shared responsibility
model? (Select the best answer.)

A. Configuring third-party applications

B. Maintaining physical hardware (Correct)
C. Security application access and data
D. Managing custom Amazon Machine Images (AMIS)

When creating an AWS Identity and Access Management (IAM) policy, what are the two
types of access that can be granted to a user? (Choose two.)

A. Institutional access
B. Authorized access
C. Programmatic access (Correct)
D. AWS Management Console access (Correct)
E. Administrative root access

True or False? AWS Organizations enables you to consolidate multiple AWS accounts so
that you centrally manage them.
 A. True (Correct)
B. False

Which of the following are best practices to secure your account using AWS Identity and
Access Management (IAM)? (Choose two.)

A. Provide users with default administrative privileges.

B. Leave unused and unnecessary users and credentials in place.
C. Manage access to AWS resources. (Correct)
D. Avoid using IAM groups to grant the same access permissions to multiple users.
E. Define fine-grained access rights. (Correct)

Which of the following should be done by the AWS account root user? (Select the best
answer.)

A. Secure access for applications

B. Integrate with other AWS services
C. Change granular permissions
D. Change the AWS support plan (Correct)

After initial login, what does AWS recommend as the best practice for the AWS account root
user? (Select the best answer.)

A. Delete the AWS account root user

B. Revoke all permissions on the AWS account root user
C. Restrict permission on the AWS account root user
D. Delete the access keys of the AWS account root user (Correct)

How would a system administrator add an additional layer of login security to a user's AWS
Management Console? (Select the best answer.)

A. Use Amazon Cloud Directory

B. Audit AWS Identity and Access Management (IAM) roles
C. Enable multi-factor authentication (Correct)
D. Enable AWS CloudTrail

True or False? AWS Key Management Service (AWS KMS) enables you to assess, audit, and
evaluate the configurations of your AWS resources.

A. True
B. False (Correct)

With Amazon Virtual Private Cloud (Amazon VPC), what is the smallest size subnet you can
have in a VPC? (Select the best answer.)
 A. /28 (Correct)
B. /24
C. /30
D. /26

With Amazon Virtual Private Cloud (Amazon VPC), what is the maximum size IP address
range you can have in a VPC? (Select the best answer.)

A. /30
B. /16 (Correct)
C. /28
D. /24

You need to allow resources in a private subnet to access the internet. Which of the
following must be present to enable this access? (Select the best answer.)

A. Route tables
B. NAT gateway (Correct)
C. Security groups
D. Network access control lists

Which AWS networking service enables a company to create a virtual network within AWS?
(Select the best answer.)

A. AWS Config
B. AWS Direct Connect
C. Amazon Virtual Private Cloud (Amazon VPC) (Correct)
D. Amazon Route 53

True or False? Private subnets have direct access to the internet.

A. True
B. False (Correct)

Which component of AWS Global Infrastructure does Amazon CloudFront use to ensure
low-latency delivery? (Select the best answer.)

A. Amazon Virtual Private Cloud (Amazon VPC)

B. AWS Regions
C. AWS Availability Zones
D. AWS edge locations (Correct)

Which of the following is an optional security control that can be applied at the subnet layer
of a VPC? (Select the best answer.)
 A. Network ACL (Correct)
B. Web application firewall
C. Security group
D. Firewall

What happens when you use Amazon Virtual Private Cloud (Amazon VPC) to create a new
VPC? (Select the best answer.)

A. Three subnets are created by default in one Availability Zone.

B. A main route table is created by default. (Correct)
C. An internet gateway is created by default.
D. Three subnets are created by default: one for each Availability Zone.

Which of the following can be used to protect Amazon Elastic Compute Cloud (Amazon
EC2) instances hosted in AWS? (Select the best answer.)

A. Security group (Correct)

B. All of the above
C. AMI
D. Internet Gateway

You are a solutions architect who works at a large retail company that is migrating its
existing infrastructure to AWS. You recommend that they use a custom VPC. When you
create a VPC, you assign it to an IPv4 Classless Inter-Domain Routing (CIDR) block of
10.0.1.0/24 (which has 256 total IP addresses). How many IP addresses are available?
(Select the best answer.)

