AWS Cloud PractitionerVersion en ligne Networking, Compute, Storage, Database and Monitoring par Oscar 1 A customer wants to use an Amazon EC2 instance for a batch processing workload. Which Amazon EC2 instance type should they use? a General purpose b Compute optimized c Memory optimized d Storage optimized 2 What are the contract length options for Amazon EC2 Reserved Instances? (CHOOSE TWO) Choose one or more answers a 1 year b 2 years c 3 years d 4 years 3 A customer has a workload that will run for a total of 6 months and can withstand interruptions. What would be the most cost-efficient Amazon EC2 instance purchasing option? a Reserved Instance b On-Demand Instance c Dedicated Instance d Spot Instance 4 A customer wants to give users messages for the specific topics to which they have subscribed. Which service should they use? a Amazon Simple Notification Service (Amazon SNS) b AWS Lambda c Amazon Simple Queue Service (Amazon SQS) d Amazon Elastic Kubernetes Service (Amazon EKS) 5 Which component or service can be used to establish a private dedicated connection between a company’s data center and AWS? a Private subnet b DNS c AWS Direct Connect d Amazon CloudFront 6 Which statement describes security groups? a They are stateful and allow all inbound traffic by default. b They are stateful and deny all inbound traffic by default. c They are stateless and allow all inbound traffic by default. d They are stateless and deny all inbound traffic by default. 7 Which component is used to connect a VPC to the internet? a Internet gateway b Public subnet c Edge location d Security group 8 Which service is used to manage the DNS records for domain names? a Amazon Virtual Private Cloud b AWS Direct Connect c Amazon CloudFront d Amazon Route 53 9 Which statement describes DNS resolution? a Launching resources in a customer-defined virtual network b Storing local copies of content at edge locations around the world c Connecting a VPC to the internet d Translating a domain name to an IP address 10 You want to store data that is infrequently accessed but must be immediately available when needed. Which Amazon S3 storage class should you use? a S3 Intelligent-Tiering b S3 Glacier Deep Archive c S3 Standard-IA d S3 Glacier Flexible Retrieval 11 Which Amazon S3 storage classes are optimized for archival data? (Select TWO.) Choose one or more answers a S3 Standard b S3 Glacier Flexible Retrieval c S3 Intelligent-Tiering d S3 Glacier Deep Archive e S3 Standard-IA 12 Which statement is true about Amazon EBS volumes and Amazon EFS file systems? a EBS volumes store data within a single Availability Zone. Amazon EFS file systems store data across multiple Availability Zones by default. b EBS volumes store data across multiple Availability Zones. Amazon EFS file systems store data within a single Availability Zone by default. c EBS volumes and Amazon EFS file systems both store data within a single Availability Zone. d EBS volumes and Amazon EFS file systems both store data across multiple Availability Zones. 13 A customer wants to store data in an object storage service. Which AWS service should the customer use for this type of storage? a Amazon Managed Blockchain b Amazon Elastic File System (Amazon EFS) c Amazon Elastic Block Store (Amazon EBS) d Amazon Simple Storage Service (Amazon S3) 14 Which statement best describes Amazon DynamoDB? a A service that allows customers to run relational databases in the AWS Cloud b A serverless key-value database service c A service that customers can use to migrate relational databases, nonrelational databases, and other types of data stores d An enterprise-class relational database 15 Which service is used to query and analyze data across a data warehouse? a Amazon Neptune b Amazon DocumentDB c Amazon ElastiCache d Amazon Redshift 16 Which tasks can be performed by using AWS CloudTrail? (Select TWO) Choose one or more answers a Monitor the AWS infrastructure and resources in real time b Track user activities and API requests throughout the AWS infrastructure c View metrics and graphs to monitor the performance of resources d Filter logs to assist with operational analysis and troubleshooting e Configure automatic actions and alerts in response to metrics 17 Which actions can you perform using Amazon CloudWatch? (Select TWO.) Choose one or more answers a Monitor the resources’ usage and performance. b Receive real-time guidance for improving the AWS environment. c Compare the infrastructure to AWS best practices in five categories. d Access metrics from a single dashboard. e Automatically detect unusual account activity using Amazon GuardDuty. 18 Which service can be used to review the security of your Amazon S3 buckets by checking for open access permissions? a Amazon CloudWatch b AWS CloudTrail c AWS Trusted Advisor d Amazon GuardDuty 19 Which categories are included in the AWS Trusted Advisor dashboard? (Select TWO.) Choose one or more answers a Reliability b Performance c Scalability d Elasticity e Fault tolerance 20 True or False: A single Amazon Virtual Private Cloud (Amazon VPC) can span multiple Regions. a True b False 21 Which action must be taken to make a subnet public? a Route outbound traffic from the subnet. b Route inbound traffic from the internet gateway. c Route outbound traffic to the internet gateway. d Subnets are public by default. 