A. 250
B. 251 (Correct)
C. 256
D. 246

Why is AWS more economical than traditional data centers for applications with varying
compute workloads? (Select the best answer)

A. Amazon EC2 costs are billed on a monthly basis.

B. Customers retain full administrative access to their Amazon EC2 instances.
C. Customers can permanently run enough instances to handle peak workloads.
D. Amazon EC2 instances can be launched on-demand when needed. (Correct)

If your project requires monthly reports that iterate through very large amounts of data,
which Amazon Elastic Compute Cloud (Amazon EC2) purchasing option should you
consider? (Select the best answer)
 A. Spot Instances
B. Scheduled Reserved Instances (Correct)
C. Dedicated Hosts
D. On-Demand Instances

What is included in an Amazon Machine Image (AMI)? (Select the best answer)

A. A template for the root volume for the instance

B. Launch permissions that control which AWS accounts can use the AMI to launch
instances.
C. A block device mapping that specifies the volumes to attach to the instance when it's
launched
D. All of the above (Correct)

Which Amazon Elastic Compute Cloud (Amazon EC2) feature ensures your instances will
not share a physical host with instances from any other AWS customer? (Select the best
answer)

A. Amazon VPC
B. Placement groups
C. Dedicated Instances (Correct)
D. Reserved Instances

Which of the following services is a serverless compute service in AWS? (Select the best
answer)

A. AWS Config
B. AWS Lambda (Correct)
C. AWS OpsWorks
D. Amazon EC2

What is the service provided by AWS that enables developers to easily deploy and manage
applications in the cloud? (Select the best answer)

A. Amazon Elastic Container Service

B. AWS Elastic Beanstalk (Correct)
C. AWS Opswork
D. AWS CloudFormation

Your web application needs four instances to support steady tra ic all of the time. On the
last day of the month, the tra ic triples. What is the most cost-e ective way to handle this
pattern? (Select the best answer)
 A. Run 12 Reserved Instances all of the time.
B. Run four On-Demand Instances constantly, then add eight more On-Demand
Instances on the last day of each month.
C. Run four Reserved Instances constantly, then add eight On-Demand Instances
on the last day of each month. (Correct)
D. Run four On-Demand Instances constantly, then add eight Reserved Instances on
the last day of each month.

True or False? Containers contain an entire operating system.

A. True
B. False (Correct)

Which Amazon EC2 option is best for long-term workloads with predictable usage patterns?
(Select the best answer)

A. Spot Instances
B. On-Demand Instances
C. Reserved Instances (Correct)

Which of the following must be specified when launching a new Amazon Elastic Compute
Cloud (Amazon EC2) Windows instance? (Choose two)

A. The Amazon EC2 instance ID

B. Password for the administrator account
C. Amazon EC2 instance type (Correct)
D. Amazon Machine Image (AMI) (Correct)

True or False? Amazon Simple Storage Service (Amazon S3) is an object storage suitable for
the storage of flat files like Microsoft Word documents, photos, etc.

A. True (Correct)
B. False

Amazon S3 replicates all objects ____. (Select the best answer)

A. on multiple volumes within an Availability Zone

B. in multiple Availability Zones within the same Region (Correct)
C. across multiple Regions for higher durability
D. on multiple S3 buckets

Which of the following can be used as a storage class for an S3 object lifecycle policy?
(Choose three)
 A. S3 - Standard Access (Correct)
B. AWS Storage Gateway
C. S3 - Infrequent Access (Correct)
D. Simple Storage Service Glacier (Correct)
E. S3 - Reduced Redundancy Storage

The name of an S3 bucket must be unique ____. (Select the best answer)

A. worldwide across all AWS accounts (Correct)

B. within a Region
C. across all your AWS accounts
D. within your AWS account

You can use Amazon Elastic File System (Amazon EFS) to: (Select the best answer)

A. provide simple, scalable, elastic file storage for use only within AWS.
B. implement storage for Amazon EC2 instances that multiple virtual machines can
access at the same time. (Correct)
C. host a robust CDN to deliver entire web sites with dynamic, static, and streaming
content.
D. generate user-specific content.

Amazon Elastic Block Store (Amazon EBS) is recommended when data ____ and ____.
(Choose two)

A. requires object-level storage

B. must be quickly accessible, requiring long-term persistence (Correct)
C. requires an encryption solution (Correct)
D. needs to be stored in a di erent Availability Zone than the one the EC2 instance is in

True or False? By default, all data stored in Amazon S3 is viewable by the public.