22 Which function does the NAT gateway serve? a Load balances incoming traffic to multiple instances b Allows internet traffic initiated by private subnet instances c Allows instances to communicate between subnets d Increases security for instances in a public subnet 23 What should be used to create traffic filtering rules for a subnet? a NAT gateway b Route table c Security group d Network access control list (network ACL) 24 Which ports are open by default when a new security group is created? (Select TWO.) Choose one or more answers a Nothing is allowed inbound. b Nothing is allowed outbound. c Anything is allowed inbound. d Anything is allowed outbound. e Inbound traffic is allowed on public subnets. 25 What is a connection to a transit gateway called? a VPN b Attachment c Route d VPC 26 What are the components of an AWS Site-to-Site VPN connection? (Select TWO.) Choose one or more answers a Customer gateway device b Interface endpoint c Virtual private gateway d VPC peering connection e Gateway endpoint 27 Which statements are true of VPC peering connections? (Select TWO.) Choose one or more answers a Connections are one-to-many. b Connections are one-to-one. c Connections require a transit gateway. d Connections can span accounts. e Connections are transitive. 28 Which statements are true of Amazon Machine Images (AMIs)? (Select TWO.) Choose one or more answers a AMIs can specify the subnets for launch. b AMIs can include block device mapping that specifies the volumes to attach to the Amazon EC2 instance when it is launched. c AMIs can only be obtained from the AWS Marketplace. d You can launch multiple instances from a single AMI. e AMIs can only be used by users within a single account. 29 In the instance type name m8g.2xlarge, which aspect of the name indicates the generation of the instance family? a m b g c 2xlarge d 8 30 Which statements are true regarding Lambda? (Select TWO.) Choose one or more answers a Functions currently only support Python. b You are responsible for updating and patching Lambda servers. c Functions can be allocated up to 10 GB of memory. d Functions can run for a maximum of 15 minutes. e Functions require a security group. 31 Which Amazon S3 feature would be used to automatically copy new objects to a bucket in a different AWS Region? a Same-Region Replication (SRR) b Amazon S3 Versioning c AWS DataSync d Cross-Region Replication (CRR) 32 Which Amazon S3 feature can force an action to occur after an event takes place within a bucket? a Invoking b Event Notifications c Lambda d Alarm 33 A developer has two Linux applications in different Availability Zones that must share a common file system. Which solution is best for this use case? a AWS Storage Gateway b Amazon FSx for Windows File Server c Amazon S3 d Amazon Elastic File System (Amazon EFS) 34 Which modes are available in the AWS Storage Gateway appliance? (Select THREE.) Choose one or more answers a Memory Gateway b Tape Gateway c Volume Gateway d Amazon EBS File Gateway e Amazon S3 File Gateway f Amazon S3 Glacier File Gateway 35 What is a benefit of using Amazon RDS in a Multi-AZ configuration? a It delivers two live copies of the database running concurrently. b It provides automatic failover across Availability Zones. c It provides automatic cross-Region replication. d It eliminates the need for read replicas. 36 Which statement is true regarding Amazon DynamoDB global tables? a Tables are updated manually or through automation tools. b Only two tables are active at one time. c Select different instance sizes to adjust performance. d Tables can be in different AWS Regions. 37 Which statement is true regarding an Amazon Aurora database? a Nine copies of the data are stored across three Availability Zones. b Aurora has a limit of five replicas. c Aurora is compatible with MySQL or PostgreSQL. d Multi-AZ deployments are not required for high availability. 38 Which option is a valid target for an Application Load Balancer? a An Amazon EC2 instance b An Availability Zone c An Amazon S3 bucket d A virtual private network (VPN) connection 39 An application support team has an application with unpredictable traffic patterns that runs on at least two instances. They want the CPU utilization to stay at about 75 percent. Which Amazon EC2 Auto Scaling strategy should they choose? a Scheduled b Dynamic c Predictive d 40 Which service can invoke actions based on data from account resources and supported third-party management services? a Amazon CloudWatch Logs b Amazon EventBridge c AWS CloudTrail d Amazon EC2 Auto Scaling 41 Which options are valid alarm states in Amazon CloudWatch? (Select TWO.) Choose one or more answers a READY b ALERT c ALARM d INSUFFICIENT_DATA e FAILED 42 Which options are use cases for AWS CloudTrail data? (Select TWO.) Choose one or more answers a Provide real-time observability of AWS resources. b Store log data as a record of account usage. c Log events for a particular service or application. d Capture root login failures. e Collect metric data that measures CPU utilization.