A. True
B. False (Correct)

Regarding Amazon S3 Glacier, what is a Vault? (Select the best answer)

A. The rules that determine who may (or may not) access archives
B. An object (photos, videos, files, or documents)
C. A container for storing archives (Correct)
D. A policy that identifies who can access content stored in Glacier

True or False? When you create a bucket in Amazon S3, it is associated with a specific AWS
Region.
 A. True (Correct)
B. False

Which of the following are features of Amazon Elastic Block Store (Amazon EBS)? (Choose
two)

A. Data stored on Amazon EBS is automatically replicated within an Availability

Zone. (Correct)
B. Data on an Amazon EBS volume is lost when the attached instance is stopped.
C. Amazon EBS volumes can be encrypted transparently to workloads on the
attached instance. (Correct)
D. Amazon EBS data is automatically backed up to tape.

You are designing an ecommerce web application that will scale to hundreds of thousands
of concurrent users. Which database technology is best suited to hold the session state in
this example?

A. Amazon Relational Database Service (Amazon RDS)

B. Amazon DynamoDB (Correct)
C. Amazon Redshift
D. Amazon Simple Storage Service (Amazon S3)

You need to find an item in an Amazon DynamoDB table using an attribute other than the
item's primary key. Which of the following operations should you use? (Select the best
answer.)

A. Putltem
B. Scan (Correct)
C. Query
D. GetItem

In Amazon DynamoDB, what does the query operation enable you to do? (Select the best
answer.)

A. Query a table using the partition key and an optional sort key filter
B. Query any secondary indexes that exist for a table
C. E iciently retrieve items from a table or secondary index
D. All of the above (Correct)

Which AWS Cloud service is best suited for analyzing your data by using standard structured
query language (SQL) and your existing business intelligence (BI) tools? (Select the best
answer.)
 A. Amazon Relational Database Service (Amazon RDS)
B. Amazon Simple Storage Service Glacier
C. Amazon DynamoDB
D. Amazon Redshift (Correct)

In Amazon DynamoDB, an attribute is (Select the best answer.)

A. a fundamental data element (Correct)

B. a collection of items
C. a collection of attributes

If you are developing an application that requires a database with extremely fast
performance, fast scalability, and flexibility in the database schema, which service should
you consider? (Select the best answer.)

A. Amazon Relational Database Service (Amazon RDS)

B. Amazon ElastiCache
C. Amazon DynamoDB (Correct)
D. Amazon Redshift

Which of the following use cases is appropriate for using Amazon Relational Database
Service (Amazon RDS)? (Select the best answer.)

A. Massive read/write rates

B. Simple GET or PUT requests
C. Complex transactions (Correct)
D. All of the above

A company has an application, which consists of a .NET layer that connects to a MySQL
database. They want to move this application on to AWS and use AWS features such as high
availability and automated backups. Which of the following would be an ideal database for
this use case? (Select the best answer)

A. Amazon RDS
B. Amazon Redshift
C. Amazon Aurora (Correct)
D. Amazon DynamoDB

True or false? Amazon RDS automatically patches the database software and backs up your
database, storing the backups for a user-defined retention period and enabling point-in-time
recovery.

A. True (Correct)
 B. False

What should you consider when choosing a database type? (Select the best answer.)

A. Data size
B. Data access period
C. Query frequency
D. Highly available
E. All of the above (Correct)

Which of the following is not one of the four areas of the performance e iciency pillar of the
AWS Well-Architected Framework? (Select the best answer.)

A. Tradeo s
B. Selection
C. Traceability (Correct)
D. Monitoring

Which of the following is a principle when designing cloud-based systems? (Select the best
answer.)

A. Build tightly-coupled components

B. Make infrequent, large batch changes
C. Assume everything will fail (Correct)
D. Use as many services as possible

Which of the following are pillars of the AWS Well-Architected Framework? (Choose three.)

A. Security (Correct)
B. Persistence
C. Operational Excellence (Correct)
D. Cost Optimization (Correct)

Which design principles are recommended when considering performance e iciency?

(Choose two.)

A. Democratize advanced technologies (Correct)

B. Enable traceability
C. Use serverless architectures (Correct)
D. Match supply with demand
E. Analyze and attribute expenditure

AWS Trusted Advisor provides insight regarding which five categories of an AWS account?
(Select the best answer.)
 A. Performance, cost optimization, access control, connectivity, security
B. Security, access control, high availability, performance, service limits
C. Performance, cost optimization, security, fault tolerance, service limits (Correct)
D. Security, fault tolerance, high availability, connectivity, service limits

What is the focus of the sustainability pillar of the Well-Architected Framework? (Select the
best answer.)

A. Designing workloads that recover quickly from failures

B. Minimizing the environmental impacts of running cloud workloads (Correct)
C. Avoiding unnecessary costs in cloud workloads
D. Automating updates to cloud workloads

After you move to the AWS Cloud, you want to ensure that the right security settings are put
in place. Which online tool can assist in security compliance? (Select the best answer.)

A. Amazon Kinesis
B. AWS Support
C. AWS Trusted Advisor (Correct)
D. Amazon CloudWatch

Which of the following is a measure of your system's ability to provide functionality when
desired by the user? (Select the best answer.)

A. Availability
B. Fault Tolerance
C. Reliability (Correct)
D. Performance e iciency

What is defined as the ability for a system to remain operational even if some of the
components of that system fail? (Select the best answer.)

A. High durability
B. Fault tolerance (Correct)
C. High availability
D. High durability

Which of the following best describes a system that can withstand some measures of
degradation, experiences minimal downtime, and requires minimal human intervention?
(Select the best answer.)

A. Scalable
B. Fault-tolerant
 C. Elastic
D. Highly available (Correct)

Which of the following AWS tools help your application scale up or down based on demand?
(Choose two.)

A. Availability Zones
B. Amazon EC2 Auto Scaling (Correct)
C. AWS CloudFormation
D. Elastic Load Balancing (Correct)
E. AWS Config

Which service would you use to send alerts based on Amazon CloudWatch alarms? (Select
the best answer.)

A. Amazon Simple Notification Service (Amazon SNS) (Correct)

B. AWS CloudTrail
C. AWS Trusted Advisor
D. Amazon Route 53

Which of the following are characteristics of Amazon EC2 Auto Scaling? (Choose three.)

A. Only supports dynamic scaling

B. Responds to changing conditions by adding or terminating instances (Correct)
C. Delivers push notifications
D. Launches instances from a specified Amazon Machine Image (AMI) (Correct)
E. Enforces a minimum number of running Amazon EC2 instances (Correct)

Which of the following must be configured on an Elastic Load Balancing load balancer to
expect incoming tra ic? (Select the best answer.)

A. A port
B. A network interface
C. A listener (Correct)
D. An instance

Which of the following elements are used to create an Amazon EC2 Auto Scaling launch
configuration? (Choose three.)

A. Amazon Machine Image (AMI) (Correct)

B. Load balancer
C. Instance type (Correct)
D. Virtual private cloud (VPC) and subnets
 E. Amazon Elastic Block Store (Amazon EBS) volumes (Correct)

Which of the following services can help you collect important metrics from Amazon
Relational Database Service (Amazon RDS) and Amazon Elastic Compute Cloud (Amazon
EC2) instances? (Select the best answer.)

A. Amazon CloudFront
B. Amazon Cloud Search
C. Amazon CloudWatch (Correct)
D. AWS CloudTrail
E. Amazon EC2 Auto Scaling

Which of the following are elements of an Auto Scaling group? (Choose three.)

A. Minimum size (Correct)

B. Health checks
C. Desired capacity (Correct)
D. Maximum size (Correct)

There is an audit at your company and they need to have a log of all access to AWS
resources in the account. Which of the following services can assist in providing these
details? (Select the best answer.)

A. Amazon CloudWatch
B. AWS CloudTrail (Correct)
C. Amazon Elastic Compute Cloud (Amazon EC2)
D. Amazon Simple Notification Service (Amazon SNS)

In Elastic Load Balancing, when the load balancer detects an unhealthy target, which of the
following are true? (Choose three.)

A. Stops routing tra ic to that target (Correct)

B. Triggers an alarm
C. Resumes routing tra ic when it detects that the target is healthy again (Correct)
D. Resumes routing tra ic when manually restarted
E. Routes tra ic to a healthy target (Correct)

What are the three types of load balancers that Elastic Load Balancing o ers?

A. Internet Load Balancer

B. Application Load Balancer (Correct)
C. Network Load Balancer (Correct)
D. Compute Load Balancer
E. Classic Load Balancer (Correct)